GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

passkey

package

v0.10.8 Latest Latest Go to latest Published: Feb 7, 2026 License: AGPL-3.0 Imports: 16 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/QuantumNous/new-api

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func BuildWebAuthn(r *http.Request) (*webauthn.WebAuthn, error)
func PopSessionData(c *gin.Context, key string) (*webauthn.SessionData, error)
func SaveSessionData(c *gin.Context, key string, data *webauthn.SessionData) error
type WebAuthnUser
- func NewWebAuthnUser(user *model.User, credential *model.PasskeyCredential) *WebAuthnUser

Constants ¶

View Source

const (
	RegistrationSessionKey = "passkey_registration_session"
	LoginSessionKey        = "passkey_login_session"
	VerifySessionKey       = "passkey_verify_session"
)

Variables ¶

This section is empty.

Functions ¶

func BuildWebAuthn ¶

func BuildWebAuthn(r *http.Request) (*webauthn.WebAuthn, error)

BuildWebAuthn constructs a WebAuthn instance using the current passkey settings and request context.

func PopSessionData ¶

func PopSessionData(c *gin.Context, key string) (*webauthn.SessionData, error)

func SaveSessionData ¶

func SaveSessionData(c *gin.Context, key string, data *webauthn.SessionData) error

Types ¶

type WebAuthnUser ¶

type WebAuthnUser struct {
	// contains filtered or unexported fields
}

func NewWebAuthnUser ¶

func NewWebAuthnUser(user *model.User, credential *model.PasskeyCredential) *WebAuthnUser

func (*WebAuthnUser) ModelUser ¶

func (u *WebAuthnUser) ModelUser() *model.User

func (*WebAuthnUser) PasskeyCredential ¶

func (u *WebAuthnUser) PasskeyCredential() *model.PasskeyCredential

func (*WebAuthnUser) WebAuthnCredentials ¶

func (u *WebAuthnUser) WebAuthnCredentials() []webauthn.Credential

func (*WebAuthnUser) WebAuthnDisplayName ¶

func (u *WebAuthnUser) WebAuthnDisplayName() string

func (*WebAuthnUser) WebAuthnID ¶

func (u *WebAuthnUser) WebAuthnID() []byte

func (*WebAuthnUser) WebAuthnName ¶

func (u *WebAuthnUser) WebAuthnName() string

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL