- Apr 09, 2021
-
-
Marco De Donno authored
-
Marco De Donno authored
This will allows the user to call the correct redis database based upon a string name in a dict, and not a variable perse. The definition of the databases is easier this way, and the call of the correct database is clearer in code.
-
Marco De Donno authored
This will renew the save of the TOTP server side for the username/IP tuple.
-
Marco De Donno authored
This will not change the behavior of the verify() function but is easier to read.
-
Marco De Donno authored
This commit will add a time waste function if the username is not present in the database. This is done to prevent the data extraction, in this case the presence or not, of a username based upon the execution time for the login process. In the configuration file, the 'fake_hash' variable is computed with the input data "fake_data" and the salt "fake_salt" to be transparent about the data used as input for the hashing function. The comparison with the 'verify()' function is a boolean (always True in this case), and is not used in any useful way in the login process. This waste of time is done even if the risk factor is very small (not to say inexistent). The location of this function call is designed to be only present if the username provided as input does not exists in the database. This is done to not impact real users.
-
Marco De Donno authored
-
Marco De Donno authored
-
Marco De Donno authored
-
Marco De Donno authored
-
Marco De Donno authored
-
Marco De Donno authored
-
Marco De Donno authored
-
Marco De Donno authored
This will trigger a rate limitation when the username does not exists or if the password is not the correct one. The time to wait is exponential (base 2) after the 5 first attempts.
-
- Mar 31, 2021
-
-
Marco De Donno authored
-
- Mar 24, 2021
-
-
Marco De Donno authored
-
- Mar 21, 2021
-
-
Marco De Donno authored
-
- Mar 20, 2021
-
-
Marco De Donno authored
-
- Mar 11, 2021
-
-
Marco De Donno authored
-
- Mar 10, 2021
-
-
Marco De Donno authored
Remove useless variable assignation and user r"" for special logger string.
-
- Mar 03, 2021
-
-
Marco De Donno authored
-
Marco De Donno authored
-
- Feb 16, 2021
-
-
Marco De Donno authored
-
- Feb 15, 2021
-
-
Marco De Donno authored
-
Marco De Donno authored
-
Marco De Donno authored
-
- Jun 15, 2020
-
-
Marco De Donno authored
-
- Apr 02, 2020
-
-
Marco De Donno authored
-
- Mar 05, 2020
-
-
Marco De Donno authored
-
- Feb 14, 2020
-
-
Marco De Donno authored
-
- Feb 11, 2020
-
-
Marco De Donno authored
-
- Feb 06, 2020
-
-
Marco De Donno authored
-
- Feb 05, 2020
-
-
Marco De Donno authored
-
- Jan 06, 2020
-
-
Marco De Donno authored
-
- Nov 04, 2019
-
-
Marco De Donno authored
-
Marco De Donno authored
-
- Nov 03, 2019
-
-
Marco De Donno authored
-
Marco De Donno authored
-
- Nov 01, 2019
-
-
Marco De Donno authored
-
- Oct 31, 2019
-
-
Marco De Donno authored
-