GO-2026-6517: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp

context

package

v0.30.3 Latest Latest Go to latest Published: Apr 1, 2026 License: Apache-2.0 Imports: 1 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kcp-dev/kcp

Links

Documentation ¶

Index ¶

func VirtualWorkspaceNameFrom(ctx context.Context) (string, bool)
func WithVirtualWorkspaceName(ctx context.Context, virtualWorkspaceName string) context.Context

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func VirtualWorkspaceNameFrom ¶ added in v0.6.0

func VirtualWorkspaceNameFrom(ctx context.Context) (string, bool)

VirtualWorkspaceNameFrom retrieves the VirtualWorkspace name from the context, if any.

func WithVirtualWorkspaceName ¶ added in v0.6.0

func WithVirtualWorkspaceName(ctx context.Context, virtualWorkspaceName string) context.Context

WithVirtualWorkspaceName adds the VirtualWorkspace name to the context.

Types ¶

This section is empty.

Source Files ¶

View all Source files

keys.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL