config

package

Go to main page

Versions in this module

v0

v0.28.0

Nov 7, 2024

Changes in this version

type Policy

+ JWTIssuerFormat string

type PolicyRedirect

+ func (r *PolicyRedirect) GetEnvoyResponseCode() (envoy_config_route_v3.RedirectAction_RedirectResponseCode, error)

v0.27.2

Oct 22, 2024

Changes in this version

type Config

+ ZeroClusterID string

+ ZeroOrganizationID string

+ ZeroPseudonymizationKey []byte

type DownstreamMTLSSettings

+ func (s *DownstreamMTLSSettings) ToProto() *config.DownstreamMtlsSettings

type Options

+ func (o *Options) ToProto() *config.Config

type Policy

+ func (p *Policy) GetKubernetesServiceAccountToken() (string, error)

type PublicKeyEncryptionKeyOptions

+ func (o *PublicKeyEncryptionKeyOptions) ToProto() *crypt.PublicKeyEncryptionKey

v0.27.1

Sep 30, 2024

Changes in this version

type SessionStore

+ func (store *SessionStore) ClearSession(w http.ResponseWriter, r *http.Request)

+ func (store *SessionStore) LoadSession(r *http.Request) (string, error)

+ func (store *SessionStore) LoadSessionStateAndCheckIDP(r *http.Request) (*sessions.State, error)

+ func (store *SessionStore) SaveSession(w http.ResponseWriter, r *http.Request, v any) error

v0.27.0

Sep 10, 2024 GO-2024-3179

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ var RuntimeFlagConfigHotReload = runtimeFlag("config_hot_reload", true)

+ var RuntimeFlagEnvoyResourceManager = runtimeFlag("envoy_resource_manager", true)

+ var RuntimeFlagPomeriumJWTEndpoint = runtimeFlag("pomerium_jwt_endpoint", false)

type Options

+ DataBrokerStorageConnectionStringFile string

+ func (o *Options) GetAllPoliciesIndexed() iter.Seq2[int, *Policy]

+ func (o *Options) GetDataBrokerStorageConnectionString() (string, error)

+ func (o *Options) NumPolicies() int

type Policy

+ func (p *Policy) MustRouteID() uint64

type SANType

+ const SANTypeUserPrincipalName

v0.26.1

Jun 27, 2024 GO-2024-3179

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.26.0

May 14, 2024 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ var RuntimeFlagGRPCDatabrokerKeepalive = runtimeFlag("grpc_databroker_keepalive", false)

+ var RuntimeFlagLegacyIdentityManager = runtimeFlag("legacy_identity_manager", false)

+ var RuntimeFlagMatchAnyIncomingPort = runtimeFlag("match_any_incoming_port", true)

+ func HasPort(host string) bool

+ type DirectResponse struct

+ Body string

+ Status int

type Options

+ RuntimeFlags RuntimeFlags

+ func (o *Options) IsRuntimeFlagSet(flag RuntimeFlag) bool

+ func (o *Options) SupportsUserRefresh() bool

type Policy

+ Response *DirectResponse

+ func (p *Policy) IsTCPUpstream() bool

+ type RuntimeFlag string

+ type RuntimeFlags map[RuntimeFlag]bool

+ func DefaultRuntimeFlags() RuntimeFlags

v0.25.2

Apr 5, 2024 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.25.1

Mar 13, 2024 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.25.0

Jan 9, 2024 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Options

+ PassIdentityHeaders *bool

+ func (o *Options) UseStatelessAuthenticateFlow() bool

type Policy

+ func (p *Policy) GetPassIdentityHeaders(options *Options) bool

v0.24.0

Nov 16, 2023 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ func SortPolicies(pp []Policy)

type Options

+ CertificateData []*config.Settings_Certificate

type Policy

+ ID string

+ RegexPriorityOrder *int64

v0.23.0

Aug 23, 2023 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ func ValidateCookieSameSite(value string) error

+ type DownstreamMTLSSettings struct

+ CA string

+ CAFile string

+ CRL string

+ CRLFile string

+ Enforcement MTLSEnforcement

+ MatchSubjectAltNames []SANMatcher

+ MaxVerifyDepth *uint32

+ func (s *DownstreamMTLSSettings) GetCA() ([]byte, error)

+ func (s *DownstreamMTLSSettings) GetCRL() ([]byte, error)

+ func (s *DownstreamMTLSSettings) GetEnforcement() MTLSEnforcement

+ func (s *DownstreamMTLSSettings) GetMaxVerifyDepth() uint32

+ type MTLSEnforcement string

+ const MTLSEnforcementPolicy

+ const MTLSEnforcementPolicyWithDefaultDeny

+ const MTLSEnforcementRejectConnection

type Options

+ AccessLogFields []log.AccessLogField

+ AuthorizeLogFields []log.AuthorizeLogField

+ CookieSameSite string

+ DownstreamMTLS DownstreamMTLSSettings

+ func (o *Options) GetAccessLogFields() []log.AccessLogField

+ func (o *Options) GetAuthorizeLogFields() []log.AuthorizeLogField

+ func (o *Options) GetCSRFSameSite() csrf.SameSiteMode

+ func (o *Options) GetCookieSameSite() http.SameSite

+ func (o *Options) HasAnyDownstreamMTLSClientCA() bool

+ func (o *Options) NewCookie() *http.Cookie

+ type SANMatcher struct

+ Pattern string

+ Type SANType

+ func (s *SANMatcher) MarshalJSON() ([]byte, error)

+ func (s *SANMatcher) ToEnvoyProto() *envoy_tls.SubjectAltNameMatcher

+ func (s *SANMatcher) UnmarshalJSON(b []byte) error

+ type SANType string

+ const SANTypeDNS

+ const SANTypeEmail

+ const SANTypeIPAddress

+ const SANTypeURI

v0.22.3

Aug 18, 2023 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ var AllLogLevels = [...]LogLevel

+ func ValidateLogLevel(lvl LogLevel) error

+ type LogLevel string

+ const LogLevelCritical

+ const LogLevelDebug

+ const LogLevelDisabled

+ const LogLevelError

+ const LogLevelFatal

+ const LogLevelInfo

+ const LogLevelNone

+ const LogLevelOff

+ const LogLevelPanic

+ const LogLevelTrace

+ const LogLevelUnset

+ const LogLevelWarn

+ const LogLevelWarning

+ func (lvl LogLevel) ToEnvoy() string

+ func (lvl LogLevel) ToZerolog() zerolog.Level

type Options

+ func (o *Options) GetX509Certificates() []*x509.Certificate

+ func (o *Options) HasCertificates() bool

v0.22.2

May 26, 2023 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Config

+ func (cfg *Config) GenerateCatchAllCertificate() (*tls.Certificate, error)

v0.22.1

May 4, 2023 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.22.0

May 1, 2023 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ const DNSLookupFamilyAll

+ const DNSLookupFamilyV4Preferred

+ func FromURLMatchesRequestURL(fromURL, requestURL *url.URL) bool

+ func WildcardToRegex(wildcard string) string

type Options

+ func (o *Options) GetSetResponseHeadersForPolicy(policy *Policy, requireStrictTransportSecurity bool) map[string]string

type Policy

+ func (p *Policy) IsTCP() bool

v0.21.4

May 26, 2023 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.21.3

Mar 15, 2023 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.21.2

Feb 23, 2023 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Config

+ func (cfg *Config) GetAuthenticateKeyFetcher() (hpke.KeyFetcher, error)

v0.21.1

Feb 16, 2023 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.21.0

Feb 3, 2023 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ func GetTLSClientTransport(cfg *Config) (*http.Transport, error)

type Config

+ DerivedCAPEM []byte

+ DerivedCertificates []tls.Certificate

+ func (cfg *Config) AllCertificateAuthoritiesPEM() ([]byte, error)

+ func (cfg *Config) GetCertificateForServerName(serverName string) (*tls.Certificate, error)

+ func (cfg *Config) GetCertificatePool() (*x509.CertPool, error)

+ func (cfg *Config) GetTLSClientConfig() (*tls.Config, error)

+ func (cfg *Config) WillHaveCertificateForServerName(serverName string) (bool, error)

+ type LayeredSource struct

+ func NewLayeredSource(ctx context.Context, underlying Source, builder func(*Config) error) (*LayeredSource, error)

+ func (src *LayeredSource) GetConfig() *Config

type Options

+ DeriveInternalDomainCert *string

+ func (o *Options) GetAllRouteableGRPCHosts() ([]string, error)

+ func (o *Options) GetAllRouteableGRPCServerNames() ([]string, error)

+ func (o *Options) GetAllRouteableHTTPHosts() ([]string, error)

+ func (o *Options) GetAllRouteableHTTPServerNames() ([]string, error)

+ func (o *Options) GetDeriveInternalDomain() string

+ func (o *Options) GetHPKEPrivateKey() (*hpke.PrivateKey, error)

type Policy

+ TLSUpstreamAllowRenegotiation bool

v0.21.0-rc2

Jan 18, 2023 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.21.0-rc1

Jan 17, 2023 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.20.1

May 26, 2023 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.20.0

Nov 11, 2022 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ const FieldCheckMsgRemoved

+ const FieldCheckMsgUnknown

+ const KeyActionError

+ const KeyActionWarn

+ const UnknownFieldAction

+ type FieldCheckMsg string

+ type FieldMsg struct

+ DocsURL string

+ Key string

+ func CheckUnknownConfigFields(fields []string) []FieldMsg

+ type KeyAction string

type Options

+ func (o *Options) GetIdentityProviderForRequestURL(requestURL string) (*identity.Provider, error)

+ type SessionStore struct

+ func NewSessionStore(options *Options) (*SessionStore, error)

+ func (store *SessionStore) LoadSessionState(r *http.Request) (*sessions.State, error)

v0.19.2

May 26, 2023 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.19.1

Sep 7, 2022 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.19.0

Aug 31, 2022 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Config

+ ACMETLSALPNPort string

type Options

+ BrandingOptions httputil.BrandingOptions

type Policy

+ ShowErrorDetails bool

type SubPolicy

+ Explanation string

+ Remediation string

v0.18.1

May 26, 2023 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.18.0

Jul 26, 2022 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ const StoragePostgresName

type Config

+ MetricsScrapeEndpoints []MetricsScrapeEndpoint

+ func (cfg *Config) AllocatePorts(ports [5]string)

+ type MetricsScrapeEndpoint metrics.ScrapeEndpoint

type Options

+ ClientSecretFile string

+ CookieSecretFile string

+ SharedSecretFile string

+ SigningKeyFile string

+ func (o *Options) GetClientSecret() (string, error)

+ func (o *Options) GetCookieSecret() ([]byte, error)

+ func (o *Options) GetSigningKey() (string, error)

v0.17.4

May 26, 2023 GO-2024-2965 +1 more

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.17.3

May 5, 2022 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Options

+ func (o *Options) GetAllRouteableGRPCDomainsForTLSServerName(tlsServerName string) ([]string, error)

+ func (o *Options) GetAllRouteableHTTPDomainsForTLSServerName(tlsServerName string) ([]string, error)

type Policy

+ TLSDownstreamServerName string

+ TLSUpstreamServerName string

v0.17.2

Apr 22, 2022 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.17.1

Mar 30, 2022 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Config

+ DebugPort string

+ MetricsPort string

v0.17.0

Mar 4, 2022 GO-2022-0413 +3 more

GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Options

+ func (o *Options) GetAllRouteableGRPCDomains() ([]string, error)

+ func (o *Options) GetAllRouteableHTTPDomains() ([]string, error)

+ func (o *Options) GetIdentityProviderForID(idpID string) *identity.Provider

+ func (o *Options) GetIdentityProviderForPolicy(policy *Policy) *identity.Provider

type Policy

+ IDPClientID string

+ IDPClientSecret string

+ SetAuthorizationHeader string

+ func (p *Policy) GetSetAuthorizationHeader() configpb.Route_AuthorizationHeaderMode

v0.16.4

Feb 25, 2022 GO-2022-0413 +3 more

GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.16.3

Feb 11, 2022 GO-2022-0413 +3 more

GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.16.2

Jan 25, 2022 GO-2022-0413 +3 more

GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.16.1

Jan 19, 2022 GO-2022-0413 +3 more

GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.16.0

Dec 22, 2021 GO-2022-0413 +3 more

GO-2022-0413: Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type CodecType

+ const CodecTypeUnset

type Options

+ AuthenticateInternalURLString string

+ AuthorizeInternalURLString string

+ DataBrokerInternalURLString string

+ EnvoyBindConfigFreebind null.Bool

+ EnvoyBindConfigSourceAddress string

+ func (o *Options) GetInternalAuthenticateURL() (*url.URL, error)

+ func (o *Options) GetInternalAuthorizeURLs() ([]*url.URL, error)

+ func (o *Options) GetInternalDataBrokerURLs() ([]*url.URL, error)

v0.15.8

Dec 17, 2021 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.15.7

Nov 15, 2021 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.15.6

Nov 4, 2021 GO-2023-1800 +2 more

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type AutocertOptions

+ CA string

+ EABKeyID string

+ EABMACKey string

+ Email string

+ TrustedCA string

+ TrustedCAFile string

+ func (o *AutocertOptions) Validate() error

type Config

+ GRPCPort string

+ HTTPPort string

+ OutboundPort string

v0.15.5

Oct 22, 2021 GO-2021-0258 +3 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.15.4

Oct 14, 2021 GO-2021-0258 +3 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.15.3

Sep 17, 2021 GO-2021-0258 +3 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.15.2

Sep 3, 2021 GO-2021-0258 +3 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.15.1

Aug 25, 2021 GO-2021-0258 +3 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.15.0

Aug 5, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Config

+ EnvoyVersion string

type Options

+ Routes []Policy

+ type PPLPolicy struct

+ func (ppl *PPLPolicy) UnmarshalJSON(data []byte) error

+ func (ppl *PPLPolicy) UnmarshalYAML(unmarshal func(interface{}) error) error

type Policy

+ IdleTimeout *time.Duration

+ Policy *PPLPolicy

+ func (p *Policy) AllAllowedDomains() []string

+ func (p *Policy) AllAllowedGroups() []string

+ func (p *Policy) AllAllowedIDPClaims() []identity.FlattenedClaims

+ func (p *Policy) AllAllowedUsers() []string

+ func (p *Policy) ToPPL() *parser.Policy

v0.14.8

Aug 26, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.14.7

Jun 24, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.14.6

Jun 16, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.14.5

Jun 7, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.14.4

May 24, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.14.3

May 21, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.14.2

May 17, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.14.1

May 13, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.14.0

May 4, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ var ViperPolicyHooks = viper.DecodeHook(...)

+ func IsRegistry(s string) bool

+ func NewPolicyHTTPTransport(options *Options, policy *Policy, disableHTTP2 bool) http.RoundTripper

+ func ValidateMetricsAddress(addr string) error

+ type CodecType string

+ const CodecTypeAuto

+ const CodecTypeHTTP1

+ const CodecTypeHTTP2

+ func CodecTypeFromEnvoy(envoyCodecType envoy_http_connection_manager.HttpConnectionManager_CodecType) CodecType

+ func ParseCodecType(raw string) (CodecType, error)

+ func (codecType CodecType) ToEnvoy() envoy_http_connection_manager.HttpConnectionManager_CodecType

type Config

+ func (cfg *Config) Checksum() uint64

+ type JWTClaimHeaders map[string]string

+ func NewJWTClaimHeaders(claims ...string) JWTClaimHeaders

+ func (hdrs *JWTClaimHeaders) UnmarshalJSON(data []byte) error

+ func (hdrs *JWTClaimHeaders) UnmarshalYAML(unmarshal func(interface{}) error) error

type MetricsManager

+ func (mgr *MetricsManager) ServeHTTP(w http.ResponseWriter, r *http.Request)

type Options

+ AuditKey *PublicKeyEncryptionKeyOptions

+ AuthorizeURLStrings []string

+ ClientCRL string

+ ClientCRLFile string

+ CodecType CodecType

+ DataBrokerURLStrings []string

+ InstallationID string

+ MetricsBasicAuth string

+ MetricsCertificate string

+ MetricsCertificateFile string

+ MetricsCertificateKey string

+ MetricsCertificateKeyFile string

+ MetricsClientCA string

+ MetricsClientCAFile string

+ SetResponseHeaders map[string]string

+ XffNumTrustedHops uint32

+ func (o *Options) GetAuditKey() (*cryptutil.PublicKeyEncryptionKey, error)

