Commit graph

68 commits

Author SHA1 Message Date
tv0924@icloud.com
58d5deb435 [Update] 라우터 반환 형태 2025-06-26 15:45:39 +09:00
tv0924@icloud.com
05a095df7d [Docs] api docs 2025-06-26 15:35:26 +09:00
tv0924@icloud.com
4deb032708 [Docs] api docs 2025-06-26 15:35:12 +09:00
tv0924@icloud.com
3c5db3c1fd [Update] 자동 오탐 검증을 위한 라우터 추가 2025-06-26 15:20:30 +09:00
tv0924@icloud.com
53db0fb14e [Fix] scope detection 2025-06-26 12:40:14 +09:00
tv0924@icloud.com
3a1422a2f2 [Update] save vuln report logic 2025-06-26 12:20:41 +09:00
tv0924@icloud.com
062552d3d8 [Refactor] 리팩터링 2025-06-26 10:43:52 +09:00
gyuu04
afcfd7de87
Merge pull request #17 from j93es/gyu
OAuth redirect_uri 우회 패턴 17개 추가 및 테스트 완료
2025-06-25 14:17:24 +09:00
gyuu04
1c6fc53a81 redirect_uri 우회 패턴 추가
- 57개 우회 패턴 구체화
- 적응형 레이트 리미팅 추가 (차단 방지)
2025-06-25 14:14:19 +09:00
gyuu04
6dceba0c24 OAuth redirect_uri 우회 패턴 17개 추가 및 테스트 완료
- 안전한 테스트 도메인 적용 (evil.example)
2025-06-24 16:23:05 +09:00
James
0bee707406
Merge pull request #16 from j93es/chore/env
chroe: Set the environment variable
2025-06-21 15:24:58 +09:00
69622e4648 chroe: Set the environment variable 2025-06-21 14:34:54 +09:00
e063dadb72
Merge pull request #15 from j93es/hotfix/google-login-hint
Docs, Google Login Hint Hotfix
2025-06-20 22:03:09 +09:00
897173ba46 docs: README.md에 인증서 설정 방법 추가
refactor: GoogleLoginHint.py에서 불필요한 import 제거 및 URL 수정 로직 개선
2025-06-18 21:41:44 +09:00
c511b3bfd7 README.md 2025-06-18 21:09:02 +09:00
9071ed11b7
Merge pull request #14 from j93es/feat/google-login-hint
Feat/google login hint
2025-06-16 22:46:26 +09:00
5d1624a96a
Update ci.yml 2025-06-16 22:27:11 +09:00
ba277ccec1
Update ci.yml 2025-06-16 22:25:54 +09:00
imnyang
3af5787064 feat: update CI workflow configuration
Update GitHub Actions workflow settings
2025-06-15 13:39:16 +09:00
imnyang
0c7994a52f fix: update proxy test to skip certificate verification 2025-06-15 13:31:31 +09:00
imnyang
9a14872964 fix: update proxy test to use certificate for SSL verification 2025-06-15 13:30:33 +09:00
imnyang
b221c4a9e6 fix: update proxy test to skip SSL verification in CI workflow 2025-06-15 13:29:46 +09:00
imnyang
990eb1b643 fix: update proxy test URL to use localhost for curl command 2025-06-15 13:28:43 +09:00
imnyang
c593a92b11 fix: wrap URL in quotes for curl command in CI workflow 2025-06-15 13:27:06 +09:00
imnyang
cf3bfee039 fix: update proxy test URL to use correct GitHub OAuth endpoint 2025-06-15 13:25:43 +09:00
imnyang
32efcbe1a0 Merge branch 'feat/google-login-hint' of https://github.com/j93es/oauth-backend into feat/google-login-hint 2025-06-15 13:24:07 +09:00
imnyang
3850b0de2f fix: change GoogleLoginHintAddon request method to async 2025-06-15 13:23:58 +09:00
imnyang
00e3958300 fix: remove unused import of json.load in init.py 2025-06-15 13:15:11 +09:00
imnyang
40867acb26 feat: 환경 변수를 설정하고 Google 로그인 힌트 기능을 추가 2025-06-15 12:53:07 +09:00
imnyang
c311aaad71 fix: update proxy test URL to use GitHub OAuth endpoint with certificate 2025-06-15 12:36:43 +09:00
imnyang
05bbdc65c1 feat: add Google login hint functionality
- Add environment configuration files (.env, .env.example)
- Implement GoogleLoginHint addon module
- Update addon initialization to include new module
2025-06-15 02:06:58 +09:00
1b3f58b432
Merge pull request #12 from j93es/hotfix/running-backend
백엔드를 실행하는데 문제가 생깁니다.
2025-06-12 22:05:54 +09:00
99fc280517
Merge pull request #11 from j93es/gyu
merge 해드렸습니다. redirect_uri 우회
2025-06-12 01:02:50 +09:00
12d0ed73ff
Update ci.yml 2025-06-11 22:32:07 +09:00
db514172dc
Update ci.yml 2025-06-11 22:31:16 +09:00
imnyang
ba6064c378 HotFix Running Backend 2025-06-11 22:28:47 +09:00
gyuu04
57625307a7 테스트 완료 2025-06-11 15:11:50 +09:00
gyuu04
ef61667cfe Merge branch 'main' into gyu 2025-06-11 12:28:24 +09:00
30e2730cb1
Merge pull request #10 from j93es/j93es3
[Add] TODO
2025-06-10 08:12:11 +09:00
5b2dec4db8
Merge pull request #9 from j93es/cicd
CI/CD 추가
2025-06-10 00:34:41 +09:00
gyuu04
7ac749fa36 지금 당장 필요 없는 부분 삭제 2025-06-10 00:18:00 +09:00
tv0924@icloud.com
0be13ec5f2 [Add] TODO 2025-06-09 22:35:58 +09:00
gyuu04
367a7156bf 테스트 전 기존 코드 2025-06-09 22:34:34 +09:00
tv0924@icloud.com
aa8bf95a5c [Fix] NonceAddon 2025-06-09 22:29:39 +09:00
59b3d7d9d2
Update ci.yml 2025-06-09 22:14:31 +09:00
imnyang
31ca96f037 [FEAT] : CI/CD 파이프라인 설정 추가 및 보안 검사 단계 구현 2025-06-09 22:14:03 +09:00
김민곤
eda0c5a679
Merge pull request #8 from j93es/feature/access-token
[FEAT] : AccessToken 탐지 기능 이식 및 탐지 범위 확장(탐지 기준 완화 및 기준별 status차등 부여)
2025-06-09 20:15:12 +09:00
KMINGON
34c547c1b1 [FEAT] : AccessToken 탐지 기능 이식 및 탐지 범위 확장(탐지 기준 완화 및 기준별 status차등 부여) 2025-06-09 20:00:58 +09:00
James
69268f0a9a
Merge pull request #7 from j93es/nonce_check
nonceCheck
2025-06-08 22:56:52 +09:00
sultanofdisco
4f6f2519b3 nonceCheck
oidc flow인지 확인하고 id token을 디코딩한 후 nonce의 유무를 확인한다
2025-06-08 20:56:10 +09:00