Affected by GO-2023-1541 and 33 other vulnerabilities

GO-2023-1541: Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer

GO-2023-1550: Answer contains Improper Access Control vulnerability in github.com/answerdev/answer

GO-2023-1551: Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer

GO-2023-1552: Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer

GO-2023-1553: Answer vulnerable to Race Condition in github.com/answerdev/answer

GO-2023-1554: Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer

GO-2023-1592: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1612: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1613: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1614: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1615: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1616: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1617: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1618: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1619: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1620: Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer

GO-2023-1654: Answer has Observable Response Discrepancy in github.com/answerdev/answer

GO-2023-1655: Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer

GO-2023-1656: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

GO-2023-1657: Answer has Guessable CAPTCHA in github.com/answerdev/answer

GO-2023-1658: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

GO-2023-1659: Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

GO-2023-1660: Answer vulnerable to Business Logic Errors in github.com/answerdev/answer

GO-2023-1661: Answer has Observable Timing Discrepancy in github.com/answerdev/answer

GO-2023-1662: Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer

GO-2023-1716: Answer vulnerable to Insertion of Sensitive Information Into Sent Data in github.com/answerdev/answer

GO-2023-1718: Answer vulnerable to Exposure of Sensitive Information Through Metadata in github.com/answerdev/answer

GO-2023-1719: Answer vulnerable to account takeover because password reset links do not expire in github.com/answerdev/answer

GO-2023-1774: Answer Missing Authorization vulnerability in github.com/answerdev/answer

GO-2023-1995: Answer has Race Condition within a Thread in github.com/answerdev/answer

GO-2023-1996: Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer

GO-2023-1997: Answer Missing Authorization vulnerability in github.com/answerdev/answer

GO-2023-2001: Answer has Weak Password Requirements in github.com/answerdev/answer

GO-2023-2051: Answer Missing Authentication for Critical Function in github.com/answerdev/answer

auth

package

v1.0.0 Latest Latest Go to latest Published: Dec 18, 2022 License: Apache-2.0 Imports: 4 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/answerdev/answer

Links

Open Source Insights

Documentation ¶

Index ¶

type AuthRepo
type AuthService
- func NewAuthService(authRepo AuthRepo) *AuthService

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type AuthRepo ¶

type AuthRepo interface {
	GetUserCacheInfo(ctx context.Context, accessToken string) (userInfo *entity.UserCacheInfo, err error)
	SetUserCacheInfo(ctx context.Context, accessToken string, userInfo *entity.UserCacheInfo) error
	RemoveUserCacheInfo(ctx context.Context, accessToken string) (err error)
	SetUserStatus(ctx context.Context, userID string, userInfo *entity.UserCacheInfo) (err error)
	GetUserStatus(ctx context.Context, userID string) (userInfo *entity.UserCacheInfo, err error)
	RemoveUserStatus(ctx context.Context, userID string) (err error)
	GetBackyardUserCacheInfo(ctx context.Context, accessToken string) (userInfo *entity.UserCacheInfo, err error)
	SetBackyardUserCacheInfo(ctx context.Context, accessToken string, userInfo *entity.UserCacheInfo) error
	RemoveBackyardUserCacheInfo(ctx context.Context, accessToken string) (err error)
	AddUserTokenMapping(ctx context.Context, userID, accessToken string) (err error)
	RemoveAllUserTokens(ctx context.Context, userID string)
}

AuthRepo auth repository

type AuthService ¶

type AuthService struct {
	// contains filtered or unexported fields
}

AuthService kit service

func NewAuthService ¶

func NewAuthService(authRepo AuthRepo) *AuthService

NewAuthService email service

func (*AuthService) AddUserTokenMapping ¶ added in v1.0.0

func (as *AuthService) AddUserTokenMapping(ctx context.Context, userID, accessToken string) (err error)

AddUserTokenMapping add user token mapping

func (*AuthService) GetCmsUserCacheInfo ¶

func (as *AuthService) GetCmsUserCacheInfo(ctx context.Context, accessToken string) (userInfo *entity.UserCacheInfo, err error)

func (*AuthService) GetUserCacheInfo ¶

func (as *AuthService) GetUserCacheInfo(ctx context.Context, accessToken string) (userInfo *entity.UserCacheInfo, err error)

func (*AuthService) RemoveAllUserTokens ¶ added in v1.0.0

func (as *AuthService) RemoveAllUserTokens(ctx context.Context, userID string)

RemoveAllUserTokens Log out all users under this user id

func (*AuthService) RemoveCmsUserCacheInfo ¶

func (as *AuthService) RemoveCmsUserCacheInfo(ctx context.Context, accessToken string) (err error)

func (*AuthService) RemoveUserCacheInfo ¶

func (as *AuthService) RemoveUserCacheInfo(ctx context.Context, accessToken string) (err error)

func (*AuthService) SetCmsUserCacheInfo ¶

func (as *AuthService) SetCmsUserCacheInfo(ctx context.Context, accessToken string, userInfo *entity.UserCacheInfo) (err error)

func (*AuthService) SetUserCacheInfo ¶

func (as *AuthService) SetUserCacheInfo(ctx context.Context, userInfo *entity.UserCacheInfo) (accessToken string, err error)

func (*AuthService) SetUserStatus ¶ added in v0.4.0

func (as *AuthService) SetUserStatus(ctx context.Context, userInfo *entity.UserCacheInfo) (err error)

func (*AuthService) UpdateUserCacheInfo ¶

func (as *AuthService) UpdateUserCacheInfo(ctx context.Context, token string, userInfo *entity.UserCacheInfo) (err error)

Source Files ¶

View all Source files

auth.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL