2022-12-02 UTC
# 
[catgirlinspace] is this a good design for handling sessions? on login page ask for password, then if correct set a cookie for like, checking totp code and redirect to ask for 2fa totp code. and then if thats correct, set a cookie for isAuthenticated and do whatever. all the cookies would be signed by the webserver im using.