auth

May 16, 2022 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

May 3, 2022 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Aug 5, 2021

Changes in this version

+ const AnonymousUserId

+ func CalculateAuthorizedCollectionActions(ctx context.Context, authResults VerifyResults, ...) (map[string]*structpb.ListValue, error)

+ func DisabledAuthTestContext(iamRepoFn common.IamRepoFactory, scopeId string, opt ...Option) context.Context

+ func NewVerifierContext(ctx context.Context, iamRepoFn common.IamRepoFactory, ...) context.Context

+ type Option func(*options)

+ func WithAction(action action.Type) Option

+ func WithAnonymousUserNotAllowed(notAllowed bool) Option

+ func WithId(id string) Option

+ func WithKms(kms *kms.Kms) Option

+ func WithPin(pin string) Option

+ func WithRecoveryTokenNotAllowed(notAllowed bool) Option

+ func WithResource(resource *perms.Resource) Option

+ func WithScopeId(id string) Option

+ func WithType(rt resource.Type) Option

+ func WithUserId(id string) Option

+ type RequestInfo struct

+ DisableAuthEntirely bool

+ DisableAuthzFailures bool

+ EncryptedToken string

+ Method string

+ Path string

+ PublicId string

+ Token string

+ TokenFormat TokenFormat

+ type TokenFormat int

+ const AuthTokenTypeBearer

+ const AuthTokenTypeRecoveryKms

+ const AuthTokenTypeSplitCookie

+ const AuthTokenTypeUnknown

+ func GetTokenFromRequest(ctx context.Context, kmsCache *kms.Kms, req *http.Request) (string, string, TokenFormat)

+ type VerifyResults struct

+ AuthTokenId string

+ AuthenticationFinished bool

+ Error error

+ RoundTripValue interface{}

+ Scope *scopes.ScopeInfo

+ UserId string

+ func Verify(ctx context.Context, opt ...Option) (ret VerifyResults)

+ func (r *VerifyResults) FetchActionSetForId(ctx context.Context, id string, availableActions action.ActionSet, ...) action.ActionSet

+ func (r *VerifyResults) FetchActionSetForType(ctx context.Context, typ resource.Type, availableActions action.ActionSet, ...) action.ActionSet

+ func (r *VerifyResults) FetchOutputFields(res perms.Resource, act action.Type) perms.OutputFieldsMap