[MBS-11058] Tighten security of OAuth service - MetaBrainz Tickets

Type: Improvement
Resolution: Fixed
Priority: Normal
Fix Version/s: 2020-09-21
Affects Version/s: None
Component/s: Misc features
Labels:
None

Security of our OAuth service received a "C" grade. I will forward the report to the MB devs via email and not include it here for security reasons. But I think we should consider making some of the improvements to get a better grade.

depends on

MBS-7485 OAuth token revokation through API

Closed

MBS-11097 Support PKCE (Proof Key for Code Exchange) by OAuth clients

Closed

MBS-11119 Set a Content-Security-Policy header on account/admin related forms

Closed

Loading...

Type: Improvement
Resolution: Fixed
Priority: Normal
Fix Version/s: 2020-09-21
Affects Version/s: None
Component/s: Misc features
Labels:
None

Security of our OAuth service received a "C" grade. I will forward the report to the MB devs via email and not include it here for security reasons. But I think we should consider making some of the improvements to get a better grade.

depends on

MBS-7485 OAuth token revokation through API

Closed

MBS-11097 Support PKCE (Proof Key for Code Exchange) by OAuth clients

Closed

MBS-11119 Set a Content-Security-Policy header on account/admin related forms

Closed

Assignee:: Michael Wiencek

Reporter:: Robert Kaye

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2020-09-02 11:32

Updated:: 2020-09-21 20:21

Resolved:: 2020-09-21 20:21

Version	Package
2020-09-21

Details

Description

Attachments

Issue Links

Activity