GO-2023-1955: Dapr API token authentication bypass in HTTP endpoints in github.com/dapr/dapr

pkg/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/dapr/dapr

Links

Open Source Insights

Directories ¶

Path	Synopsis
acl
actors
internal
apis
components
components/v1alpha1 +kubebuilder:object:generate=true +groupName=dapr.io	+kubebuilder:object:generate=true +groupName=dapr.io
configuration
configuration/v1alpha1 +kubebuilder:object:generate=true +groupName=dapr.io	+kubebuilder:object:generate=true +groupName=dapr.io
subscriptions
subscriptions/v1alpha1 +kubebuilder:object:generate=true +groupName=dapr.io	+kubebuilder:object:generate=true +groupName=dapr.io
subscriptions/v2alpha1 +kubebuilder:object:generate=true +groupName=dapr.io	+kubebuilder:object:generate=true +groupName=dapr.io
channel
grpc
http
testing
client
clientset/versioned This package has the automatically generated clientset.	This package has the automatically generated clientset.
clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
clientset/versioned/typed/components/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/components/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/configuration/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/configuration/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
informers/externalversions
informers/externalversions/components
informers/externalversions/components/v1alpha1
informers/externalversions/configuration
informers/externalversions/configuration/v1alpha1
informers/externalversions/internalinterfaces
listers/components/v1alpha1
listers/configuration/v1alpha1
components
bindings
configuration
middleware/http
nameresolution
pubsub
secretstores
state
concurrency CODE ATTRIBUTION: https://github.com/korovkin/limiter Modified to accept a parameter to the executed job	CODE ATTRIBUTION: https://github.com/korovkin/limiter Modified to accept a parameter to the executed job
config
env
modes
cors
credentials
diagnostics
utils
encryption
expr
fswatcher
grpc
proxy
proxy/codec
health
http
injector
monitoring
messages
messaging
v1
metrics
middleware
http
modes
operator
api
client
handlers
monitoring
placement
hashing Package placement is an implementation of Consistent Hashing and Consistent Hashing With Bounded Loads.	Package placement is an implementation of Consistent Hashing and Consistent Hashing With Bounded Loads.
monitoring
raft
proto
common/v1
internals/v1
operator/v1
placement/v1
runtime/v1
sentry/v1
retry
runtime
pubsub
security
scopes
sentry
ca
certs
config
csr
identity
identity/kubernetes
identity/selfhosted
kubernetes
monitoring
server
signals
testing
trace
validation
version

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL