Affected by GO-2025-3384 and 9 other vulnerabilities

GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

GO-2026-5136: OpenFGA has Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-5170: OpenFGA: Unauthenticated playground endpoint discloses preshared API key in HTML response in github.com/openfga/openfga

GO-2026-5239: OpenFGA has cache-key delimiter injection in shared-iterator and v2 iterator that caches enables intra-store authorization-decision poisoning in github.com/openfga/openfga

GO-2026-5322: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-5423: OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset in github.com/openfga/openfga

gateway

package

v1.5.5 Latest Latest Go to latest Published: Jun 18, 2024 License: Apache-2.0 Imports: 5 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/openfga/openfga

Links

Documentation ¶

Overview ¶

Package gateway provides implementations to send data through the transport (e.g. headers).

Index ¶

type NoopTransport
- func NewNoopTransport() *NoopTransport
- func (n *NoopTransport) SetHeader(_ context.Context, key, value string)
type RPCTransport
- func NewRPCTransport(l logger.Logger) *RPCTransport
- func (g *RPCTransport) SetHeader(ctx context.Context, key, value string)
type Transport

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type NoopTransport ¶

type NoopTransport struct {
}

NoopTransport defines a no-op transport.

func NewNoopTransport ¶

func NewNoopTransport() *NoopTransport

func (*NoopTransport) SetHeader ¶

func (n *NoopTransport) SetHeader(_ context.Context, key, value string)

type RPCTransport ¶

type RPCTransport struct {
	// contains filtered or unexported fields
}

RPCTransport defines a transport for gRPC.

func NewRPCTransport ¶

func NewRPCTransport(l logger.Logger) *RPCTransport

NewRPCTransport returns a transport for gRPC.

func (*RPCTransport) SetHeader ¶

func (g *RPCTransport) SetHeader(ctx context.Context, key, value string)

SetHeader tries to set a header. If an error occurred, it logs an error.

type Transport ¶

type Transport interface {
	// SetHeader sets a response header with a key and a value.
	// It should not be called after a response has been sent.
	SetHeader(ctx context.Context, key, value string)
}

Transport is the interface to work with the transport layer.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL