authentication

Oct 1, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 15, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 11, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 16, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 19, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 8, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Apr 23, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 24, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 25, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 21, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 5, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 4, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jan 27, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 20, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 13, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 11, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 6, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 2, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 26, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 11, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 10, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 7, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ const Dashboard

+ const Orchestrator

Apr 13, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 13, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ type Config struct

+ AuthEnabled bool

+ func GetConfig() *Config

+ type UserAuthOidcHelper interface

+ GetClientApp func() *oidc.ClientApp

+ GetDexProxy func() func(writer http.ResponseWriter, request *http.Request)

+ UpdateInMemoryDataOnSsoAddUpdate func(ssoUrl string) error

+ type UserAuthOidcHelperImpl struct

+ func NewUserAuthOidcHelperImpl(logger *zap.SugaredLogger, ...) (*UserAuthOidcHelperImpl, error)

+ func (impl UserAuthOidcHelperImpl) GetClientApp() *oidc.ClientApp

+ func (impl UserAuthOidcHelperImpl) GetDexProxy() func(writer http.ResponseWriter, request *http.Request)

+ func (impl UserAuthOidcHelperImpl) UpdateInMemoryDataOnSsoAddUpdate(ssoUrl string) error