auth

Sep 17, 2023

Changes in this version

type Database

+ UpdateApplicationTokenLastUsed func(token string, t *time.Time) error

+ UpdateClientTokensLastUsed func(tokens []string, t *time.Time) error

Dec 29, 2022 GO-2023-1471

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Dec 28, 2022 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Dec 3, 2022 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Sep 10, 2022 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Sep 10, 2022 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Jul 24, 2022 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Jan 12, 2022 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Dec 4, 2021 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Dec 4, 2021 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Dec 4, 2021 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Sep 27, 2021 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Changes in this version

+ func TryGetUserID(ctx *gin.Context) *uint

type Auth

+ func (a *Auth) Optional() gin.HandlerFunc

Jun 19, 2021 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Apr 16, 2021 GO-2022-1208 +1 more

  GO-2022-1208: gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server

  GO-2023-1471: Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server

Changes in this version

+ func CorsConfig(conf *config.Configuration) cors.Config

+ func GenerateApplicationToken() string

+ func GenerateClientToken() string

+ func GenerateImageName() string

+ func GenerateNotExistingToken(generateToken func() string, tokenExists func(token string) bool) string

+ func GeneratePluginToken() string

+ func GetTokenID(ctx *gin.Context) string

+ func GetUserID(ctx *gin.Context) uint

+ func RegisterAuthentication(ctx *gin.Context, user *model.User, userID uint, tokenID string)

+ type Auth struct

+ DB Database

+ func (a *Auth) RequireAdmin() gin.HandlerFunc

+ func (a *Auth) RequireApplicationToken() gin.HandlerFunc

+ func (a *Auth) RequireClient() gin.HandlerFunc

+ type Database interface

+ GetApplicationByToken func(token string) (*model.Application, error)

+ GetClientByToken func(token string) (*model.Client, error)

+ GetPluginConfByToken func(token string) (*model.PluginConf, error)

+ GetUserByID func(id uint) (*model.User, error)

+ GetUserByName func(name string) (*model.User, error)