Affected by GO-2023-1283 and 4 other vulnerabilities

GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

mfa

package

v1.5.1 Latest Latest Go to latest Published: May 27, 2022 License: Apache-2.0 Imports: 6 Imported by: 0

Details

This section is empty.

This section is empty.

func ValidCode(code string, secret string) bool

type Otp struct {
	Secret  string `json:"secret"`
	QrImage string `json:"qrImage"`
}

func GetOtp(username string) (otp Otp, err error)