fleet/cmd/fleetctl
Zach Wasserman fb9706912d
Prevent user enumeration (#533)
- Return same error in all cases for login endpoint.
- Log error details in server logs.
- Make most login errors take ~1s to prevent timing attacks.
- Don't return forgot password errors.
- Log password errors in server logs.
- Make most forgot password requests take ~1s to prevent timing attacks.

Fixes #531
2021-03-24 19:36:30 -07:00
..
api.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
apply.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
config.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
convert.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
debug.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
delete.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
flags.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
fleetctl.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
get.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
goquery.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
login.go Prevent user enumeration (#533) 2021-03-24 19:36:30 -07:00
logout.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
preview.go Make fleetctl preview available over HTTP (#508) 2021-03-22 15:04:19 -07:00
query.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
query_output.go Expose live query error messages in fleetctl (#245) 2021-01-28 17:06:41 -08:00
setup.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
user.go Upgrade fleetctl github.com/urfave/cli to v2 (#471) 2021-03-12 16:42:38 -08:00
yaml.go Fix yaml separator handling with comments (#2257) 2020-07-08 16:01:03 -07:00
yaml_test.go Fix yaml separator handling with comments (#2257) 2020-07-08 16:01:03 -07:00