mayfly-go

mirror of https://gitee.com/dromara/mayfly-go synced 2026-06-05 09:45:23 +08:00

Files

saa99999 a17fa5a103 Fix CWE-347: JWT algorithm confusion + CWE-798: hardcoded credentials in example config (#131 )

- Add HMAC algorithm verification in ParseToken to prevent JWT algorithm
  confusion attacks (CWE-347). Reject tokens with non-HMAC signing methods.
- Replace hardcoded secrets in config.yml.example with empty values
  (JWT key, DB password, AES key) to prevent users from deploying with
  weak/known credentials (CWE-798).

2026-05-27 19:10:12 +08:00

conf.go

!134 feat: 新增支持es和连接池

2025-05-21 04:42:30 +00:00

f.go

feat: flow design & page query refactor

2025-05-20 21:04:47 +08:00

ginf.go

fix: sql脚本问题修复等

2024-04-23 11:35:45 +08:00

jwt.go

Fix CWE-347: JWT algorithm confusion + CWE-798: hardcoded credentials in example config (#131 )