fleet/server
Zach Wasserman fb9706912d
Prevent user enumeration (#533)
- Return same error in all cases for login endpoint.
- Log error details in server logs.
- Make most login errors take ~1s to prevent timing attacks.
- Don't return forgot password errors.
- Log password errors in server logs.
- Make most forgot password requests take ~1s to prevent timing attacks.

Fixes #531
2021-03-24 19:36:30 -07:00
..
bindata Allow import of github.com/kolide/fleet (#2213) 2020-03-29 19:22:04 -07:00
config Make enrollment cooldown configurable (#418) 2021-03-08 21:26:09 -08:00
contexts Update the Go import paths to new repo name (#27) 2020-11-11 09:59:12 -08:00
datastore Test and correct semantics for MySQL withRetryTxx (#488) 2021-03-17 11:23:52 -07:00
health Fix documentation typos (#1682) 2017-12-21 18:37:32 -08:00
kolide server: prune unused constants and functions (#477) 2021-03-15 17:08:25 -07:00
launcher Expose live query error messages via API (#205) 2021-01-19 14:52:29 -08:00
live_query Update the Go import paths to new repo name (#27) 2020-11-11 09:59:12 -08:00
logging Add AWS Lambda as logging plugin (#347) 2021-02-24 10:02:26 -08:00
mail Migrate remaining URLs to fleetdm.com (#116) 2020-12-10 11:26:00 -08:00
mock Make enrollment cooldown configurable (#418) 2021-03-08 21:26:09 -08:00
pubsub Update the Go import paths to new repo name (#27) 2020-11-11 09:59:12 -08:00
service Prevent user enumeration (#533) 2021-03-24 19:36:30 -07:00
sso server: prune unused constants and functions (#477) 2021-03-15 17:08:25 -07:00
test Add AWS Lambda as logging plugin (#347) 2021-02-24 10:02:26 -08:00
websocket server: prune unused constants and functions (#477) 2021-03-15 17:08:25 -07:00