Affected by GO-2026-4988 and 1 other vulnerabilities

GO-2026-4988: DevGuard has an unauthenticated identity assertion via `X-Admin-Token` header in github.com/l3montree-dev/devguard

GO-2026-5183: DevGuard has improper authorization on public assets in github.com/l3montree-dev/devguard

pat

package

v0.18.4 Latest Latest Go to latest Published: Oct 13, 2025 License: AGPL-3.0 Imports: 15 Imported by: 0

Details

This section is empty.

View Source

var AllowedScopes = []string{"manage", "scan"}

func HexPubKeyToECDSA(hexPubKey string) ecdsa.PublicKey

func HexTokenToECDSA(hexToken string) (ecdsa.PrivateKey, ecdsa.PublicKey, error)

func SignRequest(hexPrivKey string, req *http.Request) error

type CreateRequest struct {
	Description string `json:"description"`
	PubKey      string `json:"pubKey"`
	Scopes      string `json:"scopes"`
}

func (p CreateRequest) ToModel(userID string) models.PAT

type PatController struct {
	// contains filtered or unexported fields
}

func NewHTTPController(repository core.PersonalAccessTokenRepository) *PatController

func (p *PatController) Create(c core.Context) error

func (p *PatController) Delete(c core.Context) error

func (p *PatController) List(c core.Context) error

func (p *PatController) RevokeByPrivateKey(c core.Context) error

type PatService struct {
	// contains filtered or unexported fields
}

func NewPatService(repository core.PersonalAccessTokenRepository) *PatService

func (p *PatService) RevokeByPrivateKey(privKey string) error

func (p *PatService) VerifyRequestSignature(req *http.Request) (string, string, error)

type RevokeByPrivateKeyRequest struct {
	PrivateKey string `json:"privkey" validate:"required"`
}