authelia/internal/handlers
James Elliott 9a8c6602dd
fix(middlewares): smart delay on reset password (#2767)
This adds a smart delay on reset password attempts to prevent username enumeration. Additionally utilizes crypto rand instead of math rand. It also moves the timing delay functionality into its own handler func.
2022-01-21 10:46:13 +11:00
..
const.go fix(middlewares): smart delay on reset password (#2767) 2022-01-21 10:46:13 +11:00
duo.go feat(duo): multi device selection (#2137) 2021-12-01 14:32:58 +11:00
errors.go refactor(handlers): lower case error messages (#2289) 2021-09-17 15:53:40 +10:00
handler_checks_safe_redirection_test.go fix: include major in go.mod module directive (#2278) 2021-08-11 11:16:46 +10:00
handler_checks_safe_redirection.go refactor(handlers): lower case error messages (#2289) 2021-09-17 15:53:40 +10:00
handler_configuration_test.go feat(totp): algorithm and digits config (#2634) 2021-12-01 23:11:29 +11:00
handler_configuration.go feat(totp): algorithm and digits config (#2634) 2021-12-01 23:11:29 +11:00
handler_firstfactor_test.go fix(middlewares): smart delay on reset password (#2767) 2022-01-21 10:46:13 +11:00
handler_firstfactor.go fix(middlewares): smart delay on reset password (#2767) 2022-01-21 10:46:13 +11:00
handler_health.go fix: include major in go.mod module directive (#2278) 2021-08-11 11:16:46 +10:00
handler_logout_test.go fix: include major in go.mod module directive (#2278) 2021-08-11 11:16:46 +10:00
handler_logout.go refactor(handlers): lower case error messages (#2289) 2021-09-17 15:53:40 +10:00
handler_oidc_authorization.go fix(oidc): add preferred username claim (#2801) 2022-01-18 20:32:06 +11:00
handler_oidc_consent.go refactor(handlers): lower case error messages (#2289) 2021-09-17 15:53:40 +10:00
handler_oidc_introspection.go fix: include major in go.mod module directive (#2278) 2021-08-11 11:16:46 +10:00
handler_oidc_jwks.go fix: include major in go.mod module directive (#2278) 2021-08-11 11:16:46 +10:00
handler_oidc_revocation.go fix: include major in go.mod module directive (#2278) 2021-08-11 11:16:46 +10:00
handler_oidc_token.go fix: include major in go.mod module directive (#2278) 2021-08-11 11:16:46 +10:00
handler_oidc_userinfo.go refactor(handlers): lower case error messages (#2289) 2021-09-17 15:53:40 +10:00
handler_oidc_wellknown.go feat(oidc): include introspection_endpoint in .well-known/openid-configuration 2021-11-11 14:41:49 +11:00
handler_register_duo_device_test.go feat(totp): algorithm and digits config (#2634) 2021-12-01 23:11:29 +11:00
handler_register_duo_device.go feat(duo): multi device selection (#2137) 2021-12-01 14:32:58 +11:00
handler_register_totp.go fix(middlewares): smart delay on reset password (#2767) 2022-01-21 10:46:13 +11:00
handler_register_u2f_step1_test.go fix(models): potential panic generating jti (#2669) 2021-12-04 15:48:22 +11:00
handler_register_u2f_step1.go fix(middlewares): smart delay on reset password (#2767) 2022-01-21 10:46:13 +11:00
handler_register_u2f_step2.go fix(storage): duo/u2f upsert failure on postgresql (#2658) 2021-12-02 15:16:45 +11:00
handler_reset_password_step1.go fix(middlewares): smart delay on reset password (#2767) 2022-01-21 10:46:13 +11:00
handler_reset_password_step2.go refactor(handlers): lower case error messages (#2289) 2021-09-17 15:53:40 +10:00
handler_sign_duo_test.go feat(storage): encrypt u2f key (#2664) 2021-12-03 11:04:11 +11:00
handler_sign_duo.go refactor(web): only fetch totp conf if required (#2663) 2021-12-02 21:28:16 +11:00
handler_sign_totp_test.go feat(storage): encrypt u2f key (#2664) 2021-12-03 11:04:11 +11:00
handler_sign_totp.go feat(totp): algorithm and digits config (#2634) 2021-12-01 23:11:29 +11:00
handler_sign_u2f_step1_test.go refactor(handlers): lower case error messages (#2289) 2021-09-17 15:53:40 +10:00
handler_sign_u2f_step1.go refactor(web): only fetch totp conf if required (#2663) 2021-12-02 21:28:16 +11:00
handler_sign_u2f_step2_test.go feat(storage): encrypt u2f key (#2664) 2021-12-03 11:04:11 +11:00
handler_sign_u2f_step2.go refactor(web): only fetch totp conf if required (#2663) 2021-12-02 21:28:16 +11:00
handler_state_test.go fix: include major in go.mod module directive (#2278) 2021-08-11 11:16:46 +10:00
handler_state.go fix: include major in go.mod module directive (#2278) 2021-08-11 11:16:46 +10:00
handler_user_info_test.go feat(totp): algorithm and digits config (#2634) 2021-12-01 23:11:29 +11:00
handler_user_info.go feat(totp): algorithm and digits config (#2634) 2021-12-01 23:11:29 +11:00
handler_user_totp.go refactor(web): only fetch totp conf if required (#2663) 2021-12-02 21:28:16 +11:00
handler_verify_test.go refactor(handlers): utilize referer for auth logging rm/rd (#2655) 2021-12-02 13:21:46 +11:00
handler_verify.go refactor(web): only fetch totp conf if required (#2663) 2021-12-02 21:28:16 +11:00
oidc_register.go fix: include major in go.mod module directive (#2278) 2021-08-11 11:16:46 +10:00
oidc_test.go fix(oidc): add preferred username claim (#2801) 2022-01-18 20:32:06 +11:00
oidc.go fix(oidc): add preferred username claim (#2801) 2022-01-18 20:32:06 +11:00
response.go refactor(handlers): utilize referer for auth logging rm/rd (#2655) 2021-12-02 13:21:46 +11:00
types_oidc.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
types.go feat(totp): algorithm and digits config (#2634) 2021-12-01 23:11:29 +11:00
u2f.go [CI] Add wsl linter (#980) 2020-05-05 21:35:32 +02:00