GO-2023-1955: Dapr API token authentication bypass in HTTP endpoints in github.com/dapr/dapr

pkg/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/dapr/dapr

Links

Open Source Insights

Directories ¶

Path	Synopsis
acl
actors
internal
apis
components
components/v1alpha1 +kubebuilder:object:generate=true +groupName=dapr.io	+kubebuilder:object:generate=true +groupName=dapr.io
configuration
configuration/v1alpha1 +kubebuilder:object:generate=true +groupName=dapr.io	+kubebuilder:object:generate=true +groupName=dapr.io
resiliency
resiliency/v1alpha1 +kubebuilder:object:generate=true +groupName=dapr.io	+kubebuilder:object:generate=true +groupName=dapr.io
subscriptions
subscriptions/v1alpha1 +kubebuilder:object:generate=true +groupName=dapr.io	+kubebuilder:object:generate=true +groupName=dapr.io
subscriptions/v2alpha1 +kubebuilder:object:generate=true +groupName=dapr.io	+kubebuilder:object:generate=true +groupName=dapr.io
apphealth
buildinfo
channel
grpc
http
testing
client
clientset/versioned This package has the automatically generated clientset.	This package has the automatically generated clientset.
clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
clientset/versioned/typed/components/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/components/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/configuration/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/configuration/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
informers/externalversions
informers/externalversions/components
informers/externalversions/components/v1alpha1
informers/externalversions/configuration
informers/externalversions/configuration/v1alpha1
informers/externalversions/internalinterfaces
listers/components/v1alpha1
listers/configuration/v1alpha1
components
bindings
configuration
lock
middleware/http
nameresolution
pluggable
pubsub
secretstores
state
workflows
concurrency CODE ATTRIBUTION: https://github.com/korovkin/limiter Modified to accept a parameter to the executed job	CODE ATTRIBUTION: https://github.com/korovkin/limiter Modified to accept a parameter to the executed job
config
env
modes
cors
credentials
diagnostics
utils
encryption
expr
grpc
metadata
proxy
proxy/codec
proxy/testservice
proxy/testserviceV1
health
http
injector
annotations Package annotations contains the list of annotations for Dapr deployments.	Package annotations contains the list of annotations for Dapr deployments.
components
monitoring
sidecar package sidecar contains helpers to build the Container object for Kubernetes to deploy the Dapr sidecar container.	package sidecar contains helpers to build the Container object for Kubernetes to deploy the Dapr sidecar container.
messages
messaging
v1
metrics
middleware
http
modes
operator
api
client
handlers
monitoring
placement
hashing Package placement is an implementation of Consistent Hashing and Consistent Hashing With Bounded Loads.	Package placement is an implementation of Consistent Hashing and Consistent Hashing With Bounded Loads.
monitoring
raft
proto
common/v1
components/v1
internals/v1
operator/v1
placement/v1
runtime/v1
sentry/v1
resiliency
breaker
retry
runtime
pubsub
security
security/consts
wfengine
scopes
sentry
ca
certs
config
consts
csr
identity
identity/kubernetes
identity/selfhosted
kubernetes
monitoring
server
signals
testing Package testing is a generated GoMock package.	Package testing is a generated GoMock package.
grpc
logging
trace
validation

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL