Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix/cookie auth #5562

Merged
merged 2 commits into from
Mar 11, 2019
Merged

Fix/cookie auth #5562

merged 2 commits into from
Mar 11, 2019

Conversation

orthagh
Copy link
Contributor

@orthagh orthagh commented Mar 11, 2019

Q A
Bug fix? yes
New feature? yes/no
BC breaks? no
Deprecations? no
Tests pass? yes

@orthagh orthagh requested review from trasher and cedric-anne March 11, 2019 09:11
@trasher trasher merged commit 26900a5 into glpi-project:9.4/bugfixes Mar 11, 2019
@trasher trasher added this to the 9.4.1 milestone Mar 15, 2019
trasher pushed a commit to trasher/glpi that referenced this pull request Mar 15, 2019
* prevent timed attack

* add new field for storing cookie token and reverse the verification (we store the hash on our side and not client side)
@trasher trasher mentioned this pull request Mar 15, 2019
trasher pushed a commit to trasher/glpi that referenced this pull request Mar 18, 2019
* prevent timed attack

* add new field for storing cookie token and reverse the verification (we store the hash on our side and not client side)
trasher pushed a commit to trasher/glpi that referenced this pull request Mar 18, 2019
* prevent timed attack

* add new field for storing cookie token and reverse the verification (we store the hash on our side and not client side)
trasher pushed a commit to trasher/glpi that referenced this pull request Mar 18, 2019
* prevent timed attack

* add new field for storing cookie token and reverse the verification (we store the hash on our side and not client side)
trasher pushed a commit to trasher/glpi that referenced this pull request Mar 19, 2019
* prevent timed attack

* add new field for storing cookie token and reverse the verification (we store the hash on our side and not client side)
trasher pushed a commit to trasher/glpi that referenced this pull request Apr 8, 2019
* prevent timed attack

* add new field for storing cookie token and reverse the verification (we store the hash on our side and not client side)
trasher pushed a commit to trasher/glpi that referenced this pull request Apr 9, 2019
* prevent timed attack

* add new field for storing cookie token and reverse the verification (we store the hash on our side and not client side)
trasher pushed a commit that referenced this pull request Apr 9, 2019
* prevent timed attack

* add new field for storing cookie token and reverse the verification (we store the hash on our side and not client side)
ettalhi pushed a commit to ettalhi/glpi that referenced this pull request Aug 26, 2019
* prevent timed attack

* add new field for storing cookie token and reverse the verification (we store the hash on our side and not client side)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants