Keeping the Heat: 1 gallon homebrews with insulated stainless steel mash tuns
Hey there. 👋 Novice homebrewing is great. Losing temperature during the mash isn't. This post is all about keeping temps with small batch sizes and stainless steel »
CVE-2018-1000211: Public apps can't revoke tokens in Doorkeeper
TL;DR: If a public client respects the RFC 7009 spec and does not authenticate the revocation request, then Doorkeeper does not actually revoke the access »
CVE-2018-1000088: Stored XSS in Doorkeeper
Software Description Doorkeeper is a Ruby gem that makes it easy to introduce OAuth 2 provider functionality to a Rails or Grape application. Depending on how »
CVE-2015-7225: OTP reuse in Devise-Two-Factor
TL;DR: Once a user successfully provides a valid OTP, that OTP can be replayed for the duration of the timestep. Upgrade to version 2.0. »
CVE-2016-6582: Doorkeeper fails to revoke OAuth 2.0 public client's access token in revocation request
TL;DR: If a public client respects the RFC 7009 spec and does not authenticate the revocation request, then Doorkeeper does not actually revoke the access »