externalauth

Oct 1, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Oct 8, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Oct 1, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Sep 3, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Sep 5, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Aug 20, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Aug 7, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Aug 6, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ func IsGithubDotComURL(str string) bool

Aug 20, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Aug 6, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Aug 1, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jul 23, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jul 18, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jul 2, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

+ func IsInvalidTokenError(err error) bool

+ type InvalidTokenError string

+ func (e InvalidTokenError) Error() string

Aug 1, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jul 22, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jul 18, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jun 24, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jun 21, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jun 6, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jun 4, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jun 24, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jun 21, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

May 22, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

May 16, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

May 6, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

May 22, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Apr 22, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Apr 17, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Apr 3, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Apr 22, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Apr 17, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Apr 5, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Mar 19, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Mar 12, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Mar 9, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Mar 4, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Feb 15, 2024 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Feb 12, 2024 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Feb 7, 2024 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Feb 7, 2024 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Mar 4, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jan 24, 2024 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jan 22, 2024 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Jan 19, 2024 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Changes in this version

type DeviceAuth

+ Config promoauth.InstrumentedOAuth2Config

Mar 4, 2024 GO-2024-3228

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Dec 21, 2023 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Dec 14, 2023 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Dec 12, 2023 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Nov 17, 2023 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Oct 30, 2023 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Oct 20, 2023 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Oct 17, 2023 GO-2024-2602 +1 more

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

  GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

Oct 11, 2023 GO-2024-2602

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

Changes in this version

type Config

+ ExtraTokenKeys []string

+ func (c *Config) GenerateTokenExtra(token *oauth2.Token) (pqtype.NullRawMessage, error)

Oct 4, 2023 GO-2024-2602

  GO-2024-2602: Incorrect email domain verification in github.com/coder/coder

Changes in this version

+ type AppInstallation struct

+ ID int

+ Login string

+ URL string

+ type Config struct

+ AppInstallURL string

+ AppInstallationsURL string

+ DeviceAuth *DeviceAuth

+ DisplayIcon string

+ DisplayName string

+ ID string

+ NoRefresh bool

+ Regex *regexp.Regexp

+ Type string

+ ValidateURL string

+ func ConvertConfig(entries []codersdk.ExternalAuthConfig, accessURL *url.URL) ([]*Config, error)

+ func (c *Config) AppInstallations(ctx context.Context, token string) ([]codersdk.ExternalAuthAppInstallation, bool, error)

+ func (c *Config) RefreshToken(ctx context.Context, db database.Store, ...) (database.ExternalAuthLink, bool, error)

+ func (c *Config) ValidateToken(ctx context.Context, token string) (bool, *codersdk.ExternalAuthUser, error)

+ type DeviceAuth struct

+ ClientID string

+ CodeURL string

+ Scopes []string

+ TokenURL string

+ func (c *DeviceAuth) AuthorizeDevice(ctx context.Context) (*codersdk.ExternalAuthDevice, error)

+ func (c *DeviceAuth) ExchangeDeviceCode(ctx context.Context, deviceCode string) (*oauth2.Token, error)

+ type ExchangeDeviceCodeResponse struct

+ AccessToken string

+ Error string

+ ErrorDescription string

+ ExpiresIn int

+ RefreshToken string

+ type OAuth2Config interface

+ AuthCodeURL func(state string, opts ...oauth2.AuthCodeOption) string

+ Exchange func(ctx context.Context, code string, opts ...oauth2.AuthCodeOption) (*oauth2.Token, error)

+ TokenSource func(context.Context, *oauth2.Token) oauth2.TokenSource