Affected by GO-2022-0785 and 10 other vulnerabilities

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

uaa

package

v1.6.2 Latest Latest Go to latest Published: Nov 19, 2018 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/goharbor/harbor

Links

Documentation ¶

Index ¶

type Auth

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Auth ¶

type Auth struct {
	sync.Mutex

	auth.DefaultAuthenticateHelper
	// contains filtered or unexported fields
}

Auth is the implementation of AuthenticateHelper to access uaa for authentication.

func (*Auth) Authenticate ¶

func (u *Auth) Authenticate(m models.AuthModel) (*models.User, error)

Authenticate ...

func (*Auth) OnBoardUser ¶

func (u *Auth) OnBoardUser(user *models.User) error

OnBoardUser will check if a user exists in user table, if not insert the user and put the id in the pointer of user model, if it does exist, return the user's profile.

func (*Auth) PostAuthenticate ¶

func (u *Auth) PostAuthenticate(user *models.User) error

PostAuthenticate will check if user exists in DB, if not on Board user, if he does, update the profile.

func (*Auth) SearchUser ¶

func (u *Auth) SearchUser(username string) (*models.User, error)

SearchUser search user on uaa server, transform it to Harbor's user model

Source Files ¶

View all Source files

uaa.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL