GO-2022-0491: Configuration API in EdgeXFoundry 2.1.0 and earlier exposes message bus credentials to local unauthenticated users in github.com/edgexfoundry/app-functions-sdk-go

The highest tagged major version is v4.

internal

package

v1.3.1-dev.4 Latest Latest Go to latest Published: Dec 7, 2020 License: Apache-2.0 Imports: 2 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/edgexfoundry/app-functions-sdk-go

Documentation ¶

Constants ¶

View Source

const (
	ConfigRegistryStem   = "edgex/appservices/1.0/"
	DatabaseName         = "application-service"
	CorrelationHeaderKey = "X-Correlation-ID"

	ApiTriggerRoute   = clients.ApiBase + "/trigger"
	ApiV2TriggerRoute = v2.ApiBase + "/trigger"
	ApiSecretsRoute   = clients.ApiBase + "/secrets"
	ApiV2SecretsRoute = v2.ApiBase + "/secrets"
)

Variables ¶

View Source

var ApplicationVersion string = "0.0.0"

ApplicationVersion indicates the version of the application itself, not the SDK - will be overwritten by build

View Source

var SDKVersion string = "0.0.0"

SDKVersion indicates the version of the SDK - will be overwritten by build

Functions ¶

This section is empty.

Types ¶

This section is empty.

Source Files ¶

View all Source files

constants.go

Directories ¶

Path	Synopsis
bootstrap
container
handlers
common
runtime
security
authtokenloader
authtokenloader/mocks
client
fileioperformer
fileioperformer/mocks
mock
store
contracts contracts are implementation agnostic data storage models.	contracts are implementation agnostic data storage models.
db db provides useful constants, identifiers, and simple types that apply to all implementations of the store	db provides useful constants, identifiers, and simple types that apply to all implementations of the store
db/interfaces interfaces establishes the contract required for any implementation of the export store functionality in a database provider.	interfaces establishes the contract required for any implementation of the export store functionality in a database provider.
db/interfaces/mocks
db/redis redis provides the Redis implementation of the StoreClient interface.	redis provides the Redis implementation of the StoreClient interface.
db/redis/models models describes the data types that will be used when storing export data in Redis.	models describes the data types that will be used when storing export data in Redis.
telemetry
trigger
http
messagebus
mqtt
v2
controller/http
dtos/requests
webserver

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL