iamauth

Jun 21, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 15, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jan 26, 2023 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Dec 13, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Nov 30, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Oct 19, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Sep 20, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Aug 11, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jul 13, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Jun 3, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

May 25, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Apr 19, 2022 GO-2022-1029 +5 more

  GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-2683: Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

Changes in this version

+ func GenerateLoginData(in *LoginInput) (map[string]interface{}, error)

+ type Authenticator struct

+ func NewAuthenticator(config *Config, logger hclog.Logger) (*Authenticator, error)

+ func (a *Authenticator) ValidateLogin(ctx context.Context, loginToken string) (*IdentityDetails, error)

+ type BearerToken struct

+ func NewBearerToken(loginToken string, config *Config) (*BearerToken, error)

+ func (t *BearerToken) GetCallerIdentityRequest() (*http.Request, error)

+ func (t *BearerToken) GetEntityRequest() (*http.Request, error)

+ func (t *BearerToken) UnmarshalJSON(data []byte) error

+ type Config struct

+ AllowedSTSHeaderValues []string

+ BoundIAMPrincipalARNs []string

+ EnableIAMEntityDetails bool

+ GetEntityBodyHeader string

+ GetEntityHeadersHeader string

+ GetEntityMethodHeader string

+ GetEntityURLHeader string

+ IAMEndpoint string

+ IAMEntityTags []string

+ MaxRetries int

+ STSEndpoint string

+ ServerIDHeaderName string

+ ServerIDHeaderValue string

+ func (c *Config) Validate() error

+ type IdentityDetails struct

+ AccountId string

+ EntityId string

+ EntityName string

+ EntityPath string

+ EntityTags map[string]string

+ type LoginInput struct

+ Creds *credentials.Credentials

+ GetEntityBodyHeader string

+ GetEntityHeadersHeader string

+ GetEntityMethodHeader string

+ GetEntityURLHeader string

+ IncludeIAMEntity bool

+ Logger hclog.Logger

+ STSEndpoint string

+ STSRegion string

+ ServerIDHeaderName string

+ ServerIDHeaderValue string

Apr 4, 2022 GO-2023-1827 +3 more

  GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

  GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

  GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

  GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul