Harden for deployment on the internet
Open
security
- Dominant language
- Go
- Stars
- 10
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
An auth service plausibly ends up deployed on the big bad internet, though I don't necessarily recommend it. We should put some minimal hardening into that. Some things to do:
- [ ] You can currently create an infinite number of unauthenticated ephemeral sessions which take up space in the database; add a limit or change how ephemeral sessions are stored
- [ ] We have no rate limits; add some?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.