Closed
Milestone
Oct 5, 2018–May 12, 2019
1.9.19
Unstarted Issues (open and unassigned)
0
Ongoing Issues (open and assigned)
0
Completed Issues (closed)
9
- [Security: low] register_token used for account creation can be used as a valid session identifier
- [Security: low] Captcha session id is too weak
- id_token validity not correctly evaluated
- Error when saving in manager (mongoDB as ConfigurationBackend)
- lemonldap-ng-cli adds a new item when deleting an item that does not exist.
- InactivityTimeout for applications don't work
- Cross domain authentication, ajax request and same origin policy
- All IDP conf not usable if only one IDP misconfigured
- Manager skin broken
