Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update login API code and update crates to fix CVE #2354

Merged
merged 1 commit into from
Mar 13, 2022

Conversation

BlackDex
Copy link
Collaborator

@BlackDex BlackDex commented Mar 3, 2022

@BlackDex BlackDex force-pushed the multi-account-login branch from 818b9ac to b95f663 Compare March 10, 2022 15:19
@BlackDex BlackDex changed the title Update login API code Update login API code and update crates to fix CVE Mar 10, 2022
- Updated jsonwebtoken to latest version
- Trim `username` received from the login form ( Fixes dani-garcia#2348 )
- Make uuid and user_uuid a combined primary key for the devices table ( Fixes dani-garcia#2295 )
- Updated crates including regex which contains a CVE ( https://blog.rust-lang.org/2022/03/08/cve-2022-24713.html )
@BlackDex BlackDex force-pushed the multi-account-login branch from b95f663 to c4d565b Compare March 12, 2022 17:45
@dani-garcia dani-garcia merged commit 8d06d9c into dani-garcia:main Mar 13, 2022
@BlackDex BlackDex deleted the multi-account-login branch March 27, 2022 13:27
@BlackDex BlackDex mentioned this pull request Jun 14, 2022
61 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

trim() the login email field: Android might add trailing spaces Login session expired with account switching
3 participants