Clement Michaud b842792a16 Implement session inactivity timeout ... This timeout will prevent an attacker from using a session that has been inactive for too long. This inactivity timeout combined with the timeout before expiration makes a good combination of security mechanisms to prevent session theft. If no activity timeout is provided, then the feature is disabled and only session expiration remains as a protection.		2017-10-17 23:48:56 +02:00
..
errors	Split client and server	2017-10-07 00:49:42 +02:00
firstfactor	Refactor endpoints to get server variables as input parameters	2017-10-17 23:04:28 +02:00
password-reset	Every public endpoints return 200 with harmonized error messages or 401	2017-10-14 11:57:38 +02:00
secondfactor	Refactor endpoints to get server variables as input parameters	2017-10-17 23:04:28 +02:00
verify	Implement session inactivity timeout	2017-10-17 23:48:56 +02:00