+ func (o *Options) GetAuthorizeURLs() ([]*url.URL, error)

+ func (o *Options) GetCertificates() ([]tls.Certificate, error)

+ func (o *Options) GetClientCA() ([]byte, error)

+ func (o *Options) GetCodecType() CodecType

+ func (o *Options) GetDataBrokerCertificate() (*tls.Certificate, error)

+ func (o *Options) GetDataBrokerURLs() ([]*url.URL, error)

+ func (o *Options) GetGRPCAddr() string

+ func (o *Options) GetGRPCInsecure() bool

+ func (o *Options) GetGoogleCloudServerlessAuthenticationServiceAccount() string

+ func (o *Options) GetMetricsBasicAuth() (username, password string, ok bool)

+ func (o *Options) GetMetricsCertificate() (*tls.Certificate, error)

+ func (o *Options) GetQPS() float64

+ func (o *Options) GetSetResponseHeaders() map[string]string

+ func (o *Options) GetSharedKey() ([]byte, error)

+ func (o *Options) GetSignOutRedirectURL() (*url.URL, error)

type Policy

+ RewriteResponseHeaders []RewriteHeader

+ SetResponseHeaders map[string]string

+ func (p *Policy) IsForKubernetes() bool

+ type PublicKeyEncryptionKeyOptions struct

+ Data string

+ ID string

+ type RewriteHeader struct

+ Header string

+ Prefix string

+ Value string

v0.14.0-rc2

Apr 29, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.14.0-rc1

Apr 22, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.13.6

Apr 17, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.13.5

Apr 6, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.13.4

Mar 31, 2021 GO-2021-0258 +4 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Options

+ ProgrammaticRedirectDomainWhitelist []string

v0.13.3

Mar 12, 2021 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.13.2

Feb 25, 2021 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.13.1

Feb 22, 2021 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.13.0

Feb 18, 2021 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.12.2

Feb 15, 2021 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ const ServiceDataBroker

+ func DecodePolicyBase64Hook() mapstructure.DecodeHookFunc

+ func DecodePolicyHookFunc() mapstructure.DecodeHookFunc

+ func IsDataBroker(s string) bool

type Config

+ AutoCertificates []tls.Certificate

+ func (cfg *Config) AllCertificates() []tls.Certificate

+ type FileWatcherSource struct

+ func NewFileWatcherSource(underlying Source) *FileWatcherSource

+ func (src *FileWatcherSource) GetConfig() *Config

+ type HasWeight bool

type Options

+ AdditionalPolicies []Policy

+ EnvoyAdminAccessLogPath string

+ EnvoyAdminAddress string

+ EnvoyAdminProfilePath string

+ SkipXffAppend bool

+ UseProxyProtocol bool

+ func (o *Options) GetAllPolicies() []Policy

type Policy

+ EnvoyOpts *envoy_config_cluster_v3.Cluster

+ LbWeights []uint32

+ Redirect *PolicyRedirect

+ TLSDownstreamClientCA string

+ TLSDownstreamClientCAFile string

+ type PolicyRedirect struct

+ HTTPSRedirect *bool

+ HostRedirect *string

+ PathRedirect *string

+ PortRedirect *uint32

+ PrefixRewrite *string

+ ResponseCode *int32

+ SchemeRedirect *string

+ StripQuery *bool

+ type StringSlice []string

+ func NewStringSlice(values ...string) StringSlice

+ func (slc *StringSlice) UnmarshalJSON(data []byte) error

+ func (slc *StringSlice) UnmarshalYAML(unmarshal func(interface{}) error) error

type StringURL

+ func (su *StringURL) String() string

+ type WeightedURL struct

+ LbWeight uint32

+ URL url.URL

+ func ParseWeightedURL(dst string) (*WeightedURL, error)

+ func (u *WeightedURL) String() string

+ func (u *WeightedURL) Validate() error

+ type WeightedURLs []WeightedURL

+ func ParseWeightedUrls(urls ...string) (WeightedURLs, error)

+ func (urls WeightedURLs) Flatten() ([]string, []uint32, error)

+ func (urls WeightedURLs) Validate() (HasWeight, error)

v0.12.1

Jan 13, 2021 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.12.0

Jan 8, 2021 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Options

+ TracingDatadogAddress string

v0.11.1

Dec 11, 2020 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.11.0

Dec 7, 2020 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ const DNSLookupFamilyAuto

+ const DNSLookupFamilyV4Only

+ const DNSLookupFamilyV6Only

+ var AllDNSLookupFamilies = []string

+ func GetEnvoyDNSLookupFamily(value string) envoy_config_cluster_v3.Cluster_DnsLookupFamily

+ func NewHTTPTransport(src Source) http.RoundTripper

+ func ValidateDNSLookupFamily(value string) error

+ type AtomicOptions struct

+ func NewAtomicOptions() *AtomicOptions

+ func (a *AtomicOptions) Load() *Options

+ func (a *AtomicOptions) Store(options *Options)

+ type LogManager struct

+ func NewLogManager(src Source) *LogManager

+ func (mgr *LogManager) Close() error

+ func (mgr *LogManager) OnConfigChange(cfg *Config)

+ type MetricsManager struct

+ func NewMetricsManager(src Source) *MetricsManager

+ func (mgr *MetricsManager) Close() error

+ func (mgr *MetricsManager) OnConfigChange(cfg *Config)

type Options

+ DNSLookupFamily string

+ EnableUserImpersonation bool

+ QPS float64

+ SignOutRedirectURL *url.URL

+ SignOutRedirectURLString string

+ SigningKeyAlgorithm string

+ func (o *Options) ApplySettings(settings *config.Settings)

type Policy

+ AllowAnyAuthenticatedUser bool

+ AllowedIDPClaims identity.FlattenedClaims

+ HostPathRegexRewritePattern string

+ HostPathRegexRewriteSubstitution string

+ HostRewrite string

+ HostRewriteHeader string

+ PrefixRewrite string

+ RegexRewritePattern string

+ RegexRewriteSubstitution string

+ func (p *Policy) Matches(requestURL *url.URL) bool

type StaticSource

+ func (src *StaticSource) SetConfig(cfg *Config)

type SubPolicy

+ AllowedIDPClaims identity.FlattenedClaims

+ type TraceManager struct

+ func NewTraceManager(src Source) *TraceManager

+ func (mgr *TraceManager) Close() error

+ func (mgr *TraceManager) OnConfigChange(cfg *Config)

v0.11.0-rc2

Nov 19, 2020 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.11.0-rc1

Nov 13, 2020 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.10.6

Sep 30, 2020 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.10.5

Sep 28, 2020 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.10.4

Sep 22, 2020 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.10.3

Sep 11, 2020 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.10.2

Aug 26, 2020 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.10.1

Aug 20, 2020 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.10.0

Aug 7, 2020 GO-2021-0258 +6 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0827: pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ const StorageInMemoryName

+ const StorageRedisName

+ type AutocertOptions struct

+ Enable bool

+ Folder string

+ MustStaple bool

+ UseStaging bool

+ type ChangeDispatcher struct

+ func (dispatcher *ChangeDispatcher) OnConfigChange(li ChangeListener)

+ func (dispatcher *ChangeDispatcher) Trigger(cfg *Config)

+ type ChangeListener = func(*Config)

+ type Config struct

+ Options *Options

+ func (cfg *Config) Clone() *Config

+ type FileOrEnvironmentSource struct

+ func NewFileOrEnvironmentSource(configFile string) (*FileOrEnvironmentSource, error)

+ func (src *FileOrEnvironmentSource) GetConfig() *Config

type Options

+ DataBrokerCertificate *tls.Certificate

+ DataBrokerStorageCAFile string

+ DataBrokerStorageCertFile string

+ DataBrokerStorageCertKeyFile string

+ DataBrokerStorageCertSkipVerify bool

+ DataBrokerStorageConnectionString string

+ DataBrokerStorageType string

+ DataBrokerURL *url.URL

+ DataBrokerURLString string

+ GoogleCloudServerlessAuthenticationServiceAccount string

+ RefreshDirectoryInterval time.Duration

+ RefreshDirectoryTimeout time.Duration

+ RequestParams map[string]string

+ func (o *Options) GetDataBrokerURL() *url.URL

+ func (o *Options) GetOauthOptions() oauth.Options

type Policy

+ AllowSPDY bool

+ EnableGoogleCloudServerlessAuthentication bool

+ KubernetesServiceAccountToken string

+ KubernetesServiceAccountTokenFile string

+ PassIdentityHeaders bool

+ RemoveRequestHeaders []string

+ SubPolicies []SubPolicy

+ func NewPolicyFromProto(pb *configpb.Route) (*Policy, error)

+ func (p *Policy) ToProto() *configpb.Route

+ type Source interface

+ GetConfig func() *Config

+ OnConfigChange func(ChangeListener)

+ type StaticSource struct

+ func NewStaticSource(cfg *Config) *StaticSource

+ func (src *StaticSource) GetConfig() *Config

+ func (src *StaticSource) OnConfigChange(ChangeListener)

+ type SubPolicy struct

+ AllowedDomains []string

+ AllowedGroups []string

+ AllowedUsers []string

+ ID string

+ Name string

+ Rego []string

v0.10.0-rc3

Jul 31, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.10.0-rc2

Jul 20, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.10.0-rc1

Jun 30, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.9.6

Jul 29, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.9.5

Jul 21, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.9.4

Jul 14, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.9.2

Jun 22, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.9.1

Jun 16, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Policy

+ func (p *Policy) RouteID() uint64

v0.9.0

May 31, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ const JaegerTracingProviderName

+ const ZipkinTracingProviderName

+ var AutocertManager = newAutocertManager()

+ var EnvoyAdminURL = &url.URL

+ var RedirectAndAutocertServer = newRedirectAndAutoCertServer()

+ func WatchChanges(configFile string, opt *Options, services []OptionsUpdater)

type Options

+ CertificateFiles []certificateFilePair

+ ClientCA string

+ ClientCAFile string

+ ProxyLogLevel string

+ TracingSampleRate float64

+ ZipkinEndpoint string

+ func (o *Options) GetAuthenticateURL() *url.URL

+ func (o *Options) GetAuthorizeURL() *url.URL

+ func (o *Options) GetCacheURL() *url.URL

+ func (o *Options) GetForwardAuthURL() *url.URL

type Policy

+ func (p *Policy) Checksum() uint64

+ type TracingOptions struct

+ Debug bool

+ JaegerAgentEndpoint string

+ JaegerCollectorEndpoint *url.URL

+ Provider string

+ SampleRate float64

+ Service string

+ ZipkinEndpoint *url.URL

+ func NewTracingOptions(o *Options) (*TracingOptions, error)

+ func (t *TracingOptions) Enabled() bool

v0.8.4

Jul 14, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.8.3

May 26, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.8.2

May 24, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.8.1

May 20, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.8.0

May 13, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Options

+ AutoCert bool

+ AutoCertFolder string

+ AutoCertHandler func(h http.Handler) http.Handler

+ AutoCertUseStaging bool

+ Certificates []certificateFilePair

+ TLSConfig *tls.Config

type Policy

+ Path string

+ Prefix string

+ Regex string

+ type StringURL struct

+ func (u *StringURL) MarshalJSON() ([]byte, error)

v0.7.6

May 5, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.7.5

Apr 20, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.7.4

Apr 16, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.7.3

Apr 14, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.7.2

Apr 10, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

type Options

+ JWTClaimsHeaders []string

v0.7.1

Apr 7, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.7.0

Apr 5, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ type HostnameURL struct

+ func (j *HostnameURL) MarshalJSON() ([]byte, error)

type Options

+ AuthenticateCallbackPath string

+ GRPCServerMaxConnectionAge time.Duration

+ GRPCServerMaxConnectionAgeGrace time.Duration

type Policy

+ AllowedUsers []string

v0.6.4

Apr 8, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.6.3

Mar 20, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.6.2

Feb 3, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.6.1

Feb 3, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.6.0

Jan 25, 2020 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ const ServiceCache

