security

Documentation

Index

• func EnforceToCurrentRoot(currentRoot, requestedPath string) (string, error)
• func UnverifiedHasAudClaim(rawIDToken string) (bool, error)

Functions

func EnforceToCurrentRoot

func EnforceToCurrentRoot(currentRoot, requestedPath string) (string, error)

Ensure that `requestedPath` is on the same directory or any subdirectory of `currentRoot`. Both `currentRoot` and `requestedPath` must be absolute paths. They may contain any number of `./` or `/../` dir changes.

func UnverifiedHasAudClaim

func UnverifiedHasAudClaim(rawIDToken string) (bool, error)

UnverifiedHasAudClaim returns whether the "aud" claim is present in the given JWT.

This function DOES NOT VERIFY THE TOKEN. You still have to verify the token to confirm that the token holder has not altered the "aud" claim.