cryptokeys

Aug 7, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Aug 5, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Aug 7, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 15, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 2, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 1, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Aug 7, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 15, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 8, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jun 30, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jun 10, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jun 3, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

May 20, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

May 15, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Apr 29, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 24, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 23, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 2, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 29, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Mar 17, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Mar 15, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Mar 4, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 29, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 23, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Mar 6, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Feb 4, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Jan 29, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Jan 23, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Jan 18, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Jan 7, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Dec 16, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Dec 3, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Dec 12, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Nov 8, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Nov 8, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Nov 4, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Changes in this version

+ const DefaultKeyDuration

+ const OIDCConvertTokenDuration

+ const TailnetResumeTokenDuration

+ const WorkspaceAppsTokenDuration

+ var ErrClosed = xerrors.New("closed")

+ var ErrInvalidFeature = xerrors.New("invalid feature for this operation")

+ var ErrKeyInvalid = xerrors.New("key is invalid for use")

+ var ErrKeyNotFound = xerrors.New("key not found")

+ func StartRotator(ctx context.Context, logger slog.Logger, db database.Store, ...)

+ type CacheOption func(*cache)

+ func WithCacheClock(clock quartz.Clock) CacheOption

+ type DBFetcher struct

+ DB database.Store

+ func (d *DBFetcher) Fetch(ctx context.Context, feature codersdk.CryptoKeyFeature) ([]codersdk.CryptoKey, error)

+ type EncryptionKeycache interface

+ DecryptingKey func(ctx context.Context, id string) (key interface{}, err error)

+ EncryptingKey func(ctx context.Context) (id string, key interface{}, err error)

+ func NewEncryptionCache(ctx context.Context, logger slog.Logger, fetcher Fetcher, ...) (EncryptionKeycache, error)

+ type Fetcher interface

+ Fetch func(ctx context.Context, feature codersdk.CryptoKeyFeature) ([]codersdk.CryptoKey, error)

+ type RotatorOption func(*rotator)

+ func WithClock(clock quartz.Clock) RotatorOption

+ func WithKeyDuration(keyDuration time.Duration) RotatorOption

+ type SigningKeycache interface

+ SigningKey func(ctx context.Context) (id string, key interface{}, err error)

+ VerifyingKey func(ctx context.Context, id string) (key interface{}, err error)

+ func NewSigningCache(ctx context.Context, logger slog.Logger, fetcher Fetcher, ...) (SigningKeycache, error)