Affected by GO-2022-0933 and 3 other vulnerabilities

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

authclient

package

v0.14.2 Latest Latest Go to latest Published: May 17, 2021 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Package authclient contains a CLI authentication client for Pomerium.

This section is empty.

This section is empty.

This section is empty.

type AuthClient struct {
	// contains filtered or unexported fields
}

An AuthClient retrieves an authentication JWT via the Pomerium login API.

func New(options ...Option) *AuthClient

New creates a new AuthClient.

func (client *AuthClient) GetJWT(ctx context.Context, serverURL *url.URL) (rawJWT string, err error)

GetJWT retrieves a JWT from Pomerium.

type Option func(*config)

An Option modifies the config.

func WithTLSConfig(tlsConfig *tls.Config) Option

WithTLSConfig returns an option to configure the tls config.