Redmine

Hi,

Can you please help me with how I can integrate a login form into a separate application?

Let's say I have a website (not powered by Redmine) where I want the user to be able to sign in directly to Redmine (possibly on a different domain or subdomain). On this website I have no login functionality (say it's just static htmls), so it's not single sign-on. I have also looked into generating autologin tokens, but that's also not what I need.

Basically what I would like to have is the login form for Redmine embedded in another page. The reason I can't simply create a new form on my own is the CSRF token (called authenticity_token in Redmine terms), and I understand the security implications, I don't want to disable CSRF protection for Redmine.

What do you think would be the best way to achieve this? Is it too difficult to get right, and let's just go with a simple link on the website that points to the Redmine login page? I wanted to avoid the unnecessary additional pageload for the login page...

Thanks,
Gabor