Search results

Fix Content-Type mismatch — plain text error responses served as text/html in asfquart

Status: Open.

#56 In apache/infrastructure-asfquart;

· andrewmusselman opened on Feb 18, 2026

Add Clear-Site-Data header and client-side storage clearing on logout (ASVS 14.3.1)

Status: Open.

#55 In apache/infrastructure-asfquart;

· andrewmusselman opened on Feb 18, 2026

Add framework-level expiry validation for PAT bearer tokens

Status: Open.

#53 In apache/infrastructure-asfquart;

· andrewmusselman opened on Feb 17, 2026

In-memory OAuth state storage incompatible with multi-instance deployments

Status: Open.

#52 In apache/infrastructure-asfquart;

· andrewmusselman opened on Feb 17, 2026

Render https if tls is in use

Status: Open.

#51 In apache/infrastructure-asfquart;

· tisonkun opened on Feb 4, 2026

Allow apps to configure additional LDAP group memberships for session data and auth

Status: Open.

#50 In apache/infrastructure-asfquart;

· dave2wave opened on Feb 3, 2026

Is the func really optional?

Status: Open.

#45 In apache/infrastructure-asfquart;

· sebbASF opened on Jan 21, 2026

Why is it necessary to check session class for mfa and not elsewhere?

invalidThis doesn't seem rightThis doesn't seem right

Status: Open.

#44 In apache/infrastructure-asfquart;

· sebbASF opened on Jan 19, 2026

requirements_to_iter should perhaps be private?

Status: Open.

#43 In apache/infrastructure-asfquart;

· sebbASF opened on Jan 19, 2026

Not possible to subclass Requirements to add new methods

Status: Open.

#41 In apache/infrastructure-asfquart;

· sebbASF opened on Jan 18, 2026

DeprecationWarning: ast.Str is deprecated and will be removed in Python 3.14; use ast.Constant instead

Status: Open.

#40 In apache/infrastructure-asfquart;

· sebbASF opened on Jan 17, 2026