search

simonw / datasette-indieauth

Datasette authentication using IndieAuth and RelMeAuth
8 stars 0 forks source link

verify_profile_url() #6

Closed simonw closed 3 years ago

simonw commented 3 years ago

https://indieauth.spec.indieweb.org/#user-profile-url

Users are identified by a [URL]. Profile URLs MUST have either an https or http scheme, MUST contain a path component (/ is a valid path), MUST NOT contain single-dot or double-dot path segments, MAY contain a query string component, MUST NOT contain a fragment component, MUST NOT contain a username or password component, and MUST NOT contain a port. Additionally, hostnames MUST be domain names and MUST NOT be ipv4 or ipv6 addresses.

Refs #2