Affected by GO-2022-0270 and 1 other vulnerabilities

GO-2022-0270: Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

GO-2022-0798: Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server

certapi

package

v0.8.0 Latest Latest Go to latest Published: Sep 15, 2020 License: Apache-2.0 Imports: 24 Imported by: 0

Documentation ¶

Overview ¶

Package certapi implements the token + TEK verification API.

Index ¶

Variables
type Controller
- func New(ctx context.Context, config *config.APIServerConfig, db *database.Database, ...) (*Controller, error)
- func (c *Controller) HandleCertificate() http.Handler
type Metrics
type SignerInfo

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	MetricPrefix = observability.MetricRoot + "/api/certificate"
)

Functions ¶

This section is empty.

Types ¶

type Controller ¶

type Controller struct {
	// contains filtered or unexported fields
}

func New ¶

func New(ctx context.Context, config *config.APIServerConfig, db *database.Database, h *render.Renderer, kms keys.KeyManager) (*Controller, error)

func (*Controller) HandleCertificate ¶

func (c *Controller) HandleCertificate() http.Handler

type Metrics ¶ added in v0.5.1

type Metrics struct {
	Attempts          *stats.Int64Measure
	TokenExpired      *stats.Int64Measure
	TokenUsed         *stats.Int64Measure
	TokenInvalid      *stats.Int64Measure
	CertificateIssued *stats.Int64Measure
	CertificateErrors *stats.Int64Measure
}

type SignerInfo ¶ added in v0.5.0

type SignerInfo struct {
	Signer   crypto.Signer
	KeyID    string
	Issuer   string
	Audience string
	Duration time.Duration
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL