kopia lustrzana https://github.com/pixelfed/pixelfed
70584b47c5
* Consider using `hash_equals()` instead of `==` when comparing the state values to prevent timing attacks:
`abort_unless(hash_equals($request->input('state'), $request->session()->pull('oauth2state')), 400, 'invalid
state');`
* For better data integrity, consider adding a foreign key constraint to the user_id column: `$table-
>foreign('user_id')->references('id')->on('users')->onDelete('cascade');`
* Does the OIDC provider guarantee that the username field exists in the userInfo data? Consider adding a
null check or fallback: `$userInfoData[config('remote-auth.oidc.field_username')] ?? null`
|
||
|---|---|---|
| .. | ||
| Auth | ||
| Console | ||
| Events | ||
| Exceptions | ||
| Http | ||
| Jobs | ||
| Listeners | ||
| Models | ||
| Observers | ||
| Policies | ||
| Providers | ||
| Rules | ||
| Services | ||
| Transformer | ||
| Util | ||
| AccountInterstitial.php | ||
| AccountLog.php | ||
| Activity.php | ||
| Avatar.php | ||
| Bookmark.php | ||
| Circle.php | ||
| CircleProfile.php | ||
| Collection.php | ||
| CollectionItem.php | ||
| Comment.php | ||
| Contact.php | ||
| DirectMessage.php | ||
| DiscoverCategory.php | ||
| DiscoverCategoryHashtag.php | ||
| EmailVerification.php | ||
| FailedJob.php | ||
| FollowRequest.php | ||
| Follower.php | ||
| HasSnowflakePrimary.php | ||
| Hashtag.php | ||
| HashtagFollow.php | ||
| ImportData.php | ||
| ImportJob.php | ||
| Instance.php | ||
| Like.php | ||
| Media.php | ||
| MediaBlocklist.php | ||
| MediaTag.php | ||
| Mention.php | ||
| ModLog.php | ||
| Newsroom.php | ||
| Notification.php | ||
| OauthClient.php | ||
| Page.php | ||
| Place.php | ||
| Profile.php | ||
| ProfileSponsor.php | ||
| Report.php | ||
| ReportComment.php | ||
| ReportLog.php | ||
| Status.php | ||
| StatusArchived.php | ||
| StatusHashtag.php | ||
| StatusView.php | ||
| Story.php | ||
| StoryItem.php | ||
| StoryReaction.php | ||
| StoryView.php | ||
| UIKit.php | ||
| User.php | ||
| UserDevice.php | ||
| UserFilter.php | ||
| UserInvite.php | ||
| UserSetting.php | ||
| helpers.php | ||