Affected by GO-2025-4150 and 8 other vulnerabilities

GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

GO-2026-5136: OpenFGA has Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-5170: OpenFGA: Unauthenticated playground endpoint discloses preshared API key in HTML response in github.com/openfga/openfga

GO-2026-5239: OpenFGA has cache-key delimiter injection in shared-iterator and v2 iterator that caches enables intra-store authorization-decision poisoning in github.com/openfga/openfga

GO-2026-5322: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-5423: OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset in github.com/openfga/openfga

GO-2026-5483: OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision in github.com/openfga/openfga

encrypter

package

v1.11.0 Latest Latest Go to latest Published: Nov 5, 2025 License: Apache-2.0 Imports: 6 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/openfga/openfga

Links

Documentation ¶

Overview ¶

Package encrypter contains data encryption implementations.

Index ¶

type Encrypter
type GCMEncrypter
- func NewGCMEncrypter(key string) (*GCMEncrypter, error)
- func (e *GCMEncrypter) Decrypt(data []byte) ([]byte, error)
- func (e *GCMEncrypter) Encrypt(data []byte) ([]byte, error)
type NoopEncrypter
- func NewNoopEncrypter() *NoopEncrypter
- func (e *NoopEncrypter) Decrypt(data []byte) ([]byte, error)
- func (e *NoopEncrypter) Encrypt(data []byte) ([]byte, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Encrypter ¶

type Encrypter interface {
	Decrypt([]byte) ([]byte, error)
	Encrypt([]byte) ([]byte, error)
}

Encrypter is an interface that defines methods for encrypting and decrypting data.

type GCMEncrypter ¶

type GCMEncrypter struct {
	// contains filtered or unexported fields
}

GCMEncrypter is an implementation of the Encrypter interface that uses the AES-GCM encryption algorithm.

func NewGCMEncrypter ¶

func NewGCMEncrypter(key string) (*GCMEncrypter, error)

NewGCMEncrypter creates a new instance of GCMEncrypter with the provided key. It initializes the AES-GCM cipher mode for encryption and decryption.

func (*GCMEncrypter) Decrypt ¶

func (e *GCMEncrypter) Decrypt(data []byte) ([]byte, error)

Decrypt decrypts an AES-GCM encrypted byte array.

func (*GCMEncrypter) Encrypt ¶

func (e *GCMEncrypter) Encrypt(data []byte) ([]byte, error)

Encrypt encrypts the given byte array using the AES-GCM block cipher.

type NoopEncrypter ¶

type NoopEncrypter struct{}

NoopEncrypter is an implementation of the Encrypter interface that performs no actual encryption or decryption.

func NewNoopEncrypter ¶

func NewNoopEncrypter() *NoopEncrypter

NewNoopEncrypter creates a new instance of NoopEncrypter.

func (*NoopEncrypter) Decrypt ¶

func (e *NoopEncrypter) Decrypt(data []byte) ([]byte, error)

Decrypt returns the input byte slice as is.

func (*NoopEncrypter) Encrypt ¶

func (e *NoopEncrypter) Encrypt(data []byte) ([]byte, error)

Encrypt returns the input byte slice as is.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL