Affected by GO-2023-1800 and 2 other vulnerabilities

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

policy

package

v0.15.7 Latest Latest Go to latest Published: Nov 15, 2021 License: Apache-2.0 Imports: 5 Imported by: 2

Details

Package policy contains an implementation of the Pomerium Policy Language.

This section is empty.

This section is empty.

func GenerateRegoFromPolicy(p *parser.Policy) (string, error)

GenerateRegoFromPolicy generates a rego script from a Pomerium Policy Language policy.

func GenerateRegoFromReader(r io.Reader) (string, error)

GenerateRegoFromReader generates a rego script from raw Pomerium Policy Language.

type Criterion = generator.Criterion

A Criterion generates rego rules based on data.

type CriterionConstructor = generator.CriterionConstructor

A CriterionConstructor is a function which returns a Criterion for a Generator.

Path	Synopsis
criteria Package criteria contains all the pre-defined criteria as well as a registry to add new criteria.	Package criteria contains all the pre-defined criteria as well as a registry to add new criteria.
generator Package generator converts Pomerium Policy Language into Rego.	Package generator converts Pomerium Policy Language into Rego.
parser Package parser contains a parser for Pomerium Policy Language.	Package parser contains a parser for Pomerium Policy Language.
rules Package rules contains useful pre-defined rego AST rules.	Package rules contains useful pre-defined rego AST rules.