nemunaire/chldapasswd
1
0
Fork 0
Code Issues Pull requests Releases Activity
No description
63 commits 1 branch 0 tags 526 KiB
  • Go 49.5%
  • CSS 27.2%
  • HTML 22.7%
  • Dockerfile 0.6%
Find a file
Pierre-Olivier Mercier 12fd2f2e70
All checks were successful
continuous-integration/drone/push Build is passing
Details
fix(security): prevent username enumeration via timing attack 
Perform a dummy LDAP bind when SearchDN fails so that the response time
is indistinguishable between unknown users and wrong passwords.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-08 12:42:41 +07:00
dextpl Add a custom theme for dexidp 2026-03-08 12:26:40 +07:00
static style: improve altcha widget integration and button alignment 2026-03-08 12:38:08 +07:00
.drone.yml Replace bindata by embed 2024-05-31 15:52:25 +02:00
.gitignore chldapasswd is now a go module 2021-02-03 15:16:19 +01:00
addy.go refactor: modernize Go idioms across codebase 2026-03-08 11:48:34 +07:00
altcha.go feat(security): add altcha proof-of-work CAPTCHA to all sensitive forms 2026-03-08 10:56:16 +07:00
change.go fix(security): prevent username enumeration via timing attack 2026-03-08 12:42:41 +07:00
csrf.go feat: add -dev flag for local HTTP testing 2026-03-08 10:56:37 +07:00
Dockerfile Replace bindata by embed 2024-05-31 15:52:25 +02:00
go.mod feat(security): add altcha proof-of-work CAPTCHA to all sensitive forms 2026-03-08 10:56:16 +07:00
go.sum feat(security): add altcha proof-of-work CAPTCHA to all sensitive forms 2026-03-08 10:56:16 +07:00
ldap.go fix(security): redesign password reset tokens using crypto/rand with server-side storage 2026-03-06 15:30:48 +07:00
login.go fix(security): prevent username enumeration via timing attack 2026-03-08 12:42:41 +07:00
lost.go refactor: modernize Go idioms across codebase 2026-03-08 11:48:34 +07:00
main.go feat: replace Bootstrap with custom CSS and add profile page 2026-03-08 11:49:51 +07:00
ratelimit.go fix(security): add per-IP rate limiting to all authentication endpoints 2026-03-06 15:30:48 +07:00
renovate.json Add renovate.json 2021-08-03 09:02:00 +00:00
reset.go refactor: modernize Go idioms across codebase 2026-03-08 11:48:34 +07:00
static.go feat: replace Bootstrap with custom CSS and add profile page 2026-03-08 11:49:51 +07:00