Undocumented parameter for sendConfirmation

[paskal]

Hello!

Lines 141-145 in verify.go (added in #24):

// GET /login?site=site&&user=name&address=someone@example.com
//<...>
Handshake: &token.Handshake{
	State: "",
	From:  r.URL.Query().Get("from"),
	ID:    user + "::" + address,
},

That from field reading is not covered by documentation and is not tested. Readme has different signature listed:

GET /auth/<name>/login?user=<user>&address=<adsress>&aud=<site_id>&from=<url>

It's not clear to me that this "from" URL parameter is send now (as it called just as e.sendConfirmation(w, r) without adding any params), I think code and documentation should be clarified to use it properly or drop it altogether.

[umputun]

Likely cut-paste artifact from the primary auth flow. I'll dbl check and remove

[paskal]

Another small thing to fix: /login?site=site&&user=name&address=someone@example.com occurs twice in the text, && can be replaced with &.

[umputun]

can you be more specific pls? occurs where exactly?

[paskal]

Same file verify.go, lines 62 and 133.