silinternational/idp-id-broker

Issues

• Say "there was a server error" instead of "incorrect 6-digit code" for MFA API 500 errors

  #337 opened 6 months ago by forevermatt
  1

• URL routing problems

  #54 opened 5 months ago by forevermatt
  2

• Pashword re-hashing

  #4 opened 5 months ago by forevermatt
  6

• Improve error handling (and/or reporting) if an MFA option fails to initialize

  #259 opened 5 months ago by forevermatt
  1

• CVE-2021-22878 (Medium) detected in multiple libraries

  #248 opened 6 months ago by mend-bolt-for-github
  1

• CVE-2020-15148 (High) detected in yiisoft/yii2-2.0.35

  #243 opened 6 months ago by mend-bolt-for-github
  1

• Capture last login time in user profile

  #82 opened 2 years ago by longrunningprocess
  2

• Review this project against best practices

  #15 opened 2 years ago by longrunningprocess
  1

• Eliminate any remaining TODO's in code.

  #11 opened 2 years ago by longrunningprocess
  0

• "Stale" users

  #5 opened 2 years ago by longrunningprocess
  5

• Button label is now "Replace", not "Create"

  #214 opened 5 years ago by forevermatt
  2

• Prevent unacceptable values in employee_id

  #202 opened 5 years ago by forevermatt
  1

• CVE-2015-9251 (Medium) detected in jquery-1.11.0.min.js

  #203 opened 5 years ago by mend-bolt-for-github
  1

• CVE-2019-11358 (Medium) detected in jquery-1.11.0.min.js

  #204 opened 5 years ago by mend-bolt-for-github
  1

• Update README

  #10 opened 5 years ago by longrunningprocess
  0

• Add thorough API tests for /mfa endpoints

  #94 opened 5 years ago by fillup
  1

• Missing override

  #133 opened 5 years ago by longrunningprocess
  1

• Remove outdated portion of welcome email

  #137 opened 5 years ago by forevermatt
  1

• mysql bug needs to be protected against

  #29 opened 6 years ago by longrunningprocess
  3

• Send New User Invitation emails when appropriate

  #84 opened 6 years ago by forevermatt
  2

• Send Welcome emails when appropriate

  #85 opened 6 years ago by forevermatt
  2

• Add support for sending emails via Email Service

  #83 opened 7 years ago by forevermatt
  0

• Once finished, check our implementation against the final version of our api.raml spec

  #32 opened 7 years ago by forevermatt
  10

• General housekeeping

  #14 opened 7 years ago by longrunningprocess
  0

• Provide a little convenience around usernames during authentication.

  #75 opened 7 years ago by longrunningprocess
  0

• Build automated tests for the password feature

  #9 opened 7 years ago by longrunningprocess
  1

• New API's needed

  #73 opened 7 years ago by longrunningprocess
  1

• Bring UUID back

  #60 opened 7 years ago by longrunningprocess
  0

• Password expiration

  #55 opened 8 years ago by longrunningprocess
  2

• Implement email alerting as needed

  #13 opened 8 years ago by longrunningprocess
  2

• Need to consider existing credentials in external systems during first-time authentication

  #35 opened 8 years ago by longrunningprocess
  3

• Update to new API

  #49 opened 8 years ago by longrunningprocess
  0

• Implement logging as needed

  #12 opened 8 years ago by longrunningprocess
  1

• Auth tokens need to be specific to consumer

  #43 opened 8 years ago by longrunningprocess
  0

• Namespace convention wrong

  #40 opened 8 years ago by longrunningprocess
  3

• Prevent changes to existing employee_id values

  #24 opened 8 years ago by forevermatt
  1

• Obfuscate any differences between failed authentications

  #20 opened 8 years ago by forevermatt
  10

• Force HTTPS?

  #38 opened 8 years ago by longrunningprocess
  3

• Display name should be generated when not already established

  #39 opened 8 years ago by longrunningprocess
  1

• Add separate endpoints for creating vs. updating a user

  #31 opened 8 years ago by forevermatt
  3

• Need to consider account status in authentication process

  #34 opened 8 years ago by longrunningprocess
  0

• Ensure `last_synced_utc` is updated appropriately

  #27 opened 8 years ago by longrunningprocess
  4

• New endpoint for deactivating a user

  #18 opened 8 years ago by forevermatt
  7

• Build automated tests for the authentication feature

  #7 opened 8 years ago by longrunningprocess
  0

• Should a successful `POST /user` return anything?

  #25 opened 8 years ago by forevermatt
  2

• Change default branch

  #17 opened 8 years ago by forevermatt
  2

• 401 vs. 404

  #3 opened 8 years ago by forevermatt
  1

• Build automated tests for user features

  #8 opened 8 years ago by longrunningprocess
  0

• Should it be possible to change an employee_id?

  #21 opened 8 years ago by forevermatt
  6

• Error response format

  #19 opened 8 years ago by longrunningprocess
  2