OWASP/SSO_Project

Function onFidoLoginPost has 40 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    onFidoLoginPost(req, res, next) {
        const userId = req.user.id;
        const logResponse = req.body.response;
        
        let thisCred, challenge;

Function onFidoRegisterPost has 36 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    onFidoRegisterPost(req, res, next) {
        const userId = req.user.id;
        const regResponse = req.body.response;
        const label = req.body.label;
        

Function onFidoLoginGet has 28 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    onFidoLoginGet(req, res, next) {
        const userId = req.user.id;
        
        Promise.all([
            this.f2l.assertionOptions(),

Identical blocks of code found in 2 locations. Consider refactoring.

Open

        JWT.verify(req.body.token, this.ownJwtToken, {
            maxAge: JWT.age().SHORT,
            subject: userId,
        }).then(jwtToken => {
            challenge = jwtToken.challenge;

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

        JWT.verify(req.body.token, this.ownJwtToken, {
            maxAge: JWT.age().SHORT,
            subject: userId,
        }).then(regToken => {
            const challenge = regToken.challenge;

• Read up
  Read up