<hr>
<form method="post">
<p>your account can currently be accessed with the credentials listed below. if you fear a credential has been compromised, you can revoke or reset it.</p>
<select size="6" name="cred">
@credlist
</select>
<menu class="horizontal choice">
<button name="act" value="reset">reset</button>
<button name="act" value="revoke">revoke</button>
</menu>
</form>
<hr>
<form method="post">
<p>you can associate extra credentials with your account. you can also limit how much of your authority these credentials can be used to exercise — for instance, it might be useful to create API keys that can read your timeline, but not post as you or access any administrative powers you may have. if you don't select a capability set, the credential will be able to wield the full scope of your powers.</p>
<div class="check-panel">
<label><input type="checkbox" name="allow-post"> post</label>
<label><input type="checkbox" name="allow-edit"> edit</label>
<label><input type="checkbox" name="allow-acct"> manage account</label>
<label><input type="checkbox" name="allow-upload"> upload artifacts</label>
<label><input type="checkbox" name="allow-censor"> moderation</label>
<label><input type="checkbox" name="allow-admin"> other admin powers</label>
<label><input type="checkbox" name="allow-invite"> invite</label>
</div>
<p>you can also specify an IP address range in CIDR format to associate with this credential. if you do so, this credential will only be usable when connecting from an IP address in that range. otherwise, it will be valid when connecting from anywhere on the internet.</p>
<div class="elem">
<label for="netmask">netmask</label>
<input type="text" name="netmask" id="netmask" placeholder="10.0.0.0/8">
</div>
<menu class="vertical choice">
<button name="kind" value="pw">new password</button>
<button name="kind" value="otp">new OTP key</button>
<button name="kind" value="api">new API token</button>
<button name="kind" value="challenge">new challenge key</button>
</div>
</form>