GO-2025-3834: 1Panel agent certificate verification bypass leading to arbitrary command execution in github.com/1Panel-dev/1Panel/core

psession

package

v0.0.0-...-9cca14c Latest Latest Go to latest Published: May 29, 2026 License: GPL-3.0 Imports: 9 Imported by: 0

Details

View Source

const GinContextSessionUserKey = "session_user"

View Source

const SuperAdminSessionUserID = "__super_admin__"

This section is empty.

This section is empty.

type PSession struct {
	// contains filtered or unexported fields
}

func NewPSession(_ string) *PSession

func (p *PSession) CheckCSRFToken(c *gin.Context, token string) bool

func (p *PSession) Clean() error

func (p *PSession) Delete(c *gin.Context) error

func (p *PSession) DeleteByID(id string) error

func (p *PSession) Get(c *gin.Context) (SessionUser, error)

func (p *PSession) RefreshIfNeeded(c *gin.Context, user SessionUser, secure bool, ttlSeconds int) (bool, error)

func (p *PSession) Set(c *gin.Context, user SessionUser, secure bool, ttlSeconds int) error

func (p *PSession) SetFresh(c *gin.Context, user SessionUser, secure bool, ttlSeconds int) error

type SessionUser struct {
	ID   string `json:"id"`
	Role string `json:"role"`
	Name string `json:"name"`
}