From 1c73471579481c8da54a25867d8c00bb7fe9b035 Mon Sep 17 00:00:00 2001
From: Uriel <u@berlinblue.org>
Date: Sat, 14 Mar 2009 14:32:22 +0100
Subject: [PATCH] Add comment on auth docs to review in the futre.

---
 bin/werclib.rc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/werclib.rc b/bin/werclib.rc
index 63bc9ba..2367dbe 100644
--- a/bin/werclib.rc
+++ b/bin/werclib.rc
@@ -14,6 +14,7 @@ fn get_lib_file {
 fn template { awk -f bin/template.awk $* | rc $rcargs }
 
 # Auth code
+# TODO: check http://cookies.lcs.mit.edu/pubs/webauth:tr.pdf
 allowed_user_chars='[a-zA-Z0-9_]'
 # Cookie format: WERC_USER: name:timestamp:hash(name.timestamp.password)
 # login_user can't be used from a template because it sets a cookie