apache/infrastructure-asfquart

Apache infrastructure

Stars: 7
Forks: 12
Open beginner issues: 0
Indexed issues: 21

Dominant language: Python
License: Apache-2.0
Last GitHub push: Jul 31, 2026
Latest indexed: Sep 14, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Open All

21 open issues indexed

DeprecationWarning: ast.Str is deprecated and will be removed in Python 3.14; use ast.Constant instead Open

apache/infrastructure-asfquart#40 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Not possible to subclass Requirements to add new methods Open

apache/infrastructure-asfquart#41 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
requirements_to_iter should perhaps be private? Open

apache/infrastructure-asfquart#43 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Why is it necessary to check session class for mfa and not elsewhere? Open

invalid

apache/infrastructure-asfquart#44 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Is the func really optional? Open

apache/infrastructure-asfquart#45 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
GET methods which change state should be POSTs and blocked Open

enhancement no hurry

apache/infrastructure-asfquart#69 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Allow caller to specify secret Open

enhancement

apache/infrastructure-asfquart#75 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Consider requiring a minimum of Python 3.11 Open

apache/infrastructure-asfquart#81 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add code quality checks such as ruff, pyright, pylint, mypy Open

enhancement

apache/infrastructure-asfquart#82 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Bearer Token Value Logged to Standard Output Open

ASVS priority

apache/infrastructure-asfquart#85 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
OAuth State Parameter Not Bound to User Agent Session (Login CSRF) Open

ASVS priority

apache/infrastructure-asfquart#86 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 14, 2026
No PKCE Implementation in OAuth Authorization Code Flow Open

ASVS priority

apache/infrastructure-asfquart#87 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 14, 2026
OAuth Authorization Code Parameter Not URL-Encoded in Token Exchange Request Open

ASVS

apache/infrastructure-asfquart#88 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
OAuth Callback Missing Hardened TLS Configuration Open

ASVS

apache/infrastructure-asfquart#89 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Open Redirect via Backslash Normalization in OAuth Redirect URI Validation Open

ASVS

apache/infrastructure-asfquart#90 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
OAuth Authentication Decisions Not Logged Open

ASVS documentation

apache/infrastructure-asfquart#91 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Dynamic OAuth Callback URL Constructed from Host Header Open

ASVS

apache/infrastructure-asfquart#93 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
No Expiry Cleanup for Stale OAuth State Entries (Memory Leak) Open

ASVS

apache/infrastructure-asfquart#95 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
OAuth Authorization Code Sent in URL Query String to Token Endpoint (OAuth-OIDC) Open

ASVS

apache/infrastructure-asfquart#96 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
If calling app needs to restart, any pending logins will be lost Open

documentation

apache/infrastructure-asfquart#99 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Session Timeout Documentation Missing NIST SP 800-63B Deviation Justification and Internal Inconsistency Open

apache/infrastructure-asfquart#110 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026

A short digest of beginner-friendly GitHub issues.