proxy

Apr 25, 2023

Changes in this version

type Proxy

+ func (d *Proxy) Rewrite(r *httputil.ProxyRequest)

Mar 15, 2023 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jan 17, 2023 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Sep 14, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Aug 31, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Aug 18, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Aug 18, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Aug 18, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Aug 17, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jun 27, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Changes in this version

+ const ContextKeyMatchedRule

+ const ContextKeySession

+ func ConfigureBackendURL(r *http.Request, rl *rule.Rule) error

+ func CopyHeaders(headers http.Header, r *http.Request)

type RequestHandler

+ HandleError func(w http.ResponseWriter, r *http.Request, rl *rule.Rule, handleErr error)

+ InitializeAuthnSession func(r *http.Request, rl *rule.Rule) *authn.AuthenticationSession

Apr 13, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Apr 6, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Feb 24, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Feb 23, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Feb 3, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Feb 3, 2022 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Oct 5, 2021 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Aug 28, 2021 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jul 14, 2021 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jul 14, 2021 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jun 28, 2021 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jun 22, 2021 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jun 22, 2021 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

May 13, 2021 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

May 5, 2021 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Apr 6, 2021 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Mar 16, 2021 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Mar 15, 2021 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Mar 15, 2021 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Mar 17, 2021 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Feb 25, 2021 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Feb 22, 2021 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jan 27, 2021 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Dec 9, 2020 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Dec 10, 2020 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Sep 28, 2020 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jul 29, 2020 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

May 25, 2020 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

May 8, 2020 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

May 7, 2020 GO-2022-0406 +2 more

  GO-2022-0406: Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper

  GO-2022-0920: Incorrect Authorization in ORY Oathkeeper in github.com/ory/oathkeeper

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Apr 3, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Apr 2, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Feb 14, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Feb 14, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Feb 14, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Feb 5, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jan 31, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jan 27, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jan 26, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jan 26, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jan 14, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jan 13, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jan 13, 2020 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Dec 26, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Dec 18, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Dec 16, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Oct 30, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Oct 20, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Oct 20, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Oct 9, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Oct 9, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Sep 23, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Aug 22, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Aug 16, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Aug 9, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Aug 3, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Aug 2, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jul 23, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jul 18, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Jun 28, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

May 28, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

May 19, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

May 4, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Apr 29, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Apr 29, 2019 GO-2023-1747

  GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

Changes in this version

+ var ErrAuthenticatorBypassed = errors.New("Authenticator is disabled")

+ var ErrAuthenticatorNotResponsible = errors.New("Authenticator not responsible")

+ func EnrichRequestedURL(r *http.Request)

+ func NewSimpleResponseWriter() *simpleResponseWriter

+ type AuthenticationSession struct

+ Extra map[string]interface{}

+ Subject string

+ type Authenticator interface

+ Authenticate func(r *http.Request, config json.RawMessage, rl *rule.Rule) (*AuthenticationSession, error)

+ GetID func() string

+ type AuthenticatorAnonymous struct

+ AnonymousIdentifier string

+ func NewAuthenticatorAnonymous(anonymousIdentifier string) *AuthenticatorAnonymous

+ func (a *AuthenticatorAnonymous) Authenticate(r *http.Request, config json.RawMessage, rl *rule.Rule) (*AuthenticationSession, error)

+ func (a *AuthenticatorAnonymous) GetID() string

+ type AuthenticatorBroken struct

+ func NewAuthenticatorBroken() *AuthenticatorBroken

+ func (a *AuthenticatorBroken) Authenticate(r *http.Request, config json.RawMessage, rl *rule.Rule) (*AuthenticationSession, error)

+ func (a *AuthenticatorBroken) GetID() string

+ type AuthenticatorJWT struct

+ func NewAuthenticatorJWT(jwksURL string, scopeStrategy fosite.ScopeStrategy) (*AuthenticatorJWT, error)

+ func (a *AuthenticatorJWT) Authenticate(r *http.Request, config json.RawMessage, rl *rule.Rule) (*AuthenticationSession, error)

+ func (a *AuthenticatorJWT) GetID() string

+ type AuthenticatorNoOp struct

+ func NewAuthenticatorNoOp() *AuthenticatorNoOp

+ func (a *AuthenticatorNoOp) Authenticate(r *http.Request, config json.RawMessage, rl *rule.Rule) (*AuthenticationSession, error)

+ func (a *AuthenticatorNoOp) GetID() string

+ type AuthenticatorOAuth2ClientCredentials struct

+ func NewAuthenticatorOAuth2ClientCredentials(tokenURL string) (*AuthenticatorOAuth2ClientCredentials, error)

+ func (a *AuthenticatorOAuth2ClientCredentials) Authenticate(r *http.Request, config json.RawMessage, rl *rule.Rule) (*AuthenticationSession, error)

+ func (a *AuthenticatorOAuth2ClientCredentials) GetID() string

+ type AuthenticatorOAuth2Configuration struct

+ Scopes []string

+ type AuthenticatorOAuth2Introspection struct

+ func NewAuthenticatorOAuth2Introspection(clientID, clientSecret, tokenURL, introspectionURL string, scopes []string, ...) (*AuthenticatorOAuth2Introspection, error)

