Affected by GO-2022-0270 and 1 other vulnerabilities

GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

issueapi

package

v0.6.0 Latest Latest Go to latest Published: Sep 1, 2020 License: Apache-2.0 Imports: 19 Imported by: 0

Documentation ¶

Overview ¶

Package issueapi implements the API handler for taking a code request, assigning an OTP, saving it to the database and returning the result. This is invoked over AJAX from the Web frontend.

Index ¶

Variables
type Controller
- func New(ctx context.Context, config config.IssueAPIConfig, db *database.Database, ...) (*Controller, error)
- func (c *Controller) HandleIssue() http.Handler
type Metrics

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	MetricPrefix = observability.MetricRoot + "/api/issue"
)

Functions ¶

This section is empty.

Types ¶

type Controller ¶

type Controller struct {
	// contains filtered or unexported fields
}

func New ¶

func New(ctx context.Context, config config.IssueAPIConfig, db *database.Database, h *render.Renderer) (*Controller, error)

New creates a new IssueAPI controller.

func (*Controller) HandleIssue ¶

func (c *Controller) HandleIssue() http.Handler

type Metrics ¶ added in v0.5.1

type Metrics struct {
	IssueAttempts   *stats.Int64Measure
	CodesIssued     *stats.Int64Measure
	CodeIssueErrors *stats.Int64Measure
	SMSSent         *stats.Int64Measure
	SMSSendErrors   *stats.Int64Measure
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL