Affected by GO-2024-2704 and 3 other vulnerabilities

GO-2024-2704: Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul

GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

resolver

package

v1.16.0 Latest Latest Go to latest Published: Jun 26, 2023 License: MPL-2.0 Imports: 2 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type DANGER_NO_AUTH struct{}

DANGER_NO_AUTH implements an ACL resolver short-circuit authorization in cases where it is handled somewhere else or expressly not required.

func (DANGER_NO_AUTH) ResolveTokenAndDefaultMeta(string, *acl.EnterpriseMeta, *acl.AuthorizerContext) (Result, error)

ResolveTokenAndDefaultMeta returns an authorizer with unfettered permissions.

type Result struct {
	acl.Authorizer
	// TODO: likely we can reduce this interface
	ACLIdentity structs.ACLIdentity
}

func (a Result) AccessorID() string

func (a Result) Identity() structs.ACLIdentity

func (a Result) ToAllowAuthorizer() acl.AllowAuthorizer