Giuseppe De Marco
Giuseppe De Marco
 That's the log: ```` 2021-06-05 15:52:27,643 urllib3.connectionpool DEBUG https://127.0.0.1:8000 "GET /static/jwks.json HTTP/1.1" 404 179 2021-06-05 15:52:27,643 cryptojwt.key_bundle WARNING HTTP status 404 reading remote JWKS from https://127.0.0.1:8000/static/jwks.json 2021-06-05 15:52:27,643 cryptojwt.key_bundle...
Let's assume that a OP have an unhandled exception that returns to RP a stupid HTML page (error 40x, 50x). We should take this into account ```` oidcrp/util.py", line 555,...
We often talked in our idpy meetings about the possibility to speed up the http requests using an async approach. Well, me and Roland started this with asyncio and an...
Do we have an assessment for the [OAuth2 Security BCP compliances](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics)?
The good @lorenzo4securitas tested some webpath evasion and then we decided to add some additional checks. This PR - adds a specialized session / cookie for anything related the MFA...
Ciao, Vorrei chiedere aggiornamenti sulla Roadmap di questo progetto per risoluzione delle issues e delle Pull Request. Abbiamo ricevuto alcune segnalazioni da parte degli sviluppatori che ci indicano che questo...
This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of...
- MFA - TOTP and Fido2 - several bugfixes - general improvements in the example project
Fare in modo che certi utenti ad un determinato sp non possano nemmeno arrivare. Disable a specific user to a specific SP.
http://shibboleth.net/pipermail/users/2013-July/010958.html Otherwise Shibboleth SP AttrChecker will apply this rule in `/etc/shibboleth/attribute-policy.xml` ```` Shared rule for all "scoped" attributes, but you'll have to manually apply it inside an AttributeRule for each...