Affected by GO-2022-0933 and 3 other vulnerabilities

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

azure

package

v0.14.2 Latest Latest Go to latest Published: May 17, 2021 License: Apache-2.0 Imports: 10 Imported by: 0

Details

Package azure implements OpenID Connect for Microsoft Azure

View Source

const Name = "azure"

Name identifies the Azure identity provider

This section is empty.

This section is empty.

type Provider struct {
	*pom_oidc.Provider
}

Provider is an Azure implementation of the Authenticator interface.

func New(ctx context.Context, o *oauth.Options) (*Provider, error)

New instantiates an OpenID Connect (OIDC) provider for Azure.

func (p *Provider) Name() string

Name returns the provider name.