session

Nov 18, 2024 GO-2024-3331

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Sep 2, 2024 GO-2024-3331

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Aug 2, 2024 GO-2024-3331

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Changes in this version

type CookieSessionStore

+ func (st *CookieSessionStore) SessionReleaseIfPresent(ctx context.Context, w http.ResponseWriter)

type FileSessionStore

+ func (fs *FileSessionStore) SessionReleaseIfPresent(ctx context.Context, w http.ResponseWriter)

type MemSessionStore

+ func (*MemSessionStore) SessionReleaseIfPresent(_ context.Context, _ http.ResponseWriter)

type Store

+ SessionReleaseIfPresent func(ctx context.Context, w http.ResponseWriter)

Jul 1, 2024 GO-2024-3331

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Apr 25, 2024 GO-2024-3331

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Mar 31, 2024 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Feb 5, 2024 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Dec 10, 2023 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Nov 27, 2023 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Oct 6, 2023 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Sep 20, 2023 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Jul 31, 2023 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

May 27, 2023 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Dec 13, 2022 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Nov 22, 2022 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Jul 30, 2022 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Jun 12, 2022 GO-2024-3016 +1 more

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

May 23, 2022 GO-2022-0569 +2 more

  GO-2022-0569: Path traversal in github.com/beego/beego and beego/v2

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Jan 9, 2022 GO-2022-0463 +4 more

  GO-2022-0463: Access control bypass due to broad route matching in github.com/beego/beego and beego/v2

  GO-2022-0569: Path traversal in github.com/beego/beego and beego/v2

  GO-2022-0572: Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Changes in this version

type ManagerConfig

+ CookieSameSite http.SameSite

+ func NewManagerConfig(opts ...ManagerConfigOpt) *ManagerConfig

+ func (c *ManagerConfig) Opts(opts ...ManagerConfigOpt)

+ type ManagerConfigOpt func(config *ManagerConfig)

+ func CfgCookieLifeTime(lifeTime int) ManagerConfigOpt

+ func CfgCookieName(cookieName string) ManagerConfigOpt

+ func CfgDomain(domain string) ManagerConfigOpt

+ func CfgEnableSidInURLQuery(enable bool) ManagerConfigOpt

+ func CfgGcLifeTime(lifeTime int64) ManagerConfigOpt

+ func CfgHTTPOnly(HTTPOnly bool) ManagerConfigOpt

+ func CfgMaxLifeTime(lifeTime int64) ManagerConfigOpt

+ func CfgProviderConfig(providerConfig string) ManagerConfigOpt

+ func CfgSameSite(sameSite http.SameSite) ManagerConfigOpt

+ func CfgSecure(Enable bool) ManagerConfigOpt

+ func CfgSessionIdInHTTPHeader(enable bool) ManagerConfigOpt

+ func CfgSessionIdLength(length int64) ManagerConfigOpt

+ func CfgSessionIdPrefix(prefix string) ManagerConfigOpt

+ func CfgSetCookie(enable bool) ManagerConfigOpt

+ func CfgSetSessionNameInHTTPHeader(name string) ManagerConfigOpt

+ type ProviderType string

+ const ProviderCookie

+ const ProviderCouchbase

+ const ProviderFile

+ const ProviderLedis

+ const ProviderMemcache

+ const ProviderMemory

+ const ProviderMysql

+ const ProviderPostgresql

+ const ProviderRedis

+ const ProviderRedisCluster

+ const ProviderRedisSentinel

+ const ProviderSsdb

Sep 15, 2021 GO-2022-0463 +4 more

  GO-2022-0463: Access control bypass due to broad route matching in github.com/beego/beego and beego/v2

  GO-2022-0569: Path traversal in github.com/beego/beego and beego/v2

  GO-2022-0572: Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Dec 14, 2020 GO-2022-0463 +4 more

  GO-2022-0463: Access control bypass due to broad route matching in github.com/beego/beego and beego/v2

  GO-2022-0569: Path traversal in github.com/beego/beego and beego/v2

  GO-2022-0572: Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Dec 14, 2020 GO-2022-0463 +4 more

  GO-2022-0463: Access control bypass due to broad route matching in github.com/beego/beego and beego/v2

  GO-2022-0569: Path traversal in github.com/beego/beego and beego/v2

  GO-2022-0572: Access control bypass via incorrect route lookup in github.com/beego/beego and beego/v2

  GO-2024-3016: Beego privilege escalation vulnerability via sendMail in github.com/beego/beego/v2

  GO-2024-3331: Beego has Collision Hazards of MD5 in Cache Key Filenames in github.com/beego/beego

Changes in this version

+ var SLogger = NewSessionLog(os.Stderr)

+ func DecodeGob(encoded []byte) (map[interface{}]interface{}, error)

+ func EncodeGob(obj map[interface{}]interface{}) ([]byte, error)

+ func Register(name string, provide Provider)

+ type CookieProvider struct

+ func (pder *CookieProvider) SessionAll(context.Context) int

+ func (pder *CookieProvider) SessionDestroy(ctx context.Context, sid string) error

+ func (pder *CookieProvider) SessionExist(ctx context.Context, sid string) (bool, error)

+ func (pder *CookieProvider) SessionGC(context.Context)

+ func (pder *CookieProvider) SessionInit(ctx context.Context, maxlifetime int64, config string) error

+ func (pder *CookieProvider) SessionRead(ctx context.Context, sid string) (Store, error)

