Affected by GO-2022-0395 and 4 other vulnerabilities

GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

The highest tagged major version is v2.

auth

package

v1.1.0 Latest Latest Go to latest Published: Oct 6, 2020 License: MIT Imports: 13 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/cli/cli

Links

Open Source Insights

Documentation ¶

Index ¶

type OAuthFlow
- func (oa *OAuthFlow) ObtainAccessToken() (accessToken string, err error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type OAuthFlow ¶

type OAuthFlow struct {
	Hostname         string
	ClientID         string
	ClientSecret     string
	Scopes           []string
	OpenInBrowser    func(string, string) error
	WriteSuccessHTML func(io.Writer)
	VerboseStream    io.Writer
	HTTPClient       *http.Client
	TimeNow          func() time.Time
	TimeSleep        func(time.Duration)
}

OAuthFlow represents the setup for authenticating with GitHub

func (*OAuthFlow) ObtainAccessToken ¶

func (oa *OAuthFlow) ObtainAccessToken() (accessToken string, err error)

ObtainAccessToken guides the user through the browser OAuth flow on GitHub and returns the OAuth access token upon completion.

Source Files ¶

View all Source files

oauth.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL