Asiel Leal Celdeiro

Results 13 issues of Asiel Leal Celdeiro

Add new addition parameter in order to allow user to set classes used to indicate a low|moderate|high password strength, and not just use the 'danger', 'warning' and 'success' default classes...

**Is your feature request related to a problem? Please describe.** In classes such as `PostgreSQLBAuthorizationDAO`, when querying the DB, the arguments for the entity field names are being hardcoded, i.e.:...

enhancement
server
investigation

**Is your feature request related to a problem? Please describe.** By default, all resources automatically managed by Spring when `org.springframework.boot:spring-boot-starter-hateoas` is present in the application are returned (on creation, for...

enhancement
server

**Describe the bug** Sensitive information stored in the local-storage [can be stolen by using an XSS attack](https://michael-coates.blogspot.com/2010/07/html5-local-storage-and-xss.html) **To Reproduce** - Follow attack demos in the linked source **Expected behavior** Do...

bug
client

**Describe the bug** The messages associated to their keys are not being resolved properly. **To Reproduce** 1. Make a `POST` request to the `login` endpoint with an incorrect credentialas 2....

bug
server

**Describe the bug** Check incompatiblity issues between @Data (from lombok) and @Entity from Hibernate **To Reproduce** - Needs investigation **Expected behavior** - No incompatibility issues.

**Is your feature request related to a problem? Please describe.** No, but if this is not automatically removed by the tree-shake, the bundle could be some kb more than needed....

enhancement
client
investigation

**Is your feature request related to a problem? Please describe.** For example, in the current logic, something like ``` EUser u = userService.signUp( user.getContent(), UserService.EmailStatus.VERIFIED, UserService.RegistrationPrivilege.SUPER_USER ); ``` the third...

enhancement
server

Some classes which extend `Serializable` may be serialized and deserialized, compromising security. Some example of these classes are `BAuthorization` and `GmsEntity` (and all other extending from it such as `EUser`)....

enhancement
server
investigation

Replace all usages of `java.util.Date` in the whole codebase. Some examples of classes using this are: `JWTService`, `JWTAuthenticationFilter`, `SecurityController`

bug
enhancement
client
server
investigation