Affected by GO-2022-0615 and 5 other vulnerabilities

GO-2022-0615: Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

go-sso/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hashicorp/consul

Links

Open Source Insights

README ¶

go-sso

This is a Go library that is being incubated in Consul to assist in doing opinionated OIDC-based single sign on.

The go.mod.sample and go.sum.sample files are what the overall real go.mod and go.sum files should end up being when extracted from the Consul codebase.

Directories ¶

Path	Synopsis
oidcauth package oidcauth bundles up an opinionated approach to authentication using both the OIDC authorization code workflow and simple JWT decoding (via static keys, JWKS, and OIDC discovery).	package oidcauth bundles up an opinionated approach to authentication using both the OIDC authorization code workflow and simple JWT decoding (via static keys, JWKS, and OIDC discovery).
internal/strutil
oidcauthtest package oidcauthtest exposes tools to assist in writing unit tests of OIDC and JWT authentication workflows.	package oidcauthtest exposes tools to assist in writing unit tests of OIDC and JWT authentication workflows.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL