apache/infrastructure-asfquart

View on GitHub

Apache infrastructure

Stars: 7
Forks: 12
Open beginner issues: 1
Indexed issues: 21

Dominant language: Python
License: Apache-2.0
Last GitHub push: Jul 31, 2026
Latest indexed: Sep 14, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

Session Timeout Documentation Missing NIST SP 800-63B Deviation Justification and Internal Inconsistency Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

apache/infrastructure-asfquart#110 · Opened Jul 1, 2026
If calling app needs to restart, any pending logins will be lost Open

documentation

Difficulty 4/5 3-5 days Newbie friendliness 35/100

apache/infrastructure-asfquart#99 · 1 comment · Opened Apr 12, 2026
OAuth Authorization Code Sent in URL Query String to Token Endpoint (OAuth-OIDC) Open

ASVS

Difficulty 4/5 3-5 days Newbie friendliness 45/100

apache/infrastructure-asfquart#96 · Opened Apr 3, 2026
No Expiry Cleanup for Stale OAuth State Entries (Memory Leak) Open

ASVS

Difficulty 4/5 3-5 days Newbie friendliness 50/100

apache/infrastructure-asfquart#95 · Opened Apr 3, 2026
Dynamic OAuth Callback URL Constructed from Host Header Open

ASVS

Difficulty 4/5 3-5 days Newbie friendliness 52/100

apache/infrastructure-asfquart#93 · Opened Apr 3, 2026
OAuth Authentication Decisions Not Logged Open

ASVS documentation

apache/infrastructure-asfquart#91 · 1 comment · 1 assignee · Opened Apr 1, 2026
Open Redirect via Backslash Normalization in OAuth Redirect URI Validation Open

ASVS

Difficulty 3/5 1-2 days Newbie friendliness 74/100

apache/infrastructure-asfquart#90 · Opened Apr 1, 2026
OAuth Callback Missing Hardened TLS Configuration Open

ASVS

apache/infrastructure-asfquart#89 · 1 comment · 1 assignee · Opened Mar 31, 2026
OAuth Authorization Code Parameter Not URL-Encoded in Token Exchange Request Open

ASVS

Difficulty 3/5 1-2 days Newbie friendliness 70/100

apache/infrastructure-asfquart#88 · Opened Mar 31, 2026
No PKCE Implementation in OAuth Authorization Code Flow Open

ASVS priority

apache/infrastructure-asfquart#87 · 1 comment · 1 assignee · Opened Mar 31, 2026
OAuth State Parameter Not Bound to User Agent Session (Login CSRF) Open

ASVS priority

apache/infrastructure-asfquart#86 · 1 comment · 1 assignee · Opened Mar 31, 2026
Bearer Token Value Logged to Standard Output Open

ASVS priority

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

apache/infrastructure-asfquart#85 · 1 comment · Opened Mar 31, 2026
Add code quality checks such as ruff, pyright, pylint, mypy Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

apache/infrastructure-asfquart#82 · Opened Mar 28, 2026
Consider requiring a minimum of Python 3.11 Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

apache/infrastructure-asfquart#81 · Opened Mar 28, 2026
Allow caller to specify secret Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 55/100

apache/infrastructure-asfquart#75 · 4 comments · Opened Mar 18, 2026
GET methods which change state should be POSTs and blocked Open

enhancement no hurry

Difficulty 4/5 3-5 days Newbie friendliness 48/100

apache/infrastructure-asfquart#69 · 1 comment · Opened Mar 16, 2026
Is the func really optional? Open

Difficulty 2/5 1-3 hours Newbie friendliness 38/100

apache/infrastructure-asfquart#45 · Opened Jan 21, 2026
Why is it necessary to check session class for mfa and not elsewhere? Open

invalid

Difficulty 4/5 3-5 days Newbie friendliness 30/100

apache/infrastructure-asfquart#44 · Opened Jan 19, 2026
requirements_to_iter should perhaps be private? Open

Difficulty 2/5 1-3 hours Newbie friendliness 38/100

apache/infrastructure-asfquart#43 · Opened Jan 19, 2026
Not possible to subclass Requirements to add new methods Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

apache/infrastructure-asfquart#41 · 1 comment · Opened Jan 18, 2026
DeprecationWarning: ast.Str is deprecated and will be removed in Python 3.14; use ast.Constant instead Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

apache/infrastructure-asfquart#40 · 1 comment · Opened Jan 17, 2026

apache/infrastructure-asfquart

Get new issues in your inbox