GO-2023-1955: Dapr API token authentication bypass in HTTP endpoints in github.com/dapr/dapr
package
Version:
v1.10.0-rc.9
Opens a new window with list of versions in this module.
Published: Feb 15, 2023
License: Apache-2.0
Opens a new window with license information.
Imports: 3
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
CreateSPIFFEID returns a SPIFFE standard unique id for the given trust domain, namespace and appID.
Bundle contains all the elements to identify a workload across a trust domain and a namespace.
NewBundle returns a new identity bundle.
namespace and trustDomain are optional parameters. When empty, a nil value is returned.
type Validator interface {
Validate(id, token, namespace string) error
}
Validator is used to validate the identity of a certificate requester by using an ID and token.
Source Files
¶
Directories
¶
Click to show internal directories.
Click to hide internal directories.