authentication

Jul 20, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jul 17, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jul 11, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

May 31, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

May 20, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

May 12, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

May 6, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Apr 27, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Apr 20, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Mar 11, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Feb 26, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jan 13, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jan 7, 2024 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Nov 28, 2023 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Sep 12, 2023 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jun 22, 2023 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Mar 18, 2023 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Mar 5, 2023 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Feb 25, 2023 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Nov 2, 2022 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Aug 22, 2022 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Mar 27, 2022 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Mar 8, 2022 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Feb 23, 2022 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Aug 18, 2021 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Feb 1, 2021 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Sep 5, 2020 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jun 26, 2020 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jun 10, 2020 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Mar 29, 2020 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Feb 3, 2020 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Oct 10, 2019 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Sep 25, 2019 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jul 22, 2019 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jul 3, 2019 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jun 20, 2019 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Apr 30, 2019 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Feb 15, 2019 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jan 18, 2019 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Oct 24, 2018 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Oct 9, 2018 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Sep 11, 2018 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Aug 23, 2018 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Aug 8, 2018 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jul 9, 2018 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jun 27, 2018 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jun 4, 2018 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Mar 19, 2018 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Feb 8, 2018 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jan 5, 2018 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Sep 29, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Sep 25, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Aug 15, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jul 12, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jul 5, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jun 23, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jun 16, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jun 9, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jun 2, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

May 19, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

May 10, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Apr 27, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Changes in this version

+ func HasReachedFailedAttemptsLimit(limit int, timeout string) bool

+ func IsJwtTokenValid(token string, ab backends.Authentication, secret []byte, exp int) bool

+ type FailedAttempts struct

+ Count int

+ LastFailed time.Time

+ var Attempts FailedAttempts

Apr 18, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Mar 27, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Mar 24, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Feb 23, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Feb 15, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jan 19, 2017 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Dec 2, 2016 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Nov 28, 2016 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Nov 11, 2016 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Sep 8, 2016 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Aug 26, 2016 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Aug 3, 2016 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jul 20, 2016 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Jul 15, 2016 GO-2024-3108

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Changes in this version

+ var TestDB *bolt.DB

+ func GetDB(name string) *bolt.DB

+ func GetRandomName(n int) []byte

+ func Login(requestUser *backends.User, ab backends.Authentication, secret []byte, exp int) (int, []byte)

+ func Logout(req *http.Request, ab backends.Authentication, secret []byte, exp int) error

+ func RefreshToken(requestUser *backends.User, ab backends.Authentication, secret []byte, exp int) []byte

+ type AuthMiddleware struct

+ AB backends.Authentication

+ Enabled bool

+ JWTExpirationDelta int

+ SecretKey []byte

+ func GetNewAuthenticationMiddleware(authBackend backends.Authentication, secretKey []byte, exp int, enabled bool) *AuthMiddleware

+ func (a *AuthMiddleware) RequireTokenAuthentication(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ type Client struct

+ HTTPClient *http.Client

+ type JWTAuthenticationBackend struct

+ AuthBackend backends.Authentication

+ JWTExpirationDelta int

+ SecretKey []byte

+ func InitJWTAuthenticationBackend(ab backends.Authentication, secret []byte, exp int) *JWTAuthenticationBackend

+ func (backend *JWTAuthenticationBackend) Authenticate(user *backends.User) bool

+ func (backend *JWTAuthenticationBackend) GenerateToken(userUUID, username string) (string, error)

+ func (backend *JWTAuthenticationBackend) IsInBlacklist(token string) bool

+ func (backend *JWTAuthenticationBackend) Logout(tokenString string, token *jwt.Token) error

+ type Token struct

+ Token *jwt.Token

+ func (t *Token) Encode() ([]byte, error)

+ type TokenAuthentication struct

+ Token string