config

Nov 7, 2024

Changes in this version

+ var IssuerFormat_name = map[int32]string

+ var IssuerFormat_value = map[string]int32

+ type IssuerFormat int32

+ const IssuerFormat_IssuerHostOnly

+ const IssuerFormat_IssuerURI

+ func (IssuerFormat) Descriptor() protoreflect.EnumDescriptor

+ func (IssuerFormat) EnumDescriptor() ([]byte, []int)

+ func (IssuerFormat) Type() protoreflect.EnumType

+ func (x IssuerFormat) Enum() *IssuerFormat

+ func (x IssuerFormat) Number() protoreflect.EnumNumber

+ func (x IssuerFormat) String() string

type Route

+ JwtIssuerFormat IssuerFormat

+ func (x *Route) GetJwtIssuerFormat() IssuerFormat

Oct 22, 2024

Changes in this version

+ var SANMatcher_SANType_name = map[int32]string

+ var SANMatcher_SANType_value = map[string]int32

type DownstreamMtlsSettings

+ MatchSubjectAltNames []*SANMatcher

+ MaxVerifyDepth *uint32

+ func (x *DownstreamMtlsSettings) GetMatchSubjectAltNames() []*SANMatcher

+ func (x *DownstreamMtlsSettings) GetMaxVerifyDepth() uint32

+ type PPLPolicy struct

+ Raw []byte

+ func (*PPLPolicy) Descriptor() ([]byte, []int)

+ func (*PPLPolicy) ProtoMessage()

+ func (x *PPLPolicy) GetRaw() []byte

+ func (x *PPLPolicy) ProtoReflect() protoreflect.Message

+ func (x *PPLPolicy) Reset()

+ func (x *PPLPolicy) String() string

type Route

+ KubernetesServiceAccountTokenFile string

+ PplPolicies []*PPLPolicy

+ func (x *Route) GetKubernetesServiceAccountTokenFile() string

+ func (x *Route) GetPplPolicies() []*PPLPolicy

+ type SANMatcher struct

+ Pattern string

+ SanType SANMatcher_SANType

+ func (*SANMatcher) Descriptor() ([]byte, []int)

+ func (*SANMatcher) ProtoMessage()

+ func (x *SANMatcher) GetPattern() string

+ func (x *SANMatcher) GetSanType() SANMatcher_SANType

+ func (x *SANMatcher) ProtoReflect() protoreflect.Message

+ func (x *SANMatcher) Reset()

+ func (x *SANMatcher) String() string

+ type SANMatcher_SANType int32

+ const SANMatcher_DNS

+ const SANMatcher_EMAIL

+ const SANMatcher_IP_ADDRESS

+ const SANMatcher_SAN_TYPE_UNSPECIFIED

+ const SANMatcher_URI

+ const SANMatcher_USER_PRINCIPAL_NAME

+ func (SANMatcher_SANType) Descriptor() protoreflect.EnumDescriptor

+ func (SANMatcher_SANType) EnumDescriptor() ([]byte, []int)

+ func (SANMatcher_SANType) Type() protoreflect.EnumType

+ func (x SANMatcher_SANType) Enum() *SANMatcher_SANType

+ func (x SANMatcher_SANType) Number() protoreflect.EnumNumber

+ func (x SANMatcher_SANType) String() string

Sep 30, 2024

Changes in this version

type Config

+ func (x *Config) GetId() string

Sep 10, 2024 GO-2024-3179

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jun 27, 2024 GO-2024-3179

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 14, 2024 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Route

+ Response *RouteDirectResponse

+ func (x *Route) GetResponse() *RouteDirectResponse

+ type RouteDirectResponse struct

+ Body string

+ Status uint32

+ func (*RouteDirectResponse) Descriptor() ([]byte, []int)

+ func (*RouteDirectResponse) ProtoMessage()

+ func (x *RouteDirectResponse) GetBody() string

+ func (x *RouteDirectResponse) GetStatus() uint32

+ func (x *RouteDirectResponse) ProtoReflect() protoreflect.Message

+ func (x *RouteDirectResponse) Reset()

+ func (x *RouteDirectResponse) String() string

type Settings

+ RuntimeFlags map[string]bool

+ func (x *Settings) GetRuntimeFlags() map[string]bool

Apr 5, 2024 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Mar 13, 2024 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jan 9, 2024 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Settings

+ PassIdentityHeaders *bool

+ func (x *Settings) GetPassIdentityHeaders() bool

Nov 16, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Route

+ RegexPriorityOrder *int64

+ func (x *Route) GetRegexPriorityOrder() int64

type Settings_Certificate

+ Id string

+ func (x *Settings_Certificate) GetId() string

Aug 23, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ var MtlsEnforcementMode_name = map[int32]string

+ var MtlsEnforcementMode_value = map[string]int32

+ type DownstreamMtlsSettings struct

+ Ca *string

+ Crl *string

+ Enforcement *MtlsEnforcementMode

+ func (*DownstreamMtlsSettings) Descriptor() ([]byte, []int)

+ func (*DownstreamMtlsSettings) ProtoMessage()

+ func (x *DownstreamMtlsSettings) GetCa() string

+ func (x *DownstreamMtlsSettings) GetCrl() string

+ func (x *DownstreamMtlsSettings) GetEnforcement() MtlsEnforcementMode

+ func (x *DownstreamMtlsSettings) ProtoReflect() protoreflect.Message

+ func (x *DownstreamMtlsSettings) Reset()

+ func (x *DownstreamMtlsSettings) String() string

+ type MtlsEnforcementMode int32

+ const MtlsEnforcementMode_POLICY

+ const MtlsEnforcementMode_POLICY_WITH_DEFAULT_DENY

+ const MtlsEnforcementMode_REJECT_CONNECTION

+ const MtlsEnforcementMode_UNKNOWN

+ func (MtlsEnforcementMode) Descriptor() protoreflect.EnumDescriptor

+ func (MtlsEnforcementMode) EnumDescriptor() ([]byte, []int)

+ func (MtlsEnforcementMode) Type() protoreflect.EnumType

+ func (x MtlsEnforcementMode) Enum() *MtlsEnforcementMode

+ func (x MtlsEnforcementMode) Number() protoreflect.EnumNumber

+ func (x MtlsEnforcementMode) String() string

type Settings

+ AccessLogFields *Settings_StringList

+ AuthorizeLogFields *Settings_StringList

+ CookieSameSite *string

+ DownstreamMtls *DownstreamMtlsSettings

+ func (x *Settings) GetAccessLogFields() *Settings_StringList

+ func (x *Settings) GetAuthorizeLogFields() *Settings_StringList

+ func (x *Settings) GetCookieSameSite() string

+ func (x *Settings) GetDownstreamMtls() *DownstreamMtlsSettings

+ type Settings_StringList struct

+ Values []string

+ func (*Settings_StringList) Descriptor() ([]byte, []int)

+ func (*Settings_StringList) ProtoMessage()

+ func (x *Settings_StringList) GetValues() []string

+ func (x *Settings_StringList) ProtoReflect() protoreflect.Message

+ func (x *Settings_StringList) Reset()

+ func (x *Settings_StringList) String() string

Aug 18, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 26, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 4, 2023 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 1, 2023 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 26, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Mar 15, 2023 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 23, 2023 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 16, 2023 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 3, 2023 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Route

+ TlsUpstreamAllowRenegotiation bool

+ func (x *Route) GetTlsUpstreamAllowRenegotiation() bool

type Settings

+ DatabrokerStorageConnectionString *string

+ DatabrokerStorageTlsSkipVerify *bool

+ DatabrokerStorageType *string

+ DeriveTls *string

+ EnvoyAdminAccessLogPath *string

+ EnvoyAdminAddress *string

+ EnvoyAdminProfilePath *string

+ EnvoyBindConfigFreebind *string

+ EnvoyBindConfigSourceAddress *string

+ GrpcClientDnsRoundrobin *bool

+ GrpcClientTimeout *durationpb.Duration

+ SignoutRedirectUrl *string

+ TracingDatadogAddress *string

+ UseProxyProtocol *bool

+ func (x *Settings) GetDatabrokerStorageConnectionString() string

+ func (x *Settings) GetDatabrokerStorageTlsSkipVerify() bool

+ func (x *Settings) GetDatabrokerStorageType() string

+ func (x *Settings) GetDeriveTls() string

+ func (x *Settings) GetEnvoyAdminAccessLogPath() string

+ func (x *Settings) GetEnvoyAdminAddress() string

+ func (x *Settings) GetEnvoyAdminProfilePath() string

+ func (x *Settings) GetEnvoyBindConfigFreebind() string

+ func (x *Settings) GetEnvoyBindConfigSourceAddress() string

+ func (x *Settings) GetGrpcClientDnsRoundrobin() bool

+ func (x *Settings) GetGrpcClientTimeout() *durationpb.Duration

+ func (x *Settings) GetSignoutRedirectUrl() string

+ func (x *Settings) GetTracingDatadogAddress() string

+ func (x *Settings) GetUseProxyProtocol() bool

Jan 18, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jan 17, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 26, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Nov 11, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 26, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Sep 7, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Aug 31, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Policy

+ Explanation string

+ Remediation string

+ func (x *Policy) GetExplanation() string

+ func (x *Policy) GetRemediation() string

type Route

+ ShowErrorDetails bool

+ func (x *Route) GetShowErrorDetails() bool

type Settings

+ DarkmodePrimaryColor *string

+ DarkmodeSecondaryColor *string

+ ErrorMessageFirstParagraph *string

+ FaviconUrl *string

+ LogoUrl *string

+ PrimaryColor *string

+ SecondaryColor *string

+ func (x *Settings) GetDarkmodePrimaryColor() string

+ func (x *Settings) GetDarkmodeSecondaryColor() string

+ func (x *Settings) GetErrorMessageFirstParagraph() string

+ func (x *Settings) GetFaviconUrl() string

+ func (x *Settings) GetLogoUrl() string

+ func (x *Settings) GetPrimaryColor() string

+ func (x *Settings) GetSecondaryColor() string

May 26, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jul 26, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 26, 2023 GO-2024-2965 +1 more

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 5, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Route

+ TlsDownstreamServerName string

+ TlsUpstreamServerName string

+ func (x *Route) GetTlsDownstreamServerName() string

+ func (x *Route) GetTlsUpstreamServerName() string

Apr 22, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Mar 30, 2022 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Mar 4, 2022 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ var Route_AuthorizationHeaderMode_name = map[int32]string

+ var Route_AuthorizationHeaderMode_value = map[string]int32

type Route

+ IdpClientId *string

+ IdpClientSecret *string

+ SetAuthorizationHeader Route_AuthorizationHeaderMode

+ func (x *Route) GetIdpClientId() string

+ func (x *Route) GetIdpClientSecret() string

+ func (x *Route) GetSetAuthorizationHeader() Route_AuthorizationHeaderMode

+ type Route_AuthorizationHeaderMode int32

+ const Route_ACCESS_TOKEN

+ const Route_ID_TOKEN

+ const Route_PASS_THROUGH

+ func Route_AuthorizationHeaderModeFromString(raw string) (Route_AuthorizationHeaderMode, bool)

+ func (Route_AuthorizationHeaderMode) Descriptor() protoreflect.EnumDescriptor

+ func (Route_AuthorizationHeaderMode) EnumDescriptor() ([]byte, []int)

+ func (Route_AuthorizationHeaderMode) Type() protoreflect.EnumType

+ func (x Route_AuthorizationHeaderMode) Enum() *Route_AuthorizationHeaderMode

+ func (x Route_AuthorizationHeaderMode) Number() protoreflect.EnumNumber

+ func (x Route_AuthorizationHeaderMode) String() string

Feb 25, 2022 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 11, 2022 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jan 25, 2022 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jan 19, 2022 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Dec 22, 2021 GO-2022-0413 +3 more

  GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Settings

+ AuthenticateInternalServiceUrl *string

+ AuthorizeInternalServiceUrl *string

+ DatabrokerInternalServiceUrl *string

+ func (x *Settings) GetAuthenticateInternalServiceUrl() string

+ func (x *Settings) GetAuthorizeInternalServiceUrl() string

+ func (x *Settings) GetDatabrokerInternalServiceUrl() string

Dec 17, 2021 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Nov 15, 2021 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Nov 4, 2021 GO-2023-1800 +2 more

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Settings

+ AutocertCa *string

+ AutocertEabKeyId *string

+ AutocertEabMacKey *string

+ AutocertEmail *string

+ AutocertTrustedCa *string

+ AutocertTrustedCaFile *string

+ func (x *Settings) GetAutocertCa() string

+ func (x *Settings) GetAutocertEabKeyId() string

+ func (x *Settings) GetAutocertEabMacKey() string

+ func (x *Settings) GetAutocertEmail() string

+ func (x *Settings) GetAutocertTrustedCa() string

+ func (x *Settings) GetAutocertTrustedCaFile() string

Oct 22, 2021 GO-2021-0258 +3 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Oct 14, 2021 GO-2021-0258 +3 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Route

+ HostPathRegexRewritePattern *string

+ HostPathRegexRewriteSubstitution *string

+ HostRewrite *string

+ HostRewriteHeader *string

+ func (x *Route) GetHostPathRegexRewritePattern() string

+ func (x *Route) GetHostPathRegexRewriteSubstitution() string

+ func (x *Route) GetHostRewrite() string

+ func (x *Route) GetHostRewriteHeader() string

Sep 17, 2021 GO-2021-0258 +3 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Sep 3, 2021 GO-2021-0258 +3 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Aug 25, 2021 GO-2021-0258 +3 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Route

+ AllowSpdy bool

+ func (x *Route) GetAllowSpdy() bool

Aug 5, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Route

+ EnableGoogleCloudServerlessAuthentication bool

+ IdleTimeout *durationpb.Duration

+ func (x *Route) GetEnableGoogleCloudServerlessAuthentication() bool

+ func (x *Route) GetIdleTimeout() *durationpb.Duration

Aug 26, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jun 24, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jun 16, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jun 7, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 24, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 21, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 17, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 13, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

May 4, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Route

+ RewriteResponseHeaders []*RouteRewriteHeader

+ SetResponseHeaders map[string]string

+ func (x *Route) GetRewriteResponseHeaders() []*RouteRewriteHeader

+ func (x *Route) GetSetResponseHeaders() map[string]string

+ type RouteRewriteHeader struct

+ Header string

+ Matcher isRouteRewriteHeader_Matcher

+ Value string

+ func (*RouteRewriteHeader) Descriptor() ([]byte, []int)

+ func (*RouteRewriteHeader) ProtoMessage()

+ func (m *RouteRewriteHeader) GetMatcher() isRouteRewriteHeader_Matcher

+ func (x *RouteRewriteHeader) GetHeader() string

+ func (x *RouteRewriteHeader) GetPrefix() string

+ func (x *RouteRewriteHeader) GetValue() string

+ func (x *RouteRewriteHeader) ProtoReflect() protoreflect.Message

+ func (x *RouteRewriteHeader) Reset()

+ func (x *RouteRewriteHeader) String() string

+ type RouteRewriteHeader_Prefix struct

+ Prefix string

type Settings

+ AuditKey *crypt.PublicKeyEncryptionKey

+ AuthorizeServiceUrls []string

+ ClientCrl *string

+ ClientCrlFile *string

+ CodecType *v31.HttpConnectionManager_CodecType

+ DatabrokerServiceUrls []string

+ InstallationId *string

+ MetricsBasicAuth *string

+ MetricsCertificate *Settings_Certificate

+ MetricsClientCa *string

+ MetricsClientCaFile *string

+ SetResponseHeaders map[string]string

+ XffNumTrustedHops *uint32

+ func (x *Settings) GetAuditKey() *crypt.PublicKeyEncryptionKey

+ func (x *Settings) GetAuthorizeServiceUrls() []string

+ func (x *Settings) GetClientCrl() string

+ func (x *Settings) GetClientCrlFile() string

+ func (x *Settings) GetCodecType() v31.HttpConnectionManager_CodecType

+ func (x *Settings) GetDatabrokerServiceUrls() []string

+ func (x *Settings) GetInstallationId() string

+ func (x *Settings) GetMetricsBasicAuth() string

+ func (x *Settings) GetMetricsCertificate() *Settings_Certificate

+ func (x *Settings) GetMetricsClientCa() string

+ func (x *Settings) GetMetricsClientCaFile() string

+ func (x *Settings) GetSetResponseHeaders() map[string]string

+ func (x *Settings) GetXffNumTrustedHops() uint32

Apr 29, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Apr 22, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Apr 17, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Apr 6, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Mar 31, 2021 GO-2021-0258 +4 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Settings

+ ProgrammaticRedirectDomainWhitelist []string

+ func (x *Settings) GetProgrammaticRedirectDomainWhitelist() []string

Mar 12, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 25, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 22, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 18, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Feb 15, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Route

+ EnvoyOpts *v3.Cluster

+ LoadBalancingWeights []uint32

+ Redirect *RouteRedirect

+ TlsDownstreamClientCa string

+ TlsDownstreamClientCaFile string

+ func (x *Route) GetEnvoyOpts() *v3.Cluster

+ func (x *Route) GetLoadBalancingWeights() []uint32

+ func (x *Route) GetRedirect() *RouteRedirect

+ func (x *Route) GetTlsDownstreamClientCa() string

+ func (x *Route) GetTlsDownstreamClientCaFile() string

+ type RouteRedirect struct

+ HostRedirect *string

+ HttpsRedirect *bool

+ PathRedirect *string

+ PortRedirect *uint32

+ PrefixRewrite *string

+ ResponseCode *int32

+ SchemeRedirect *string

+ StripQuery *bool

+ func (*RouteRedirect) Descriptor() ([]byte, []int)

+ func (*RouteRedirect) ProtoMessage()

+ func (rr *RouteRedirect) IsSet() bool

+ func (x *RouteRedirect) GetHostRedirect() string

+ func (x *RouteRedirect) GetHttpsRedirect() bool

+ func (x *RouteRedirect) GetPathRedirect() string

+ func (x *RouteRedirect) GetPortRedirect() uint32

+ func (x *RouteRedirect) GetPrefixRewrite() string

+ func (x *RouteRedirect) GetResponseCode() int32

+ func (x *RouteRedirect) GetSchemeRedirect() string

+ func (x *RouteRedirect) GetStripQuery() bool

+ func (x *RouteRedirect) ProtoReflect() protoreflect.Message

+ func (x *RouteRedirect) Reset()

+ func (x *RouteRedirect) String() string

type Settings

+ SkipXffAppend *bool

+ func (x *Settings) GetSkipXffAppend() bool

Jan 13, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jan 8, 2021 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Dec 11, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Dec 7, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Config

+ Settings *Settings

+ func (x *Config) GetSettings() *Settings

type Policy

+ AllowedIdpClaims map[string]*_struct.ListValue

+ func (x *Policy) GetAllowedIdpClaims() map[string]*_struct.ListValue

type Route

+ AllowAnyAuthenticatedUser bool

+ AllowedIdpClaims map[string]*_struct.ListValue

+ PrefixRewrite string

+ RegexRewritePattern string

+ RegexRewriteSubstitution string

+ func (x *Route) GetAllowAnyAuthenticatedUser() bool

+ func (x *Route) GetAllowedIdpClaims() map[string]*_struct.ListValue

+ func (x *Route) GetPrefixRewrite() string

+ func (x *Route) GetRegexRewritePattern() string

+ func (x *Route) GetRegexRewriteSubstitution() string

+ type Settings struct

+ Address *string

+ Administrators []string

+ AuthenticateCallbackPath *string

+ AuthenticateServiceUrl *string

+ AuthorizeServiceUrl *string

+ Autocert *bool

+ AutocertDir *string

+ AutocertMustStaple *bool

+ AutocertUseStaging *bool

+ CertificateAuthority *string

+ CertificateAuthorityFile *string

+ Certificates []*Settings_Certificate

+ ClientCa *string

+ ClientCaFile *string

+ CookieDomain *string

+ CookieExpire *duration.Duration

+ CookieHttpOnly *bool

+ CookieName *string

+ CookieSecret *string

+ CookieSecure *bool

+ DatabrokerServiceUrl *string

+ Debug *bool

+ DefaultUpstreamTimeout *duration.Duration

+ DnsLookupFamily *string

+ EnableUserImpersonation *bool

+ ForwardAuthUrl *string

+ GoogleCloudServerlessAuthenticationServiceAccount *string

+ GrpcAddress *string

+ GrpcInsecure *bool

+ GrpcServerMaxConnectionAge *duration.Duration

+ GrpcServerMaxConnectionAgeGrace *duration.Duration

+ HttpRedirectAddr *string

+ IdpClientId *string

+ IdpClientSecret *string

+ IdpProvider *string

+ IdpProviderUrl *string

+ IdpRefreshDirectoryInterval *duration.Duration

+ IdpRefreshDirectoryTimeout *duration.Duration

+ IdpServiceAccount *string

+ InsecureServer *bool

+ JwtClaimsHeaders []string

+ LogLevel *string

+ MetricsAddress *string

+ OverrideCertificateName *string

+ ProxyLogLevel *string

+ RefreshCooldown *duration.Duration

+ RequestParams map[string]string

+ Scopes []string

+ Services *string

+ SharedSecret *string

+ SigningKey *string

+ SigningKeyAlgorithm *string

+ TimeoutIdle *duration.Duration

+ TimeoutRead *duration.Duration

+ TimeoutWrite *duration.Duration

+ TracingJaegerAgentEndpoint *string

+ TracingJaegerCollectorEndpoint *string

+ TracingProvider *string

+ TracingSampleRate *float64

+ TracingZipkinEndpoint *string

+ func (*Settings) Descriptor() ([]byte, []int)

+ func (*Settings) ProtoMessage()

+ func (x *Settings) GetAddress() string

+ func (x *Settings) GetAdministrators() []string

+ func (x *Settings) GetAuthenticateCallbackPath() string

+ func (x *Settings) GetAuthenticateServiceUrl() string

+ func (x *Settings) GetAuthorizeServiceUrl() string

+ func (x *Settings) GetAutocert() bool

+ func (x *Settings) GetAutocertDir() string

+ func (x *Settings) GetAutocertMustStaple() bool

+ func (x *Settings) GetAutocertUseStaging() bool

+ func (x *Settings) GetCertificateAuthority() string

+ func (x *Settings) GetCertificateAuthorityFile() string

+ func (x *Settings) GetCertificates() []*Settings_Certificate

+ func (x *Settings) GetClientCa() string

+ func (x *Settings) GetClientCaFile() string

+ func (x *Settings) GetCookieDomain() string

+ func (x *Settings) GetCookieExpire() *duration.Duration

+ func (x *Settings) GetCookieHttpOnly() bool

+ func (x *Settings) GetCookieName() string

+ func (x *Settings) GetCookieSecret() string

+ func (x *Settings) GetCookieSecure() bool

+ func (x *Settings) GetDatabrokerServiceUrl() string

+ func (x *Settings) GetDebug() bool

+ func (x *Settings) GetDefaultUpstreamTimeout() *duration.Duration

+ func (x *Settings) GetDnsLookupFamily() string

+ func (x *Settings) GetEnableUserImpersonation() bool

+ func (x *Settings) GetForwardAuthUrl() string

+ func (x *Settings) GetGoogleCloudServerlessAuthenticationServiceAccount() string

+ func (x *Settings) GetGrpcAddress() string

+ func (x *Settings) GetGrpcInsecure() bool

+ func (x *Settings) GetGrpcServerMaxConnectionAge() *duration.Duration

+ func (x *Settings) GetGrpcServerMaxConnectionAgeGrace() *duration.Duration

+ func (x *Settings) GetHttpRedirectAddr() string

+ func (x *Settings) GetIdpClientId() string

+ func (x *Settings) GetIdpClientSecret() string

+ func (x *Settings) GetIdpProvider() string

+ func (x *Settings) GetIdpProviderUrl() string

+ func (x *Settings) GetIdpRefreshDirectoryInterval() *duration.Duration

+ func (x *Settings) GetIdpRefreshDirectoryTimeout() *duration.Duration

+ func (x *Settings) GetIdpServiceAccount() string

+ func (x *Settings) GetInsecureServer() bool

+ func (x *Settings) GetJwtClaimsHeaders() []string

+ func (x *Settings) GetLogLevel() string

+ func (x *Settings) GetMetricsAddress() string

+ func (x *Settings) GetOverrideCertificateName() string

+ func (x *Settings) GetProxyLogLevel() string

+ func (x *Settings) GetRefreshCooldown() *duration.Duration

+ func (x *Settings) GetRequestParams() map[string]string

+ func (x *Settings) GetScopes() []string

+ func (x *Settings) GetServices() string

+ func (x *Settings) GetSharedSecret() string

+ func (x *Settings) GetSigningKey() string

+ func (x *Settings) GetSigningKeyAlgorithm() string

+ func (x *Settings) GetTimeoutIdle() *duration.Duration

+ func (x *Settings) GetTimeoutRead() *duration.Duration

+ func (x *Settings) GetTimeoutWrite() *duration.Duration

+ func (x *Settings) GetTracingJaegerAgentEndpoint() string

+ func (x *Settings) GetTracingJaegerCollectorEndpoint() string

+ func (x *Settings) GetTracingProvider() string

+ func (x *Settings) GetTracingSampleRate() float64

+ func (x *Settings) GetTracingZipkinEndpoint() string

+ func (x *Settings) ProtoReflect() protoreflect.Message

+ func (x *Settings) Reset()

+ func (x *Settings) String() string

+ type Settings_Certificate struct

+ CertBytes []byte

+ CertFile string

+ KeyBytes []byte

+ KeyFile string

+ func (*Settings_Certificate) Descriptor() ([]byte, []int)

+ func (*Settings_Certificate) ProtoMessage()

+ func (x *Settings_Certificate) GetCertBytes() []byte

+ func (x *Settings_Certificate) GetCertFile() string

+ func (x *Settings_Certificate) GetKeyBytes() []byte

+ func (x *Settings_Certificate) GetKeyFile() string

+ func (x *Settings_Certificate) ProtoReflect() protoreflect.Message

+ func (x *Settings_Certificate) Reset()

+ func (x *Settings_Certificate) String() string

Nov 19, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Nov 13, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Sep 30, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Sep 28, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Sep 22, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Sep 11, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Aug 26, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Aug 20, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Aug 7, 2020 GO-2021-0258 +6 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ var File_config_proto protoreflect.FileDescriptor

