GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

authclaims

package

v1.9.5 Latest Latest Go to latest Published: Aug 15, 2025 License: Apache-2.0 Imports: 1 Imported by: 0

Details

This section is empty.

This section is empty.

func ContextWithAuthClaims(parent context.Context, claims *AuthClaims) context.Context

ContextWithAuthClaims creates a copy of the parent context with the provided AuthClaims.

func ContextWithSkipAuthzCheck(parent context.Context, skipAuthzCheck bool) context.Context

ContextWithSkipAuthzCheck creates a copy of the parent context and attaches whether to skip authz check to.

func SkipAuthzCheckFromContext(ctx context.Context) bool

SkipAuthzCheckFromContext returns whether the authorize check can be skipped.

type AuthClaims struct {
	Subject  string
	Scopes   map[string]bool
	ClientID string
}

AuthClaims contains claims that are included in OIDC standard claims. https://openid.net/specs/openid-connect-core-1_0.html#IDToken

func AuthClaimsFromContext(ctx context.Context) (*AuthClaims, bool)

AuthClaimsFromContext extracts the AuthClaims from the provided ctx (if any).