+ func (a *AuthenticatorOAuth2Introspection) Authenticate(r *http.Request, config json.RawMessage, rl *rule.Rule) (*AuthenticationSession, error)

+ func (a *AuthenticatorOAuth2Introspection) GetID() string

+ type AuthenticatorOAuth2IntrospectionConfiguration struct

+ Audience []string

+ Issuers []string

+ Scopes []string

+ type AuthenticatorOAuth2JWTConfiguration struct

+ AllowedAlgorithms []string

+ Audience []string

+ Issuers []string

+ Scopes []string

+ type Authorizer interface

+ Authorize func(r *http.Request, session *AuthenticationSession, config json.RawMessage, ...) error

+ GetID func() string

+ type AuthorizerAllow struct

+ func NewAuthorizerAllow() *AuthorizerAllow

+ func (a *AuthorizerAllow) Authorize(r *http.Request, session *AuthenticationSession, config json.RawMessage, ...) error

+ func (a *AuthorizerAllow) GetID() string

+ type AuthorizerDeny struct

+ func NewAuthorizerDeny() *AuthorizerDeny

+ func (a *AuthorizerDeny) Authorize(r *http.Request, session *AuthenticationSession, config json.RawMessage, ...) error

+ func (a *AuthorizerDeny) GetID() string

+ type AuthorizerKetoWarden struct

+ func NewAuthorizerKetoWarden(baseURL *url.URL) *AuthorizerKetoWarden

+ func (a *AuthorizerKetoWarden) Authorize(r *http.Request, session *AuthenticationSession, config json.RawMessage, ...) error

+ func (a *AuthorizerKetoWarden) GetID() string

+ func (a *AuthorizerKetoWarden) ParseSubject(session *AuthenticationSession, templateId, templateString string) (string, error)

+ type AuthorizerKetoWardenConfiguration struct

+ Flavor string

+ RequiredAction string

+ RequiredResource string

+ Subject string

+ type Claims struct

+ Audience []string

+ ExpiresAt int64

+ Id string

+ IssuedAt int64

+ Issuer string

+ NotBefore int64

+ Subject string

+ func (c *Claims) Valid() error

+ type CredentialsCookies struct

+ RulesCache *template.Template

+ func NewCredentialsIssuerCookies() *CredentialsCookies

+ func (a *CredentialsCookies) GetID() string

+ func (a *CredentialsCookies) Issue(r *http.Request, session *AuthenticationSession, config json.RawMessage, ...) (http.Header, error)

+ type CredentialsCookiesConfig struct

+ Cookies map[string]string

+ type CredentialsHeaders struct

+ RulesCache *template.Template

+ func NewCredentialsIssuerHeaders() *CredentialsHeaders

+ func (a *CredentialsHeaders) GetID() string

+ func (a *CredentialsHeaders) Issue(r *http.Request, session *AuthenticationSession, config json.RawMessage, ...) (http.Header, error)

+ type CredentialsHeadersConfig struct

+ Headers map[string]string

+ type CredentialsIDToken struct

+ func NewCredentialsIssuerIDToken(k rsakey.Manager, l logrus.FieldLogger, lifetime time.Duration, issuer string) *CredentialsIDToken

+ func (a *CredentialsIDToken) GetID() string

+ func (a *CredentialsIDToken) Issue(r *http.Request, session *AuthenticationSession, config json.RawMessage, ...) (http.Header, error)

+ type CredentialsIDTokenConfig struct

+ Audience []string

+ type CredentialsIssuer interface

+ GetID func() string

+ Issue func(r *http.Request, session *AuthenticationSession, config json.RawMessage, ...) (http.Header, error)

+ type CredentialsIssuerBroken struct

+ func NewCredentialsIssuerBroken() *CredentialsIssuerBroken

+ func (a *CredentialsIssuerBroken) GetID() string

+ func (a *CredentialsIssuerBroken) Issue(r *http.Request, session *AuthenticationSession, config json.RawMessage, ...) (http.Header, error)

+ type CredentialsIssuerNoOp struct

+ func NewCredentialsIssuerNoOp() *CredentialsIssuerNoOp

+ func (a *CredentialsIssuerNoOp) GetID() string

+ func (a *CredentialsIssuerNoOp) Issue(r *http.Request, session *AuthenticationSession, config json.RawMessage, ...) (http.Header, error)

+ type Proxy struct

+ H herodot.Writer

+ KeyManager rsakey.Manager

+ Logger logrus.FieldLogger

+ Matcher rule.Matcher

+ RequestHandler *RequestHandler

+ func NewProxy(handler *RequestHandler, logger logrus.FieldLogger, matcher rule.Matcher) *Proxy

+ func (d *Proxy) Director(r *http.Request)

+ func (d *Proxy) RoundTrip(r *http.Request) (*http.Response, error)

+ type RequestHandler struct

+ AuthenticationHandlers map[string]Authenticator

+ AuthorizationHandlers map[string]Authorizer

+ CredentialIssuers map[string]CredentialsIssuer

+ Issuer string

+ Logger logrus.FieldLogger

+ func NewRequestHandler(l logrus.FieldLogger, authenticationHandlers []Authenticator, ...) *RequestHandler

+ func (d *RequestHandler) HandleRequest(r *http.Request, rl *rule.Rule) (http.Header, error)