coderd

package

Go to main page

Versions in this module

v0

v0.27.3

Aug 1, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.27.2

Jul 27, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.27.1

Jul 21, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.27.0

Jul 21, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.26.2

Jul 21, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ func ReadExperiments(log slog.Logger, raw []string) codersdk.Experiments

type API

+ UserQuietHoursScheduleStore *atomic.Pointer[schedule.UserQuietHoursScheduleStore]

type Options

+ UserQuietHoursScheduleStore *atomic.Pointer[schedule.UserQuietHoursScheduleStore]

+ type ServerTailnet struct

+ func NewServerTailnet(ctx context.Context, logger slog.Logger, derpServer *derp.Server, ...) (*ServerTailnet, error)

+ func (s *ServerTailnet) AgentConn(ctx context.Context, agentID uuid.UUID) (*codersdk.WorkspaceAgentConn, func(), error)

+ func (s *ServerTailnet) Close() error

+ func (s *ServerTailnet) DialAgentNetConn(ctx context.Context, agentID uuid.UUID, network, addr string) (net.Conn, error)

+ func (s *ServerTailnet) ReverseProxy(targetURL, dashboardURL *url.URL, agentID uuid.UUID) (_ *httputil.ReverseProxy, release func(), _ error)

v0.26.1

Jul 12, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.26.0

Jul 10, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.25.0

Jul 5, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ const OAuthConvertCookieValue

type API

+ DeploymentID string

+ SiteHandler *site.Handler

+ type OAuthConvertStateClaims struct

+ FromLoginType codersdk.LoginType

+ State string

+ ToLoginType codersdk.LoginType

+ UserID uuid.UUID

type Options

+ OAuthSigningKey [32]byte

v0.24.1

Jun 14, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.24.0

Jun 9, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type API

+ func (api *API) PrimaryWorkspaceProxy(ctx context.Context) (database.WorkspaceProxy, error)

v0.23.7

May 24, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.23.6

May 24, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.23.5

May 19, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type CreateUserRequest

+ CreateOrganization bool

v0.23.4

May 16, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.23.3

May 15, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ func LatencyCheck(allowedOrigins ...*url.URL) http.HandlerFunc

v0.23.2

May 8, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.23.1

May 3, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type API

+ WorkspaceProxyHostsFn atomic.Pointer[func() []string]

+ func (api *API) PrimaryRegion(ctx context.Context) (codersdk.Region, error)

type Options

+ UpdateAgentMetrics func(ctx context.Context, username, workspaceName, agentName string, ...)

v0.23.0

Apr 25, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type API

+ func (api *API) ValidWorkspaceAppHostname(ctx context.Context, host string, opts ValidWorkspaceAppHostnameOpts) (string, error)

+ type ValidWorkspaceAppHostnameOpts struct

+ AllowPrimaryAccessURL bool

+ AllowPrimaryWildcard bool

+ AllowProxyAccessURL bool

+ AllowProxyWildcard bool

v0.22.2

Apr 17, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.22.1

Apr 14, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.22.0

Apr 6, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type OIDCConfig

+ IgnoreUserInfo bool

type Options

+ AppSecurityKey workspaceapps.SecurityKey

v0.21.3

Apr 3, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type OIDCConfig

+ AuthURLParams map[string]string

+ EmailField string

type Options

+ HealthcheckFunc func(ctx context.Context) (*healthcheck.Report, error)

+ HealthcheckRefresh time.Duration

+ HealthcheckTimeout time.Duration

v0.21.2

Mar 29, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.21.1

Mar 28, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.21.0

Mar 27, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.20.1

Mar 23, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.20.0

Mar 21, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type OIDCConfig

+ GroupMapping map[string]string

type Options

+ SSHConfig codersdk.SSHConfigResponse

v0.19.2

Mar 10, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.19.1

Mar 10, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.19.0

Mar 10, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type API

+ TemplateScheduleStore atomic.Pointer[schedule.TemplateScheduleStore]

+ WorkspaceAppsProvider *workspaceapps.Provider

type OIDCConfig

+ GroupField string

type Options

+ AppSigningKey []byte

+ DeploymentValues *codersdk.DeploymentValues

+ TemplateScheduleStore schedule.TemplateScheduleStore

v0.18.1

Mar 2, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.18.0

Mar 1, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.17.4

Feb 21, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.17.3

Feb 14, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.17.2

Feb 14, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ StrictTransportSecurityCfg httpmw.HSTSConfig

v0.17.1

Feb 8, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.17.0

Feb 7, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ SetUserGroups func(ctx context.Context, tx database.Store, userID uuid.UUID, groupNames []string) error

v0.16.0

Feb 2, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type OIDCConfig

+ IconURL string

+ SignInText string

v0.15.3

Jan 26, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.15.2

Jan 23, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type AdditionalFields

+ BuildReason database.BuildReason

v0.15.1

Jan 20, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.15.0

Jan 19, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type API

+ Experiments codersdk.Experiments

type OIDCConfig

+ Provider *oidc.Provider

v0.14.3

Jan 12, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.14.2

Jan 12, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.14.1

Jan 10, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.14.0

Jan 9, 2023 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type OIDCConfig

+ UsernameField string

type Options

+ FilesRateLimit int

+ LoginRateLimit int

v0.13.6

Dec 22, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ func GenerateAPIKeyIDSecret() (id string, secret string, err error)

v0.13.5

Dec 20, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ SwaggerEndpoint bool

v0.13.4

Dec 16, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.13.3

Dec 14, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ HTTPClient *http.Client

v0.13.2

Dec 12, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ type AdditionalFields struct

+ BuildNumber string

+ WorkspaceName string

+ WorkspaceOwner string

v0.13.1

Dec 1, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.13.0

Dec 1, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type OIDCConfig

+ IgnoreEmailVerified bool

type Options

+ UpdateCheckOptions *updatecheck.Options

v0.12.9

Nov 22, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.12.8

Nov 16, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type API

+ WebsocketWaitGroup sync.WaitGroup

+ WebsocketWaitMutex sync.Mutex

+ func (api *API) CreateInMemoryProvisionerDaemon(ctx context.Context, debounce time.Duration) (client proto.DRPCProvisionerDaemonClient, err error)

type GithubOAuth2Config

+ AllowEveryone bool

type Options

+ TrialGenerator func(ctx context.Context, email string) error

v0.12.7

Nov 14, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type API

+ QuotaCommitter atomic.Pointer[proto.QuotaCommitter]

v0.12.6

Nov 10, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.12.5

Nov 7, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.12.4

Nov 6, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type API

+ ID uuid.UUID

v0.12.3

Nov 6, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.12.2

Nov 3, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.12.1

Nov 1, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.12.0

Nov 1, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.11.0

Oct 25, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ DeploymentConfig *codersdk.DeploymentConfig

+ GitAuthConfigs []*gitauth.Config

+ RealIPConfig *httpmw.RealIPConfig

v0.10.2

Oct 19, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.10.1

Oct 18, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.10.0

Oct 17, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type API

+ TailnetCoordinator atomic.Pointer[tailnet.Coordinator]

type Options

+ AppHostnameRegex *regexp.Regexp

+ DERPServer *derp.Server

+ TLSCertificates []tls.Certificate

v0.9.10

Oct 13, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.9.9

Oct 11, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ DeploymentFlags *codersdk.DeploymentFlags

v0.9.8

Oct 10, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.9.7

Oct 7, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.9.6

Oct 6, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.9.5

Oct 6, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.9.4

Oct 6, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.9.3

Oct 5, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type HTTPAuthorizer

+ func (h *HTTPAuthorizer) AuthorizeSQLFilter(r *http.Request, action rbac.Action, objectType string) (rbac.AuthorizeFilter, error)

type Options

+ Experimental bool

v0.9.2

Oct 3, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type API

+ WorkspaceQuotaEnforcer atomic.Pointer[workspacequota.Enforcer]

type Options

+ WorkspaceQuotaEnforcer workspacequota.Enforcer

v0.9.1

Sep 27, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.9.0

Sep 26, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type API

+ APIHandler chi.Router

+ Auditor atomic.Pointer[audit.Auditor]

+ HTTPAuth *HTTPAuthorizer

+ RootHandler chi.Router

+ WorkspaceClientCoordinateOverride atomic.Pointer[func(rw http.ResponseWriter) bool]

+ func (api *API) CreateUser(ctx context.Context, store database.Store, req CreateUserRequest) (database.User, uuid.UUID, error)

+ type CreateUserRequest struct

+ LoginType database.LoginType

type Options

+ AppHostname string

+ Auditor audit.Auditor

v0.8.15

Sep 15, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ func NewMockFeaturesService(feats FeatureInterfaces) features.Service

v0.8.14

Sep 8, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.8.13

Sep 7, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.8.12

Sep 6, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ var DisabledImplementations = FeatureInterfaces

+ type FeatureInterfaces struct

+ Auditor audit.Auditor

type FeaturesService

+ Get func(s any) error

type Options

+ AgentStatsRefreshInterval time.Duration

+ MetricsCacheRefreshInterval time.Duration

v0.8.11

Sep 1, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ DERPMap *tailcfg.DERPMap

+ TailnetCoordinator *tailnet.Coordinator

+ TailscaleEnable bool

v0.8.10

Aug 30, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ type FeaturesService interface

+ EntitlementsAPI func(w http.ResponseWriter, r *http.Request)

type Options

+ FeaturesService FeaturesService

v0.8.9

Aug 29, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.8.8

Aug 27, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.8.7

Aug 26, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ type AutoImportTemplate string

+ const AutoImportTemplateKubernetes

+ type HTTPAuthorizer struct

+ Authorizer rbac.Authorizer

+ Logger slog.Logger

+ func (h *HTTPAuthorizer) Authorize(r *http.Request, action rbac.Action, object rbac.Objecter) bool

type Options

+ AutoImportTemplates []AutoImportTemplate

+ LicenseHandler http.Handler

v0.8.6

Aug 22, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.8.5

Aug 10, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.8.4

Aug 9, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.8.3

Aug 9, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ func ConvertProvisionerJobStatus(provisionerJob database.ProvisionerJob) codersdk.ProvisionerJobStatus

type Options

+ PrometheusRegistry *prometheus.Registry

v0.8.2

Aug 1, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ type OIDCConfig struct

+ AllowSignups bool

+ EmailDomain string

+ Verifier *oidc.IDTokenVerifier

type Options

+ OIDCConfig *OIDCConfig

v0.8.1

Jul 22, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type GithubOAuth2Config

+ TeamMembership func(ctx context.Context, client *http.Client, org, team, username string) (*github.Membership, error)

v0.8.0

Jul 21, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.7.12

Jul 13, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type GithubOAuth2Config

+ Team func(ctx context.Context, client *http.Client, org, team string) (*github.Team, error)

v0.7.11

Jul 12, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.7.10

Jul 11, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.7.9

Jul 11, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.7.8

Jul 9, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type GithubOAuth2Config

+ AllowTeams []GithubOAuth2Team

+ ListTeams func(ctx context.Context, client *http.Client, org string) ([]*github.Team, error)

+ type GithubOAuth2Team struct

+ Organization string

+ Slug string

v0.7.7

Jul 8, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.7.6

Jun 27, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.7.5

Jun 27, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ AgentInactiveDisconnectTimeout time.Duration

+ type WorkspaceKeysRequest struct

+ Disco key.DiscoPublic

+ Public key.NodePublic

v0.7.4

Jun 22, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ CacheDir string

v0.7.3

Jun 19, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.7.2

Jun 19, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ Telemetry telemetry.Reporter

v0.7.1

Jun 16, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.7.0

Jun 15, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.6.6

Jun 13, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.6.5

Jun 9, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.6.4

Jun 8, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.6.3

Jun 8, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.6.2

Jun 5, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.6.1

Jun 3, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ type API struct

+ Handler chi.Router

+ func (api *API) Authorize(rw http.ResponseWriter, r *http.Request, action rbac.Action, ...) bool

+ func (api *API) Close()

+ func (api *API) ListenProvisionerDaemon(ctx context.Context) (client proto.DRPCProvisionerDaemonClient, err error)

v0.6.0

May 25, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ func AuthorizeFilter(api *api, r *http.Request, action rbac.Action, objects []O) []O

+ type CoderD interface

+ CloseWait func()

+ Handler func() http.Handler

+ ListenProvisionerDaemon func(ctx context.Context) (proto.DRPCProvisionerDaemonClient, error)

type Options

+ TracerProvider *sdktrace.TracerProvider

v0.5.11

May 18, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.5.10

May 18, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.5.9

May 17, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.5.8

May 16, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.5.7

May 16, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.5.6

May 12, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.5.5

May 10, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.5.4

May 4, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ Authorizer *rbac.RegoAuthorizer

v0.5.3

May 2, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.5.2

Apr 30, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.5.1

Apr 28, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.5.0

Apr 25, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.4.4

Apr 25, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ type GithubOAuth2Config struct

+ AllowOrganizations []string

+ AllowSignups bool

+ AuthenticatedUser func(ctx context.Context, client *http.Client) (*github.User, error)

+ ListEmails func(ctx context.Context, client *http.Client) ([]*github.UserEmail, error)

+ ListOrganizationMemberships func(ctx context.Context, client *http.Client) ([]*github.Membership, error)

type Options

+ APIRateLimit int

+ AzureCertificates x509.VerifyOptions

+ GithubOAuth2Config *GithubOAuth2Config

v0.4.3

Apr 18, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ ICEServers []webrtc.ICEServer

+ TURNServer *turnconn.Server

v0.4.2

Apr 15, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.4.1

Apr 12, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.4.0

Apr 6, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type Options

+ SSHKeygenAlgorithm gitsshkey.Algorithm

v0.3.5

Apr 5, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ func New(options *Options) (http.Handler, func())

+ type Options struct

+ AWSCertificates awsidentity.Certificates

+ AccessURL *url.URL

+ AgentConnectionUpdateFrequency time.Duration

+ Database database.Store

+ GoogleTokenValidator *idtoken.Validator

+ Logger slog.Logger

+ Pubsub database.Pubsub

+ SecureAuthCookie bool

v0.3.4

Apr 1, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.3.3

Mar 31, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.3.2

Mar 30, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.3.1

Mar 29, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.3.0

Mar 29, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.2.0

Mar 18, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

v0.1.0

Mar 11, 2022 GO-2024-2602 +1 more

GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Other modules containing this package

github.com/coder/coder/v2

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL