Affected by GO-2022-1023 and 1 other vulnerabilities

GO-2022-1023: Brokercap Bifrost subject to authentication bypass when using HTTP basic authentication in github.com/brokercap/Bifrost

GO-2022-1067: Bifrost vulnerable to authentication check flaw that leads to authentication bypass in github.com/brokercap/Bifrost

user

package

v1.7.2-release Latest Latest Go to latest Published: Feb 21, 2021 License: Apache-2.0 Imports: 10 Imported by: 0

Details

View Source

const USER_PREFIX string = "bifrost_UserList_"

This section is empty.

func AddFailedIp(ip string)

func AddRefuseIp(ip string)

func AddUser(Name, Password, GroupName string, Host string) error

func CheckRefuseIp(ip string) bool

func CheckUserHost(IP, Host string) (err error)

func CheckUserHost0(ipArr []string, Host string) bool

func DelFailedIp(ip string)

func DelRefuseIp(ip string)

func DelRefuseIpByTimeOut()

func DelUser(Name string) error

func GetLastLoginLog() (logInfo string, err error)

func GetRefuseIpMap() map[string]string

func InitUser()

func RecoveryUser(content *json.RawMessage)

func UpdateUser(Name, Password, GroupName string, Host string) error

type UserGroupType string

type UserInfo struct {
	Name       string
	Password   string
	Group      string
	Host       string
	AddTime    int64
	UpdateTime int64
}

func CheckUser(Name, Password string) (userInfo *UserInfo, err error)

func CheckUserWithIP(Name, Password string, IP string) (userInfo *UserInfo, err error)

func GetUserInfo(Name string) *UserInfo

func GetUserList() []UserInfo