All issues

Search results

Consider explicit SMTP timeouts on the OTP transport (deferred from #183)

DevOps / infra

Product: ePDS

Status: Open.

#205 In hypercerts-org/ePDS;

· aspiers opened on Jul 20, 2026

Brand the password-reset email with a light 'Powered by Certified' style for all clients

Product: ePDS

Quality: UX

Status: Open.

#182 In hypercerts-org/ePDS;

· holkexyz opened on Jun 29, 2026

Nice-to-have: expose whether an account has a password set (e.g. hasPassword on getSession)

Product: ePDS

Status: Open.

#181 In hypercerts-org/ePDS;

· holkexyz opened on Jun 24, 2026

Sign-in shows raw {"error":"CSRF validation failed"} when epds_csrf cookie is absent at POST

bugSomething isn't workingSomething isn't working

Product: ePDS

Status: Open.

#179 In hypercerts-org/ePDS;

· aspiers opened on Jun 19, 2026

Separate OTP namespaces for login vs recovery (defense in depth)

Product: ePDS

Quality: security

Tech debt

Status: Open.

#108 In hypercerts-org/ePDS;

· aspiers opened on Apr 22, 2026

per-client welcome vs sign-in email using upstream authorizedClients

bugSomething isn't workingSomething isn't working

Product: ePDS

Status: Open.

#66 In hypercerts-org/ePDS;

· aspiers opened on Apr 10, 2026

cleanup: remove dead verification_token table and operations

Product: ePDS

Tech debt

Status: Open.

#39 In hypercerts-org/ePDS;

· aspiers opened on Mar 26, 2026

security: metrics endpoint uses non-timing-safe password comparison

Product: CGS

Quality: security

Status: Open.

#40 In hypercerts-org/ePDS;

· aspiers opened on Mar 26, 2026

security: backup email verification tokens have no server-side expiry

bugSomething isn't workingSomething isn't working

Product: ePDS

Quality: security

Status: Open.

#38 In hypercerts-org/ePDS;

· aspiers opened on Mar 26, 2026

Refactor: decompose large functions introduced/worsened by handle selection PR

Status: Open.

#18 In hypercerts-org/ePDS;

· aspiers opened on Mar 14, 2026

Add version number to callback HMAC protocol

Status: Open.

#17 In hypercerts-org/ePDS;

· aspiers opened on Mar 14, 2026