adityapunetha / fastapi-full-devlopment

This is a Python backend development project that utilizes FastAPI, PostgreSQL, SQLAlchemy, and Pydantic ORM. It includes user authentication, voting system, and CORS support. Dockerized for easy deployment and tested with PyTest, this template comes with CI/CD through Github Actions.

Hi, I'm Aditya Punetha!

Student and ML/AI Enthusiast

• Connect with me on LinkedIn.

Languages:

AI/ML:

Web Development:

Tools:

fastapi-full-devlopment's Issues

How are user credentials stored and transmitted?

Question: How are user credentials stored and transmitted?

Thought Process: User credentials are a common target for attackers. If credentials are not stored and transmitted securely, they can be intercepted or stolen, leading to unauthorized access.

Component: User Interaction (Web Browser)

Mitigations:

• Use secure hashing algorithms for password storage.
• Use HTTPS for all data transmission.
• Implement two-factor authentication.

Category: Authentication

Severity: High

Change access token expiry time to 10 minutes

Change access token expiry time to 10 minutes in create_access_token method of in app/oauth2.py

How are user credentials stored and transmitted?

Question: How are user credentials stored and transmitted?

Thought Process: User credentials are a common target for attackers. If credentials are not stored and transmitted securely, they can be intercepted or stolen, leading to unauthorized access.

Component: User Interaction (Web Browser)

Mitigations:

• Use secure hashing algorithms for password storage.
• Use HTTPS for all data transmission.
• Implement two-factor authentication.

Category: Authentication

Severity: High

Change access token expiry time to 10 minutes

Change access token expiry time to 10 minutes

How are user credentials stored and transmitted?

Question: How are user credentials stored and transmitted?

Thought Process: User credentials are a common target for attackers. If credentials are not stored and transmitted securely, they can be intercepted or stolen, leading to unauthorized access.

Component: User Interaction (Web Browser)

Mitigations:

• Use secure hashing algorithms for password storage.
• Use HTTPS for all data transmission.
• Implement two-factor authentication.

Category: Authentication

Severity: High

How are user credentials stored and transmitted?

Question: How are user credentials stored and transmitted?

Thought Process: User credentials are a common target for attackers. If credentials are not stored and transmitted securely, they can be intercepted or stolen, leading to unauthorized access.

Component: User Interaction (Web Browser)

Mitigations:

• Use secure hashing algorithms for password storage.
• Use HTTPS for all data transmission.
• Implement two-factor authentication.

Category: Authentication

Severity: High