Currently we only do token based, assuming the token was acquired somewhere else, eg in the browser dev tools using the Web UI.
Slidge is moving away from sourcehut. For updates on this issue, visit codeberg.
nicoco referenced this ticket in commit 7af8107.