security

Documentation

Index

• func EnforceToCurrentRoot(currentRoot, requestedPath string) (string, error)
• func IsNamespaceEnabled(namespace string, serverNamespace string, enabledNamespaces []string) bool
• func NamespaceNotPermittedError(namespace string) error
• func RBACName(defaultNS string, project string, namespace string, name string) string
• func UnverifiedHasAudClaim(rawIDToken string) (bool, error)

Functions

func EnforceToCurrentRoot

func EnforceToCurrentRoot(currentRoot, requestedPath string) (string, error)

Ensure that `requestedPath` is on the same directory or any subdirectory of `currentRoot`. Both `currentRoot` and `requestedPath` must be absolute paths. They may contain any number of `./` or `/../` dir changes.

func IsNamespaceEnabled

func IsNamespaceEnabled(namespace string, serverNamespace string, enabledNamespaces []string) bool

func NamespaceNotPermittedError

func NamespaceNotPermittedError(namespace string) error

func RBACName

func RBACName(defaultNS string, project string, namespace string, name string) string

RBACName constructs name of the app for use in RBAC checks.

func UnverifiedHasAudClaim

func UnverifiedHasAudClaim(rawIDToken string) (bool, error)

UnverifiedHasAudClaim returns whether the "aud" claim is present in the given JWT.

This function DOES NOT VERIFY THE TOKEN. You still have to verify the token to confirm that the token holder has not altered the "aud" claim.