kagi

kagi copied to clipboard

The demo doesn't seems to work with last versions of Chrome and Firefox

3

On chrome : user.icon must be a secure URL.  On Firefox: undefined 

Natim

It looks like there is no brute-force protection on the TOTP implementation, without which it is quite vulnerable (i.e. can be brute-forced within a few hours/days in a typical setup)....

spookylukey

Whenever attestation is enabled in settings.py, new keys are unable to be enrolled. django debug log: ``` [04/Jan/2022 10:36:17] "GET /kagi/add-webauthn-key/ HTTP/1.1" 200 3940 [04/Jan/2022 10:36:24] "POST /kagi/api/begin-activate/ HTTP/1.1" 200...

johnmcc3

Demo instructions invoke migrate no such file or directory

10

The Demo instructions get me as far as `invoke migrate` after which I am stuck: ``` invoke migrate /bin/bash: line 1: /home/dirk/.local/share/virtualenvs/kagi/bin/python: No such file or directory ``` Related note:...

Frikster

## Steps to Reproduce 1. Log in and choose “Manage WebAuthn keys” 1. Tap the appropriate link to add a key 1. _Without entering a key name_, tap the “Add...

justinmayer