user

Dec 22, 2024 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Nov 21, 2024 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Sep 29, 2024 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Sep 20, 2024 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Aug 12, 2024 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Jul 18, 2024 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Jul 2, 2024 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Changes in this version

+ const ErrCodeOpenIDCustomScopeMalformed

+ func GetUsersByCond(s *xorm.Session, cond builder.Cond) (users map[int64]*User, err error)

+ func IsErrOpenIDCustomScopeMalformed(err error) bool

+ type ErrOpenIDCustomScopeMalformed struct

+ func (err *ErrOpenIDCustomScopeMalformed) Error() string

+ func (err *ErrOpenIDCustomScopeMalformed) HTTPError() web.HTTPError

Feb 10, 2024 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Jan 28, 2024 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Changes in this version

+ func SetUserStatus(s *xorm.Session, user *User, status Status) (err error)

Dec 19, 2023 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Changes in this version

type User

+ func (u *User) IsLocalUser() bool

+ func (u *User) ShouldNotify() (bool, error)

Jul 7, 2023 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Changes in this version

+ const ErrCodeUsernameMustNotContainSpaces

+ func IsErrUsernameMustNotContainSpaces(err error) bool

+ type ErrUsernameMustNotContainSpaces struct

+ Username string

+ func (err *ErrUsernameMustNotContainSpaces) Error() string

+ func (err *ErrUsernameMustNotContainSpaces) HTTPError() web.HTTPError

+ type ProjectUserOpts struct

+ AdditionalCond builder.Cond

+ MatchFuzzily bool

+ ReturnAllIfNoSearchProvided bool

type User

+ DefaultProjectID int64

+ FrontendSettings interface{}

Mar 12, 2023 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Mar 10, 2023 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Jan 24, 2023 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Nov 11, 2022 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Oct 28, 2022 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Aug 17, 2022 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Aug 17, 2022 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Aug 3, 2022 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Changes in this version

+ const ErrCodeAccountIsNotLocal

+ const IssuerLocal

+ func DeleteCaldavTokenByID(u *User, id int64) error

+ func IsErrAccountIsNotLocal(err error) bool

+ type ErrAccountIsNotLocal struct

+ UserID int64

+ func (err *ErrAccountIsNotLocal) Error() string

+ func (err *ErrAccountIsNotLocal) HTTPError() web.HTTPError

+ type ListUserOpts struct

+ AdditionalCond builder.Cond

+ ReturnAllIfNoSearchProvided bool

type Login

+ LongToken bool

type Token

+ ClearTextToken string

+ func GenerateNewCaldavToken(u *User) (token *Token, err error)

+ func GetCaldavTokens(u *User) (tokens []*Token, err error)

type TokenKind

+ const TokenCaldavAuth

type User

+ Language string

+ OverdueTasksRemindersTime string

+ Timezone string

Sep 8, 2021 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Sep 5, 2021 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Changes in this version

+ const ErrCodeAccountDisabled

+ const ErrCodeNoOpenIDEmailProvided

+ const StatusActive

+ const StatusDisabled

+ const StatusEmailConfirmationRequired

+ func CancelDeletion(s *xorm.Session, user *User) (err error)

+ func ConfirmDeletion(s *xorm.Session, user *User, token string) (err error)

+ func GetUsersByUsername(s *xorm.Session, usernames []string, withEmails bool) (users map[int64]*User, err error)

+ func HandleFailedTOTPAuth(s *xorm.Session, user *User)

+ func IsErrAccountDisabled(err error) bool

+ func IsErrNoEmailProvided(err error) bool

+ func RegisterDeletionNotificationCron()

+ func RegisterTokenCleanupCron()

+ func RequestDeletion(s *xorm.Session, user *User) (err error)

+ type AccountDeletedNotification struct

+ User *User

+ func (n *AccountDeletedNotification) Name() string

+ func (n *AccountDeletedNotification) ToDB() interface{}

+ func (n *AccountDeletedNotification) ToMail() *notifications.Mail

+ type AccountDeletionConfirmNotification struct

+ ConfirmToken string

+ User *User

+ func (n *AccountDeletionConfirmNotification) Name() string

+ func (n *AccountDeletionConfirmNotification) ToDB() interface{}

+ func (n *AccountDeletionConfirmNotification) ToMail() *notifications.Mail

+ type AccountDeletionNotification struct

+ NotificationNumber int

+ User *User

+ func (n *AccountDeletionNotification) Name() string

+ func (n *AccountDeletionNotification) ToDB() interface{}

+ func (n *AccountDeletionNotification) ToMail() *notifications.Mail

type EmailConfirmNotification

+ ConfirmToken string

+ type ErrAccountDisabled struct

+ UserID int64

+ func (err *ErrAccountDisabled) Error() string

+ func (err *ErrAccountDisabled) HTTPError() web.HTTPError

+ type ErrNoOpenIDEmailProvided struct

+ func (err *ErrNoOpenIDEmailProvided) Error() string

+ func (err *ErrNoOpenIDEmailProvided) HTTPError() web.HTTPError

+ type FailedLoginAttemptNotification struct

+ User *User

+ func (n *FailedLoginAttemptNotification) Name() string

+ func (n *FailedLoginAttemptNotification) ToDB() interface{}

+ func (n *FailedLoginAttemptNotification) ToMail() *notifications.Mail

+ type InvalidTOTPNotification struct

+ User *User

+ func (n *InvalidTOTPNotification) Name() string

+ func (n *InvalidTOTPNotification) ToDB() interface{}

+ func (n *InvalidTOTPNotification) ToMail() *notifications.Mail

+ type PasswordAccountLockedAfterInvalidTOTOPNotification struct

+ User *User

+ func (n *PasswordAccountLockedAfterInvalidTOTOPNotification) Name() string

+ func (n *PasswordAccountLockedAfterInvalidTOTOPNotification) ToDB() interface{}

+ func (n *PasswordAccountLockedAfterInvalidTOTOPNotification) ToMail() *notifications.Mail

type ResetPasswordNotification

+ Token *Token

+ type Status int

+ func (s Status) String() string

+ type Token struct

+ Created time.Time

+ ID int64

+ Kind TokenKind

+ Token string

+ UserID int64

+ func (t *Token) TableName() string

+ type TokenKind int

+ const TokenAccountDeletion

+ const TokenEmailConfirm

+ const TokenPasswordReset

+ const TokenUnknown

type User

+ DefaultListID int64

+ DeletionLastReminderSent time.Time

+ DeletionScheduledAt time.Time

+ ExportFileID int64

+ Status Status

+ WeekStart int

+ func GetCurrentUserFromDB(s *xorm.Session, c echo.Context) (user *User, err error)

+ func (u *User) GetFailedPasswordAttemptsKey() string

+ func (u *User) GetFailedTOTPAttemptsKey() string

+ func (u *User) SetStatus(s *xorm.Session, status Status) (err error)

Jun 9, 2021 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

May 14, 2021 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Changes in this version

+ func HashPassword(password string) (string, error)

+ func RegisterListeners()

+ type CreatedEvent struct

+ User *User

+ func (t *CreatedEvent) Name() string

+ type EmailConfirmNotification struct

+ IsNew bool

+ User *User

+ func (n *EmailConfirmNotification) Name() string

+ func (n *EmailConfirmNotification) ToDB() interface{}

+ func (n *EmailConfirmNotification) ToMail() *notifications.Mail

+ type IncreaseUserCounter struct

+ func (s *IncreaseUserCounter) Handle(msg *message.Message) (err error)

+ func (s *IncreaseUserCounter) Name() string

+ type PasswordChangedNotification struct

+ User *User

+ func (n *PasswordChangedNotification) Name() string

+ func (n *PasswordChangedNotification) ToDB() interface{}

+ func (n *PasswordChangedNotification) ToMail() *notifications.Mail

+ type ResetPasswordNotification struct

+ User *User

+ func (n *ResetPasswordNotification) Name() string

+ func (n *ResetPasswordNotification) ToDB() interface{}

+ func (n *ResetPasswordNotification) ToMail() *notifications.Mail

type User

+ DiscoverableByEmail bool

+ DiscoverableByName bool

+ OverdueTasksRemindersEnabled bool

+ func ListAllUsers(s *xorm.Session) (users []*User, err error)

+ func (u *User) GetName() string

+ func (u *User) GetNameAndFromEmail() string

+ func (u *User) RouteForDB() int64

+ func (u *User) RouteForMail() (string, error)

Apr 22, 2021 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Jan 10, 2021 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Changes in this version

+ func GetUsersByIDs(s *xorm.Session, userIDs []int64) (users map[int64]*User, err error)

+ func IsErrNoPasswordResetToken(err error) bool

type User

+ EmailRemindersEnabled bool

+ Issuer string

+ Name string

+ Subject string

Oct 20, 2020 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Oct 19, 2020 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Changes in this version

+ const ErrCodeInvalidAvatarProvider

+ func IsErrInvalidAvatarProvider(err error) bool

+ func RequestUserPasswordResetTokenByEmail(tr *PasswordTokenRequest) (err error)

+ type ErrInvalidAvatarProvider struct

+ AvatarProvider string

+ func (err ErrInvalidAvatarProvider) Error() string

+ func (err ErrInvalidAvatarProvider) HTTPError() web.HTTPError

type User

+ AvatarFileID int64

+ AvatarProvider string

Jul 7, 2020 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Jul 1, 2020 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

May 19, 2020 GO-2026-4480

  GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

Changes in this version

+ const ErrCodeCouldNotGetUserID

+ const ErrCodeEmailNotConfirmed

+ const ErrCodeEmptyNewPassword

+ const ErrCodeEmptyOldPassword

+ const ErrCodeInvalidEmailConfirmToken

+ const ErrCodeInvalidPasswordResetToken

+ const ErrCodeInvalidTOTPPasscode

+ const ErrCodeNoPasswordResetToken

+ const ErrCodeNoUsernamePassword

+ const ErrCodeTOTPAlreadyEnabled

+ const ErrCodeTOTPNotEnabled

+ const ErrCodeUserDoesNotExist

+ const ErrCodeWrongUsernameOrPassword

+ const ErrorCodeUserEmailExists

+ const ErrorCodeUsernameExists

+ func CheckUserPassword(user *User, password string) error

+ func ConfirmEmail(c *EmailConfirm) (err error)

+ func DisableTOTP(user *User) (err error)

+ func EnableTOTP(passcode *TOTPPasscode) (err error)

+ func GetTOTPQrCodeForUser(user *User) (qrcode image.Image, err error)

+ func GetTables() []interface

+ func InitDB() (err error)

+ func InitTests()

+ func IsErrCouldNotGetUserID(err error) bool

+ func IsErrEmailNotConfirmed(err error) bool

+ func IsErrEmptyNewPassword(err error) bool

+ func IsErrEmptyOldPassword(err error) bool

+ func IsErrInvalidEmailConfirmToken(err error) bool

+ func IsErrInvalidPasswordResetToken(err error) bool

+ func IsErrInvalidTOTPPasscode(err error) bool

+ func IsErrNoUsernamePassword(err error) bool

+ func IsErrTOTPAlreadyEnabled(err error) bool

+ func IsErrTOTPNotEnabled(err error) bool

+ func IsErrUserDoesNotExist(err error) bool

+ func IsErrUserEmailExists(err error) bool

+ func IsErrUsernameExists(err error) bool

+ func IsErrWrongUsernameOrPassword(err error) bool

+ func RequestUserPasswordResetToken(tr *PasswordTokenRequest) (err error)

+ func ResetPassword(reset *PasswordReset) (err error)

+ func TOTPEnabledForUser(user *User) (bool, error)

+ func UpdateEmail(update *EmailUpdate) (err error)

+ func UpdateUserPassword(user *User, newPassword string) (err error)

+ type APIUserPassword struct

+ Email string

+ ID int64

+ Password string

+ Username string

+ func (apiUser *APIUserPassword) APIFormat() *User

+ type EmailConfirm struct

+ Token string

+ type EmailUpdate struct

+ NewEmail string

+ Password string

+ User *User

+ type ErrCouldNotGetUserID struct

+ func (err ErrCouldNotGetUserID) Error() string

+ func (err ErrCouldNotGetUserID) HTTPError() web.HTTPError

+ type ErrEmailNotConfirmed struct

+ UserID int64

+ func (err ErrEmailNotConfirmed) Error() string

+ func (err ErrEmailNotConfirmed) HTTPError() web.HTTPError

+ type ErrEmptyNewPassword struct

+ func (err ErrEmptyNewPassword) Error() string

+ func (err ErrEmptyNewPassword) HTTPError() web.HTTPError

+ type ErrEmptyOldPassword struct

+ func (err ErrEmptyOldPassword) Error() string

+ func (err ErrEmptyOldPassword) HTTPError() web.HTTPError

+ type ErrInvalidEmailConfirmToken struct

+ Token string

+ func (err ErrInvalidEmailConfirmToken) Error() string

+ func (err ErrInvalidEmailConfirmToken) HTTPError() web.HTTPError

+ type ErrInvalidPasswordResetToken struct

+ Token string

+ func (err ErrInvalidPasswordResetToken) Error() string

+ func (err ErrInvalidPasswordResetToken) HTTPError() web.HTTPError

+ type ErrInvalidTOTPPasscode struct

+ Passcode string

+ func (err ErrInvalidTOTPPasscode) Error() string

+ func (err ErrInvalidTOTPPasscode) HTTPError() web.HTTPError

+ type ErrNoPasswordResetToken struct

+ UserID int64

+ func (err ErrNoPasswordResetToken) Error() string

+ func (err ErrNoPasswordResetToken) HTTPError() web.HTTPError

+ type ErrNoUsernamePassword struct

+ func (err ErrNoUsernamePassword) Error() string

+ func (err ErrNoUsernamePassword) HTTPError() web.HTTPError

+ type ErrTOTPAlreadyEnabled struct

+ func (err ErrTOTPAlreadyEnabled) Error() string

+ func (err ErrTOTPAlreadyEnabled) HTTPError() web.HTTPError

+ type ErrTOTPNotEnabled struct

+ func (err ErrTOTPNotEnabled) Error() string

+ func (err ErrTOTPNotEnabled) HTTPError() web.HTTPError

+ type ErrUserDoesNotExist struct

+ UserID int64

+ func (err ErrUserDoesNotExist) Error() string

+ func (err ErrUserDoesNotExist) HTTPError() web.HTTPError

+ type ErrUserEmailExists struct

+ Email string

+ UserID int64

+ func (err ErrUserEmailExists) Error() string

+ func (err ErrUserEmailExists) HTTPError() web.HTTPError

+ type ErrUsernameExists struct

+ UserID int64

+ Username string

+ func (err ErrUsernameExists) Error() string

+ func (err ErrUsernameExists) HTTPError() web.HTTPError

+ type ErrWrongUsernameOrPassword struct

+ func (err ErrWrongUsernameOrPassword) Error() string

+ func (err ErrWrongUsernameOrPassword) HTTPError() web.HTTPError

+ type Login struct

+ Password string

+ TOTPPasscode string

+ Username string

+ type PasswordReset struct

+ NewPassword string

+ Token string

+ type PasswordTokenRequest struct

+ Email string

+ type TOTP struct

+ Enabled bool

+ ID int64

+ Secret string

+ URL string

+ UserID int64

+ func EnrollTOTP(user *User) (t *TOTP, err error)

+ func GetTOTPForUser(user *User) (t *TOTP, err error)

+ func ValidateTOTPPasscode(passcode *TOTPPasscode) (t *TOTP, err error)

+ func (T *TOTP) TableName() string

+ type TOTPPasscode struct

+ Passcode string

+ User *User

+ type User struct

+ Created timeutil.TimeStamp

+ Email string

+ EmailConfirmToken string

+ ID int64

+ IsActive bool

+ Password string

+ PasswordResetToken string

+ Updated timeutil.TimeStamp

+ Username string

+ func CheckUserCredentials(u *Login) (*User, error)

+ func CreateUser(user *User) (newUser *User, err error)

+ func GetCurrentUser(c echo.Context) (user *User, err error)

+ func GetFromAuth(a web.Auth) (*User, error)

+ func GetUser(user *User) (userOut *User, err error)

+ func GetUserByID(id int64) (user *User, err error)

+ func GetUserByUsername(username string) (user *User, err error)

+ func GetUserFromClaims(claims jwt.MapClaims) (user *User, err error)

+ func GetUserWithEmail(user *User) (userOut *User, err error)

+ func ListUsers(searchterm string) (users []User, err error)

+ func UpdateUser(user *User) (updatedUser *User, err error)

+ func (User) TableName() string

+ func (u *User) GetID() int64