client

Aug 25, 2022

Changes in this version

type Client

+ AuthorizationCodeGrantAccessTokenLifespan x.NullDuration

+ AuthorizationCodeGrantIDTokenLifespan x.NullDuration

+ AuthorizationCodeGrantRefreshTokenLifespan x.NullDuration

+ ClientCredentialsGrantAccessTokenLifespan x.NullDuration

+ ImplicitGrantAccessTokenLifespan x.NullDuration

+ ImplicitGrantIDTokenLifespan x.NullDuration

+ JwtBearerGrantAccessTokenLifespan x.NullDuration

+ PasswordGrantAccessTokenLifespan x.NullDuration

+ PasswordGrantRefreshTokenLifespan x.NullDuration

+ RefreshTokenGrantAccessTokenLifespan x.NullDuration

+ RefreshTokenGrantIDTokenLifespan x.NullDuration

+ RefreshTokenGrantRefreshTokenLifespan x.NullDuration

+ func (c *Client) GetEffectiveLifespan(gt fosite.GrantType, tt fosite.TokenType, fallback time.Duration) time.Duration

type Handler

+ func (h *Handler) UpdateLifespans(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ type UpdateOAuth2ClientLifespans struct

+ AuthorizationCodeGrantAccessTokenLifespan x.NullDuration

+ AuthorizationCodeGrantIDTokenLifespan x.NullDuration

+ AuthorizationCodeGrantRefreshTokenLifespan x.NullDuration

+ ClientCredentialsGrantAccessTokenLifespan x.NullDuration

+ ImplicitGrantAccessTokenLifespan x.NullDuration

+ ImplicitGrantIDTokenLifespan x.NullDuration

+ JwtBearerGrantAccessTokenLifespan x.NullDuration

+ PasswordGrantAccessTokenLifespan x.NullDuration

+ PasswordGrantRefreshTokenLifespan x.NullDuration

+ RefreshTokenGrantAccessTokenLifespan x.NullDuration

+ RefreshTokenGrantIDTokenLifespan x.NullDuration

+ RefreshTokenGrantRefreshTokenLifespan x.NullDuration

Jan 21, 2022

Changes in this version

+ const DynClientsHandlerPath

type Client

+ RegistrationAccessToken string

+ RegistrationAccessTokenSignature string

+ RegistrationClientURI string

type Handler

+ func (h *Handler) CreateClient(r *http.Request, validator func(*Client) error, isDynamic bool) (*Client, error)

+ func (h *Handler) CreateDynamicRegistration(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) DeleteDynamicRegistration(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) GetDynamicRegistration(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) UpdateDynamicRegistration(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) ValidDynamicAuth(r *http.Request, ps httprouter.Params) (fosite.Client, error)

type Registry

+ Config func() *config.Provider

+ OAuth2HMACStrategy func() *foauth2.HMACSHAStrategy

+ OpenIDJWTStrategy func() jwk.JWTStrategy

type Validator

+ func (v *Validator) ValidateDynamicRegistration(c *Client) error

Aug 13, 2021

Changes in this version

+ type Filter struct

+ Limit int

+ Name string

+ Offset int

+ Owner string

May 4, 2021

Changes in this version

type Handler

+ func (h *Handler) Patch(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

Jan 12, 2021

Changes in this version

+ var ErrInvalidClientMetadata = &fosite.RFC6749Error

+ var ErrInvalidRedirectURI = &fosite.RFC6749Error

+ func TestHelperUpdateTwoClients(_ string, m Manager) func(t *testing.T)

type Client

+ OutfacingID string

+ func (c *Client) BeforeSave(_ *pop.Connection) error

+ func (c *Client) GetResponseModes() []fosite.ResponseModeType

Jun 16, 2020

Changes in this version

type Client

+ TokenEndpointAuthSigningAlgorithm string

+ func (Client) TableName() string

Apr 2, 2020

Changes in this version

type Client

+ PK int64

type Storage

+ GetClient func(ctx context.Context, id string) (fosite.Client, error)

Feb 17, 2020 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Feb 16, 2020 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Feb 14, 2020 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 31, 2020 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Changes in this version

+ func TestHelperCreateGetUpdateDeleteClient(k string, m Storage) func(t *testing.T)

Jan 23, 2020 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 15, 2020 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 8, 2020 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 8, 2020 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 8, 2020 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 7, 2020 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 19, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 16, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 2, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Changes in this version

type Client

+ Metadata json.RawMessage

Oct 4, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 29, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 29, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 28, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 26, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 23, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 18, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 4, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Changes in this version

+ func AssetDigest(name string) ([sha256.Size]byte, error)

+ func AssetString(name string) (string, error)

+ func Digests() (map[string][sha256.Size]byte, error)

+ func MustAssetString(name string) string

Jun 24, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 13, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 5, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

May 18, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

May 10, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

May 2, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Apr 29, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 1, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Aug 10, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jul 16, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jul 11, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jul 7, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 13, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 13, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

May 29, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

May 29, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 15, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Apr 8, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Mar 19, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Mar 10, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Mar 3, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Feb 7, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 23, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 23, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 22, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 18, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 8, 2018 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 16, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 13, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 12, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 9, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 9, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 9, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 9, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 8, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 8, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 8, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 8, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Changes in this version

type Handler

+ ResourcePrefix string

+ func (h *Handler) PrefixResource(resource string) string

Nov 27, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 26, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 26, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 6, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 6, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 6, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 6, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 6, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 6, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 6, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 6, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 26, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 25, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 18, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 6, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 5, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 5, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 5, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 5, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 5, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 5, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 23, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 11, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 6, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 26, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jul 6, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 30, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 29, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 17, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 17, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 16, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 15, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 15, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 14, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 14, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 13, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 12, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 7, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 5, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Changes in this version

type HTTPManager

+ FakeTLSTermination bool

Jun 5, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jun 1, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

May 24, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

May 23, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

May 10, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

May 8, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

May 7, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

May 3, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Apr 30, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Apr 28, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Apr 14, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Apr 2, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Mar 24, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Feb 11, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Feb 11, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Feb 11, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Feb 11, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 22, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Jan 2, 2017 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 30, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 30, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 26, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 20, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 6, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 4, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Dec 4, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 28, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Changes in this version

+ type RedisManager struct

+ DB *redis.Client

+ Hasher fosite.Hasher

+ KeyPrefix string

+ func (m *RedisManager) Authenticate(id string, secret []byte) (*Client, error)

+ func (m *RedisManager) CreateClient(c *Client) error

+ func (m *RedisManager) DeleteClient(id string) error

+ func (m *RedisManager) GetClient(id string) (fosite.Client, error)

+ func (m *RedisManager) GetClients() (map[string]Client, error)

+ func (m *RedisManager) GetConcreteClient(id string) (*Client, error)

+ func (m *RedisManager) UpdateClient(c *Client) error

Nov 22, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 17, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Nov 5, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 26, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 25, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Changes in this version

type Client

+ Public bool

type SQLManager

+ Hasher fosite.Hasher

Oct 6, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 4, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Oct 3, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 29, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 29, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 29, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 23, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 22, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 22, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Changes in this version

type HTTPManager

+ func (m *HTTPManager) UpdateClient(c *Client) error

type RethinkManager

+ func (m *RethinkManager) UpdateClient(c *Client) error

Sep 3, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 3, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 3, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 2, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 1, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Sep 1, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Aug 18, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Aug 17, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Aug 17, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Aug 9, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Aug 9, 2016 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Changes in this version

+ const ClientResource

+ const ClientsResource

+ const Scope

type Client

+ ID string

+ Scopes string

+ type HTTPManager struct

+ Client *http.Client

+ Dry bool

+ Endpoint *url.URL

+ func (m *HTTPManager) CreateClient(c *Client) error

+ func (m *HTTPManager) DeleteClient(id string) error

+ func (m *HTTPManager) GetClient(id string) (fosite.Client, error)

+ func (m *HTTPManager) GetClients() (map[string]Client, error)

+ func (m *HTTPManager) GetConcreteClient(id string) (*Client, error)

type Handler

+ H herodot.Herodot

+ Manager Manager

+ W firewall.Firewall

+ func (h *Handler) GetAll(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

type MemoryManager

+ Hasher hash.Hasher

+ type RethinkManager struct

+ Clients map[string]Client

+ Hasher hash.Hasher

+ Session *r.Session

+ Table r.Term

+ func (m *RethinkManager) Authenticate(id string, secret []byte) (*Client, error)

+ func (m *RethinkManager) ColdStart() error

+ func (m *RethinkManager) CreateClient(c *Client) error

+ func (m *RethinkManager) DeleteClient(id string) error

+ func (m *RethinkManager) GetClient(id string) (fosite.Client, error)

+ func (m *RethinkManager) GetClients() (clients map[string]Client, err error)

+ func (m *RethinkManager) GetConcreteClient(id string) (*Client, error)

+ func (m *RethinkManager) Watch(ctx context.Context)

May 8, 2019 GO-2022-0786

  GO-2022-0786: Authentication Bypass in hydra in github.com/ory/hydra

Changes in this version

+ const ClientsHandlerPath

+ var Migrations = map[string]*dbal.PackrMigrationSource

+ func Asset(name string) ([]byte, error)

+ func AssetDir(name string) ([]string, error)

+ func AssetInfo(name string) (os.FileInfo, error)

+ func AssetNames() []string

+ func MustAsset(name string) []byte

+ func RestoreAsset(dir, name string) error

+ func RestoreAssets(dir, name string) error

+ func TestHelperClientAuthenticate(k string, m Manager) func(t *testing.T)

+ func TestHelperClientAutoGenerateKey(k string, m Storage) func(t *testing.T)

+ func TestHelperCreateGetDeleteClient(k string, m Storage) func(t *testing.T)

+ type Client struct

+ AllowedCORSOrigins []string

+ Audience []string

+ BackChannelLogoutSessionRequired bool

+ BackChannelLogoutURI string

+ ClientID string

+ ClientURI string

+ Contacts []string

+ CreatedAt time.Time

+ FrontChannelLogoutSessionRequired bool

+ FrontChannelLogoutURI string

+ GrantTypes []string

+ JSONWebKeys *jose.JSONWebKeySet

+ JSONWebKeysURI string

+ LogoURI string

+ Name string

+ Owner string

+ PolicyURI string

+ PostLogoutRedirectURIs []string

+ RedirectURIs []string

+ RequestObjectSigningAlgorithm string

+ RequestURIs []string

+ ResponseTypes []string

+ Scope string

+ Secret string

+ SecretExpiresAt int

+ SectorIdentifierURI string

+ SubjectType string

+ TermsOfServiceURI string

+ TokenEndpointAuthMethod string

+ UpdatedAt time.Time

+ UserinfoSignedResponseAlg string

+ func (c *Client) GetAudience() fosite.Arguments

+ func (c *Client) GetGrantTypes() fosite.Arguments

+ func (c *Client) GetHashedSecret() []byte

+ func (c *Client) GetID() string

+ func (c *Client) GetJSONWebKeys() *jose.JSONWebKeySet

+ func (c *Client) GetJSONWebKeysURI() string

+ func (c *Client) GetOwner() string

+ func (c *Client) GetRedirectURIs() []string

+ func (c *Client) GetRequestObjectSigningAlgorithm() string

+ func (c *Client) GetRequestURIs() []string

+ func (c *Client) GetResponseTypes() fosite.Arguments

+ func (c *Client) GetScopes() fosite.Arguments

+ func (c *Client) GetTokenEndpointAuthMethod() string

+ func (c *Client) GetTokenEndpointAuthSigningAlgorithm() string

+ func (c *Client) IsPublic() bool

+ type Configuration interface

+ type Handler struct

+ func NewHandler(r InternalRegistry) *Handler

+ func (h *Handler) Create(w http.ResponseWriter, r *http.Request, _ httprouter.Params)

+ func (h *Handler) Delete(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) Get(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) List(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ func (h *Handler) SetRoutes(admin *x.RouterAdmin)

+ func (h *Handler) Update(w http.ResponseWriter, r *http.Request, ps httprouter.Params)

+ type InternalRegistry interface

+ type Manager interface

+ Authenticate func(ctx context.Context, id string, secret []byte) (*Client, error)

+ type MemoryManager struct

+ Clients []Client

+ func NewMemoryManager(r InternalRegistry) *MemoryManager

+ func (m *MemoryManager) Authenticate(ctx context.Context, id string, secret []byte) (*Client, error)

+ func (m *MemoryManager) CountClients(ctx context.Context) (n int, err error)

+ func (m *MemoryManager) CreateClient(ctx context.Context, c *Client) error

+ func (m *MemoryManager) DeleteClient(ctx context.Context, id string) error

+ func (m *MemoryManager) GetClient(ctx context.Context, id string) (fosite.Client, error)

+ func (m *MemoryManager) GetClients(ctx context.Context, limit, offset int) (clients map[string]Client, err error)

+ func (m *MemoryManager) GetConcreteClient(ctx context.Context, id string) (*Client, error)

+ func (m *MemoryManager) UpdateClient(ctx context.Context, c *Client) error

+ type Registry interface

+ ClientHasher func() fosite.Hasher

+ ClientManager func() Manager

+ ClientValidator func() *Validator

+ type SQLManager struct

+ DB *sqlx.DB

+ func NewSQLManager(db *sqlx.DB, r InternalRegistry) *SQLManager

+ func (m *SQLManager) Authenticate(ctx context.Context, id string, secret []byte) (*Client, error)

+ func (m *SQLManager) CountClients(ctx context.Context) (int, error)

+ func (m *SQLManager) CreateClient(ctx context.Context, c *Client) error

+ func (m *SQLManager) CreateSchemas() (int, error)

+ func (m *SQLManager) DeleteClient(ctx context.Context, id string) error

+ func (m *SQLManager) GetClient(ctx context.Context, id string) (fosite.Client, error)

+ func (m *SQLManager) GetClients(ctx context.Context, limit, offset int) (clients map[string]Client, err error)

+ func (m *SQLManager) GetConcreteClient(ctx context.Context, id string) (*Client, error)

+ func (m *SQLManager) PlanMigration() ([]*migrate.PlannedMigration, error)

+ func (m *SQLManager) UpdateClient(ctx context.Context, c *Client) error

+ type Storage interface

+ CountClients func(ctx context.Context) (int, error)

+ CreateClient func(ctx context.Context, c *Client) error

+ DeleteClient func(ctx context.Context, id string) error

+ GetClients func(ctx context.Context, limit, offset int) (map[string]Client, error)

+ GetConcreteClient func(ctx context.Context, id string) (*Client, error)

+ UpdateClient func(ctx context.Context, c *Client) error

+ type Validator struct

+ func NewValidator(conf Configuration) *Validator

+ func NewValidatorWithClient(conf Configuration, client *http.Client) *Validator

+ func (v *Validator) Validate(c *Client) error

+ func (v *Validator) ValidateSectorIdentifierURL(location string, redirectURIs []string) error