lujiefsi

[Bug]: gin-vue-admin does not properly termine existing user sessions when the user was deleted or disabled

1

### gin-vue-admin 版本 2.4.5 ### Node 版本 v14.16.0 ### Golang 版本 go 1.16 ### 是否依旧存在 可以 ### bug描述 First, a user login gin-vue-admin in one page. Then the admin deletes...

Please check [open issues](https://github.com/daptin/daptin/issues) before creating a new one to avoid duplicates. - Are you running a release or master: master - Issue is about a fresh instance (no data...

CWE-613: Insufficient Session Expiration

1

after user1 login, we delete user1 in another page as admin. But user1 is still able do anything. Such bug belong to CWE-613: Insufficient Session Expiration. we shoud expire the...

请按照一下格式提交issue，谢谢！ 1. 你当前使用的是哪个版本的 MinDoc(`godoc_linux_amd64 version`)? godoc_linux_amd64 version 2. 你当前使用的是什么操作系统? ubuntu 3. 你是如何操作的？ First, a user login mindoc in one page. Then the admin deletes or disables the user in another...

CWE-613: Insufficient Session Expiration 已经被删除的用户，他的所有session应该立即无效

5

## 概述 1、用户1登录系统 2、管理员在另一个界面删除该用户1 3、用户1仍然可以执行一些操作，比如删除联系人。 ## 操作系统 不限 ## 代码版本 master

**描述 bug** - 在用户管理界面删除已经登录的用户 user1 - user1仍然可以添加书籍等其他操作。 - 应该提示该用户不存在。 **你使用哪个版本出现该问题？** demo版本 **如何再现** 确定性复现，参考 https://1drv.ms/v/s!AksJ421iyCG-mSNFvsw-AC6Sllxj?e=qRVBzb

see https://huntr.dev/bounties/09fb00bd-d95e-4cc5-a989-0ee0960922da/ fix is based on https://github.com/github/codeql/blob/bbd7e623418e41775c90cfbbe44ad25b3bf9c5e3/cpp/ql/src/experimental/Security/CWE/CWE-285/PamAuthorizationGood.cpp

Fail to build due to org.python:jython:jar:2.7.2a1+ is missing

2

I try to build Ariadne from source code. I have success to build WALA code, IDE. But when build Ariadne, I meet exception: `Failed to execute goal on project com.ibm.wala.cast.python:...

Enhance Authentication Audit Logging for Comprehensive Security Visibility

1

### Proposed change Extend the existing audit logging system to provide comprehensive coverage of authentication events. While JetStream API authorization already has audit logging capabilities, the authentication process itself lacks...

授权阶段添加审计日志功能 / Add Audit Logging for Authorization Phase

2

### Search before asking - [x] I searched in the [issues](https://github.com/apache/iotdb/issues) and found nothing similar. ### Motivation 目前IoTDB仅在认证阶段（用户登录时）添加了审计日志，但在授权阶段（权限检查时）没有相应的审计日志记录。这使得系统管理员无法追踪和审计用户的权限访问行为，增加了安全风险。在安全敏感的环境中，完整的审计日志对于满足合规要求和进行安全分析至关重要。 Currently, IoTDB only adds audit logs during the authentication phase (when users...