Skip to content
Snippets Groups Projects
Unverified Commit 967d2d3d authored by brianchennn's avatar brianchennn Committed by GitHub
Browse files

fix: CSRF vulnerability (#44) 

* fix: CSRF vulnerability

* Use jwtKey (256 bytes random string) as JWT Signature Private Key

* Delete add Add admin's tenant & user when initializing Backend

fix linter

* fix: exposed password in UserModal

* add confirmPassword in UserModal

* use crypto/rand instead of math/rand

* Use http.StatusUnauthorized instead of http.StatusNotFound when CheckAuth failed.

* add InitJwtKey()
parent 2b9cc4c3
No related branches found
No related tags found
No related merge requests found
Expand all Hide whitespace changes
Inline Side-by-side
Showing
with 2045 additions and 2344 deletions
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment