Skip to content

issues Search Results · repo:Prismatik/auth language:JavaScript

Filter by

13 results
 (75 ms)

13 results

inPrismatik/auth (press backspace or delete to remove)

Prismatik/auth
Bcrypt cycles ENV var

I think this service should accept an ENV var that will specify how many encryption cycles bcrypt should use. Basically the problem is that production grade bcrypt takes quite a bit of time and it slows ...
enhancement
todo
  • kaievns
  • 2
  • Opened 
    on Aug 3, 2016
  • #40

Prismatik/auth
Adhere to semver

Should auth adhere to semver? So far, there have been some major releases with no change in versioning. As this service is now rolled out for multiple projects, this feels quite important. It will give ...
  • nwinch
  • 3
  • Opened 
    on Jul 21, 2016
  • #39

Prismatik/auth
#create and #signIn are slow, missing indexes?

the service is kinda slow in testing environment, needs some investigation
  • kaievns
  • Opened 
    on Jun 30, 2016
  • #36

Prismatik/auth
auth failures talk too much

when the signIn fails due to a wrong username or wrong password, the response error actually says either wrong username or wrong password. this is a security vulnerability. firstly it tells the attacker ...
  • kaievns
  • Opened 
    on Jun 29, 2016
  • #35

Prismatik/auth
wrong HTTP error status code

you re throwing 403s instead of 401s 403 - means permission denied. which means a user authentication is valid, they just try to access something above their level, like admin features and such. 401 ...
  • kaievns
  • Opened 
    on Jun 28, 2016
  • #34

Prismatik/auth
Add DELETE support

as per https://github.com/Prismatik/auth-driver/issues/21
  • kaievns
  • Opened 
    on Jun 28, 2016
  • #33

Prismatik/auth
Test suite hangs

Tests seem to hang until you ctrl-c outta there.
  • nwinch
  • 1
  • Opened 
    on May 31, 2016
  • #28

Prismatik/auth
Permissions arrays can have duplicates

Getting stuff like this: permissions: [ { entity: dd36730e-f449-4e24-9854-90905c7757f9 , type: purchaser }, { entity: 31ba0784-2e6b-4679-86c1-320802d02fa2 , type: purchase ...
  • lyntco
  • Opened 
    on Dec 24, 2015
  • #25

Prismatik/auth
Using email in JWT a security attack vector

https://github.com/Prismatik/auth/blob/master/controllers/login.js returns a JWT keyed to the email. That s not particularly secure as it ll give you access to all future accounts that use that email address. ...
  • moll
  • 3
  • Opened 
    on Dec 8, 2015
  • #23

Prismatik/auth
Handle missing `rev` property on POST /entities/:id

Hey, authDriver.update(purchaser.customerId, { permissions: [{type: purchaser , entity: purchaser.wholesaler}] }) Lead to: Unhandled rejection ReqlRuntimeError: Cannot convert `undefined` with ...
  • moll
  • 4
  • Opened 
    on Dec 5, 2015
  • #22
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Press the
/
key to activate the search input again and adjust your query.
Issue search results · GitHub