From bb6bc2387d58c737dbf92e73f8544bf39319dbd8 Mon Sep 17 00:00:00 2001
From: Lena <lena@omega>
Date: Sat, 1 Aug 2026 00:00:00 +0000
Subject: Enter git-forge

A small self-hosted git forge: HTTP push and pull, cgit browsing,
local and OIDC accounts, TOTP, scoped push tokens, per-repo
permissions, issues, a wiki, and outbound mail.

It does not reimplement git. git-http-backend and cgit run as CGI
behind its own listener, which authorises every request before
exec'ing either. One binary, one data directory, one listener: no
database, no JavaScript, and state is JSON in a git repo with a
working tree.
---
 templates/totp.html | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 templates/totp.html

(limited to 'templates/totp.html')

diff --git a/templates/totp.html b/templates/totp.html
new file mode 100644
index 0000000..329d6cc
--- /dev/null
+++ b/templates/totp.html
@@ -0,0 +1,16 @@
+{{define "title"}}Authenticator code - {{.Site}}{{end}}
+{{define "main"}}
+<h2>Authenticator code</h2>
+<p>The password was right. Now the six digit code, or one recovery code.</p>
+<form method="post" action="/login/totp">
+<input type="hidden" name="csrf" value="{{.CSRF}}">
+<input type="hidden" name="name" value="{{.Data.Name}}">
+<input type="hidden" name="expires" value="{{.Data.Expires}}">
+<input type="hidden" name="t" value="{{.Data.Token}}">
+<p>
+<label for="code">Code</label>
+<input id="code" name="code" inputmode="numeric" autocomplete="one-time-code" autofocus required>
+</p>
+<p><button type="submit">Sign in</button></p>
+</form>
+{{end}}
-- 
cgit v1.2.3