github.com/mozilla/browserid-local-verify issues

nsp advisory 1488 (acorn DoS via browserid-crypto)

jaredhirsch opened this issue almost 5 years ago

Add Mozilla Code of Conduct

Mozilla-GitHub-Standards opened this pull request almost 6 years ago

CODE_OF_CONDUCT.md file missing

Mozilla-GitHub-Standards opened this issue almost 6 years ago

fix(deps): Update to node10-compatible browserid-crypto

rfk opened this pull request over 6 years ago

Publish 0.5.1 on npm

vladikoff opened this issue over 6 years ago

feat(lookup): Allow forcing lookup over http, for testing purposes.

rfk opened this pull request over 6 years ago

chore(ci): Remove coveralls from travis config

rfk opened this pull request over 6 years ago

Update browserid-crypto dependency

rfk opened this pull request about 8 years ago

fix(tests): add COVERALLS_REPO_TOKEN for coverage status updates

vladikoff opened this pull request over 8 years ago

fix(tests): switch coverage tool, use coveralls

vladikoff opened this pull request over 8 years ago

chore(deps): Update dependencies to latest versions.

rfk opened this pull request over 8 years ago

Explicitly guard against port <= 0 in URL validation

rfk opened this pull request almost 9 years ago

Cache checks on whether to use a proxy, rather than checking each time.

rfk opened this pull request almost 9 years ago

Remove additional uses of 'urlparse' module

rfk opened this pull request almost 9 years ago

Allow IdPs to publish multiple public keys.

rfk opened this pull request almost 9 years ago

Update to latest browserid-crypto.

rfk opened this pull request about 10 years ago

Browserid crypto

fmarier opened this pull request about 10 years ago

Update jwcrypto dependency to v0.5.1

rfk opened this pull request over 10 years ago

Remove no-longer-needed 'allowURLOmission' flag.

rfk opened this pull request over 10 years ago

Restore audience mismatch error messages

rfk opened this pull request over 10 years ago

Fails to trust the fallback on domain with a disabled support document

fmarier opened this issue over 10 years ago

Add missing require for urlparse

fmarier opened this pull request over 10 years ago

Link to the verifier that uses this library

fmarier opened this pull request over 10 years ago

Merge all the things

fmarier opened this pull request over 10 years ago

Please add additional maintainers on npmjs.org

rfk opened this issue almost 11 years ago

Transparently support $https_proxy and $no_proxy environment variables.

rfk opened this pull request almost 11 years ago

Update the repo description

rfk opened this issue almost 11 years ago

Merge all the things

fmarier opened this pull request almost 11 years ago

Add a test for the other two types of audiences we support

fmarier opened this pull request almost 11 years ago

Validate the domain that's extracted from the cert email

fmarier opened this pull request about 11 years ago

Chained assertion check

fmarier opened this pull request about 11 years ago

Validate the princpal and current domains in lookup

fmarier opened this pull request about 11 years ago

Simpler compare audience

fmarier opened this pull request about 11 years ago

Defend against hostile IdPs with too many keys

fmarier opened this issue about 11 years ago

Support larger DSA keys

fmarier opened this issue about 11 years ago

debug more easily with dbug()

seanmonstar opened this pull request about 11 years ago

always throw Errors instead of Strings

seanmonstar opened this pull request about 11 years ago

Stricter disabled

fmarier opened this pull request about 11 years ago

Convert string exceptions to Error objects

fmarier opened this pull request about 11 years ago

Validate provisioning and authentication endpoints

fmarier opened this pull request about 11 years ago

Eliminate a variable reuse in claims extraction

fmarier opened this pull request about 11 years ago

Remove bogus comments (copy/paste leftovers)

fmarier opened this pull request about 11 years ago

Validate the authority field for delegating IdPs

fmarier opened this pull request about 11 years ago

Allow redirects in the support document

fmarier opened this issue about 11 years ago

Make the redirect check more precise

fmarier opened this pull request about 11 years ago

Audience matching for internationalized domains

djc opened this issue about 11 years ago

improved api

lloyd opened this issue about 11 years ago

remove support for poorly behaved fallback

lloyd opened this issue about 11 years ago

testing of events

lloyd opened this issue about 11 years ago

test verification time tolerance support

lloyd opened this issue about 11 years ago

test missing required fields in assertions and certificates

lloyd opened this issue about 11 years ago

write (t)ests to (d)rive (d)evelopment

lloyd opened this issue about 11 years ago

Ecosyste.ms: OpenCollective

github.com/mozilla/browserid-local-verify