Code

Bugs/rate limit failed logins#7

Code

Closed

alexmt wants to merge 7 commits intojannfis:bugs/rate-limit-failed-loginsjannfis/argo-cd:bugs/rate-limit-failed-loginsfrom alexmt:bugs/rate-limit-failed-loginsalexmt/argo-cd:bugs/rate-limit-failed-loginsCopy head branch name to clipboard

+201-263

Commits

Commits on Apr 17, 2020

• move cache related code from sessionmanager to cache access wrapper

  alexmt

  committed
  4e149a3

  Copy full SHA for 4e149a3

• avoid using sleep in sessionmanager tests

  alexmt

  committed
  1cb2e9f

  Copy full SHA for 1cb2e9f

• mention SECONDS in session manager environment variables to make it easier to understand meaning of each variable

  alexmt

  committed
  3028f35

  Copy full SHA for 3028f35

• Login button should be disabled while user is waiting for login result

  alexmt

  committed
  a3ddb91

  Copy full SHA for a3ddb91

• prevent timing-based user enumeration attack

  alexmt

  committed
  2c62318

  Copy full SHA for 2c62318

Commits on Apr 20, 2020

• reject too many failed attempts; always compute hash and introduce random delay

  alexmt

  committed
  ad102dc

  Copy full SHA for ad102dc

Commits on Apr 21, 2020

• Merge pull request argoproj#7 from alexmt/bugs/rate-limit-failed-logins

  Show description for d6f0761
  jannfis

  authored
  d6f0761

  Copy full SHA for d6f0761