Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Hash the login nonce for storage to avoid leaking it via DB access #453

Merged
merged 17 commits into from
Sep 8, 2022
Merged

Hash the login nonce for storage to avoid leaking it via DB access #453

merged 17 commits into from
Sep 8, 2022

Commits on Sep 8, 2022

  1. Store the login nonce hashed

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    5ff442a View commit details
    Browse the repository at this point in the history

  2. Merge remote-tracking branch 'origin/master' into add/totp-hashes

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    f6a5019 View commit details
    Browse the repository at this point in the history

  3. Add tests

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    0c01f88 View commit details
    Browse the repository at this point in the history

  4. Ensure all required keys are present

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    58ff60f View commit details
    Browse the repository at this point in the history

  5. Use the correct order

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    702adc6 View commit details
    Browse the repository at this point in the history

  6. Some more tests

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    13f8dfa View commit details
    Browse the repository at this point in the history

  7. Update the env to run the tests locally

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    9f5a9a1 View commit details
    Browse the repository at this point in the history

  8. Update WP too

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    1722119 View commit details
    Browse the repository at this point in the history

  9. Formatting

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    5c293a4 View commit details
    Browse the repository at this point in the history

  10. Require a fresh nonce for each request

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    c16e184 View commit details
    Browse the repository at this point in the history

  11. Use a more reliable API for getting the home URL

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    1ab863c View commit details
    Browse the repository at this point in the history

  12. Delete the nonce only if it is incorrect and in the DB

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    6db97cd View commit details
    Browse the repository at this point in the history

  13. Test that invalid nonce checks delete nonces

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    6844ad6 View commit details
    Browse the repository at this point in the history

  14. Install WP with all default themes

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    b146d33 View commit details
    Browse the repository at this point in the history

  15. Reorder packages

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    b1b106b View commit details
    Browse the repository at this point in the history

  16. Per linter

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    0cafae8 View commit details
    Browse the repository at this point in the history

  17. We need the WP core installers package to place it in a known location

    @kasparsd
    kasparsd committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    1dfe473 View commit details
    Browse the repository at this point in the history