jvoisin
|
d55b410800
|
Use constant-time comparison for anti-csrf tokens
This is probably completely overkill, but since anti-csrf tokens are secrets,
they should be compared against untrusted inputs in constant time.
|
2024-03-03 20:28:13 -08:00 |
|
Frédéric Guillot
|
bc317cfcd1
|
OIDC: Redirect to user home page after successful authentication
|
2023-11-07 21:21:56 +01:00 |
|
Florian Rüchel
|
62ef8ed57a
|
Add WebAuthn / Passkey integration
This is a rebase of #1618 in which @dave-atx added WebAuthn support.
Closes #1618
|
2023-11-05 18:57:35 +01:00 |
|
Frédéric Guillot
|
4cc99881d8
|
Refactor Batch Builder and prevent accidental and excessive refreshes from the web ui
|
2023-10-20 16:07:18 -07:00 |
|
Frédéric Guillot
|
c0e954f19d
|
Implement structured logging using log/slog package
|
2023-09-24 22:37:33 -07:00 |
|
Frédéric Guillot
|
ff5d391701
|
Add OAuth2 PKCE support
|
2023-09-02 22:11:47 -07:00 |
|
Frédéric Guillot
|
168a870c02
|
Move internal packages to an internal folder
For reference: https://go.dev/doc/go1.4#internalpackages
|
2023-08-10 20:29:34 -07:00 |
|