Affected by GO-2022-1121 and 4 other vulnerabilities

GO-2022-1121: Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul

GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

go-sso/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hashicorp/consul

README ¶

go-sso

This is a Go library that is being incubated in Consul to assist in doing opinionated OIDC-based single sign on.

The go.mod.sample and go.sum.sample files are what the overall real go.mod and go.sum files should end up being when extracted from the Consul codebase.

Directories ¶

Path	Synopsis
oidcauth package oidcauth bundles up an opinionated approach to authentication using both the OIDC authorization code workflow and simple JWT decoding (via static keys, JWKS, and OIDC discovery).	package oidcauth bundles up an opinionated approach to authentication using both the OIDC authorization code workflow and simple JWT decoding (via static keys, JWKS, and OIDC discovery).
internal/strutil
oidcauthtest package oidcauthtest exposes tools to assist in writing unit tests of OIDC and JWT authentication workflows.	package oidcauthtest exposes tools to assist in writing unit tests of OIDC and JWT authentication workflows.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL