auth

Apr 28, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Apr 27, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Apr 27, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Apr 23, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Apr 12, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Apr 9, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Apr 8, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Apr 8, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Apr 6, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Apr 3, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 31, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 31, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 30, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 25, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 25, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 24, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 24, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 23, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 19, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 18, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 18, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 18, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 16, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Mar 11, 2021 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Changes in this version

+ const ErrNoIDToken

+ const OAuth2MetadataEndpoint

+ const OIdCMetadataEndpoint

+ func GetOAuth2MetadataEndpointRedirectHandler(ctx context.Context, authCtx interfaces.AuthenticationContext) http.HandlerFunc

+ func GetOIdCMetadataEndpointRedirectHandler(ctx context.Context, authCtx interfaces.AuthenticationContext) http.HandlerFunc

+ func WithAuditFields(ctx context.Context, clientIds []string, tokenIssuedAt time.Time) context.Context

type Context

+ func (c Context) GetOAuth2MetadataURL() *url.URL

+ func (c Context) GetOIdCMetadataURL() *url.URL

Dec 20, 2019 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Changes in this version

+ const FromHTTPKey

+ const FromHTTPVal

+ const PrincipalContextKey

+ const RedirectURLParameter

+ func GetAndValidateTokenObjectFromContext(ctx context.Context, claims config.Claims, provider *oidc.Provider) (*oidc.IDToken, error)

+ func GetLogoutEndpointHandler(ctx context.Context, authCtx interfaces.AuthenticationContext) http.HandlerFunc

type CookieManager

+ func (c CookieManager) DeleteCookies(ctx context.Context, writer http.ResponseWriter)

type HTTPRequestToMetadataAnnotator

+ func GetHTTPMetadataTaggingHandler(authContext interfaces.AuthenticationContext) HTTPRequestToMetadataAnnotator

Dec 9, 2019 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Nov 14, 2019 GO-2022-0519GO-2023-2162

  GO-2022-0519: Improper validation of access tokens in github.com/flyteorg/flyteadmin

  GO-2023-2162: SQL Injection in List Endpoints in github.com/flyteorg/flyteadmin

Changes in this version

+ const AuthorizationResponseCodeType

+ const BearerScheme

+ const CsrfFormKey

+ const DefaultAuthorizationHeader

+ const ErrAuthContext

+ const ErrB64Decoding

+ const ErrConfigFileRead

+ const ErrIdpClient

+ const ErrInvalidCsrfToken

+ const ErrJwtValidation

+ const ErrRefreshingToken

+ const ErrSecureCookie

+ const ErrTokenExpired

+ const ErrTokenNil

+ const IdpConnectionTimeout

+ const LoginRedirectURLParameter

+ const MetadataEndpoint

+ const OfflineAccessType

+ const OidcScope

+ const ProfileScope

+ const RefreshToken

+ var AllowedChars = []rune("abcdefghijklmnopqrstuvwxyz1234567890")

+ func AuthenticationLoggingInterceptor(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, ...) (interface{}, error)

+ func GetAuthenticationCustomMetadataInterceptor(authCtx interfaces.AuthenticationContext) grpc.UnaryServerInterceptor

+ func GetAuthenticationInterceptor(authContext interfaces.AuthenticationContext) func(context.Context) (context.Context, error)

+ func GetCallbackHandler(ctx context.Context, authContext interfaces.AuthenticationContext) http.HandlerFunc

+ func GetLoginHandler(ctx context.Context, authContext interfaces.AuthenticationContext) http.HandlerFunc

+ func GetMeEndpointHandler(ctx context.Context, authCtx interfaces.AuthenticationContext) http.HandlerFunc

+ func GetMetadataEndpointRedirectHandler(ctx context.Context, authCtx interfaces.AuthenticationContext) http.HandlerFunc

+ func GetOauth2Config(options config.OAuthOptions) (oauth2.Config, error)

+ func GetRefreshedToken(ctx context.Context, oauth *oauth2.Config, accessToken, refreshToken string) (*oauth2.Token, error)

+ func HashCsrfState(csrf string) string

+ func NewCsrfCookie() http.Cookie

+ func NewCsrfToken(seed int64) string

+ func NewRedirectCookie(ctx context.Context, redirectURL string) *http.Cookie

+ func NewSecureCookie(cookieName, value string, hashKey, blockKey []byte) (http.Cookie, error)

+ func ParseAndValidate(ctx context.Context, claims config.Claims, accessToken string, ...) (*oidc.IDToken, error)

+ func ReadSecureCookie(ctx context.Context, cookie http.Cookie, hashKey, blockKey []byte) (string, error)

+ func RefreshTokensIfExists(ctx context.Context, authContext interfaces.AuthenticationContext, ...) http.HandlerFunc

+ func VerifyCsrfCookie(ctx context.Context, request *http.Request) error

+ func WithUserEmail(ctx context.Context, email string) context.Context

+ type Context struct

+ func NewAuthenticationContext(ctx context.Context, options config.OAuthOptions) (Context, error)

+ func (c Context) Claims() config.Claims

+ func (c Context) CookieManager() interfaces.CookieHandler

+ func (c Context) GetBaseURL() *url.URL

+ func (c Context) GetHTTPClient() *http.Client

+ func (c Context) GetMetadataURL() *url.URL

+ func (c Context) GetUserInfoURL() *url.URL

+ func (c Context) OAuth2Config() *oauth2.Config

+ func (c Context) OidcProvider() *oidc.Provider

+ func (c Context) Options() config.OAuthOptions

+ type CookieManager struct

+ func NewCookieManager(ctx context.Context, hashKeyEncoded, blockKeyEncoded string) (CookieManager, error)

+ func (c CookieManager) RetrieveTokenValues(ctx context.Context, request *http.Request) (accessToken string, refreshToken string, err error)

+ func (c CookieManager) SetTokenCookies(ctx context.Context, writer http.ResponseWriter, token *oauth2.Token) error

+ type CorsHandlerDecorator func(http.Handler) http.Handler

+ func GetCorsDecorator(ctx context.Context, allowedOrigins, allowedHeaders []string) CorsHandlerDecorator

+ type HTTPRequestToMetadataAnnotator func(ctx context.Context, request *http.Request) metadata.MD

+ func GetHTTPRequestCookieToMetadataHandler(authContext interfaces.AuthenticationContext) HTTPRequestToMetadataAnnotator

+ type UserInfoResponse struct

+ Email string

+ FamilyName string

+ GivenName string

+ Name string

+ Picture string

+ PreferredUsername string

+ Sub string