jwtutils

Aug 5, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Aug 7, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 15, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 2, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 1, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 15, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jul 8, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jun 30, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jun 10, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Jun 3, 2025 GO-2025-3938

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

May 20, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

May 15, 2025 GO-2025-3921 +1 more

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

  GO-2025-3938: Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Apr 29, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 24, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 23, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 2, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 29, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Mar 17, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Mar 15, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Mar 4, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 29, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Apr 23, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Mar 6, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Feb 4, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Changes in this version

+ const SigningAlgo

Jan 29, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Jan 23, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Jan 18, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Jan 7, 2025 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Dec 16, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Dec 3, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Dec 12, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Nov 8, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Nov 8, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Nov 4, 2024 GO-2025-3921

  GO-2025-3921: Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Changes in this version

+ var ErrMissingKeyID = xerrors.New("missing key ID")

+ func Decrypt(ctx context.Context, d DecryptKeyProvider, token string, claims Claims, ...) error

+ func Encrypt(ctx context.Context, e EncryptKeyProvider, claims Claims) (string, error)

+ func Sign(ctx context.Context, s SigningKeyProvider, claims Claims) (string, error)

+ func Verify(ctx context.Context, v VerifyKeyProvider, token string, claims Claims, ...) error

+ func WithDecryptExpected(expected jwt.Expected) func(*DecryptOptions)

+ func WithVerifyExpected(expected jwt.Expected) func(*VerifyOptions)

+ type Claims interface

+ Validate func(jwt.Expected) error

+ type DecryptKeyProvider interface

+ DecryptingKey func(ctx context.Context, id string) (key interface{}, err error)

+ type DecryptOptions struct

+ ContentEncryptionAlgorithm jose.ContentEncryption

+ KeyAlgorithm jose.KeyAlgorithm

+ RegisteredClaims jwt.Expected

+ type EncryptKeyProvider interface

+ EncryptingKey func(ctx context.Context) (id string, key interface{}, err error)

+ type RegisteredClaims jwt.Claims

+ func (r RegisteredClaims) Validate(e jwt.Expected) error

+ type SigningKeyManager interface

+ type SigningKeyProvider interface

+ SigningKey func(ctx context.Context) (id string, key interface{}, err error)

+ type StaticKey struct

+ ID string

+ Key interface{}

+ func (StaticKey) Close() error

+ func (s StaticKey) DecryptingKey(_ context.Context, id string) (interface{}, error)

+ func (s StaticKey) EncryptingKey(_ context.Context) (string, interface{}, error)

+ func (s StaticKey) SigningKey(_ context.Context) (string, interface{}, error)

+ func (s StaticKey) VerifyingKey(_ context.Context, id string) (interface{}, error)

+ type VerifyKeyProvider interface

+ VerifyingKey func(ctx context.Context, id string) (key interface{}, err error)

+ type VerifyOptions struct

+ RegisteredClaims jwt.Expected

+ SignatureAlgorithm jose.SignatureAlgorithm