Clement Michaud b842792a16 Implement session inactivity timeout ... This timeout will prevent an attacker from using a session that has been inactive for too long. This inactivity timeout combined with the timeout before expiration makes a good combination of security mechanisms to prevent session theft. If no activity timeout is provided, then the feature is disabled and only session expiration remains as a protection.		2017-10-17 23:48:56 +02:00
..
access_control	Adapt ACL configuration to make it more flexible	2017-10-08 15:34:58 +02:00
authentication/totp	Refactor endpoints to get server variables as input parameters	2017-10-17 23:04:28 +02:00
configuration	Implement session inactivity timeout	2017-10-17 23:48:56 +02:00
connectors/mongo	Split client and server	2017-10-07 00:49:42 +02:00
ldap	Add {dn} as an available matcher in LDAP groups filter	2017-10-15 14:51:26 +02:00
mocks	Refactor endpoints to get server variables as input parameters	2017-10-17 23:04:28 +02:00
notifiers	Allow anonymous user in SMTP notifier	2017-10-15 22:41:22 +02:00
regulation	Refactor endpoints to get server variables as input parameters	2017-10-17 23:04:28 +02:00
routes	Implement session inactivity timeout	2017-10-17 23:48:56 +02:00
server	Block 'already logged in' page to unauthenticated user	2017-10-15 21:52:12 +02:00
storage	Check TOTP token with window of 1	2017-10-15 00:44:10 +02:00
utils	Customize the authentication method to be used by a sub-domain	2017-10-08 23:39:29 +02:00
AuthenticationMethodCalculator.test.ts	Customize the authentication method to be used by a sub-domain	2017-10-08 23:39:29 +02:00
IdentityCheckMiddleware.test.ts	Every public endpoints return 200 with harmonized error messages or 401	2017-10-14 11:57:38 +02:00
ServerConfiguration.test.ts	Refactor endpoints to get server variables as input parameters	2017-10-17 23:04:28 +02:00
SessionConfigurationBuilder.test.ts	Implement session inactivity timeout	2017-10-17 23:48:56 +02:00
requests.ts	Improve logging format for clarity	2017-10-08 22:33:50 +02:00