handlers

Nov 19, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 10, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 1, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 14, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jul 30, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 19, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jun 14, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

May 28, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Apr 29, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jul 29, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Apr 9, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Mar 21, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Mar 7, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Feb 27, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jan 30, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Mar 7, 2024 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Dec 12, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 31, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 17, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 6, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jul 14, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jun 9, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Apr 4, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Mar 9, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Feb 8, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Changes in this version

+ func MaskContainsPrefix(paths []string, s string) bool

type ApiError

+ func ConflictErrorf(msg string) *ApiError

Dec 8, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Nov 23, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Sep 27, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Sep 14, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Sep 12, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 30, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 22, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 11, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 9, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jul 6, 2022 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jun 20, 2022 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Changes in this version

+ const HttpOnlyCookieName

+ const JsVisibleCookieName

+ const StatusCodeHeader

+ func ApiErrorWithCode(c codes.Code) error

+ func ApiErrorWithCodeAndMessage(c codes.Code, msg string, args ...interface{}) error

+ func ErrorHandler() runtime.ErrorHandlerFunc

+ func ForbiddenError() error

+ func GetOpts(opt ...Option) options

+ func JSONMarshaler() *runtime.JSONPb

+ func MaskContains(paths []string, s string) bool

+ func NotFoundError() error

+ func OutgoingResponseFilter(ctx context.Context, w http.ResponseWriter, m proto.Message) error

+ func ProtoToStruct(p proto.Message) (*structpb.Struct, error)

+ func SetStatusCode(ctx context.Context, code int) error

+ func StructToProto(fields *structpb.Struct, p proto.Message, opt ...Option) error

+ func ToApiError(e error) *pb.Error

+ func UnauthenticatedError() error

+ func ValidId(i Id, prefixes ...string) bool

+ func ValidNameDescription(in string) bool

+ func ValidateCreateRequest(i ApiResource, fn CustomValidatorFunc) error

+ func ValidateDeleteRequest(fn CustomValidatorFunc, r DeleteRequest, prefix ...string) error

+ func ValidateGetRequest(fn CustomValidatorFunc, r GetRequest, prefix ...string) error

+ func ValidateUpdateRequest(r UpdateRequest, i ApiResource, fn CustomValidatorFunc, prefix ...string) error

+ type ApiError struct

+ Inner *pb.Error

+ Status int32

+ func InvalidArgumentErrorf(msg string, fields map[string]string) *ApiError

+ func NotFoundErrorf(msg string, a ...interface{}) *ApiError

+ func (e *ApiError) Error() string

+ func (e *ApiError) Is(target error) bool

+ type ApiResource interface

+ GetCreatedTime func() *timestamp.Timestamp

+ GetDescription func() *wrappers.StringValue

+ GetId func() string

+ GetName func() *wrappers.StringValue

+ GetScope func() *scopes.ScopeInfo

+ GetUpdatedTime func() *timestamp.Timestamp

+ GetVersion func() uint32

+ type CustomValidatorFunc func() map[string]string

+ var NoopValidatorFn CustomValidatorFunc = func() map[string]string { ... }

+ type DeleteRequest interface

+ GetId func() string

+ type Filter struct

+ func NewFilter(f string) (*Filter, error)

+ func (f *Filter) Match(item interface{}) bool

+ type GetRequest interface

+ GetId func() string

+ type Id string

+ type MaskDestination []protoreflect.ProtoMessage

+ type MaskManager map[string]string

+ func NewMaskManager(dest MaskDestination, src MaskSource) (MaskManager, error)

+ func (m MaskManager) Translate(paths []string, passedThroughPrefix ...string) []string

+ type MaskSource []protoreflect.ProtoMessage

+ type Option func(*options)

+ func WithAuthorizedActions(acts []string) Option

+ func WithAuthorizedCollectionActions(colActs map[string]*structpb.ListValue) Option

+ func WithDiscardUnknownFields(discard bool) Option

+ func WithHostSetIds(ids []string) Option

+ func WithManagedGroupIds(ids []string) Option

+ func WithMemberIds(ids []string) Option

+ func WithOutputFields(fields *perms.OutputFieldsMap) Option

+ func WithPlugin(plg *plugins.PluginInfo) Option

+ func WithScope(scp *scopes.ScopeInfo) Option

+ func WithUserIsAnonymous(anonListing bool) Option

+ type UpdateRequest interface

+ GetId func() string

+ GetUpdateMask func() *field_mask.FieldMask