This repository has been archived by the owner on Oct 20, 2024. It is now read-only.
- Minor bugfixes and improvements
- Improve e-mail scheme security model by adding a mutex lock when generating codes, and adding a code prefix sent in the trigger method to mitigate stolen codes
- Update cmake script for a cleaner build
- Add config values
user_backend_api_run_enabled
,user_middleware_backend_api_run_enabled
,client_backend_api_run_enabled
,scheme_api_run_enabled
to list authorized backend or schemes for a Glewlwyd instance - Add config value
originating_ip_header
to specify the header value containg the originating IP address, if any - Add config values
response_body_limit
andmax_header
to limit download sizes when relevant - Rework Docker files to build from source instead of downloading packages from github
- cmake: split package build options in 3 (tar.gz, deb and rpm), and set all packages build to off by default
- Security: Fix possible buffer overflow in webauthn attestation