silinternational/serverless-mfa-api

Issues

• Should we add a `GET /totp` endpoint to list an API Key's TOTP uuid's?

  #9 opened a month ago by forevermatt
  3

• Possibly avoid O's in the TOTP seed provided to the user

  #36 opened 6 years ago by forevermatt
  1

• Enable changing the API Secret in case it is compromised

  #6 opened 7 years ago by forevermatt
  1

• Add tests

  #12 opened 2 months ago by forevermatt
  2

• The `onbuild` variant of Node Docker images has been removed

  #69 opened a year ago by forevermatt
  0

• CVE-2019-11358 (Medium) detected in jquery-2.1.3.min.js

  #66 opened a year ago by mend-bolt-for-github
  0

• WS-2018-0021 (Medium) detected in bootstrap-3.3.2.min.js

  #67 opened a year ago by mend-bolt-for-github
  0

• CVE-2012-6708 (Medium) detected in jquery-1.7.2.min.js

  #64 opened a year ago by mend-bolt-for-github
  0

• CVE-2015-9251 (Medium) detected in jquery-1.7.2.min.js, jquery-2.1.3.min.js

  #65 opened a year ago by mend-bolt-for-github
  0

• CVE-2018-20677 (Medium) detected in bootstrap-3.3.2.min.js

  #61 opened a year ago by mend-bolt-for-github
  0

• CVE-2019-8331 (Medium) detected in bootstrap-3.3.2.min.js

  #62 opened a year ago by mend-bolt-for-github
  0

• CVE-2018-14042 (Medium) detected in bootstrap-3.3.2.min.js

  #60 opened a year ago by mend-bolt-for-github
  0

• CVE-2018-14040 (Medium) detected in bootstrap-3.3.2.min.js

  #59 opened a year ago by mend-bolt-for-github
  0

• CVE-2020-7656 (Medium) detected in jquery-1.7.2.min.js

  #80 opened a year ago by mend-bolt-for-github
  0

• CVE-2021-23343 (Medium) detected in path-parse-1.0.6.tgz

  #81 opened a year ago by mend-bolt-for-github
  0

• CVE-2020-28472 (High) detected in aws-sdk-2.660.0.tgz

  #78 opened a year ago by mend-bolt-for-github
  0

• CVE-2020-11023 (Medium) detected in jquery-1.7.2.min.js, jquery-2.1.3.min.js

  #79 opened a year ago by mend-bolt-for-github
  0

• CVE-2016-10735 (Medium) detected in bootstrap-3.3.2.min.js

  #77 opened a year ago by mend-bolt-for-github
  0

• WS-2020-0070 (High) detected in lodash-4.17.15.tgz

  #73 opened a year ago by mend-bolt-for-github
  0

• CVE-2018-20676 (Medium) detected in bootstrap-3.3.2.min.js

  #76 opened a year ago by mend-bolt-for-github
  0

• CVE-2020-11022 (Medium) detected in jquery-1.7.2.min.js, jquery-2.1.3.min.js

  #72 opened a year ago by mend-bolt-for-github
  0

• WS-2018-0021 (Medium) detected in bootstrap-3.3.2.min.js

  #63 opened 4 years ago by mend-bolt-for-github
  1

• Remind user to check region when looking for CloudFormation stack during a recovery

  #57 opened 5 years ago by forevermatt
  0

• In the recovery script output, make "source" and "target" stand out

  #56 opened 5 years ago by forevermatt
  0

• Investigate options for backing up DynamoDB

  #28 opened 5 years ago by fillup
  1

• Rename repo

  #31 opened 6 years ago by longrunningprocess
  0

• Review full code for first release

  #14 opened 7 years ago by forevermatt
  1

• Expire CloudWatch logs after some period of time

  #11 opened 7 years ago by forevermatt
  0

• Possibly exclude aws-sdk node module from totp-api package

  #13 opened 7 years ago by forevermatt
  0

• Add some level of access control to `/api-key` endpoints.

  #22 opened 7 years ago by forevermatt
  0

• How long should our secret be when generating the TOTP secret?

  #15 opened 7 years ago by forevermatt
  1

• Is it okay to never store the API Secret, and to use it to encrypt the TOTP Keys?

  #3 opened 7 years ago by forevermatt
  1

• Add `DELETE /totp/{uuid}` endpoint

  #8 opened 7 years ago by forevermatt
  0

• Add a little better error handling of non-JSON POST bodies

  #10 opened 7 years ago by forevermatt
  1

• Return QR Code or `otpauth://...` URL?

  #2 opened 7 years ago by forevermatt
  1

• Add CI/CD capability

  #7 opened 7 years ago by forevermatt
  1

• Distinguish between invalid API Key and incorrect TOTP 6-digit code?

  #4 opened 7 years ago by forevermatt
  0