+ func (pder *CookieProvider) SessionRegenerate(ctx context.Context, oldsid, sid string) (Store, error)

+ func (pder *CookieProvider) SessionUpdate(ctx context.Context, sid string) error

+ type CookieSessionStore struct

+ func (st *CookieSessionStore) Delete(ctx context.Context, key interface{}) error

+ func (st *CookieSessionStore) Flush(context.Context) error

+ func (st *CookieSessionStore) Get(ctx context.Context, key interface{}) interface{}

+ func (st *CookieSessionStore) SessionID(context.Context) string

+ func (st *CookieSessionStore) SessionRelease(ctx context.Context, w http.ResponseWriter)

+ func (st *CookieSessionStore) Set(ctx context.Context, key, value interface{}) error

+ type FileProvider struct

+ func (fp *FileProvider) SessionAll(context.Context) int

+ func (fp *FileProvider) SessionDestroy(ctx context.Context, sid string) error

+ func (fp *FileProvider) SessionExist(ctx context.Context, sid string) (bool, error)

+ func (fp *FileProvider) SessionGC(context.Context)

+ func (fp *FileProvider) SessionInit(ctx context.Context, maxlifetime int64, savePath string) error

+ func (fp *FileProvider) SessionRead(ctx context.Context, sid string) (Store, error)

+ func (fp *FileProvider) SessionRegenerate(ctx context.Context, oldsid, sid string) (Store, error)

+ type FileSessionStore struct

+ func (fs *FileSessionStore) Delete(ctx context.Context, key interface{}) error

+ func (fs *FileSessionStore) Flush(context.Context) error

+ func (fs *FileSessionStore) Get(ctx context.Context, key interface{}) interface{}

+ func (fs *FileSessionStore) SessionID(context.Context) string

+ func (fs *FileSessionStore) SessionRelease(ctx context.Context, w http.ResponseWriter)

+ func (fs *FileSessionStore) Set(ctx context.Context, key, value interface{}) error

+ type Log struct

+ func NewSessionLog(out io.Writer) *Log

+ type Manager struct

+ func NewManager(provideName string, cf *ManagerConfig) (*Manager, error)

+ func (manager *Manager) GC()

+ func (manager *Manager) GetActiveSession() int

+ func (manager *Manager) GetProvider() Provider

+ func (manager *Manager) GetSessionStore(sid string) (sessions Store, err error)

+ func (manager *Manager) SessionDestroy(w http.ResponseWriter, r *http.Request)

+ func (manager *Manager) SessionRegenerateID(w http.ResponseWriter, r *http.Request) (Store, error)

+ func (manager *Manager) SessionStart(w http.ResponseWriter, r *http.Request) (session Store, err error)

+ func (manager *Manager) SetSecure(secure bool)

+ type ManagerConfig struct

+ CookieLifeTime int

+ CookieName string

+ DisableHTTPOnly bool

+ Domain string

+ EnableSetCookie bool

+ EnableSidInHTTPHeader bool

+ EnableSidInURLQuery bool

+ Gclifetime int64

+ Maxlifetime int64

+ ProviderConfig string

+ Secure bool

+ SessionIDLength int64

+ SessionIDPrefix string

+ SessionNameInHTTPHeader string

+ type MemProvider struct

+ func (pder *MemProvider) SessionAll(context.Context) int

+ func (pder *MemProvider) SessionDestroy(ctx context.Context, sid string) error

+ func (pder *MemProvider) SessionExist(ctx context.Context, sid string) (bool, error)

+ func (pder *MemProvider) SessionGC(context.Context)

+ func (pder *MemProvider) SessionInit(ctx context.Context, maxlifetime int64, savePath string) error

+ func (pder *MemProvider) SessionRead(ctx context.Context, sid string) (Store, error)

+ func (pder *MemProvider) SessionRegenerate(ctx context.Context, oldsid, sid string) (Store, error)

+ func (pder *MemProvider) SessionUpdate(ctx context.Context, sid string) error

+ type MemSessionStore struct

+ func (st *MemSessionStore) Delete(ctx context.Context, key interface{}) error

+ func (st *MemSessionStore) Flush(context.Context) error

+ func (st *MemSessionStore) Get(ctx context.Context, key interface{}) interface{}

+ func (st *MemSessionStore) SessionID(context.Context) string

+ func (st *MemSessionStore) SessionRelease(ctx context.Context, w http.ResponseWriter)

+ func (st *MemSessionStore) Set(ctx context.Context, key, value interface{}) error

+ type Provider interface

+ SessionAll func(ctx context.Context) int

+ SessionDestroy func(ctx context.Context, sid string) error

+ SessionExist func(ctx context.Context, sid string) (bool, error)

+ SessionGC func(ctx context.Context)

+ SessionInit func(ctx context.Context, gclifetime int64, config string) error

+ SessionRead func(ctx context.Context, sid string) (Store, error)

+ SessionRegenerate func(ctx context.Context, oldsid, sid string) (Store, error)

+ func GetProvider(name string) (Provider, error)

+ type Store interface

+ Delete func(ctx context.Context, key interface{}) error

+ Flush func(ctx context.Context) error

+ Get func(ctx context.Context, key interface{}) interface{}

+ SessionID func(ctx context.Context) string

+ SessionRelease func(ctx context.Context, w http.ResponseWriter)

+ Set func(ctx context.Context, key, value interface{}) error