Sign in
A plain HTML <form method="post"> that the server
validates against a salted password hash, then issues an HttpOnly session
cookie and redirects you (Post/Redirect/Get) to a protected page. Sessions live in the
embedded B+tree (data/sessions.db), so they survive restarts. Works with
JavaScript disabled.
Demo credentials: demo / akurai. This is a
framework demo — the PRNG and password hash are not production-grade
(see the auth docs).
No password? Sign in with an email code instead.