+ type Config struct

+ Name string

+ Routes []*Route

+ func (*Config) Descriptor() ([]byte, []int)

+ func (*Config) ProtoMessage()

+ func (x *Config) GetName() string

+ func (x *Config) GetRoutes() []*Route

+ func (x *Config) ProtoReflect() protoreflect.Message

+ func (x *Config) Reset()

+ func (x *Config) String() string

+ type Policy struct

+ AllowedDomains []string

+ AllowedGroups []string

+ AllowedUsers []string

+ Id string

+ Name string

+ Rego []string

+ func (*Policy) Descriptor() ([]byte, []int)

+ func (*Policy) ProtoMessage()

+ func (x *Policy) GetAllowedDomains() []string

+ func (x *Policy) GetAllowedGroups() []string

+ func (x *Policy) GetAllowedUsers() []string

+ func (x *Policy) GetId() string

+ func (x *Policy) GetName() string

+ func (x *Policy) GetRego() []string

+ func (x *Policy) ProtoReflect() protoreflect.Message

+ func (x *Policy) Reset()

+ func (x *Policy) String() string

+ type Route struct

+ AllowPublicUnauthenticatedAccess bool

+ AllowWebsockets bool

+ AllowedDomains []string

+ AllowedGroups []string

+ AllowedUsers []string

+ CorsAllowPreflight bool

+ From string

+ Id string

+ KubernetesServiceAccountToken string

+ Name string

+ PassIdentityHeaders bool

+ Path string

+ Policies []*Policy

+ Prefix string

+ PreserveHostHeader bool

+ Regex string

+ RemoveRequestHeaders []string

+ SetRequestHeaders map[string]string

+ Timeout *duration.Duration

+ TlsClientCert string

+ TlsClientCertFile string

+ TlsClientKey string

+ TlsClientKeyFile string

+ TlsCustomCa string

+ TlsCustomCaFile string

+ TlsServerName string

+ TlsSkipVerify bool

+ To string

+ func (*Route) Descriptor() ([]byte, []int)

+ func (*Route) ProtoMessage()

+ func (x *Route) GetAllowPublicUnauthenticatedAccess() bool

+ func (x *Route) GetAllowWebsockets() bool

+ func (x *Route) GetAllowedDomains() []string

+ func (x *Route) GetAllowedGroups() []string

+ func (x *Route) GetAllowedUsers() []string

+ func (x *Route) GetCorsAllowPreflight() bool

+ func (x *Route) GetFrom() string

+ func (x *Route) GetId() string

+ func (x *Route) GetKubernetesServiceAccountToken() string

+ func (x *Route) GetName() string

+ func (x *Route) GetPassIdentityHeaders() bool

+ func (x *Route) GetPath() string

+ func (x *Route) GetPolicies() []*Policy

+ func (x *Route) GetPrefix() string

+ func (x *Route) GetPreserveHostHeader() bool

+ func (x *Route) GetRegex() string

+ func (x *Route) GetRemoveRequestHeaders() []string

+ func (x *Route) GetSetRequestHeaders() map[string]string

+ func (x *Route) GetTimeout() *duration.Duration

+ func (x *Route) GetTlsClientCert() string

+ func (x *Route) GetTlsClientCertFile() string

+ func (x *Route) GetTlsClientKey() string

+ func (x *Route) GetTlsClientKeyFile() string

+ func (x *Route) GetTlsCustomCa() string

+ func (x *Route) GetTlsCustomCaFile() string

+ func (x *Route) GetTlsServerName() string

+ func (x *Route) GetTlsSkipVerify() bool

+ func (x *Route) GetTo() string

+ func (x *Route) ProtoReflect() protoreflect.Message

+ func (x *Route) Reset()

+ func (x *Route) String() string

Jul 31, 2020 GO-2021-0258 +5 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Jul 20, 2020 GO-2021-0258 +5 more

  GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

  GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

  GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

  GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

  GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

  GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium