moodle-auth_userkey | Auth plugin | Portal library

by catalyst PHP Version: 2020050801 License: No License

X-Ray Key Features Code Snippets Community Discussions(1)Vulnerabilities Install Support

kandi X-RAY | moodle-auth_userkey Summary

moodle-auth_userkey is a PHP library typically used in Web Site, Portal applications. moodle-auth_userkey has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

This plugin was developed by Catalyst IT Australia:.

Support

Quality

Security

License

Reuse

Support

moodle-auth_userkey has a low active ecosystem.

It has 58 star(s) with 40 fork(s). There are 29 watchers for this library.

It had no major release in the last 12 months.

There are 14 open issues and 31 have been closed. On average issues are closed in 95 days. There are 5 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of moodle-auth_userkey is 2020050801

Quality

moodle-auth_userkey has 0 bugs and 59 code smells.

Security

moodle-auth_userkey has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

moodle-auth_userkey code analysis shows 0 unresolved vulnerabilities.

There are 47 security hotspots that need review.

License

moodle-auth_userkey does not have a standard license declared.

Check the repository for any license declaration and review the terms closely.

Without a license, all rights are reserved, and you cannot use the library in your applications.

Reuse

moodle-auth_userkey releases are available to install and integrate.

Installation instructions are not available. Examples and code snippets are available.

moodle-auth_userkey saves you 657 person hours of effort in developing the same functionality from scratch.

It has 1524 lines of code, 123 functions and 17 files.

It has high code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of moodle-auth_userkey

Get all kandi verified functions for this library.

moodle-auth_userkey Key Features

No Key Features are available at this moment for moodle-auth_userkey.

moodle-auth_userkey Examples and Code Snippets

No Code Snippets are available at this moment for moodle-auth_userkey.

Community Discussions

Trending Discussions on moodle-auth_userkey

Moodle user key authentication,is it safe?

QUESTION

Moodle user key authentication,is it safe?

Asked 2019-Nov-28 at 12:39

i'm just trying to authenticate moodle with user key authentication using this plugin. but i'm not sure is this a safe way to authenticate users because this plugin only check whether the user name exist in the moodle database. and anyone can guess the user name and send post request to the end point and it will give you the authenticated url.is anyone know how to make this more secure? or is this way not safe?

...

ANSWER

Answered 2019-Nov-28 at 12:39

From a quick look at the plugin, the one-time URL is created by calling a Moodle webservice. That webservice call is only available to users who have been authenticated via a private token (that would be stored securely on the server that is making the webservice call to retrieve the URL).

As long as you don't give out the private token (e.g. don't include it in JavaScript sent to the user's browser) and as long as you don't grant general permission to generate login URLs, you should be fine.

Disclaimer: I am an experienced Moodle developer, but I have not reviewed the code in question, only the basic principles involved.

Source https://stackoverflow.com/questions/59081536

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install moodle-auth_userkey

You can download it from GitHub.
PHP requires the Visual C runtime (CRT). The Microsoft Visual C++ Redistributable for Visual Studio 2019 is suitable for all these PHP versions, see visualstudio.microsoft.com. You MUST download the x86 CRT for PHP x86 builds and the x64 CRT for PHP x64 builds. The CRT installer supports the /quiet and /norestart command-line switches, so you can also script it.