Affected by GO-2023-1800
and 2 other vulnerabilities
GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium
GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium
GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium
package
Version:
v0.21.3
Opens a new window with list of versions in this module.
Published: Mar 15, 2023
License: Apache-2.0
Opens a new window with license information.
Imports: 0
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
Package identity is a package to avoid a dependency cycle.
type State interface {
SetRawIDToken(rawIDToken string)
}
State is the state for authentication.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.