+ func IsCache(s string) bool

type Options

+ CacheStore string

+ CacheStoreAddr string

+ CacheStorePassword string

+ CacheStorePath string

+ CacheURL *url.URL

+ CacheURLString string

type Policy

+ PreserveHostHeader bool

v0.5.2

Dec 5, 2019 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.5.1

Nov 26, 2019 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

v0.5.0

Nov 15, 2019 GO-2021-0258 +5 more

GO-2021-0258: Incorrect authorization in github.com/pomerium/pomerium

GO-2022-0783: JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

Changes in this version

+ const DefaultAlternativeAddr

+ const DisableHeaderKey

+ const ServiceAll

+ const ServiceAuthenticate

+ const ServiceAuthorize

+ const ServiceProxy

+ func IsAll(s string) bool

+ func IsAuthenticate(s string) bool

+ func IsAuthorize(s string) bool

+ func IsProxy(s string) bool

+ func IsValidService(s string) bool

+ type Options struct

+ Addr string

+ Administrators []string

+ AuthenticateURL *url.URL

+ AuthenticateURLString string

+ AuthorizeURL *url.URL

+ AuthorizeURLString string

+ CA string

+ CAFile string

+ Cert string

+ CertFile string

+ ClientID string

+ ClientSecret string

+ CookieDomain string

+ CookieExpire time.Duration

+ CookieHTTPOnly bool

+ CookieName string

+ CookieRefresh time.Duration

+ CookieSecret string

+ CookieSecure bool

+ Debug bool

+ DefaultUpstreamTimeout time.Duration

+ ForwardAuthURL *url.URL

+ ForwardAuthURLString string

+ GRPCAddr string

+ GRPCClientDNSRoundRobin bool

+ GRPCClientTimeout time.Duration

+ GRPCInsecure bool

+ HTTPRedirectAddr string

+ Headers map[string]string

+ HeadersEnv string

+ IdleTimeout time.Duration

+ InsecureServer bool

+ Key string

+ KeyFile string

+ LogLevel string

+ MetricsAddr string

+ OverrideCertificateName string

+ Policies []Policy

+ PolicyEnv string

+ PolicyFile string

+ Provider string

+ ProviderURL string

+ ReadHeaderTimeout time.Duration

+ ReadTimeout time.Duration

+ RefreshCooldown time.Duration

+ Scopes []string

+ ServiceAccount string

+ Services string

+ SharedKey string

+ SigningKey string

+ TLSCertificate *tls.Certificate

+ TracingDebug bool

+ TracingJaegerAgentEndpoint string

+ TracingJaegerCollectorEndpoint string

+ TracingProvider string

+ WriteTimeout time.Duration

+ func HandleConfigUpdate(configFile string, opt *Options, services []OptionsUpdater) *Options

+ func NewDefaultOptions() *Options

+ func NewOptionsFromConfig(configFile string) (*Options, error)

+ func (o *Options) Checksum() string

+ func (o *Options) OnConfigChange(run func(in fsnotify.Event))

+ func (o *Options) Validate() error

+ type OptionsUpdater interface

+ UpdateOptions func(Options) error

+ type Policy struct

+ AllowPublicUnauthenticatedAccess bool

+ AllowWebsockets bool

+ AllowedDomains []string

+ AllowedEmails []string

+ AllowedGroups []string

+ CORSAllowPreflight bool

+ ClientCertificate *tls.Certificate

+ Destination *url.URL

+ From string

+ RootCAs *x509.CertPool

+ SetRequestHeaders map[string]string

+ Source *url.URL

+ TLSClientCert string

+ TLSClientCertFile string

+ TLSClientKey string

+ TLSClientKeyFile string

+ TLSCustomCA string

+ TLSCustomCAFile string

+ TLSServerName string

+ TLSSkipVerify bool

+ To string

+ UpstreamTimeout time.Duration

+ func (p *Policy) String() string

+ func (p *Policy) Validate() error

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL