Affected by GO-2022-1079 and 8 other vulnerabilities

GO-2022-1079: OpenFGA subject to Information Disclosure via streamed-list-objects endpoint in github.com/openfga/openfga

GO-2022-1080: OpenFGA Authorization Bypass via tupleset wildcard in github.com/openfga/openfga

GO-2022-1081: OpenFGA Authorization Bypass in github.com/openfga/openfga

GO-2022-1099: OpenFGA Authorization Bypass in github.com/openfga/openfga

GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

validation

package

v0.2.2 Latest Latest Go to latest Published: Sep 15, 2022 License: Apache-2.0 Imports: 6 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/openfga/openfga

Links

Documentation ¶

Index ¶

func ValidateObjectsRelations(ctx context.Context, backend storage.TypeDefinitionReadBackend, ...) (*openfgapb.Userset, error)
func ValidateTuple(ctx context.Context, backend storage.TypeDefinitionReadBackend, ...) (*openfgapb.Userset, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ValidateObjectsRelations ¶

func ValidateObjectsRelations(ctx context.Context, backend storage.TypeDefinitionReadBackend, store, modelID string, t *openfgapb.TupleKey, dbCallsCounter utils.DBCallCounter) (*openfgapb.Userset, error)

ValidateObjectsRelations returns whether a tuple's object and relations are valid

func ValidateTuple ¶

func ValidateTuple(ctx context.Context, backend storage.TypeDefinitionReadBackend, store, authorizationModelID string, tk *openfgapb.TupleKey, dbCallsCounter utils.DBCallCounter) (*openfgapb.Userset, error)

ValidateTuple returns whether a *openfgapb.TupleKey is valid

Types ¶

This section is empty.

Source Files ¶

View all Source files

validation.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL