Affected by GO-2022-0783 and 5 other vulnerabilities

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

tcptunnel

package

v0.12.0 Latest Latest Go to latest Published: Jan 8, 2021 License: Apache-2.0 Imports: 14 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Package tcptunnel contains an implementation of a TCP tunnel via HTTP Connect.

This section is empty.

This section is empty.

This section is empty.

type Option func(*config)

An Option modifies the config.

func WithDestinationHost(dstHost string) Option

WithDestinationHost returns an option to configure the destination host.

func WithJWTCache(jwtCache cliutil.JWTCache) Option

WithJWTCache returns an option to configure the jwt cache.

func WithProxyHost(proxyHost string) Option

WithProxyHost returns an option to configure the proxy host.

func WithTLSConfig(tlsConfig *tls.Config) Option

WithTLSConfig returns an option to configure the tls config.

type Tunnel struct {
	// contains filtered or unexported fields
}

A Tunnel represents a TCP tunnel over HTTP Connect.

func New(options ...Option) *Tunnel

New creates a new Tunnel.

func (tun *Tunnel) Run(ctx context.Context, local io.ReadWriter) error

Run establishes a TCP tunnel via HTTP Connect and forwards all traffic from/to local.

func (tun *Tunnel) RunListener(ctx context.Context, listenerAddress string) error

RunListener runs a network listener on the given address. For each incoming connection a new TCP tunnel is established via Run.