GO-2024-2637: Account Takeover via Session Fixation in Zitadel [Bypassing MFA] in github.com/zitadel/zitadel

GO-2024-2664: ZITADEL's actions can overload reserved claims in github.com/zitadel/zitadel

GO-2024-2665: ZITADEL's Improper Content-Type Validation Leads to Account Takeover via Stored XSS + CSP Bypass in github.com/zitadel/zitadel

GO-2024-2788: ZITADEL's Improper Lockout Mechanism Leads to MFA Bypass in github.com/zitadel/zitadel

GO-2024-2804: Zitadel exposing internal database user name and host information in github.com/zitadel/zitadel

view

package

v1.87.5 Latest Latest Go to latest Published: Dec 20, 2022 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/zitadel/zitadel

Links

Open Source Insights

Documentation ¶

Index ¶

func ActiveUserSessions(db *gorm.DB, table string) (uint64, error)
func ChangesQuery(userID string, latestSequence, limit uint64, sortAscending bool, ...) *es_models.SearchQuery
func DeleteApplicationRefreshTokens(db *gorm.DB, table string, appIDs []string) error
func DeleteApplicationTokens(db *gorm.DB, table string, appIDs []string) error
func DeleteExternalIDP(db *gorm.DB, table, externalUserID, idpConfigID string) error
func DeleteExternalIDPsByUserID(db *gorm.DB, table, userID string) error
func DeleteNotifyUser(db *gorm.DB, table, userID string) error
func DeleteRefreshToken(db *gorm.DB, table, tokenID string) error
func DeleteSessionRefreshTokens(db *gorm.DB, table, agentID, userID string) error
func DeleteSessionTokens(db *gorm.DB, table, agentID, userID string) error
func DeleteToken(db *gorm.DB, table, tokenID string) error
func DeleteTokensFromRefreshToken(db *gorm.DB, table, refreshTokenID string) error
func DeleteUser(db *gorm.DB, table, userID string) error
func DeleteUserMembership(db *gorm.DB, table, userID, aggregateID, objectID string, ...) error
func DeleteUserMembershipsByAggregateID(db *gorm.DB, table, aggregateID string) error
func DeleteUserMembershipsByAggregateIDAndObjectID(db *gorm.DB, table, aggregateID, objectID string) error
func DeleteUserMembershipsByUserID(db *gorm.DB, table, userID string) error
func DeleteUserRefreshTokens(db *gorm.DB, table, userID string) error
func DeleteUserSessions(db *gorm.DB, table, userID string) error
func DeleteUserTokens(db *gorm.DB, table, userID string) error
func ExternalIDPByExternalUserIDAndIDPConfigID(db *gorm.DB, table, externalUserID, idpConfigID string) (*model.ExternalIDPView, error)
func ExternalIDPByExternalUserIDAndIDPConfigIDAndResourceOwner(db *gorm.DB, table, externalUserID, idpConfigID, resourceOwner string) (*model.ExternalIDPView, error)
func ExternalIDPsByIDPConfigID(db *gorm.DB, table, idpConfigID string) ([]*model.ExternalIDPView, error)
func ExternalIDPsByIDPConfigIDAndResourceOwner(db *gorm.DB, table, idpConfigID, resourceOwner string) ([]*model.ExternalIDPView, error)
func ExternalIDPsByIDPConfigIDAndResourceOwners(db *gorm.DB, table, idpConfigID string, resourceOwners []string) ([]*model.ExternalIDPView, error)
func ExternalIDPsByUserID(db *gorm.DB, table, userID string) ([]*model.ExternalIDPView, error)
func GetGlobalUserByLoginName(db *gorm.DB, table, loginName string) (*model.UserView, error)
func IsUserUnique(db *gorm.DB, table, userName, email, orgID string) (bool, error)
func NotifyUserByID(db *gorm.DB, table, userID string) (*model.NotifyUser, error)
func NotifyUsersByOrgID(db *gorm.DB, table, orgID string) ([]*model.NotifyUser, error)
func PutExternalIDP(db *gorm.DB, table string, idp *model.ExternalIDPView) error
func PutExternalIDPs(db *gorm.DB, table string, externalIDPs ...*model.ExternalIDPView) error
func PutNotifyUser(db *gorm.DB, table string, project *model.NotifyUser) error
func PutRefreshToken(db *gorm.DB, table string, token *usr_model.RefreshTokenView) error
func PutRefreshTokens(db *gorm.DB, table string, tokens ...*usr_model.RefreshTokenView) error
func PutToken(db *gorm.DB, table string, token *usr_model.TokenView) error
func PutTokens(db *gorm.DB, table string, tokens ...*usr_model.TokenView) error
func PutUser(db *gorm.DB, table string, user *model.UserView) error
func PutUserMembership(db *gorm.DB, table string, user *model.UserMembershipView) error
func PutUserMemberships(db *gorm.DB, table string, users ...*model.UserMembershipView) error
func PutUserSession(db *gorm.DB, table string, session *model.UserSessionView) error
func PutUserSessions(db *gorm.DB, table string, sessions ...*model.UserSessionView) error
func PutUsers(db *gorm.DB, table string, users ...*model.UserView) error
func RefreshTokenByID(db *gorm.DB, table, tokenID string) (*usr_model.RefreshTokenView, error)
func RefreshTokensByUserID(db *gorm.DB, table, userID string) ([]*usr_model.RefreshTokenView, error)
func SearchExternalIDPs(db *gorm.DB, table string, req *usr_model.ExternalIDPSearchRequest) ([]*model.ExternalIDPView, uint64, error)
func SearchRefreshTokens(db *gorm.DB, table string, req *model.RefreshTokenSearchRequest) ([]*usr_model.RefreshTokenView, uint64, error)
func SearchUserMemberships(db *gorm.DB, table string, req *usr_model.UserMembershipSearchRequest) ([]*model.UserMembershipView, uint64, error)
func SearchUsers(db *gorm.DB, table string, req *usr_model.UserSearchRequest) ([]*model.UserView, uint64, error)
func TokenByID(db *gorm.DB, table, tokenID string) (*usr_model.TokenView, error)
func TokensByUserID(db *gorm.DB, table, userID string) ([]*usr_model.TokenView, error)
func UserByID(db *gorm.DB, table, userID string) (*model.UserView, error)
func UserByIDAndResourceOwner(db *gorm.DB, table, userID, resourceOwner string) (*model.UserView, error)
func UserByIDQuery(id string, latestSequence uint64) (*es_models.SearchQuery, error)
func UserByLoginName(db *gorm.DB, table, loginName string) (*model.UserView, error)
func UserByLoginNameAndResourceOwner(db *gorm.DB, table, loginName, resourceOwner string) (*model.UserView, error)
func UserByUserName(db *gorm.DB, table, userName string) (*model.UserView, error)
func UserIDsByDomain(db *gorm.DB, table, orgDomain string) ([]string, error)
func UserMFAs(db *gorm.DB, table, userID string) ([]*usr_model.MultiFactor, error)
func UserMembershipByIDs(db *gorm.DB, table, userID, aggregateID, objectID string, ...) (*model.UserMembershipView, error)
func UserMembershipsByAggregateID(db *gorm.DB, table, aggregateID string) ([]*model.UserMembershipView, error)
func UserMembershipsByResourceOwner(db *gorm.DB, table, resourceOwner string) ([]*model.UserMembershipView, error)
func UserQuery(latestSequence uint64) *es_models.SearchQuery
func UserSessionByIDs(db *gorm.DB, table, agentID, userID string) (*model.UserSessionView, error)
func UserSessionsByAgentID(db *gorm.DB, table, agentID string) ([]*model.UserSessionView, error)
func UserSessionsByUserID(db *gorm.DB, table, userID string) ([]*model.UserSessionView, error)
func UsersByOrgID(db *gorm.DB, table, orgID string) ([]*model.UserView, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ActiveUserSessions ¶

func ActiveUserSessions(db *gorm.DB, table string) (uint64, error)

func ChangesQuery ¶

func ChangesQuery(userID string, latestSequence, limit uint64, sortAscending bool, retention time.Duration) *es_models.SearchQuery

func DeleteApplicationRefreshTokens ¶

func DeleteApplicationRefreshTokens(db *gorm.DB, table string, appIDs []string) error

func DeleteApplicationTokens ¶

func DeleteApplicationTokens(db *gorm.DB, table string, appIDs []string) error

func DeleteExternalIDP ¶

func DeleteExternalIDP(db *gorm.DB, table, externalUserID, idpConfigID string) error

func DeleteExternalIDPsByUserID ¶

func DeleteExternalIDPsByUserID(db *gorm.DB, table, userID string) error

func DeleteNotifyUser ¶

func DeleteNotifyUser(db *gorm.DB, table, userID string) error

func DeleteRefreshToken ¶

func DeleteRefreshToken(db *gorm.DB, table, tokenID string) error

func DeleteSessionRefreshTokens ¶

func DeleteSessionRefreshTokens(db *gorm.DB, table, agentID, userID string) error

func DeleteSessionTokens ¶

func DeleteSessionTokens(db *gorm.DB, table, agentID, userID string) error

func DeleteToken ¶

func DeleteToken(db *gorm.DB, table, tokenID string) error

func DeleteTokensFromRefreshToken ¶

func DeleteTokensFromRefreshToken(db *gorm.DB, table, refreshTokenID string) error

func DeleteUser ¶

func DeleteUser(db *gorm.DB, table, userID string) error

func DeleteUserMembership ¶

func DeleteUserMembership(db *gorm.DB, table, userID, aggregateID, objectID string, membertype usr_model.MemberType) error

func DeleteUserMembershipsByAggregateID ¶

func DeleteUserMembershipsByAggregateID(db *gorm.DB, table, aggregateID string) error

func DeleteUserMembershipsByAggregateIDAndObjectID ¶

func DeleteUserMembershipsByAggregateIDAndObjectID(db *gorm.DB, table, aggregateID, objectID string) error

func DeleteUserMembershipsByUserID ¶

func DeleteUserMembershipsByUserID(db *gorm.DB, table, userID string) error

func DeleteUserRefreshTokens ¶

func DeleteUserRefreshTokens(db *gorm.DB, table, userID string) error

func DeleteUserSessions ¶

func DeleteUserSessions(db *gorm.DB, table, userID string) error

func DeleteUserTokens ¶

func DeleteUserTokens(db *gorm.DB, table, userID string) error

func ExternalIDPByExternalUserIDAndIDPConfigID ¶

func ExternalIDPByExternalUserIDAndIDPConfigID(db *gorm.DB, table, externalUserID, idpConfigID string) (*model.ExternalIDPView, error)

func ExternalIDPByExternalUserIDAndIDPConfigIDAndResourceOwner ¶

func ExternalIDPByExternalUserIDAndIDPConfigIDAndResourceOwner(db *gorm.DB, table, externalUserID, idpConfigID, resourceOwner string) (*model.ExternalIDPView, error)

func ExternalIDPsByIDPConfigID ¶

func ExternalIDPsByIDPConfigID(db *gorm.DB, table, idpConfigID string) ([]*model.ExternalIDPView, error)

func ExternalIDPsByIDPConfigIDAndResourceOwner ¶

func ExternalIDPsByIDPConfigIDAndResourceOwner(db *gorm.DB, table, idpConfigID, resourceOwner string) ([]*model.ExternalIDPView, error)

func ExternalIDPsByIDPConfigIDAndResourceOwners ¶

func ExternalIDPsByIDPConfigIDAndResourceOwners(db *gorm.DB, table, idpConfigID string, resourceOwners []string) ([]*model.ExternalIDPView, error)

func ExternalIDPsByUserID ¶

func ExternalIDPsByUserID(db *gorm.DB, table, userID string) ([]*model.ExternalIDPView, error)

func GetGlobalUserByLoginName ¶

func GetGlobalUserByLoginName(db *gorm.DB, table, loginName string) (*model.UserView, error)

func IsUserUnique ¶

func IsUserUnique(db *gorm.DB, table, userName, email, orgID string) (bool, error)

func NotifyUserByID ¶

func NotifyUserByID(db *gorm.DB, table, userID string) (*model.NotifyUser, error)

func NotifyUsersByOrgID ¶

func NotifyUsersByOrgID(db *gorm.DB, table, orgID string) ([]*model.NotifyUser, error)

func PutExternalIDP ¶

func PutExternalIDP(db *gorm.DB, table string, idp *model.ExternalIDPView) error

func PutExternalIDPs ¶

func PutExternalIDPs(db *gorm.DB, table string, externalIDPs ...*model.ExternalIDPView) error

func PutNotifyUser ¶

func PutNotifyUser(db *gorm.DB, table string, project *model.NotifyUser) error

func PutRefreshToken ¶

func PutRefreshToken(db *gorm.DB, table string, token *usr_model.RefreshTokenView) error

func PutRefreshTokens ¶

func PutRefreshTokens(db *gorm.DB, table string, tokens ...*usr_model.RefreshTokenView) error

func PutToken ¶

func PutToken(db *gorm.DB, table string, token *usr_model.TokenView) error

func PutTokens ¶

func PutTokens(db *gorm.DB, table string, tokens ...*usr_model.TokenView) error

func PutUser ¶

func PutUser(db *gorm.DB, table string, user *model.UserView) error

func PutUserMembership ¶

func PutUserMembership(db *gorm.DB, table string, user *model.UserMembershipView) error

func PutUserMemberships ¶

func PutUserMemberships(db *gorm.DB, table string, users ...*model.UserMembershipView) error

func PutUserSession ¶

func PutUserSession(db *gorm.DB, table string, session *model.UserSessionView) error

func PutUserSessions ¶

func PutUserSessions(db *gorm.DB, table string, sessions ...*model.UserSessionView) error

func PutUsers ¶

func PutUsers(db *gorm.DB, table string, users ...*model.UserView) error

func RefreshTokenByID ¶

func RefreshTokenByID(db *gorm.DB, table, tokenID string) (*usr_model.RefreshTokenView, error)

func RefreshTokensByUserID ¶

func RefreshTokensByUserID(db *gorm.DB, table, userID string) ([]*usr_model.RefreshTokenView, error)

func SearchExternalIDPs ¶

func SearchExternalIDPs(db *gorm.DB, table string, req *usr_model.ExternalIDPSearchRequest) ([]*model.ExternalIDPView, uint64, error)

func SearchRefreshTokens ¶

func SearchRefreshTokens(db *gorm.DB, table string, req *model.RefreshTokenSearchRequest) ([]*usr_model.RefreshTokenView, uint64, error)

func SearchUserMemberships ¶

func SearchUserMemberships(db *gorm.DB, table string, req *usr_model.UserMembershipSearchRequest) ([]*model.UserMembershipView, uint64, error)

func SearchUsers ¶

func SearchUsers(db *gorm.DB, table string, req *usr_model.UserSearchRequest) ([]*model.UserView, uint64, error)

func TokenByID ¶

func TokenByID(db *gorm.DB, table, tokenID string) (*usr_model.TokenView, error)

func TokensByUserID ¶

func TokensByUserID(db *gorm.DB, table, userID string) ([]*usr_model.TokenView, error)

func UserByID ¶

func UserByID(db *gorm.DB, table, userID string) (*model.UserView, error)

func UserByIDAndResourceOwner ¶

func UserByIDAndResourceOwner(db *gorm.DB, table, userID, resourceOwner string) (*model.UserView, error)

func UserByIDQuery ¶

func UserByIDQuery(id string, latestSequence uint64) (*es_models.SearchQuery, error)

func UserByLoginName ¶

func UserByLoginName(db *gorm.DB, table, loginName string) (*model.UserView, error)

func UserByLoginNameAndResourceOwner ¶

func UserByLoginNameAndResourceOwner(db *gorm.DB, table, loginName, resourceOwner string) (*model.UserView, error)

func UserByUserName ¶

func UserByUserName(db *gorm.DB, table, userName string) (*model.UserView, error)

func UserIDsByDomain ¶

func UserIDsByDomain(db *gorm.DB, table, orgDomain string) ([]string, error)

func UserMFAs ¶

func UserMFAs(db *gorm.DB, table, userID string) ([]*usr_model.MultiFactor, error)

func UserMembershipByIDs ¶

func UserMembershipByIDs(db *gorm.DB, table, userID, aggregateID, objectID string, membertype usr_model.MemberType) (*model.UserMembershipView, error)

func UserMembershipsByAggregateID ¶

func UserMembershipsByAggregateID(db *gorm.DB, table, aggregateID string) ([]*model.UserMembershipView, error)

func UserMembershipsByResourceOwner ¶

func UserMembershipsByResourceOwner(db *gorm.DB, table, resourceOwner string) ([]*model.UserMembershipView, error)

func UserQuery ¶

func UserQuery(latestSequence uint64) *es_models.SearchQuery

func UserSessionByIDs ¶

func UserSessionByIDs(db *gorm.DB, table, agentID, userID string) (*model.UserSessionView, error)

func UserSessionsByAgentID ¶

func UserSessionsByAgentID(db *gorm.DB, table, agentID string) ([]*model.UserSessionView, error)

func UserSessionsByUserID ¶

func UserSessionsByUserID(db *gorm.DB, table, userID string) ([]*model.UserSessionView, error)

func UsersByOrgID ¶

func UsersByOrgID(db *gorm.DB, table, orgID string) ([]*model.UserView, error)

Types ¶

This section is empty.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
model

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL