Affected by GO-2023-1723 and 5 other vulnerabilities

GO-2023-1723: SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb

GO-2023-2166: SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb

GO-2024-2597: Integer overflow in chunking helper causes dispatching to miss elements or panic in github.com/authzed/spicedb

GO-2024-2716: SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used in github.com/authzed/spicedb

GO-2024-2939: SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb

GO-2024-3131: SpiceDB having multiple caveats on resources of the same type may improperly result in no permission in github.com/authzed/spicedb

requestid

package

v1.5.0 Latest Latest Go to latest Published: Mar 10, 2022 License: Apache-2.0 Imports: 7 Imported by: 2

Details

View Source

const RequestIDMetadataKey = "x-request-id"

RequestIDMetadataKey is the key in which request IDs are passed to metadata.

This section is empty.

func StreamServerInterceptor(opts ...Option) grpc.StreamServerInterceptor

StreamServerInterceptor returns a new interceptor which handles request IDs according to the provided options.

func UnaryServerInterceptor(opts ...Option) grpc.UnaryServerInterceptor

UnaryServerInterceptor returns a new interceptor which handles request IDs according to the provided options.

type IDGenerator func() string

IDGenerator functions are used to generate request IDs if a new one is needed.

type Option func(*handleRequestID)

Option instances control how the middleware is initialized.

func GenerateIfMissing(enable bool) Option

GenerateIfMissing will instruct the middleware to create a request ID if one isn't already on the incoming request.

default: false

func WithIDGenerator(genFunc IDGenerator) Option

WithIDGenerator gives the middleware a function to use for generating requestIDs.

default: 32 character hex string