{"push_id":1900564179,"size":6,"distinct_size":6,"ref":"refs/heads/master","head":"a818ec8355fe755594a17365533a8d1a7aeed2f1","before":"efc647b119f8e22e9d252802221919d6178c5059","commits":[{"sha":"9dfd208924ba893f590866958b526882b32d4ae1","author":{"name":"Michaella Neirou","email":"5b7f48240ced678911d9ce302f1f6da3d5efa489@gmail.com"},"message":"Implement cookie HMAC signing","distinct":true,"url":"https://api.github.com/repos/psimika/secure-web-app/commits/9dfd208924ba893f590866958b526882b32d4ae1"},{"sha":"00de8273b5d9e70779d1d295c1787c0e38fabd91","author":{"name":"Michaella Neirou","email":"5b7f48240ced678911d9ce302f1f6da3d5efa489@gmail.com"},"message":"Add method to get user based on ID","distinct":true,"url":"https://api.github.com/repos/psimika/secure-web-app/commits/00de8273b5d9e70779d1d295c1787c0e38fabd91"},{"sha":"9a5304f14c2f4372fc32f48f38baa35087a6f195","author":{"name":"Michaella Neirou","email":"5b7f48240ced678911d9ce302f1f6da3d5efa489@gmail.com"},"message":"Use Gorilla and Redis for session management\n\nThis commit changes the handlers responsible for authentication and\nlogging in with GitHub to use Gorilla sessions with a Redis backend for\nsession management. The gorilla libraries are solid, battle-tested and\nprovide easy encryption and HMAC signing for cookie values. Using these\nlibraries can help cover possible edge cases missed from the existing\nimplementation which is important for security.\n\nWhile Redis provides automatic session expiration, OWASP recommends\nseparate idle and absolute session timeouts:\n\nhttps://www.owasp.org/index.php/Session_Management_Cheat_Sheet#Session_Expiration\n\nThis commits implements idle and absolute session timeouts using\nsessionTTL and sessionMaxTTL values respectively.","distinct":true,"url":"https://api.github.com/repos/psimika/secure-web-app/commits/9a5304f14c2f4372fc32f48f38baa35087a6f195"},{"sha":"d4343bba81132f36257d6659d2bc45907a4a09f7","author":{"name":"Michaella Neirou","email":"5b7f48240ced678911d9ce302f1f6da3d5efa489@gmail.com"},"message":"Vendor Gorilla and Redis backend dependencies","distinct":true,"url":"https://api.github.com/repos/psimika/secure-web-app/commits/d4343bba81132f36257d6659d2bc45907a4a09f7"},{"sha":"552d7dedc3b09a9c2548946a104d2d8b504c7a7d","author":{"name":"Michaella Neirou","email":"5b7f48240ced678911d9ce302f1f6da3d5efa489@gmail.com"},"message":"Add Redis to Heroku","distinct":true,"url":"https://api.github.com/repos/psimika/secure-web-app/commits/552d7dedc3b09a9c2548946a104d2d8b504c7a7d"},{"sha":"a818ec8355fe755594a17365533a8d1a7aeed2f1","author":{"name":"Michaella Neirou","email":"5b7f48240ced678911d9ce302f1f6da3d5efa489@gmail.com"},"message":"Change redigo to dial Redis URL","distinct":true,"url":"https://api.github.com/repos/psimika/secure-web-app/commits/a818ec8355fe755594a17365533a8d1a7aeed2f1"}]}
{"actor":{"display_login":"psimika"}}