Affected by GO-2023-1723 and 8 other vulnerabilities

GO-2023-1723: SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb

GO-2023-2166: SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb

GO-2024-2597: Integer overflow in chunking helper causes dispatching to miss elements or panic in github.com/authzed/spicedb

GO-2024-2716: SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used in github.com/authzed/spicedb

GO-2024-2939: SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb

GO-2024-3131: SpiceDB having multiple caveats on resources of the same type may improperly result in no permission in github.com/authzed/spicedb

GO-2025-3744: SpiceDB checks involving relations with caveats can result in no permission when permission is expected in github.com/authzed/spicedb

GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

grpcutil

package

v0.0.1 Latest Latest Go to latest Published: Aug 23, 2021 License: Apache-2.0 Imports: 6 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/authzed/spicedb

Links

Documentation ¶

Index ¶

func RequireStatus(t *testing.T, expected codes.Code, err error)
type AuthlessHealthServer
- func NewAuthlessHealthServer() *AuthlessHealthServer
type IgnoreAuthMixin
- func (m IgnoreAuthMixin) AuthFuncOverride(ctx context.Context, fullMethodName string) (context.Context, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func RequireStatus ¶

func RequireStatus(t *testing.T, expected codes.Code, err error)

RequireStatus asserts that an error is a gRPC error and returns the expected status code.

Types ¶

type AuthlessHealthServer ¶

type AuthlessHealthServer struct {
	*health.Server
	IgnoreAuthMixin
}

AuthlessHealthServer implements a gRPC health endpoint that will ignore any auth requirements set by github.com/grpc-ecosystem/go-grpc-middleware/auth.

func NewAuthlessHealthServer ¶

func NewAuthlessHealthServer() *AuthlessHealthServer

NewAuthlessServer returns a new gRPC health server that ignores auth middleware.

type IgnoreAuthMixin ¶

type IgnoreAuthMixin struct{}

IgnoreAuthMix implements the ServiceAuthFuncOverride interface to ignore any auth requirements set by github.com/grpc-ecosystem/go-grpc-middleware/auth.

func (IgnoreAuthMixin) AuthFuncOverride ¶

func (m IgnoreAuthMixin) AuthFuncOverride(ctx context.Context, fullMethodName string) (context.Context, error)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL