Affected by GO-2026-5134 and 5 other vulnerabilities

GO-2026-5134: Hatchet affected by cross-tenant information disclosure in `listTasksByDAGIds` in github.com/hatchet-dev/hatchet

GO-2026-6309: Hatchet allows cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe in github.com/hatchet-dev/hatchet

GO-2026-6560: Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter in github.com/hatchet-dev/hatchet

GO-2026-6561: Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher in github.com/hatchet-dev/hatchet

GO-2026-6565: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation Handler in github.com/hatchet-dev/hatchet

GO-2026-6567: Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check in github.com/hatchet-dev/hatchet

users

package

v0.79.21 Latest Latest Go to latest Published: Mar 5, 2026 License: MIT Imports: 25 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hatchet-dev/hatchet

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
type UserService
- func NewUserService(config *server.ServerConfig) *UserService

Constants ¶

View Source

const ErrInvalidCredentials = "invalid credentials"

View Source

const ErrRegistrationFailed = "registration failed"

Variables ¶

View Source

var ErrGithubNoEmail = fmt.Errorf("Github user must have an email")

View Source

var ErrGithubNotVerified = fmt.Errorf("Please verify your email on Github")

View Source

var ErrNotInRestrictedDomain = errors.New("email is not in the restricted domain group")

Functions ¶

This section is empty.

Types ¶

type UserService ¶

type UserService struct {
	// contains filtered or unexported fields
}

func NewUserService ¶

func NewUserService(config *server.ServerConfig) *UserService

func (*UserService) TenantInviteAccept ¶

func (u *UserService) TenantInviteAccept(ctx echo.Context, request gen.TenantInviteAcceptRequestObject) (gen.TenantInviteAcceptResponseObject, error)

func (*UserService) TenantInviteReject ¶

func (u *UserService) TenantInviteReject(ctx echo.Context, request gen.TenantInviteRejectRequestObject) (gen.TenantInviteRejectResponseObject, error)

func (*UserService) TenantMembershipsList ¶

func (t *UserService) TenantMembershipsList(ctx echo.Context, request gen.TenantMembershipsListRequestObject) (gen.TenantMembershipsListResponseObject, error)

func (*UserService) UserCreate ¶

func (u *UserService) UserCreate(ctx echo.Context, request gen.UserCreateRequestObject) (gen.UserCreateResponseObject, error)

func (*UserService) UserGetCurrent ¶

func (u *UserService) UserGetCurrent(ctx echo.Context, request gen.UserGetCurrentRequestObject) (gen.UserGetCurrentResponseObject, error)

func (*UserService) UserListTenantInvites ¶

func (t *UserService) UserListTenantInvites(ctx echo.Context, request gen.UserListTenantInvitesRequestObject) (gen.UserListTenantInvitesResponseObject, error)

func (*UserService) UserUpdateGithubOauthCallback ¶

func (u *UserService) UserUpdateGithubOauthCallback(ctx echo.Context, _ gen.UserUpdateGithubOauthCallbackRequestObject) (gen.UserUpdateGithubOauthCallbackResponseObject, error)

Note: we want all errors to redirect, otherwise the user will be greeted with raw JSON in the middle of the login flow.

func (*UserService) UserUpdateGithubOauthStart ¶

func (u *UserService) UserUpdateGithubOauthStart(ctx echo.Context, _ gen.UserUpdateGithubOauthStartRequestObject) (gen.UserUpdateGithubOauthStartResponseObject, error)

Note: we want all errors to redirect, otherwise the user will be greeted with raw JSON in the middle of the login flow.

func (*UserService) UserUpdateGoogleOauthCallback ¶

func (u *UserService) UserUpdateGoogleOauthCallback(ctx echo.Context, _ gen.UserUpdateGoogleOauthCallbackRequestObject) (gen.UserUpdateGoogleOauthCallbackResponseObject, error)

Note: we want all errors to redirect, otherwise the user will be greeted with raw JSON in the middle of the login flow.

func (*UserService) UserUpdateGoogleOauthStart ¶

func (u *UserService) UserUpdateGoogleOauthStart(ctx echo.Context, _ gen.UserUpdateGoogleOauthStartRequestObject) (gen.UserUpdateGoogleOauthStartResponseObject, error)

Note: we want all errors to redirect, otherwise the user will be greeted with raw JSON in the middle of the login flow.

func (*UserService) UserUpdateLogin ¶

func (u *UserService) UserUpdateLogin(ctx echo.Context, request gen.UserUpdateLoginRequestObject) (gen.UserUpdateLoginResponseObject, error)

func (*UserService) UserUpdateLogout ¶

func (u *UserService) UserUpdateLogout(ctx echo.Context, request gen.UserUpdateLogoutRequestObject) (gen.UserUpdateLogoutResponseObject, error)

func (*UserService) UserUpdatePassword ¶

func (u *UserService) UserUpdatePassword(ctx echo.Context, request gen.UserUpdatePasswordRequestObject) (gen.UserUpdatePasswordResponseObject, error)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL