handlers

package

Go to main page

Versions in this module

v0

v0.5.3

Jun 12, 2026

Changes in this version

+ var ErrAuthUserRejected = errors.New("auth: identity cannot be resolved to an AdminUser")

+ func InitOIDC(ctx context.Context, cfg config.YAMLConfigurationOIDC) error

+ func InitSAML(ctx context.Context, cfg config.YAMLConfigurationSAML, entityID, acsURL string) error

+ type AuthMethod struct

+ LoginURL string

+ Type string

+ type AuthMethodsResponse struct

+ Methods []AuthMethod

type HandlersApi

+ JWTSecret []byte

+ OIDCEnabled bool

+ SAMLEnabled bool

+ func (h *HandlersApi) AuthMethodsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvCertUploadHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvConfigurationHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) GetUserPermissionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LogoutHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) OIDCCallbackHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) OIDCLoginHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SAMLACSHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SAMLLoginHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SAMLMetadataHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SetUserPermissionsAllHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithJWTSecret(secret []byte) HandlersOption

+ func WithOIDC(enabled bool) HandlersOption

+ func WithSAML(enabled bool) HandlersOption

+ type LogoutResponse struct

+ AuthSource string

+ IdPClientID string

+ IdPIDTokenHint string

+ IdPLogoutURL string

v0.5.2

May 18, 2026

Changes in this version

+ type ActivityBucket struct

+ BucketStart time.Time

+ Carve int

+ Config int

+ Enroll int

+ Query int

+ type EnvStats struct

+ Active int64

+ ActiveCarves int

+ ActiveQueries int

+ Inactive int64

+ Name string

+ PlatformCounts nodes.PlatformCounts

+ Total int64

+ UUID string

type HandlersApi

+ OsqueryTables []types.OsqueryTable

+ OsqueryValues config.YAMLConfigurationOsquery

+ func (h *HandlersApi) CarveArchiveHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarveSamplesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) DeleteUserTokenHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvActionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvActivityHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentConfigHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentConfigPatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentCreateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentExpirationPatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentIntervalsPatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentUpdateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LoginEnvironmentsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MeHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MePasswordHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MePatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodeActivityBatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodeActivityHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodeLogsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodesPagedHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) OsqueryTablesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) OsqueryVersionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueryResultsCSVHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QuerySamplesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) RefreshUserTokenHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SavedQueriesListHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SavedQueryCreateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SavedQueryDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SavedQueryUpdateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SetUserPermissionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingPatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) StatsHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithOsqueryTables(tables []types.OsqueryTable) HandlersOption

+ func WithOsqueryValues(values config.YAMLConfigurationOsquery) HandlersOption

+ type NodeActivityBucket struct

+ BucketStart time.Time

+ Carve int

+ Query int

+ Result int

+ Status int

+ type NodeLogsResponse struct

+ Env string

+ Items []map[string]any

+ Limit int

+ Since string

+ Type string

+ UUID string

+ type StatsResponse struct

+ ActiveNodes int64

+ Environments []EnvStats

+ InactiveNodes int64

+ PlatformCounts nodes.PlatformCounts

+ TotalActiveCarves int

+ TotalActiveQueries int

+ TotalNodes int64

v0.5.1

Mar 31, 2026

v0.5.0

Feb 24, 2026

v0.4.9

Dec 24, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

v0.4.8

Nov 5, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

Changes in this version

type HandlersApi

+ AuditLog *auditlog.AuditLogManager

+ func (h *HandlersApi) AuditLogsHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithAuditLog(auditLog *auditlog.AuditLogManager) HandlersOption

v0.4.7

Sep 30, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

v0.4.6

Sep 2, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

Changes in this version

type HandlersApi

+ func (h *HandlersApi) CheckHandlerAuth(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CheckHandlerNoAuth(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) TagNodeHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) UserActionHandler(w http.ResponseWriter, r *http.Request)

v0.4.5

Aug 9, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

Changes in this version

type HandlersApi

+ DebugHTTP *zerolog.Logger

+ DebugHTTPConfig *config.DebugHTTPConfiguration

+ func (h *HandlersApi) LookupNodeHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithDebugHTTP(cfg *config.DebugHTTPConfiguration) HandlersOption

v0.4.4

Mar 26, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

v0.4.3

Feb 22, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

Changes in this version

+ var EnvMapTargets = map[string]bool

+ var QueryTargets = map[string]bool

+ type APIQueryData map[string]string

+ type ContextKey string

+ type ContextValue map[string]string

+ type HandlersApi struct

+ ApiConfig *types.JSONConfigurationAPI

+ Carves *carves.Carves

+ DB *gorm.DB

+ Envs *environments.Environment

+ Metrics *metrics.Metrics

+ Nodes *nodes.NodeManager

+ Queries *queries.Queries

+ RedisCache *cache.RedisManager

+ ServiceName string

+ ServiceVersion string

+ Settings *settings.Settings

+ Tags *tags.TagManager

+ Users *users.UserManager

+ func CreateHandlersApi(opts ...HandlersOption) *HandlersApi

+ func (h *HandlersApi) ActiveNodesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AllNodesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AllQueriesShowHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AllTagsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarveListHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarveQueriesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarveShowHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarvesActionHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarvesRunHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) DeleteNodeHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvEnrollActionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvEnrollHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvRemoveActionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvRemoveHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentMapHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ErrorHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ForbiddenHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) HealthHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) InactiveNodesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) Inc(name string)

+ func (h *HandlersApi) LoginHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodeHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) PlatformsEnvHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) PlatformsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueriesActionHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueriesRunHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueryListHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueryResultsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueryShowHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) RootHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingsServiceEnvHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingsServiceEnvJSONHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingsServiceHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingsServiceJSONHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) TagEnvHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) TagsActionHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) TagsEnvHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) UserHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) UsersHandler(w http.ResponseWriter, r *http.Request)

+ type HandlersOption func(*HandlersApi)

+ func WithCache(rds *cache.RedisManager) HandlersOption

+ func WithCarves(carves *carves.Carves) HandlersOption

+ func WithDB(db *gorm.DB) HandlersOption

+ func WithEnvs(envs *environments.Environment) HandlersOption

+ func WithMetrics(metrics *metrics.Metrics) HandlersOption

+ func WithName(name string) HandlersOption

+ func WithNodes(nodes *nodes.NodeManager) HandlersOption

+ func WithQueries(queries *queries.Queries) HandlersOption

+ func WithSettings(settings *settings.Settings) HandlersOption

+ func WithTags(tags *tags.TagManager) HandlersOption

+ func WithUsers(users *users.UserManager) HandlersOption

+ func WithVersion(version string) HandlersOption

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL