database

Jan 25, 2023

Changes in this version

type JSONRealmStatStatsData

+ UserReportsInvalidNonceByOS CodesInvalidByOSData

type RealmStat

+ UserReportsInvalidNonceByOS pq.Int64Array

+ func (s *RealmStat) BackfillBadNonceByOS()

Sep 13, 2022

Changes in this version

type Database

+ func (db *Database) FindE2ETestRealm() (*Realm, error)

Sep 12, 2022

Changes in this version

type Database

+ func (db *Database) AllRealmCodeStats(ctx context.Context, requiredRealms int) (RealmStats, error)

+ func (db *Database) AllRealmCodeStatsCached(ctx context.Context, cacher cache.Cacher, requiredRealms int) (RealmStats, error)

Aug 5, 2022

Changes in this version

type Database

+ func (db *Database) MaximumUserReportTimeout() (time.Duration, error)

Jul 13, 2022

Changes in this version

type JSONRealmStatStatsData

+ UserReportsInvalidNonce uint

type RealmStat

+ UserReportsInvalidNonce uint

Mar 25, 2022

Changes in this version

type Realm

+ MaintenanceMode bool

Jan 18, 2022

Changes in this version

type Realm

+ ContactEmailAddresses pq.StringArray

+ func (r *Realm) RecentSMSErrorsCount(db *Database, ignored []string) (int64, error)

type SMSConfig

+ TwilioUserReportFromNumber string

+ type SMSProviderOption interface

+ Apply func(smsConfig *SMSConfig, modify *sms.Config)

+ Name func() string

+ type SMSProviderUserReport struct

+ func (s *SMSProviderUserReport) Apply(smsConfig *SMSConfig, modify *sms.Config)

+ func (s *SMSProviderUserReport) Name() string

type VerificationCode

+ func (v *VerificationCode) IsUserReport() bool

Nov 16, 2021

Changes in this version

+ var AnomalyAllowedStdevs = func() float64 { ... }()

+ var ErrMissingActor = errors.New("missing auditable error")

+ func IsNullActor(a Auditable) bool

type Auditable

+ var NullActor Auditable = new(nullActor)

type Database

+ func (db *Database) FindUserReportInTx(tx *gorm.DB, phoneNumber string) (*UserReport, error)

type Realm

+ IsE2E bool

type UserReport

+ func (ur *UserReport) AuditDisplay() string

+ func (ur *UserReport) AuditID() string

type VerificationCode

+ IssuingAppIDPtr *uint

+ IssuingUserIDPtr *uint

+ func (v *VerificationCode) AfterFind(tx *gorm.DB) error

Nov 9, 2021

Changes in this version

type Realm

+ func (r *Realm) DeleteVerificationCode(db *Database, id uint) error

+ func (r *Realm) ExpireCode(db *Database, uuid string, actor Auditable) (*VerificationCode, error)

+ func (r *Realm) FindVerificationCode(db *Database, code string) (*VerificationCode, error)

+ func (r *Realm) ListRecentCodes(db *Database, user *User) ([]*VerificationCode, error)

+ func (r *Realm) SaveVerificationCode(db *Database, vc *VerificationCode) error

type VerificationCode

+ func (v *VerificationCode) AuditDisplay() string

+ func (v *VerificationCode) AuditID() string

Nov 5, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Nov 1, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

type Database

+ func (db *Database) InsertSMSErrorStat(realmID uint, errorCode string) error

+ func (db *Database) PurgeSMSErrorStats(maxAge time.Duration) (int64, error)

type Realm

+ CodesClaimedRatioMean float64

+ CodesClaimedRatioStddev float64

+ LastCodesClaimedRatio float64

+ func (r *Realm) CodesClaimedRatioAnomalous() bool

+ func (r *Realm) SMSErrorStats(db *Database) (SMSErrorStats, error)

+ func (r *Realm) SMSErrorStatsCached(ctx context.Context, db *Database, cacher cache.Cacher) (SMSErrorStats, error)

+ type SMSErrorStat struct

+ Date time.Time

+ ErrorCode string

+ Quantity uint

+ RealmID uint

+ type SMSErrorStats []*SMSErrorStat

+ func (s *SMSErrorStats) UnmarshalJSON(b []byte) error

+ func (s SMSErrorStats) MarshalCSV() ([]byte, error)

+ func (s SMSErrorStats) MarshalJSON() ([]byte, error)

Sep 28, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Sep 13, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Sep 1, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

type Database

+ func (db *Database) PurgeOrphanedMemberships() (int64, error)

Aug 18, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Aug 19, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Aug 18, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Aug 18, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Aug 17, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Aug 16, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

type CompositeDay

+ func (c *CompositeDay) IsEmpty() bool

type RealmStat

+ func (s *RealmStat) IsEmpty() bool

Aug 4, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

+ func IsUniqueViolation(err error, idx string) bool

Aug 2, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Aug 2, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Jul 21, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Jul 19, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Jul 7, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const DefaultENXSMSTextTemplate

type Database

+ func (db *Database) FindMobileApp(id interface{}) (*MobileApp, error)

type MobileApp

+ Realm *Realm

type OSType

+ func (o OSType) IsAndroid() bool

+ func (o OSType) IsIOS() bool

type Realm

+ func (r *Realm) DefaultSMSTextTemplate() string

+ func (r *Realm) DefaultUserReportSMSTextTemplate() string

+ func (r *Realm) ResetSMSTextTemplates()

+ func (r *Realm) SMSTemplateExpansionMax() int

+ func (r *Realm) SMSTemplateMaxLength() int

Jun 21, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

type Database

+ func (db *Database) PurgeAuthorizedAppStats(maxAge time.Duration) (int64, error)

+ func (db *Database) PurgeExternalIssuerStats(maxAge time.Duration) (int64, error)

+ func (db *Database) PurgeRealmStats(maxAge time.Duration) (int64, error)

+ func (db *Database) PurgeUserStats(maxAge time.Duration) (int64, error)

type Realm

+ UserReportLearnMoreURL string

+ UserReportLearnMoreURLPtr *string

Jun 4, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const DefaultLanguage

+ const DefaultSMSRegion

type Database

+ func (db *Database) ListDynamicTranslations() ([]*DynamicTranslation, error)

+ func (db *Database) ListDynamicTranslationsCached(ctx context.Context, cacher cache.Cacher) ([]*DynamicTranslation, error)

+ func (db *Database) SyncRealmTranslations(realmID uint, localizations []*appsync.Localization) (*TranslationSyncResult, error)

+ type DynamicTranslation struct

+ CreatedAt time.Time

+ ID uint

+ Locale string

+ Message string

+ MessageID string

+ RealmID uint

+ UpdatedAt time.Time

+ func (d *DynamicTranslation) Key() string

type MobileApp

+ Headless bool

type Realm

+ AllowUserReportWebView bool

+ DefaultLocale string

+ DefaultLocalePtr *string

+ type TranslationSyncResult struct

+ Added int

+ Deleted int

+ Updated int

May 24, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

type Realm

+ AllowGeneratedSMS bool

+ UserReportWebhookSecret string

+ UserReportWebhookSecretCiphertextCache string

+ UserReportWebhookSecretPlaintextCache string

+ UserReportWebhookSecretPtr *string

+ UserReportWebhookURL string

+ UserReportWebhookURLPtr *string

May 10, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

type Realm

+ AgencyBackgroundColor string

+ AgencyBackgroundColorPtr *string

+ AgencyImage string

+ AgencyImagePtr *string

Apr 26, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const DefaultLongCodeExpirationHours

+ const DefaultLongCodeLength

+ const DefaultMaxShortCodeMinutes

+ const DefaultShortCodeExpirationMinutes

+ const DefaultShortCodeLength

+ const SecretTypeAPIKeyDatabaseHMAC

+ const SecretTypeAPIKeySignatureHMAC

+ const SecretTypeCookieKeys

+ const SecretTypePhoneNumberDatabaseHMAC

+ const SecretTypeVerificationCodeDatabaseHMAC

+ var ErrRequiresPhoneNumber = errors.New("phone number is required for user report requests")

type AuthorizedApp

+ LastUsedAt *time.Time

+ func (a *AuthorizedApp) TouchLastUsedAt(db *Database) error

type Database

+ func (db *Database) ActivateSecrets(typ SecretType, since time.Time) error

+ func (db *Database) DeleteSecret(s *Secret, actor Auditable) error

+ func (db *Database) DeleteUserReport(phoneNumber string) error

+ func (db *Database) E2ERealm() (*Realm, error)

+ func (db *Database) FindSecret(id interface{}) (*Secret, error)

+ func (db *Database) GetAPIKeyDatabaseHMAC() ([][]byte, error)

+ func (db *Database) GetAPIKeySignatureHMAC() ([][]byte, error)

+ func (db *Database) GetCookieHashAndEncryptionKeys(fallback []envconfig.Base64Bytes) ([][]byte, error)

+ func (db *Database) GetPhoneNumberDatabaseHMAC() ([][]byte, error)

+ func (db *Database) GetVerificationCodeDatabaseHMAC() ([][]byte, error)

+ func (db *Database) ListSecrets(scopes ...Scope) ([]*Secret, error)

+ func (db *Database) ListSecretsForType(typ SecretType, scopes ...Scope) ([]*Secret, error)

+ func (db *Database) PurgeSecret(s *Secret, actor Auditable) error

+ func (db *Database) SaveSecret(s *Secret, actor Auditable) error

+ func (db *Database) SetSecretResolver(r *SecretResolver)

type Realm

+ ENXCodeExpirationConfigurable bool

+ ShortCodeMaxMinutes uint

type Scope

+ func InConsumableSecretOrder() Scope

+ func Unscoped() Scope

+ type Secret struct

+ Active bool

+ CreatedAt time.Time

+ DeletedAt *time.Time

+ ID uint

+ Reference string

+ Type SecretType

+ UpdatedAt time.Time

+ func (s *Secret) AuditDisplay() string

+ func (s *Secret) AuditID() string

+ func (s *Secret) BeforeSave(tx *gorm.DB) error

+ type SecretResolver struct

+ func NewSecretResolver() *SecretResolver

+ func (r *SecretResolver) ClearCaches()

+ func (r *SecretResolver) Resolve(ctx context.Context, db *Database, sm secrets.SecretManager, typ SecretType) ([][]byte, error)

+ func (r *SecretResolver) ResolveReferences(db *Database, typ SecretType) ([]string, error)

+ func (r *SecretResolver) ResolveValue(ctx context.Context, sm secrets.SecretManager, ref string) ([]byte, error)

+ type SecretType string

Apr 13, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Apr 12, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

+ type CodesInvalidByOSData struct

+ Android int64

+ IOS int64

+ UnknownOS int64

type IssueTokenRequest

+ OS OSType

type JSONRealmStatStatsData

+ CodesInvalidByOS CodesInvalidByOSData

type OSType

+ func (o OSType) Len() int

type RealmStat

+ CodesInvalidByOS pq.Int64Array

+ func (s *RealmStat) AfterFind(tx *gorm.DB) (err error)

Mar 28, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const NonceLength

+ const UserReportDefaultENXText

+ const UserReportDefaultText

+ const UserReportTemplateLabel

+ var ErrAlreadyReported = errors.New("phone number not eligible for user report, try again later")

+ var ErrWrongGeneration = errors.New("wrong generation")

type Config

+ PhoneNumberHMAC []envconfig.Base64Bytes

type Database

+ func (db *Database) FindUserReport(tx *gorm.DB, phoneNumber string) (*UserReport, error)

+ func (db *Database) GeneratePhoneNumberHMAC(phoneNumber string) (string, error)

+ func (db *Database) NewUserReport(phone string, nonce []byte, nonceRequired bool) (*UserReport, error)

+ func (db *Database) PurgeClaimedUserReports(maxAge time.Duration) (int64, error)

+ func (db *Database) PurgeUnclaimedUserReports(maxAge time.Duration) (int64, error)

+ type IssueTokenRequest struct

+ AcceptTypes api.AcceptTypes

+ AuthApp *AuthorizedApp

+ ExpireAfter time.Duration

+ Nonce []byte

+ Time time.Time

+ VerCode string

type JSONRealmStatStatsData

+ UserReportTokensClaimed uint

+ UserReportsClaimed uint

+ UserReportsIssued uint

+ type LockStatus struct

+ Generation uint

+ NotBefore time.Time

+ Type string

type Realm

+ AllowAdminUserReport bool

+ func (r *Realm) AddUserReportToAllowedTestTypes()

+ func (r *Realm) AllowsUserReport() bool

type RealmStat

+ UserReportTokensClaimed uint

+ UserReportsClaimed uint

+ UserReportsIssued uint

type TestType

+ const TestTypeUserReport

+ type UserReport struct

+ CodeClaimed bool

+ CreatedAt time.Time

+ ID uint

+ Nonce string

+ NonceRequired bool

+ PhoneHash string

+ UpdatedAt time.Time

+ func (ur *UserReport) BeforeSave(tx *gorm.DB) error

type VerificationCode

+ Nonce []byte

+ NonceRequired bool

+ PhoneNumber string

+ UserReportID *uint

Mar 15, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Changes in this version

+ type CompositeDay struct

+ Day time.Time

+ KeyServerStats *keyserver.StatsDay

+ RealmStats *RealmStat

+ type CompositeStats []*CompositeDay

+ func (c *CompositeStats) UnmarshalJSON(b []byte) error

+ func (c CompositeStats) MarshalCSV() ([]byte, error)

+ func (c CompositeStats) MarshalJSON() ([]byte, error)

type Database

+ func (db *Database) HasRealmChaffEventsMap() (map[uint]bool, error)

+ func (db *Database) PurgeRealmChaffEvents(maxAge time.Duration) (int64, error)

type Realm

+ func (r *Realm) ListChaffEvents(db *Database) ([]*RealmChaffEvent, error)

+ func (r *Realm) RecordChaffEvent(db *Database, t time.Time) error

+ type RealmChaffEvent struct

+ Date time.Time

+ Present bool

+ RealmID uint

Mar 15, 2021 GO-2022-0270

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Mar 1, 2021 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

type Database

+ func (db *Database) GetKeyServerStatsCached(ctx context.Context, realmID uint, cacher cache.Cacher) (*KeyServerStats, error)

+ type GormZapLogger struct

+ func NewGormZapLogger(logger *zap.SugaredLogger) (*GormZapLogger, error)

+ func (l *GormZapLogger) Print(v ...interface{})

+ type JSONRealmStatStatsData struct

+ CodeClaimDistribution []int32

+ CodeClaimMeanAge uint

+ CodesClaimed uint

+ CodesInvalid uint

+ CodesIssued uint

+ TokensClaimed uint

+ TokensInvalid uint

type KeyServerStatsDay

+ func (kssd *KeyServerStatsDay) TotalPublishRequests() int64

type RealmStat

+ func (s *RealmStat) CodeClaimAgeDistributionAsStrings() []string

+ type UtilOption func(*Database, *Config) (*Database, *Config)

+ func WithKeyManager(mcfg *keys.Config, manager keys.KeyManager) UtilOption

+ func WithSecretManager(mcfg *secrets.Config, manager secrets.SecretManager) UtilOption

+ func WithSigningKeyManager(mcfg *keys.Config, manager keys.SigningKeyManager) UtilOption

Feb 15, 2021 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Feb 15, 2021 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Feb 15, 2021 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ var ENXRedirectDomain = os.Getenv("ENX_REDIRECT_DOMAIN")

Feb 2, 2021 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Feb 2, 2021 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Feb 1, 2021 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

type AuthorizedApp

+ func (a *AuthorizedApp) StatsCached(ctx context.Context, db *Database, cacher cache.Cacher) (AuthorizedAppStats, error)

type AuthorizedAppStat

+ AuthorizedAppType string

type Config

+ KeyRing string

+ MaxKeyVersions int64

type Database

+ func (db *Database) FindSMSSigningKey(id interface{}) (*SMSSigningKey, error)

+ func (db *Database) ListKeyServerStats() ([]*KeyServerStats, error)

+ func (db *Database) ListKeyServerStatsDaysCached(ctx context.Context, realmID uint, cacher cache.Cacher) ([]*KeyServerStatsDay, error)

+ func (db *Database) MaxKeyVersions() int64

+ func (db *Database) PurgeSMSSigningKeys(maxAge time.Duration) (int64, error)

+ func (db *Database) UpdateStats(ctx context.Context, codes ...*VerificationCode)

type KeyServerStatsDay

+ func MakeKeyServerStatsDay(realmID uint, d *keyserver.StatsDay) *KeyServerStatsDay

+ func (kssd *KeyServerStatsDay) ToResponse() *keyserver.StatsDay

+ type ManagedKey interface

+ GetKID func() string

+ IsActive func() bool

+ ManagedKeyID func() string

+ Purpose func() string

+ SetActive func(active bool)

+ SetManagedKeyID func(keyID string)

+ Table func() string

type OSType

+ const OSTypeUnknown

type Realm

+ UseAuthenticatedSMS bool

+ func (r *Realm) CreateSMSSigningKeyVersion(ctx context.Context, db *Database, actor Auditable) (string, error)

+ func (r *Realm) CurrentSMSSigningKey(db *Database) (*SMSSigningKey, error)

+ func (r *Realm) CurrentSigningKey(db *Database) (*SigningKey, error)

+ func (r *Realm) DestroySMSSigningKeyVersion(ctx context.Context, db *Database, id interface{}, actor Auditable) error

+ func (r *Realm) ListSMSSigningKeys(db *Database) ([]*SMSSigningKey, error)

+ func (r *Realm) SetActiveSMSSigningKey(db *Database, id uint, actor Auditable) (string, error)

+ type RealmManagedKey interface

+ SetRealmID func(id uint)

type RealmStat

+ CodeClaimAgeDistribution pq.Int32Array

+ CodeClaimMeanAge DurationSeconds

+ type SMSSigningKey struct

+ Active bool

+ KeyID string

+ RealmID uint

+ func (s *SMSSigningKey) AuditDisplay() string

+ func (s *SMSSigningKey) AuditID() string

+ func (s *SMSSigningKey) GetKID() string

+ func (s *SMSSigningKey) IsActive() bool

+ func (s *SMSSigningKey) ManagedKeyID() string

+ func (s *SMSSigningKey) Purpose() string

+ func (s *SMSSigningKey) SetActive(active bool)

+ func (s *SMSSigningKey) SetManagedKeyID(keyID string)

+ func (s *SMSSigningKey) SetRealmID(id uint)

+ func (s *SMSSigningKey) Table() string

type Scope

+ func WithAuthorizedAppType(typ APIKeyType) Scope

type SigningKey

+ func (s *SigningKey) AuditDisplay() string

+ func (s *SigningKey) AuditID() string

+ func (s *SigningKey) IsActive() bool

+ func (s *SigningKey) ManagedKeyID() string

+ func (s *SigningKey) Purpose() string

+ func (s *SigningKey) SetActive(active bool)

+ func (s *SigningKey) SetManagedKeyID(keyID string)

+ func (s *SigningKey) SetRealmID(id uint)

+ func (s *SigningKey) Table() string

Jan 17, 2021 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

type Database

+ func (db *Database) ActivateTokenSigningKey(id interface{}, actor Auditable) error

+ func (db *Database) ActiveTokenSigningKey() (*TokenSigningKey, error)

+ func (db *Database) ActiveTokenSigningKeyCached(ctx context.Context, cacher cache.Cacher) (*TokenSigningKey, error)

+ func (db *Database) ClaimLock(current *CleanupStatus, lockTime time.Duration) (*CleanupStatus, error)

+ func (db *Database) CreateLock(cType string) (*CleanupStatus, error)

+ func (db *Database) DeleteKeyServerStats(realmID uint) error

+ func (db *Database) DeleteOldKeyServerStatsDays(maxAge time.Duration) (int64, error)

+ func (db *Database) FindLockStatus(cType string) (*CleanupStatus, error)

+ func (db *Database) FindRealmByRegionOrID(val string) (*Realm, error)

+ func (db *Database) FindTokenSigningKey(id interface{}) (*TokenSigningKey, error)

+ func (db *Database) FindTokenSigningKeyByUUID(uuidStr string) (*TokenSigningKey, error)

+ func (db *Database) FindTokenSigningKeyByUUIDCached(ctx context.Context, cacher cache.Cacher, uuidStr string) (*TokenSigningKey, error)

+ func (db *Database) GetKeyServerStats(realmID uint) (*KeyServerStats, error)

+ func (db *Database) ListKeyServerStatsDays(realmID uint, day time.Time) ([]*KeyServerStatsDay, error)

+ func (db *Database) ListTokenSigningKeys() ([]*TokenSigningKey, error)

+ func (db *Database) PurgeSigningKeys(maxAge time.Duration) (int64, error)

+ func (db *Database) PurgeTokenSigningKeys(ctx context.Context, kms keys.KeyVersionDestroyer, maxAge time.Duration) (int64, error)

+ func (db *Database) RotateTokenSigningKey(ctx context.Context, kms keys.SigningKeyManager, parent string, ...) (*TokenSigningKey, error)

+ func (db *Database) SaveKeyServerStats(stats *KeyServerStats) error

+ func (db *Database) SaveKeyServerStatsDay(day *KeyServerStatsDay) error

+ func (db *Database) SaveTokenSigningKey(key *TokenSigningKey, actor Auditable) error

+ func (db *Database) TryLock(ctx context.Context, lockName string, lockDuration time.Duration) (bool, error)

+ type KeyServerStats struct

+ KeyServerAudienceOverride string

+ KeyServerURLOverride string

+ RealmID uint

+ func (kss *KeyServerStats) BeforeSave(tx *gorm.DB) error

+ type KeyServerStatsDay struct

+ Day time.Time

+ OnsetToUploadDistribution pq.Int64Array

+ PublishRequests pq.Int64Array

+ RealmID uint

+ RequestsMissingOnsetDate int64

+ RevisionRequests int64

+ TEKAgeDistribution pq.Int64Array

+ TotalTEKsPublished int64

+ func (kssd *KeyServerStatsDay) BeforeSave(tx *gorm.DB) error

type Realm

+ AutoRotateCertificateKey bool

type Scope

+ func WithRealmAutoKeyRotationEnabled(b bool) Scope

+ type TokenSigningKey struct

+ CreatedAt time.Time

+ ID uint64

+ IsActive bool

+ KeyVersionID string

+ UUID string

+ UpdatedAt time.Time

+ func (k *TokenSigningKey) AuditDisplay() string

+ func (k *TokenSigningKey) AuditID() string

Jan 9, 2021 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Jan 8, 2021 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ type BulkPermission struct

+ Action BulkPermissionAction

+ Permissions rbac.Permission

+ RealmID uint

+ UserIDs []uint

+ func (b *BulkPermission) Apply(db *Database, actor Auditable) error

+ type BulkPermissionAction uint8

+ const BulkPermissionActionAdd

+ const BulkPermissionActionRemove

type Scope

+ func WithPermissionSearch(p rbac.Permission) Scope

+ func WithoutPermissionSearch(p rbac.Permission) Scope

Jan 6, 2021 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const DefaultSMSTextTemplate

+ const DefaultTemplateLabel

+ const VerCodesCodeUniqueIndex

+ const VerCodesLongCodeUniqueIndex

+ var ErrValidationFailed = errors.New("validation failed")

+ func IsValidationError(err error) bool

type APIKeyType

+ const APIKeyTypeStats

type AuditEntry

+ func (a *AuditEntry) BeforeSave(tx *gorm.DB) error

type AuthorizedApp

+ func (a *AuthorizedApp) IsStatsType() bool

type AuthorizedAppStat

+ CodesClaimed uint

+ CodesInvalid uint

+ TokensClaimed uint

+ TokensInvalid uint

type CodeType

+ const CodeTypeLong

+ const CodeTypeShort

type Database

+ func (db *Database) CreateOrUpdateSMSFromNumbers(numbers []*SMSFromNumber) error

+ func (db *Database) FindSMSFromNumber(id interface{}) (*SMSFromNumber, error)

+ func (db *Database) Migrations(ctx context.Context) []*gormigrate.Migration

+ func (db *Database) SMSFromNumbers(scopes ...Scope) ([]*SMSFromNumber, error)

+ func (db *Database) SaveMembership(m *Membership, actor Auditable) error

+ func (db *Database) SetRawDB(tx *gorm.DB)

type Errorable

+ func (e *Errorable) ErrorOrNil() error

+ type Membership struct

+ CreatedAt time.Time

+ DefaultSMSTemplateLabel string

+ Permissions rbac.Permission

+ Realm *Realm

+ RealmID uint

+ UpdatedAt time.Time

+ User *User

+ UserID uint

+ func (m *Membership) AfterFind() error

+ func (m *Membership) Can(p rbac.Permission) bool

+ func (m *Membership) Cannot(p rbac.Permission) bool

type MobileApp

+ DisableRedirect bool

type Realm

+ DailyActiveUsersEnabled bool

+ SMSFromNumberID uint

+ SMSFromNumberIDPtr *uint

+ SMSTextAlternateTemplates postgres.Hstore

+ func (r *Realm) ExternalIssuerStatsCached(ctx context.Context, db *Database, cacher cache.Cacher) (ExternalIssuerStats, error)

+ func (r *Realm) ListMemberships(db *Database, p *pagination.PageParams, scopes ...Scope) ([]*Membership, *pagination.Paginator, error)

+ func (r *Realm) MembershipPermissionMap(db *Database) (map[uint]rbac.Permission, error)

+ func (r *Realm) StatsCached(ctx context.Context, db *Database, cacher cache.Cacher) (RealmStats, error)

+ func (r *Realm) UserStatsCached(ctx context.Context, db *Database, cacher cache.Cacher) (RealmUserStats, error)

type RealmStat

+ CodesInvalid uint

+ TokensClaimed uint

+ TokensInvalid uint

+ type SMSFromNumber struct

+ ID uint

+ Label string

+ Value string

+ func (s *SMSFromNumber) BeforeSave(tx *gorm.DB) error

type User

+ func (u *User) AddToRealm(db *Database, r *Realm, permissions rbac.Permission, actor Auditable) error

+ func (u *User) DeleteFromRealm(db *Database, r *Realm, actor Auditable) error

+ func (u *User) FindMembership(db *Database, realmID interface{}) (*Membership, error)

+ func (u *User) ListMemberships(db *Database) ([]*Membership, error)

+ func (u *User) SelectFirstMembership(db *Database) (*Membership, error)

+ func (u *User) StatsCached(ctx context.Context, db *Database, cacher cache.Cacher, realm *Realm) (UserStats, error)

Dec 18, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Dec 17, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Dec 15, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Dec 10, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Dec 8, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const SMSTemplateExpansionMax

+ const SMSTemplateMaxLength

Dec 8, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ type AuthorizedAppStat struct

+ AuthorizedAppID uint

+ AuthorizedAppName string

+ CodesIssued uint

+ Date time.Time

type AuthorizedAppStats

+ func (s *AuthorizedAppStats) UnmarshalJSON(b []byte) error

+ func (s AuthorizedAppStats) MarshalCSV() ([]byte, error)

+ func (s AuthorizedAppStats) MarshalJSON() ([]byte, error)

type Database

+ func (db *Database) FindAuthorizedApp(id interface{}) (*AuthorizedApp, error)

+ func (db *Database) SaveUserStat(u *UserStat) error

type Realm

+ func (r *Realm) IncrementDailyActiveUsers(db *Database, now time.Time) error

type RealmStat

+ DailyActiveUsers uint

type RealmUserStat

+ Email string

+ type UserStat struct

+ CodesIssued uint

+ Date time.Time

+ RealmID uint

+ UserEmail string

+ UserID uint

+ UserName string

type UserStats

+ func (s *UserStats) UnmarshalJSON(b []byte) error

+ func (s UserStats) MarshalCSV() ([]byte, error)

+ func (s UserStats) MarshalJSON() ([]byte, error)

Nov 30, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ var ApproxTime = cmp.Options

+ var ErrCodeAlreadyClaimed = errors.New("code already claimed")

type Database

+ func (db *Database) ListActiveApps(realmID uint, scopes ...Scope) ([]*MobileApp, error)

+ type ExternalIssuerStat struct

+ CodesIssued uint

+ Date time.Time

+ IssuerID string

+ RealmID uint

+ type ExternalIssuerStats []*ExternalIssuerStat

+ func (s *ExternalIssuerStats) UnmarshalJSON(b []byte) error

+ func (s ExternalIssuerStats) MarshalCSV() ([]byte, error)

+ func (s ExternalIssuerStats) MarshalJSON() ([]byte, error)

type Realm

+ func (r *Realm) ExternalIssuerStats(db *Database, start, stop time.Time) (ExternalIssuerStats, error)

+ func (r *Realm) UserStats(db *Database, start, stop time.Time) (RealmUserStats, error)

+ type RealmStat struct

+ CodesClaimed uint

+ CodesIssued uint

+ Date time.Time

+ RealmID uint

type RealmStats

+ func (s *RealmStats) UnmarshalJSON(b []byte) error

+ func (s RealmStats) MarshalCSV() ([]byte, error)

+ func (s RealmStats) MarshalJSON() ([]byte, error)

+ type RealmUserStat struct

+ CodesIssued uint

+ Date time.Time

+ Name string

+ RealmID uint

+ UserID uint

type RealmUserStats

+ func (s *RealmUserStats) UnmarshalJSON(b []byte) error

+ func (s RealmUserStats) MarshalCSV() ([]byte, error)

+ func (s RealmUserStats) MarshalJSON() ([]byte, error)

type Scope

+ func WithAppOS(os OSType) Scope

+ type TestInstance struct

+ func MustTestInstance() *TestInstance

+ func NewTestInstance() (*TestInstance, error)

+ func (i *TestInstance) Close() (retErr error)

+ func (i *TestInstance) MustClose() error

+ func (i *TestInstance) NewDatabase(tb testing.TB, cacher cache.Cacher) (*Database, *Config)

type VerificationCode

+ IssuingExternalID string

+ func (v *VerificationCode) BeforeSave(scope *gorm.Scope) error

Nov 25, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const VercodeUUIDUniqueIndex

type Auditable

+ var SystemTest Auditable = new(systemTest)

type Database

+ func (db *Database) PurgeUsers(maxAge time.Duration) (int64, error)

+ func (db *Database) SaveAuditEntry(a *AuditEntry) error

+ func (db *Database) UntouchUserRevokeCheck(u *User) error

type Realm

+ AllowBulkUpload bool

type Scope

+ func WithAuditRealmID(id uint) Scope

+ func WithAuditTime(from, to string) Scope

+ func WithoutAuditTest() Scope

Nov 16, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Nov 10, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ func Paginate(query *gorm.DB, result interface{}, page, limit uint64) (*pagination.Paginator, error)

+ func PaginateFn(query *gorm.DB, page, limit uint64, ...) (*pagination.Paginator, error)

+ type CodeType int

+ const InvalidCode

+ const LongCode

+ const ShortCode

type Config

+ MaxCertificateSigningKeyVersions int64

type Database

+ func (db *Database) ListActiveAppsWithRealm(p *pagination.PageParams) ([]*ExtendedMobileApp, *pagination.Paginator, error)

+ func (db *Database) ListAudits(p *pagination.PageParams, scopes ...Scope) ([]*AuditEntry, *pagination.Paginator, error)

+ func (db *Database) ListRealms(p *pagination.PageParams, scopes ...Scope) ([]*Realm, *pagination.Paginator, error)

+ func (db *Database) MaxCertificateSigningKeyVersions() int64

+ func (db *Database) RecycleVerificationCodes(maxAge time.Duration) (int64, error)

+ func (db *Database) SearchActiveAppsWithRealm(p *pagination.PageParams, q string) ([]*ExtendedMobileApp, *pagination.Paginator, error)

+ type ExtendedMobileApp struct

type Realm

+ func (r *Realm) FindVerificationCodeByUUID(db *Database, uuid string) (*VerificationCode, error)

+ func (r *Realm) ListAudits(db *Database, p *pagination.PageParams, scopes ...Scope) ([]*AuditEntry, *pagination.Paginator, error)

+ type Scope = func(db *gorm.DB) *gorm.DB

+ func OnlyRealmAdmins() Scope

+ func OnlySystemAdmins() Scope

+ func WithAuditSearch(from, to string) Scope

+ func WithAuthorizedAppSearch(q string) Scope

+ func WithMobileAppSearch(q string) Scope

+ func WithRealmSearch(q string) Scope

+ func WithUserSearch(q string) Scope

type User

+ SystemAdmin bool

+ func (u *User) IsRealmAdmin() bool

Oct 29, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Oct 29, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const EmailInviteLink

+ const EmailPasswordResetLink

+ const EmailVerifyLink

+ const RealmName

+ var ExtraCutset = fmt.Sprintf("%v", '\uFEFF')

+ var RealmStatsCSVHeader = []string

+ var RealmUserStatsCSVHeader = []string

+ func NewTestDatabaseWithCacher(tb testing.TB, cacher cache.Cacher) (*Database, *Config)

type Database

+ func (db *Database) PurgeAuthorizedApps(maxAge time.Duration) (int64, error)

type Realm

+ func (r *Realm) BuildInviteEmail(inviteLink string) string

+ func (r *Realm) BuildPasswordResetEmail(passwordResetLink string) string

+ func (r *Realm) BuildVerifyEmail(verifyLink string) string

type RealmStats

+ func (r *RealmStats) CSV() []string

type RealmUserStats

+ func (s *RealmUserStats) CSV() []string

Oct 26, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

type Database

+ func (db *Database) SaveEmailConfig(s *EmailConfig) error

+ func (db *Database) SystemEmailConfig() (*EmailConfig, error)

+ type EmailConfig struct

+ IsSystem bool

+ ProviderType email.ProviderType

+ RealmID uint

+ SMTPAccount string

+ SMTPHost string

+ SMTPPassword string

+ SMTPPasswordCiphertextCache string

+ SMTPPasswordPlaintextCache string

+ SMTPPort string

+ func (e *EmailConfig) BeforeSave(tx *gorm.DB) error

+ func (e *EmailConfig) Provider() (email.Provider, error)

type Realm

+ CanUseSystemEmailConfig bool

+ EmailInviteTemplate string

+ EmailPasswordResetTemplate string

+ EmailVerifyTemplate string

+ UseSystemEmailConfig bool

+ func (r *Realm) EmailConfig(db *Database) (*EmailConfig, error)

+ func (r *Realm) EmailProvider(db *Database) (email.Provider, error)

type Subject

+ TestDate *time.Time

type Token

+ TestDate *time.Time

+ func (t *Token) FormatTestDate() string

type VerificationCode

+ TestDate *time.Time

Oct 19, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Oct 16, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ var ErrBadDateRange = errors.New("bad date range")

type Database

+ func (db *Database) SaveUserStats(u *UserStats) error

type Realm

+ func (r *Realm) CodesPerUser(db *Database, start, stop time.Time) ([]*RealmUserStats, error)

+ func (r *Realm) QuotaKey(hmacKey []byte) (string, error)

+ type RealmUserStats struct

+ CodesIssued uint

+ Date time.Time

+ Name string

+ UserID uint

Oct 13, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

type Database

+ func (db *Database) FindRealmByRegion(region string) (*Realm, error)

+ func (db *Database) ListRecentCodes(realm *Realm, user *User) ([]*VerificationCode, error)

Oct 6, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Oct 3, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ var MetricPrefix = observability.MetricRoot + "/database"

+ type APIKeyType int

+ const APIKeyTypeAdmin

+ const APIKeyTypeDevice

+ const APIKeyTypeInvalid

+ func (a APIKeyType) Display() string

+ type AuditEntry struct

+ Action string

+ ActorDisplay string

+ ActorID string

+ CreatedAt time.Time

+ Diff string

+ ID uint

+ RealmID uint

+ TargetDisplay string

+ TargetID string

+ func BuildAuditEntry(actor Auditable, action string, target Auditable, realmID uint) *AuditEntry

+ type Auditable interface

+ AuditDisplay func() string

+ AuditID func() string

+ var System Auditable = new(system)

type AuthorizedApp

+ func (a *AuthorizedApp) AuditDisplay() string

+ func (a *AuthorizedApp) AuditID() string

type Database

+ func (db *Database) PurgeAuditEntries(maxAge time.Duration) (int64, error)

type DurationSeconds

+ func (d *DurationSeconds) Days() int64

+ type Metrics struct

+ AuditEntryCreated *stats.Int64Measure

type MobileApp

+ URL string

+ URLPtr *string

+ func (a *MobileApp) AfterFind(tx *gorm.DB) error

+ func (a *MobileApp) AuditDisplay() string

+ func (a *MobileApp) AuditID() string

type OSType

+ func (o OSType) Display() string

type Realm

+ MFARequiredGracePeriod DurationSeconds

+ func (r *Realm) AuditDisplay() string

+ func (r *Realm) AuditID() string

+ func (r *Realm) Audits(db *Database) ([]*AuditEntry, error)

+ func (r *Realm) EffectiveMFAMode(user *User) AuthRequirement

type TestType

+ func (t TestType) Display() string

type User

+ func (u *User) AuditDisplay() string

+ func (u *User) AuditID() string

Sep 29, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ var Countries = map[string]string

+ func ToCIDRList(s string) ([]string, error)

type Database

+ func (db *Database) ListActiveAppsByOS(os OSType) ([]*MobileApp, error)

+ func (db *Database) PurgeMobileApps(maxAge time.Duration) (int64, error)

+ func (db *Database) SaveMobileApp(r *MobileApp) error

+ func (db *Database) SystemSMSConfig() (*SMSConfig, error)

+ type MobileApp struct

+ AppID string

+ Name string

+ OS OSType

+ RealmID uint

+ SHA string

+ func (a *MobileApp) BeforeSave(tx *gorm.DB) error

+ func (a *MobileApp) Disable(db *Database) error

+ func (a *MobileApp) Enable(db *Database) error

+ type OSType int

+ const OSTypeAndroid

+ const OSTypeIOS

+ const OSTypeInvalid

type Realm

+ AllowedCIDRsAPIServer pq.StringArray

+ AllowedCIDRsAdminAPI pq.StringArray

+ AllowedCIDRsServer pq.StringArray

+ CanUseSystemSMSConfig bool

+ SMSCountry string

+ SMSCountryPtr *string

+ UseSystemSMSConfig bool

+ func (r *Realm) CreateMobileApp(db *Database, app *MobileApp) error

+ func (r *Realm) FindMobileApp(db *Database, id interface{}) (*MobileApp, error)

+ func (r *Realm) ListMobileApps(db *Database) ([]*MobileApp, error)

type SMSConfig

+ IsSystem bool

type User

+ func (u *User) AfterFind(tx *gorm.DB) error

+ func (u *User) PasswordChanged() time.Time

Sep 22, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ type AuthRequirement int16

+ func (mode *AuthRequirement) String() string

type Database

+ func (db *Database) AbusePreventionEnabledRealmIDs() ([]uint64, error)

+ func (db *Database) ClaimModelerStatus() error

+ func (db *Database) ListSystemAdmins() ([]*User, error)

+ func (db *Database) PasswordChanged(email string, t time.Time) error

+ func (db *Database) RawDB() *gorm.DB

+ type ModelerStatus struct

+ ID uint

+ NotBefore time.Time

type Realm

+ AbusePreventionEnabled bool

+ AbusePreventionLimit uint

+ AbusePreventionLimitFactor float32

+ EmailVerifiedMode AuthRequirement

+ PasswordRotationPeriodDays uint

+ PasswordRotationWarningDays uint

+ RegionCodePtr *string

+ WelcomeMessage string

+ WelcomeMessagePtr *string

+ func (r *Realm) AbusePreventionEffectiveLimit() uint

+ func (r *Realm) AfterFind(tx *gorm.DB) error

+ func (r *Realm) HistoricalCodesIssued(db *Database, limit uint64) ([]uint64, error)

+ func (r *Realm) RenderWelcomeMessage() string

type User

+ LastPasswordChange time.Time

+ func (u *User) CreateFirebaseUser(ctx context.Context, fbAuth *auth.Client) (bool, error)

+ func (u *User) PasswordAgeString() string

Sep 15, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const MFAOptional

+ const MFAOptionalPrompt

+ const MFARequired

+ const MaxPageSize

+ type MFAMode int16

type Realm

+ MFAMode MFAMode

+ RequireDate bool

+ func (r *Realm) CountUsers(db *Database) (int, error)

+ func (r *Realm) MFAModeString() string

+ func (r *Realm) Stats(db *Database, start, stop time.Time) ([]*RealmStats, error)

+ type RealmStats struct

+ CodesClaimed uint

+ CodesIssued uint

+ Date time.Time

+ RealmID uint

+ func (RealmStats) TableName() string

Sep 8, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

type Database

+ func (db *Database) GenerateAPIKeyHMAC(apiKey string) (string, error)

+ func (db *Database) GenerateVerificationCodeHMAC(verCode string) (string, error)

type VerificationCode

+ func (v *VerificationCode) HasLongExpiration() bool

Sep 1, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const SMSENExpressLink

type Realm

+ EnableENExpress bool

Aug 27, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

type Config

+ MaxConnectionIdleTime time.Duration

+ MaxConnectionLifetime time.Duration

type Database

+ func (db *Database) ExpireCode(uuid string) (*VerificationCode, error)

type Realm

+ func (r *Realm) CreateSigningKeyVersion(ctx context.Context, db *Database) (string, error)

+ func (r *Realm) DestroySigningKeyVersion(ctx context.Context, db *Database, id interface{}) error

Aug 25, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ var ErrNoSigningKeyManagement = errors.New("no signing key management")

+ var ErrNoSigningKeyManager = errors.New("configured key manager cannot be used to manage per-realm keys")

type AuthorizedApp

+ func (a *AuthorizedApp) Stats(db *Database, start, stop time.Time) ([]*AuthorizedAppStats, error)

type Config

+ CertificateSigningKeyRing string

+ VerificationCodeDatabaseHMAC envconfig.Base64Bytes

type Database

+ func (db *Database) FindRealm(id interface{}) (*Realm, error)

+ func (db *Database) FindRealmByName(name string) (*Realm, error)

+ func (db *Database) IsCodeExpired(v *VerificationCode, code string) (bool, error)

+ func (db *Database) KeyManager() keys.KeyManager

+ func (db *Database) OpenWithCacher(ctx context.Context, cacher cache.Cacher) error

+ func (db *Database) SaveSigningKey(s *SigningKey) error

+ func (db *Database) SupportsPerRealmSigning() bool

+ func (db *Database) TouchUserRevokeCheck(u *User) error

type DurationSeconds

+ AsString string

+ func FromDuration(d time.Duration) DurationSeconds

+ func (d *DurationSeconds) Update() error

type Realm

+ CertificateAudience string

+ CertificateDuration DurationSeconds

+ CertificateIssuer string

+ UseRealmCertificateKey bool

+ func (r *Realm) CanUpgradeToRealmSigningKeys() bool

+ func (r *Realm) CreateNewSigningKeyVersion(ctx context.Context, db *Database) (string, error)

+ func (r *Realm) EnsureSigningKeyExists(ctx context.Context, db *Database, keyRing string) error

+ func (r *Realm) GetCurrentSigningKey(db *Database) (*SigningKey, error)

+ func (r *Realm) ListSigningKeys(db *Database) ([]*SigningKey, error)

+ func (r *Realm) SetActiveSigningKey(db *Database, keyID uint) (string, error)

+ func (r *Realm) SigningKeyID() string

+ type SigningKey struct

+ Active bool

+ KeyID string

+ RealmID uint

+ func (s *SigningKey) Delete(db *Database) error

+ func (s *SigningKey) GetKID() string

type User

+ func (u *User) Stats(db *Database, realmID uint, start, stop time.Time) ([]*UserStats, error)

type VerificationCode

+ func (v *VerificationCode) AfterCreate(scope *gorm.Scope)

Aug 18, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const SMSCode

+ const SMSExpires

+ const SMSLongCode

+ const SMSLongExpires

+ const SMSRegion

+ var ErrUnsupportedTestType = errors.New("verification code has unsupported test type")

type AuthorizedApp

+ func (a *AuthorizedApp) BeforeSave(tx *gorm.DB) error

+ func (a *AuthorizedApp) Disable(db *Database) error

+ func (a *AuthorizedApp) Enable(db *Database) error

type Config

+ func (c *Config) Load(ctx context.Context) (*Database, error)

type Database

+ func (db *Database) FindUserByEmail(email string) (*User, error)

+ func (db *Database) FindVerificationCodeByUUID(uuid string) (*VerificationCode, error)

+ func (db *Database) Open(ctx context.Context) error

+ type DurationSeconds struct

+ Duration time.Duration

+ func (d *DurationSeconds) Scan(src interface{}) error

+ func (d DurationSeconds) Value() (driver.Value, error)

+ type Errorable struct

+ func (e *Errorable) AddError(key, err string)

+ func (e *Errorable) ErrorMessages() []string

+ func (e *Errorable) Errors() map[string][]string

+ func (e *Errorable) ErrorsFor(key string) []string

type Realm

+ AllowedTestTypes TestType

+ CodeDuration DurationSeconds

+ CodeLength uint

+ LongCodeDuration DurationSeconds

+ LongCodeLength uint

+ RegionCode string

+ SMSTextTemplate string

+ func NewRealmWithDefaults(name string) *Realm

+ func (r *Realm) BeforeSave(tx *gorm.DB) error

+ func (r *Realm) BuildSMSText(code, longCode string) string

+ func (r *Realm) CreateAuthorizedApp(db *Database, app *AuthorizedApp) (string, error)

+ func (r *Realm) FindUser(db *Database, id interface{}) (*User, error)

+ func (r *Realm) GetCodeDurationMinutes() int

+ func (r *Realm) GetLongCodeDurationHours() int

+ func (r *Realm) ListAuthorizedApps(db *Database) ([]*AuthorizedApp, error)

+ func (r *Realm) ListUsers(db *Database) ([]*User, error)

+ func (r *Realm) ValidTestType(typ string) bool

type SMSConfig

+ TwilioAuthTokenCiphertextCache string

+ TwilioAuthTokenPlaintextCache string

+ type TestType int16

+ const TestTypeConfirmed

+ const TestTypeLikely

+ const TestTypeNegative

type User

+ func (u *User) AddRealm(realm *Realm)

+ func (u *User) AddRealmAdmin(realm *Realm)

+ func (u *User) BeforeSave(tx *gorm.DB) error

+ func (u *User) RemoveRealm(realm *Realm)

+ func (u *User) RemoveRealmAdmin(realm *Realm)

type VerificationCode

+ LongCode string

+ LongExpiresAt time.Time

+ func (v *VerificationCode) IsCodeExpired(code string) bool

Aug 12, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Aug 11, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Aug 11, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ var ErrVerificationCodeNotFound = errors.New("verification code not found")

+ func IsNotFound(err error) bool

type AuthorizedApp

+ APIKeyPreview string

+ func (a *AuthorizedApp) UsageSummary(db *Database) (*AuthorizedAppStatsSummary, error)

+ type AuthorizedAppStats struct

+ AuthorizedAppID uint

+ CodesIssued uint64

+ Date time.Time

+ RealmID uint

+ func (AuthorizedAppStats) TableName() string

+ type AuthorizedAppStatsSummary struct

+ AuthorizedApp *AuthorizedApp

+ CodesIssued1d uint64

+ CodesIssued30d uint64

+ CodesIssued7d uint64

+ Realm *Realm

type Config

+ APIKeyDatabaseHMAC envconfig.Base64Bytes

+ APIKeySignatureHMAC envconfig.Base64Bytes

+ EncryptionKey string

+ Keys keys.Config

type Database

+ func (db *Database) GenerateAPIKey(realmID uint) (string, error)

+ func (db *Database) GenerateAPIKeySignature(key string) ([]byte, error)

+ func (db *Database) GetAuthorizedAppStats(a *AuthorizedApp, r *Realm, t time.Time) (*AuthorizedAppStats, error)

+ func (db *Database) GetAuthorizedAppStatsSummary(a *AuthorizedApp, r *Realm) (*AuthorizedAppStatsSummary, error)

+ func (db *Database) GetRealms() ([]*Realm, error)

+ func (db *Database) GetUserStats(u *User, r *Realm, t time.Time) (*UserStats, error)

+ func (db *Database) GetUserStatsSummary(u *User, r *Realm) (*UserStatsSummary, error)

+ func (db *Database) Ping(ctx context.Context) error

+ func (db *Database) SaveAuthorizedApp(r *AuthorizedApp) error

+ func (db *Database) UpdateAuthorizedAppStats() error

+ func (db *Database) UpdateUserStats() error

+ func (db *Database) VerifyAPIKeySignature(key string) (string, uint, error)

type Realm

+ func (r *Realm) DisableAuthorizedApp(id uint) error

+ func (r *Realm) EnableAuthorizedApp(id uint) error

+ func (r *Realm) FindAuthorizedApp(authAppID uint) (*AuthorizedApp, error)

+ func (r *Realm) FindAuthorizedAppString(s string) (*AuthorizedApp, error)

+ func (r *Realm) HasSMSConfig() bool

+ func (r *Realm) SMSProvider() (sms.Provider, error)

type SMSConfig

+ Realm Realm

+ func (r *SMSConfig) AfterFind() error

+ func (r *SMSConfig) AfterSave() error

+ func (r *SMSConfig) BeforeSave() error

+ func (r *SMSConfig) SMSProvider() (sms.Provider, error)

+ type UserStats struct

+ CodesIssued uint64

+ Date time.Time

+ RealmID uint

+ UserID uint

+ func (UserStats) TableName() string

+ type UserStatsSummary struct

+ CodesIssued1d uint64

+ CodesIssued30d uint64

+ CodesIssued7d uint64

+ Realm *Realm

+ User *User

type VerificationCode

+ IssuingAppID int

+ IssuingUserID int

+ UUID string

Aug 6, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Aug 5, 2020 GO-2022-0270 +1 more

  GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

  GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

Changes in this version

+ const MinCodeLength

+ var CleanupName = "cleanup"

+ var ErrCleanupWrongGeneration = errors.New("cleanup wrong generation")

+ var ErrCodeAlreadyExpired = errors.New("code already expired")

+ var ErrCodeTooShort = errors.New("verification code must be at least 6 digits")

+ var ErrInvalidTestType = errors.New("invalid test type, must be confirmed, likely, or negative")

+ var ErrNoSMSConfig = errors.New("no sms config for realm")

+ var ErrTestTooOld = errors.New("test date is more than 14 day ago")

+ var ErrTokenExpired = errors.New("verification token expired")

+ var ErrTokenMetadataMismatch = errors.New("verification token test metadata mismatch")

+ var ErrTokenUsed = errors.New("verification token used")

+ var ErrVerificationCodeExpired = errors.New("verification code expired")

+ var ErrVerificationCodeUsed = errors.New("verification code used")

+ var ValidTestTypes = map[string]struct

+ func NewTestDatabaseWithConfig(tb testing.TB) (*Database, *Config)

+ type APIUserType int

+ const APIUserTypeAdmin

+ const APIUserTypeDevice

+ type AuthorizedApp struct

+ APIKey string

+ APIKeyType APIUserType

+ Name string

+ Realm *Realm

+ RealmID uint

+ func (AuthorizedApp) TableName() string

+ func (a *AuthorizedApp) GetRealm(db *Database) (*Realm, error)

+ func (a *AuthorizedApp) IsAdminType() bool

+ func (a *AuthorizedApp) IsDeviceType() bool

+ type CleanupStatus struct

+ Generation uint

+ NotBefore time.Time

+ Type string

+ func (CleanupStatus) TableName() string

+ type Config struct

+ CacheTTL time.Duration

+ ConnectionTimeout uint

+ Debug bool

+ Host string

+ Name string

+ Password string

+ Port string

+ SSLCertPath string

+ SSLKeyPath string

+ SSLMode string

+ SSLRootCertPath string

+ Secrets secrets.Config

+ User string

+ func (c *Config) ConnectionString() string

+ func (c *Config) Open(ctx context.Context) (*Database, error)

+ type Database struct

+ func NewTestDatabase(tb testing.TB) *Database

+ func (db *Database) ClaimCleanup(current *CleanupStatus, lockTime time.Duration) (*CleanupStatus, error)

+ func (db *Database) ClaimToken(realmID uint, tokenID string, subject *Subject) error

+ func (db *Database) Close() error

+ func (db *Database) CreateAuthorizedApp(realmID uint, name string, apiUserType APIUserType) (*AuthorizedApp, error)

+ func (db *Database) CreateCleanup(cType string) (*CleanupStatus, error)

+ func (db *Database) CreateRealm(name string) (*Realm, error)

+ func (db *Database) CreateUser(email string, name string, admin bool) (*User, error)

+ func (db *Database) DeleteSMSConfig(s *SMSConfig) error

+ func (db *Database) DeleteUser(u *User) error

+ func (db *Database) DeleteVerificationCode(code string) error

+ func (db *Database) FindAuthorizedAppByAPIKey(apiKey string) (*AuthorizedApp, error)

+ func (db *Database) FindCleanupStatus(cType string) (*CleanupStatus, error)

+ func (db *Database) FindTokenByID(tokenID string) (*Token, error)

+ func (db *Database) FindUser(email string) (*User, error)

+ func (db *Database) FindVerificationCode(code string) (*VerificationCode, error)

+ func (db *Database) GetRealm(realmID uint) (*Realm, error)

+ func (db *Database) GetRealmByName(name string) (*Realm, error)

+ func (db *Database) GetUser(id uint) (*User, error)

+ func (db *Database) ListAuthorizedApps(includeDeleted bool) ([]*AuthorizedApp, error)

+ func (db *Database) ListUsers(includeDeleted bool) ([]*User, error)

+ func (db *Database) MigrateTo(ctx context.Context, target string, rollback bool) error

+ func (db *Database) PurgeTokens(maxAge time.Duration) (int64, error)

+ func (db *Database) PurgeVerificationCodes(maxAge time.Duration) (int64, error)

+ func (db *Database) RunMigrations(ctx context.Context) error

+ func (db *Database) SaveRealm(r *Realm) error

+ func (db *Database) SaveSMSConfig(s *SMSConfig) error

+ func (db *Database) SaveUser(u *User) error

+ func (db *Database) SaveVerificationCode(vc *VerificationCode, maxAge time.Duration) error

+ func (db *Database) VerifyCodeAndIssueToken(realmID uint, verCode string, expireAfter time.Duration) (*Token, error)

+ type Realm struct

+ AuthorizedApps []*AuthorizedApp

+ Codes []*VerificationCode

+ Name string

+ RealmAdmins []*User

+ RealmUsers []*User

+ SMSConfig *SMSConfig

+ Tokens []*Token

+ func (r *Realm) AddAdminUser(u *User)

+ func (r *Realm) AddAuthorizedApp(a *AuthorizedApp)

+ func (r *Realm) AddUser(u *User)

+ func (r *Realm) DeleteUserFromRealm(db *Database, u *User) error

+ func (r *Realm) GetAuthorizedApps(db *Database, includeDeleted bool) ([]*AuthorizedApp, error)

+ func (r *Realm) GetSMSConfig(ctx context.Context, db *Database) (*SMSConfig, error)

+ func (r *Realm) GetSMSProvider(ctx context.Context, db *Database) (sms.Provider, error)

+ func (r *Realm) LoadRealmUsers(db *Database, includeDeleted bool) error

+ type SMSConfig struct

+ ProviderType sms.ProviderType

+ RealmID uint

+ TwilioAccountSid string

+ TwilioAuthToken string

+ TwilioFromNumber string

+ func (smsConfig *SMSConfig) GetSMSProvider(ctx context.Context, db *Database) (sms.Provider, error)

+ type Subject struct

+ SymptomDate *time.Time

+ TestType string

+ func ParseSubject(sub string) (*Subject, error)

+ func (s *Subject) String() string

+ func (s *Subject) SymptomInterval() uint32

+ type Token struct

+ ExpiresAt time.Time

+ RealmID uint

+ SymptomDate *time.Time

+ TestType string

+ TokenID string

+ Used bool

+ func (t *Token) FormatSymptomDate() string

+ func (t *Token) Subject() *Subject

+ type User struct

+ Admin bool

+ AdminRealms []*Realm

+ Email string

+ LastRevokeCheck time.Time

+ Name string

+ Realms []*Realm

+ func (u *User) CanAdminRealm(realmID uint) bool

+ func (u *User) CanViewRealm(realmID uint) bool

+ func (u *User) GetRealm(realmID uint) *Realm

+ func (u *User) MultipleRealms() bool

+ type VerificationCode struct

+ Claimed bool

+ Code string

+ ExpiresAt time.Time

+ IssuingApp *AuthorizedApp

+ IssuingUser *User

+ RealmID uint

+ SymptomDate *time.Time

+ TestType string

+ func (VerificationCode) TableName() string

+ func (v *VerificationCode) FormatSymptomDate() string

+ func (v *VerificationCode) IsExpired() bool

+ func (v *VerificationCode) Validate(maxAge time.Duration) error