Module account

Modules§

ACCOUNT_CACHE_CONTROL 🔒: Cache-control header value.
ACCOUNT_CSP 🔒: CSP for account-management HTML pages. The global CSP has form-action 'none' and sandbox (which both block form submission). SetResponseHeaderLayer::if_not_present means our header takes precedence. Styles are served from /_tuwunel/oidc/account.css so style-src 'self' suffices.
ACCOUNT_CSS 🔒: Shared stylesheet served at /_tuwunel/oidc/account.css.
ACCOUNT_HEAD 🔒
ACCOUNT_JS 🔒: Raw JS served at /_tuwunel/oidc/account.js. Referenced via <script src> for CSP compatibility.
ACCOUNT_JS_INCLUDE 🔒
ACCOUNT_MANAGEMENT_ACTIONS_SUPPORTED 🔒

account_css_route 🔒
account_error_page 🔒
account_error_response 🔒
account_html_response 🔒
account_js_route 🔒
account_management_idp_id 🔒
account_redirect_response 🔒
account_sso_redirect 🔒
consume_login_token 🔒: Consume a login token (single-use authentication).
get_account_callback_route 🔒
get_account_route 🔒
handle_account_callback 🔒
peek_login_token 🔒: Verify a login token without consuming it. Used by GET handlers that embed the token in a POST confirmation form. The token is consumed later when the form is submitted.
post_account_callback_route 🔒
ts_cell 🔒
validate_account_action 🔒