aron

Extend `autocomplete` attribute values

2

Hello, thanks for this fantastic project! Currently, the `autocomplete` attribute only supports `on` and `off`. The [spec](https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#attr-fe-autocomplete) lists many more options. It would be nice if `Tyxml` supported those too!...

Derive `eq` and `show` for all exposed types

1

Deriving `eq` and `show` makes it possible for users to easily derive `eq` and `show` for their own types that depend on Sihl types. Sihl already depends on [`ppx_deriving`](https://github.com/ocaml-ppx/ppx_deriving), but...

Improve CSRF documentation and generation

1

- ~Mention that the default `__Host` prefix [only works with HTTPS](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie), so testing on `HTTP localhost` with production won't work~ - ~Change `` to `` [here](https://oxidizing.github.io/sihl/sihl/index.html#csrf-protection)~ - [ ] Fix...

Various functions in `web_session.ml` can only be used for either `Response.t` or `Request.t`, for example `val find : ... -> Request.t -> string option`. For symmetry purposes, extend the API...

We currently have a lot of duplication and noise in the Makefile. We can use variables (for examples for paths like ` ./_build/default`) and loops (for example for listing all...

For large migrations it might be sensible to have some kind of fine progress tracker like a progress bar. If the choice is progress bar, consider using https://github.com/CraigFe/progress.

Maybe we want a similar separation of folders. According to Laravel: https://laravel.com/docs/8.x/structure#the-events-directory https://laravel.com/docs/8.x/structure#the-listeners-directory Notifications (like sending out SMS) based on events are special cases of listeners. https://laravel.com/docs/8.x/structure#the-notifications-directory Maybe for us...

Create a DSL to compose authorization rules. Something like if `isAdmin OR isVIP AND isMember NOT isUnderage` in OCaml style. Extract it to a library. Call it Guardian or Officer.

Allow validation of tuples

4

Some values should be validated together, for example, for SMTP validation, either both a `username` and a `password` are given or neither. The situation where one is given but not...