Skip to content
Snippets Groups Projects

Repository graph

You can move around the graph by using the arrow keys.
Select Git revision
  • Dockerfile
  • claims-in-idtoke
  • feature_invite_validuntil_minmax
  • incremental-sync
  • jwt_encode_inconsistencies
  • master default protected
  • recovery-code-pwhash
  • redis-rate-limits
  • roles-recursive-cte
  • typehints
  • v1.0.x
  • v1.1.x
  • v1.2.x
  • v1.x.x
  • v2.3.1
  • v2.3.0
  • v2.2.0
  • v2.1.0
  • v2.0.1
  • v2.0.0
  • v1.2.0
  • v1.1.2
  • v1.1.1
  • v1.0.2
  • v1.1.0
  • v1.0.1
  • v1.0.0
  • v0.3.0
  • v0.2.0
  • v0.1.5
  • v0.1.4
  • v0.1.2
32 results
Created with Raphaël 2.2.013Sep1211108754230Aug14131211942131Jul30292826252322Jun19171514131221May1511113Apr125314Mar27Feb26252322212019181514230Jan292414Dec121197426Nov201413432131Oct30262415105432125Sep1923Aug721Jul20191817161514131211Fix regression: OAuth2 authorize endpoint rejects empty scope parameterRelease v1.1.0v1.1.0v1.1.0Auto-generate SECRET_KEY in Debian package, minor improvement of uffd-adminAdd Debian repo signing key and install instructionsRefactor migrations to support MySQL/MariaDBCI check for CHANGELOG on releasefix(migrations): Calculate correct path for migrations instead of assuming cwdfix(uffd-admin): Fix bug with util-linux fallback pathPublish Debian packages to packages.cccv.deAdd CI tests for Bullseye and fix remaining compatability issuesExplain OAuth2 code/token customization hackVerify api keys in constant-timeVerify signup link secrets in constant-timeVerify selfservice link secrets in constant-timeVerify invite link secrets in constant-timeVerify OAuth2 codes/tokens in constant-timeFix debian package dependency on python3-oauthlibProperly rollback db transaction in db_flush (tests)Support for python3-werkzeug v1.0.x (Debian Bullseye)Support for python3-fido2 v0.9.x (Debian Bullseye)Verify api keys in constant-timev1.0.1v1.0.1Verify signup link secrets in constant-timeVerify selfservice link secrets in constant-timeVerify invite link secrets in constant-timeVerify OAuth2 codes/tokens in constant-timeHandle if user referenced in session does not existRefactor base template and add narrow base templateRefactor permission checking and differenciate login and selfservice accessMake sure that users can only confirm their own verification tokensRemoved TestUserViewsOLUserAsUser test casesFix HTML element id construction in role viewDedicated error page for permission errorsDisplay per-client-customizable message on login pageDon't display login page if user is already logged inFix for 45d4598 (Replace flask_oauthlib with plain oauthlib)Replace flask_oauthlib with plain oauthlibRestrict password alphabet to SASLprep-safe ASCII subsetCatch LDAPSASLPrepError on loginSwitched tests from tmpfile to in-memory databasesv1.0.0 releasev1.0.0v1.0.0

Impressum - Datenschutzerklärung