From 023574aac6a039e65329b52a283c002b426c2549 Mon Sep 17 00:00:00 2001
From: Leon Mika <lmika@lmika.org>
Date: Sun, 29 Mar 2026 09:33:24 +1100
Subject: [PATCH] Removed the login challenge

---
 handlers/login.go | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/handlers/login.go b/handlers/login.go
index 30ed0b4..34c1e96 100644
--- a/handlers/login.go
+++ b/handlers/login.go
@@ -37,9 +37,8 @@ func (lh *LoginHandler) Logout(c fiber.Ctx) error {
 
 func (lh *LoginHandler) DoLogin(c fiber.Ctx) error {
 	var req struct {
-		Username       string `form:"username"`
-		Password       string `form:"password"`
-		LoginChallenge string `form:"_login_challenge"`
+		Username string `form:"username"`
+		Password string `form:"password"`
 	}
 	if err := c.Bind().Body(&req); err != nil {
 		return c.Status(fiber.StatusBadRequest).SendString("Failed to parse request body")
@@ -51,11 +50,6 @@ func (lh *LoginHandler) DoLogin(c fiber.Ctx) error {
 
 	sess := session.FromContext(c)
 
-	challenge, _ := sess.Get("_login_challenge").(string)
-	if challenge != req.LoginChallenge {
-		return c.Redirect().To("/login")
-	}
-
 	user, err := lh.AuthService.Login(c.Context(), req.Username, req.Password)
 	if err != nil {
 		return c.Status(fiber.StatusInternalServerError).SendString("Failed to login")