Affected by GO-2022-0933
and 3 other vulnerabilities
GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium
GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium
GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium
GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium
package
Version:
v0.15.0
Opens a new window with list of versions in this module.
Published: Aug 5, 2021
License: Apache-2.0
Opens a new window with license information.
Imports: 1
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
Package rules contains useful pre-defined rego AST rules.
GetDirectoryGroup returns the directory group for the given id.
GetDirectoryUser returns the directory user for the given session.
GetGroupIDs returns the group ids for the given session or directory user.
GetSession gets the session for the given id.
GetUser returns the user for the given session.
GetUserEmail gets the user email, either the impersonate email, or the user email.
ObjectGet recursively gets a value from an object.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.