Affected by GO-2023-1898 and 2 other vulnerabilities

GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

globals

package

v0.10.0 Latest Latest Go to latest Published: Aug 9, 2022 License: MPL-2.0 Imports: 1 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hashicorp/boundary

Links

Open Source Insights

Documentation ¶

Constants ¶

View Source

const (
	IdField                                     = "id"
	VersionField                                = "version"
	NameField                                   = "name"
	DescriptionField                            = "description"
	CreatedTimeField                            = "created_time"
	UpdatedTimeField                            = "updated_time"
	TypeField                                   = "type"
	AttributesField                             = "attributes"
	ScopeIdField                                = "scope_id"
	ScopeField                                  = "scope"
	AuthMethodIdField                           = "auth_method_id"
	AccountIdField                              = "account_id"
	UserIdField                                 = "user_id"
	IsPrimaryField                              = "is_primary"
	AuthorizedActionsField                      = "authorized_actions"
	AuthorizedCollectionActionsField            = "authorized_collection_actions"
	ExpirationTimeField                         = "expiration_time"
	ApproximateLastUsedTimeField                = "approximate_last_used_time"
	MembersField                                = "members"
	MemberIdsField                              = "member_ids"
	HostCatalogIdField                          = "host_catalog_id"
	HostSetIdsField                             = "host_set_ids"
	HostSourceIdsField                          = "host_source_ids"
	HostIdsField                                = "host_ids"
	PrincipalIdsField                           = "principal_ids"
	PrincipalsField                             = "principals"
	GrantScopeIdField                           = "grant_scope_id"
	GrantsField                                 = "grants"
	GrantStringsField                           = "grant_strings"
	PrimaryAuthMethodIdField                    = "primary_auth_method_id"
	TargetIdField                               = "target_id"
	HostIdField                                 = "host_id"
	HostSetIdField                              = "host_set_id"
	HostSetsField                               = "host_sets"
	HostSourcesField                            = "host_sources"
	AuthTokenIdField                            = "auth_token_id"
	EndpointField                               = "endpoint"
	CertificateField                            = "certificate"
	TerminationReasonField                      = "termination_reason"
	StatusField                                 = "status"
	StatesField                                 = "states"
	SessionConnectionLimitField                 = "session_connection_limit"
	SessionMaxSecondsField                      = "session_max_seconds"
	WorkerFilterField                           = "worker_filter"
	AccountIdsField                             = "account_ids"
	AccountsField                               = "accounts"
	LoginNameField                              = "login_name"
	FullNameField                               = "full_name"
	PrimaryAccountIdField                       = "primary_account_id"
	EmailField                                  = "email"
	ManagedGroupIdsField                        = "managed_group_ids"
	FilterField                                 = "filter"
	CredentialStoreIdField                      = "credential_store_id"
	ApplicationCredentialSourceIdsField         = "application_credential_source_ids"
	ApplicationCredentialSourcesField           = "application_credential_sources"
	BrokeredCredentialSourceIdsField            = "brokered_credential_source_ids"
	BrokeredCredentialSourcesField              = "brokered_credential_sources"
	PreferredEndpointsField                     = "preferred_endpoints"
	SyncIntervalSecondsField                    = "sync_interval_seconds"
	PluginIdField                               = "plugin_id"
	PluginField                                 = "plugin"
	PluginNameField                             = "plugin_name"
	IpAddressesField                            = "ip_addresses"
	DnsNamesField                               = "dns_names"
	SecretsHmacField                            = "secrets_hmac"
	ExternalIdField                             = "external_id"
	InjectedApplicationCredentialSourceIdsField = "injected_application_credential_source_ids"
	InjectedApplicationCredentialSourcesField   = "injected_application_credential_sources"
	ConnectionsField                            = "connections"
	CredentialTypeField                         = "credential_type"
	CredentialMappingOverridesField             = "credential_mapping_overrides"
	MetricNamespace                             = "boundary"
	LastStatusTimeField                         = "last_status_time"
	AddressField                                = "address"
	CanonicalAddressField                       = "canonical_address"
	TagsField                                   = "tags"
	CanonicalTagsField                          = "canonical_tags"
	ConfigTagsField                             = "config_tags"
	ApiTagsField                                = "api_tags"
	ConfigurationField                          = "configuration"
	WorkerGeneratedAuthTokenField               = "worker_generated_auth_token"
	WorkerProvidedConfigurationField            = "worker_provided_configuration"
	ActiveConnectionCountField                  = "active_connection_count"
)

View Source

const (
	TcpProxyV1     = "boundary-tcp-proxy-v1"
	ServiceTokenV1 = "s1"
	SessionPrefix  = "s_"
)

View Source

const (
	KmsPurposeRoot              = "root"
	KmsPurposeWorkerAuth        = "worker-auth"
	KmsPurposeWorkerAuthStorage = "worker-auth-storage"
	KmsPurposeRecovery          = "recovery"
	KmsPurposeConfig            = "config"
)

Variables ¶

View Source

var (
	// DefaultMaxRequestDuration is the amount of time we'll wait for a request
	DefaultMaxRequestDuration = 90 * time.Second

	// DefaultMaxRequestSize is the maximum size of a request we allow by default
	DefaultMaxRequestSize = int64(1024 * 1024)

	// ContextMaxRequestSizeTypeKey is a value to keep linters from complaining
	// about clashing string identifiers
	ContextMaxRequestSizeTypeKey ContextMaxRequestSizeType

	// ContextOriginalRequestPathTypeKey is a value to keep linters from complaining
	// about clashing string identifiers
	ContextOriginalRequestPathTypeKey ContextOriginalRequestPathType

	// RecoveryTokenValidityPeriod is exported so we can modify it in tests if
	// we want
	RecoveryTokenValidityPeriod = 5 * time.Minute

	// WorkerAuthNonceValidityPeriod is exported so we can modify it in tests if
	// we want
	WorkerAuthNonceValidityPeriod = 2 * time.Minute
)

Functions ¶

This section is empty.

Types ¶

type ContextMaxRequestSizeType ¶

type ContextMaxRequestSizeType struct{}

type ContextOriginalRequestPathType ¶

type ContextOriginalRequestPathType struct{}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL