hanakoa alpaca issues - Githubissues

hanakoa / alpaca

Containerized Go µServices for authentication and authorization.

https://hanakoa.github.io/alpaca/

MIT License

5 stars 0 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Password hash comparison is insecure and vulnerable to timing attacks

#76 kevinmichaelchen opened 5 years ago
0
Check for compromised emails with HaveIBeenPwned

#75 kevinmichaelchen opened 6 years ago
0
Add function to seed first admin account

#74 kevinmichaelchen opened 6 years ago
0
Rename "person" to "account

#73 kevinmichaelchen closed 6 years ago
0
Use vgo for dependency management

#72 kevinmichaelchen closed 6 years ago
1
Configurable iteration count; repackaged services

#71 kevinmichaelchen closed 6 years ago
0
DEVOPS: Speed up build by caching deps

#70 kevinmichaelchen opened 6 years ago
0
docs update :books:

#69 kevinmichaelchen closed 6 years ago
0
Roll MFA into Auth?

#68 kevinmichaelchen opened 6 years ago
0
Mask password reset options

#67 kevinmichaelchen closed 6 years ago
0
Password reset tests

#66 kevinmichaelchen closed 6 years ago
0
Helm chart

#65 kevinmichaelchen closed 6 years ago
0
DEVOPS: Dockerfile should compile Protobufs

#64 kevinmichaelchen opened 6 years ago
0
Use Postgres' citext for case insensitive searches for email and username

#63 kevinmichaelchen opened 6 years ago
0
UI: password not updating state

#62 kevinmichaelchen closed 6 years ago
0
db underscores

#61 kevinmichaelchen closed 6 years ago
0
redux-form not syncing data

#60 kevinmichaelchen closed 6 years ago
0
If RABBITMQ_ENABLED is false, fallback to gRPC mode

#59 kevinmichaelchen opened 6 years ago
0
API: CockroachDB

#58 kevinmichaelchen opened 6 years ago
1
rename to alpaca

#57 kevinmichaelchen closed 6 years ago
0
Name Change: Rename to ALPACA?

#56 kevinmichaelchen closed 6 years ago
0
API: Small send/receive RabbitMQ demo

#55 kevinmichaelchen closed 6 years ago
0
API: Use etcd to distribute Snowflake machine IDs

#54 kevinmichaelchen opened 6 years ago
0
UI: Show circular progress during async events

#53 kevinmichaelchen closed 6 years ago
1
AUTH: Password hash iteration count should be self-calibrating (default to 1 second)

#52 kevinmichaelchen closed 6 years ago
0
UI: Add snackbar for error notifications

#51 kevinmichaelchen closed 6 years ago
0
UI: Replace Bootstrap Card with MUI Card

#50 kevinmichaelchen opened 6 years ago
0
MFA: SMS code rate limiting (no more than 10 codes per person, per minute)

#49 kevinmichaelchen opened 6 years ago
0
MFA: how can user trigger a resend such that only they can do so?

#48 kevinmichaelchen closed 6 years ago
1
MFA: grpc for auth api to trigger a SMS

#47 kevinmichaelchen opened 6 years ago
0
MFA: Backup codes

#46 kevinmichaelchen opened 6 years ago
0
API: grpc client pool

#45 kevinmichaelchen opened 6 years ago
0
Password Reset: Put email on queue so it's durable

#44 kevinmichaelchen opened 6 years ago
0
Password Reset: Pass email password env vars from Makefile transparently through to app

#43 kevinmichaelchen opened 6 years ago
0
Email Templating

#42 kevinmichaelchen closed 6 years ago
0
Password Reset: Do we need 3 endpoints?

#41 kevinmichaelchen opened 6 years ago
0
Password Reset: grpc for getting personId from email address

#40 kevinmichaelchen closed 6 years ago
0
Password Reset: Outbound Email Capability

#39 kevinmichaelchen closed 6 years ago
1
Create DB and table for password resets

#38 kevinmichaelchen closed 6 years ago
0
CLAIMS: Change "role" to "claim" to comply with JWT semantics

#37 kevinmichaelchen closed 6 years ago
0
AUTH: Add env var for seeding first person (admin)

#36 kevinmichaelchen opened 6 years ago
0
DEVOPS: Helm Chart

#35 kevinmichaelchen opened 6 years ago
0
DEVOPS: Dockerize ui building (npm run build)

#34 kevinmichaelchen opened 6 years ago
0
UI: Add password complexity meter

#33 kevinmichaelchen opened 6 years ago
0
Password should not expire

#32 kevinmichaelchen closed 6 years ago
0
Paste / Show Password

#31 kevinmichaelchen closed 6 years ago
0
Separate DTO struct? (for not returning null fields)

#30 kevinmichaelchen closed 6 years ago
1
PUT /person/password

#29 kevinmichaelchen closed 6 years ago
0
Remove log.Fatal calls

#28 kevinmichaelchen closed 6 years ago
0
CLAIMS: Should claims be built-in to auth, or separate microservice?

#27 kevinmichaelchen opened 6 years ago
0