Affected by GO-2025-3384 and 3 other vulnerabilities

GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

authclaims

package

v1.7.0 Latest Latest Go to latest Published: Oct 30, 2024 License: Apache-2.0 Imports: 1 Imported by: 0

Details

This section is empty.

This section is empty.

func ContextWithAuthClaims(parent context.Context, claims *AuthClaims) context.Context

ContextWithAuthClaims injects the provided AuthClaims into the parent context.

func ContextWithSkipAuthzCheck(parent context.Context, skipAuthzCheck bool) context.Context

ContextWithSkipAuthzCheck attaches whether to skip authz check to the parent context.

func SkipAuthzCheckFromContext(ctx context.Context) bool

SkipAuthzCheckFromContext returns whether the authorize check can be skipped.

type AuthClaims struct {
	Subject  string
	Scopes   map[string]bool
	ClientID string
}

AuthClaims contains claims that are included in OIDC standard claims. https://openid.net/specs/openid-connect-core-1_0.html#IDToken

func AuthClaimsFromContext(ctx context.Context) (*AuthClaims, bool)

AuthClaimsFromContext extracts the AuthClaims from the provided ctx (if any).