31–40 of 46 posts
POST https://cognito-idp.us-east-1.amazonaws.com/
Response:
``` { "ChallengeName": "PASSWORD_VERIFIER", "ChallengeParameters": { "SALT": "*", "SECRET_BLOCK": "*", "USER_ID_FOR_SRP": "*", "USERNAME": "*", "SRP_B": "**" } } ```
I've seen this UI style become more popular, and I'm wondering if there's a name for it? E.g. "material design" is immediately recognizable, and I'm curious if this style comes from a similar UI framework.
Earlier quoted context omitted.
I can't re-register the same username because it already exists. And I can't log into that username because I didn't receive the confirmation email. Alternatively, I tried to do a password reset but have not received an email for that either.
I've just activated all unconfirmed accounts. You should now be able to sign in with no issues. Thanks for your patience !
Hey zabana, it looks like one of your endpoints is leaking password hashes that might be undesired? POST https://cognito-idp.us-east-1.amazonaws.com/ Response: ``` { "ChallengeName": "PASSWORD_VERIFIER", "ChallengeParameters": { "SALT": "* ", "SECRET_BLOCK": "* ", "USER_ID_FOR_SRP": "* ", "USERNAME": "* ", "SRP_B": "**" } } ```
Thanks for the help !
Hey zabana, it looks like one of your endpoints is leaking password hashes that might be undesired? POST https://cognito-idp.us-east-1.amazonaws.com/ Response: ``` { "ChallengeName": "PASSWORD_VERIFIER", "ChallengeParameters": { "SALT": "* ", "SECRET_BLOCK": "* ", "USER_ID_FOR_SRP": "* ", "USERNAME": "* ", "SRP_B": "**" } } ```
Without making the same post call, I thinnk you are seeing the challenge codes for the proofing
Congrats on the launch! I've seen this UI style become more popular, and I'm wondering if there's a name for it? E.g. "material design" is immediately recognizable, and I'm curious if this style comes from a similar UI framework.
For this project I did everything from scratch but I used inspiration from a few things I saw on codepen and dribbble.
I'm not a designer that's why there's gifs everywhere haha
Hey zabana, it looks like one of your endpoints is leaking password hashes that might be undesired? POST https://cognito-idp.us-east-1.amazonaws.com/ Response: ``` { "ChallengeName": "PASSWORD_VERIFIER", "ChallengeParameters": { "SALT": "* ", "SECRET_BLOCK": "* ", "USER_ID_FOR_SRP": "* ", "USERNAME": "* ", "SRP_B": "**" } } ```
SRP (Secure Remote Password) does not store password in hashes, but rather uses a zero knowledge proof https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco... Without making the same post call, I thinnk you are seeing the challenge codes for the proofing
Earlier quoted context omitted.
I can't re-register the same username because it already exists. And I can't log into that username because I didn't receive the confirmation email. Alternatively, I tried to do a password reset but have not received an email for that either.
I've just activated all unconfirmed accounts. You should now be able to sign in with no issues. Thanks for your patience !
Sup, ngnr? The name doesn’t roll of a tongue, IMO.