argo-cd/util/oidc
jannfis 76bacfdea4
fix: Add initial implementation for rate limiting failed logins (#3404)
* fix: Add initial implementation  for rate limiting failed logins

* Trigger test build

* Remove deprecated code and fix new project tests

* move cache related code from sessionmanager to cache access wrapper

* avoid using sleep in sessionmanager tests

* mention SECONDS in session manager environment variables to make it easier to understand meaning of each variable

* Login button should be disabled while user is waiting for login result

* prevent timing-based user enumeration attack

* reject too many failed attempts; always compute hash and introduce random delay

* remove unused constants

* fix linter errors

Co-authored-by: Alexander Matyushentsev <amatyushentsev@gmail.com>
2020-04-21 11:10:25 -07:00
..
testdata Support for external OIDC providers and implicit login flows (#727) 2018-10-29 01:36:53 -07:00
oidc.go fix: Add initial implementation for rate limiting failed logins (#3404) 2020-04-21 11:10:25 -07:00
oidc_test.go support OIDC claims request (#1957) 2019-08-23 08:18:34 -07:00
provider.go Fix issue where dex restart could cause login failures (#1114) 2019-02-13 18:07:47 -08:00
templates.go Support for external OIDC providers and implicit login flows (#727) 2018-10-29 01:36:53 -07:00