Affected by GO-2023-1808 and 2 other vulnerabilities

GO-2023-1808: Go package pydio/cells vulnerable to authorization bypass in github.com/pydio/cells

GO-2023-1809: go package pydio cells vulnerable to cross-site scripting in github.com/pydio/cells

GO-2023-2344: Abstrium Pydio Cells Resource Injection vulnerability in github.com/pydio/cells

The highest tagged major version is v4.

grpc

package

v2.0.0-rc1+incompatible Latest Latest Go to latest Published: Oct 11, 2019 License: AGPL-3.0 Imports: 21 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Package grpc spins an OpenID Connect Server using the coreos/dex implementation

This section is empty.

This section is empty.

func NewAuthTokenRevokerHandler(dexConfig auth.Config) (proto.AuthTokenRevokerHandler, error)

type TokenRevokerHandler struct {
	// contains filtered or unexported fields
}

func (h *TokenRevokerHandler) MatchInvalid(ctx context.Context, in *proto.MatchInvalidTokenRequest, out *proto.MatchInvalidTokenResponse) error

MatchInvalid checks if token is part of revocation list

func (h *TokenRevokerHandler) PruneTokens(ctx context.Context, in *proto.PruneTokensRequest, out *proto.PruneTokensResponse) error

PruneTokens garbage collect expired IdTokens and Tokens

func (h *TokenRevokerHandler) Revoke(ctx context.Context, in *proto.RevokeTokenRequest, out *proto.RevokeTokenResponse) error

Revoke adds token to revocation list and eventually clear RefreshToken as well (directly inside Dex)