GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

strategy

package

v0.7.0-alpha.1.pre.0 Latest Latest Go to latest Published: Jul 13, 2021 License: Apache-2.0 Imports: 5 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/ory/kratos

Documentation ¶

Index ¶

Constants
func IsDisabled(c disabledChecker, strategy string, wrap httprouter.Handle) httprouter.Handle
func IsRecoveryDisabled(c disabledChecker, strategy string, wrap httprouter.Handle) httprouter.Handle
func IsVerificationDisabled(c disabledChecker, strategy string, wrap httprouter.Handle) httprouter.Handle

Constants ¶

View Source

const EndpointDisabledMessage = "This endpoint was disabled by system administrator. Please check your url or contact the system administrator to enable it."

Variables ¶

This section is empty.

Functions ¶

func IsDisabled ¶

func IsDisabled(c disabledChecker, strategy string, wrap httprouter.Handle) httprouter.Handle

func IsRecoveryDisabled ¶

func IsRecoveryDisabled(c disabledChecker, strategy string, wrap httprouter.Handle) httprouter.Handle

func IsVerificationDisabled ¶

func IsVerificationDisabled(c disabledChecker, strategy string, wrap httprouter.Handle) httprouter.Handle

Types ¶

This section is empty.

Source Files ¶

View all Source files

handler.go

Directories ¶

Path	Synopsis
link
test
oidc
password
profile

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL