sql

package

Go to main page

Versions in this module

v2

v2.3.0

Jan 17, 2025 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

Changes in this version

+ type OAuth2RefreshTable struct

+ AccessTokenSignature sql.NullString

+ FirstUsedAt sql.NullTime

+ func (r OAuth2RefreshTable) TableName() string

type OAuth2RequestSQL

+ InternalExpiresAt sqlxx.NullTime

type Persister

+ func (p *Persister) PingContext(ctx context.Context) error

+ func (p *Persister) RotateRefreshToken(ctx context.Context, requestID string, refreshTokenSignature string) (err error)

+ func (p *Persister) Transaction(ctx context.Context, f func(ctx context.Context, c *pop.Connection) error) error

v2.3.0-pre.1

Jan 15, 2025 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

v2.3.0-pre.0

Jan 8, 2025 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

v2.2.0

Feb 12, 2024 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

Changes in this version

+ var Migrations embed.FS

type Dependencies

+ FlowCipher func() *aead.XChaCha20Poly1305

+ Kratos func() kratos.Client

type Persister

+ func (p *Persister) AuthenticateClient(ctx context.Context, id string, secret []byte) (_ *client.Client, err error)

+ func (p *Persister) IsNonceValid(ctx context.Context, accessToken, nonce string) (err error)

+ func (p *Persister) NewNonce(ctx context.Context, accessToken string, expiresIn time.Time) (res string, err error)

v2.2.0-rc.3

Aug 16, 2023 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

v2.2.0-rc.2

Jun 13, 2023 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

v2.2.0-rc.1

Jun 12, 2023 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

v2.2.0-pre.1

Feb 1, 2024 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

v2.2.0-pre.0

Jun 22, 2023 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

v2.1.2

May 24, 2023 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

v2.1.1

Apr 11, 2023 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

v2.1.0

Apr 6, 2023 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

Changes in this version

+ var ErrNoTransactionOpen = errors.New("There is no transaction in this context.")

+ var ErrTransactionOpen = errors.New("There is already a transaction in this context.")

+ func SignatureHash(signature string) string

+ type Dependencies interface

+ ClientHasher func() fosite.Hasher

+ KeyCipher func() *jwk.AEAD

+ type OAuth2RequestSQL struct

+ Active bool

+ Client string

+ ConsentChallenge sql.NullString

+ Form string

+ GrantedAudience string

+ GrantedScope string

+ ID string

+ NID uuid.UUID

+ Request string

+ RequestedAt time.Time

+ RequestedAudience string

+ Scopes string

+ Session []byte

+ Subject string

+ Table tableName

+ func (r OAuth2RequestSQL) TableName() string

+ type OldMigrationRecord struct

+ AppliedAt time.Time

+ ID string

+ type Persister struct

+ func NewPersister(ctx context.Context, c *pop.Connection, r Dependencies, ...) (*Persister, error)

+ func (p *Persister) AcceptLogoutRequest(ctx context.Context, challenge string) (*consent.LogoutRequest, error)

+ func (p *Persister) AddKey(ctx context.Context, set string, key *jose.JSONWebKey) error

+ func (p *Persister) AddKeySet(ctx context.Context, set string, keys *jose.JSONWebKeySet) error

+ func (p *Persister) Authenticate(ctx context.Context, id string, secret []byte) (*client.Client, error)

+ func (p *Persister) BeginTX(ctx context.Context) (context.Context, error)

+ func (p *Persister) ClientAssertionJWTValid(ctx context.Context, jti string) error

+ func (p *Persister) Commit(ctx context.Context) error

+ func (p *Persister) ConfirmLoginSession(ctx context.Context, id string, authenticatedAt time.Time, subject string, ...) error

+ func (p *Persister) Connection(ctx context.Context) *pop.Connection

+ func (p *Persister) CountClients(ctx context.Context) (int, error)

+ func (p *Persister) CountGrants(ctx context.Context) (int, error)

+ func (p *Persister) CountSubjectsGrantedConsentRequests(ctx context.Context, subject string) (int, error)

+ func (p *Persister) CreateAccessTokenSession(ctx context.Context, signature string, requester fosite.Requester) (err error)

+ func (p *Persister) CreateAuthorizeCodeSession(ctx context.Context, signature string, requester fosite.Requester) (err error)

+ func (p *Persister) CreateClient(ctx context.Context, c *client.Client) error

+ func (p *Persister) CreateConsentRequest(ctx context.Context, req *consent.OAuth2ConsentRequest) error

+ func (p *Persister) CreateForcedObfuscatedLoginSession(ctx context.Context, session *consent.ForcedObfuscatedLoginSession) error

+ func (p *Persister) CreateGrant(ctx context.Context, g trust.Grant, publicKey jose.JSONWebKey) error

+ func (p *Persister) CreateLoginRequest(ctx context.Context, req *consent.LoginRequest) error

+ func (p *Persister) CreateLoginSession(ctx context.Context, session *consent.LoginSession) error

+ func (p *Persister) CreateLogoutRequest(ctx context.Context, request *consent.LogoutRequest) error

+ func (p *Persister) CreateOpenIDConnectSession(ctx context.Context, signature string, requester fosite.Requester) error

+ func (p *Persister) CreatePKCERequestSession(ctx context.Context, signature string, requester fosite.Requester) error

+ func (p *Persister) CreateRefreshTokenSession(ctx context.Context, signature string, requester fosite.Requester) (err error)

+ func (p *Persister) CreateWithNetwork(ctx context.Context, v interface{}) error

+ func (p *Persister) DeleteAccessTokenSession(ctx context.Context, signature string) (err error)

+ func (p *Persister) DeleteAccessTokens(ctx context.Context, clientID string) error

+ func (p *Persister) DeleteClient(ctx context.Context, id string) error

+ func (p *Persister) DeleteGrant(ctx context.Context, id string) error

+ func (p *Persister) DeleteKey(ctx context.Context, set, kid string) error

+ func (p *Persister) DeleteKeySet(ctx context.Context, set string) error

+ func (p *Persister) DeleteLoginSession(ctx context.Context, id string) error

+ func (p *Persister) DeleteOpenIDConnectSession(ctx context.Context, signature string) error

+ func (p *Persister) DeletePKCERequestSession(ctx context.Context, signature string) error

+ func (p *Persister) DeleteRefreshTokenSession(ctx context.Context, signature string) (err error)

+ func (p *Persister) DetermineNetwork(ctx context.Context) (*networkx.Network, error)

+ func (p *Persister) FindGrantedAndRememberedConsentRequests(ctx context.Context, client, subject string) ([]consent.AcceptOAuth2ConsentRequest, error)

+ func (p *Persister) FindSubjectsGrantedConsentRequests(ctx context.Context, subject string, limit, offset int) ([]consent.AcceptOAuth2ConsentRequest, error)

+ func (p *Persister) FindSubjectsSessionGrantedConsentRequests(ctx context.Context, subject, sid string, limit, offset int) ([]consent.AcceptOAuth2ConsentRequest, error)

+ func (p *Persister) FlushInactiveAccessTokens(ctx context.Context, notAfter time.Time, limit int, batchSize int) error

+ func (p *Persister) FlushInactiveGrants(ctx context.Context, notAfter time.Time, limit int, batchSize int) error

+ func (p *Persister) FlushInactiveLoginConsentRequests(ctx context.Context, notAfter time.Time, limit int, batchSize int) error

+ func (p *Persister) FlushInactiveRefreshTokens(ctx context.Context, notAfter time.Time, limit int, batchSize int) error

+ func (p *Persister) GenerateAndPersistKeySet(ctx context.Context, set, kid, alg, use string) (*jose.JSONWebKeySet, error)

+ func (p *Persister) GetAccessTokenSession(ctx context.Context, signature string, session fosite.Session) (request fosite.Requester, err error)

+ func (p *Persister) GetAuthorizeCodeSession(ctx context.Context, signature string, session fosite.Session) (request fosite.Requester, err error)

+ func (p *Persister) GetClient(ctx context.Context, id string) (fosite.Client, error)

+ func (p *Persister) GetClientAssertionJWT(ctx context.Context, j string) (*oauth2.BlacklistedJTI, error)

+ func (p *Persister) GetClients(ctx context.Context, filters client.Filter) ([]client.Client, error)

+ func (p *Persister) GetConcreteClient(ctx context.Context, id string) (*client.Client, error)

+ func (p *Persister) GetConcreteGrant(ctx context.Context, id string) (trust.Grant, error)

+ func (p *Persister) GetConsentRequest(ctx context.Context, challenge string) (*consent.OAuth2ConsentRequest, error)

+ func (p *Persister) GetFlow(ctx context.Context, loginChallenge string) (*flow.Flow, error)

+ func (p *Persister) GetFlowByConsentChallenge(ctx context.Context, challenge string) (*flow.Flow, error)

+ func (p *Persister) GetForcedObfuscatedLoginSession(ctx context.Context, client, obfuscated string) (*consent.ForcedObfuscatedLoginSession, error)

+ func (p *Persister) GetGrants(ctx context.Context, limit, offset int, optionalIssuer string) ([]trust.Grant, error)

+ func (p *Persister) GetKey(ctx context.Context, set, kid string) (*jose.JSONWebKeySet, error)

+ func (p *Persister) GetKeySet(ctx context.Context, set string) (*jose.JSONWebKeySet, error)

+ func (p *Persister) GetLoginRequest(ctx context.Context, loginChallenge string) (*consent.LoginRequest, error)

+ func (p *Persister) GetLogoutRequest(ctx context.Context, challenge string) (*consent.LogoutRequest, error)

+ func (p *Persister) GetOpenIDConnectSession(ctx context.Context, signature string, requester fosite.Requester) (fosite.Requester, error)

+ func (p *Persister) GetPKCERequestSession(ctx context.Context, signature string, session fosite.Session) (fosite.Requester, error)

+ func (p *Persister) GetPublicKey(ctx context.Context, issuer string, subject string, keyId string) (*jose.JSONWebKey, error)

+ func (p *Persister) GetPublicKeyScopes(ctx context.Context, issuer string, subject string, keyId string) ([]string, error)

+ func (p *Persister) GetPublicKeys(ctx context.Context, issuer string, subject string) (*jose.JSONWebKeySet, error)

+ func (p *Persister) GetRefreshTokenSession(ctx context.Context, signature string, session fosite.Session) (request fosite.Requester, err error)

+ func (p *Persister) GetRememberedLoginSession(ctx context.Context, id string) (*consent.LoginSession, error)

+ func (p *Persister) HandleConsentRequest(ctx context.Context, r *consent.AcceptOAuth2ConsentRequest) (*consent.OAuth2ConsentRequest, error)

+ func (p *Persister) HandleLoginRequest(ctx context.Context, challenge string, r *consent.HandledLoginRequest) (lr *consent.LoginRequest, err error)

+ func (p *Persister) InvalidateAuthorizeCodeSession(ctx context.Context, signature string) (err error)

+ func (p *Persister) IsJWTUsed(ctx context.Context, jti string) (bool, error)

+ func (p *Persister) ListUserAuthenticatedClientsWithBackChannelLogout(ctx context.Context, subject, sid string) ([]client.Client, error)

+ func (p *Persister) ListUserAuthenticatedClientsWithFrontChannelLogout(ctx context.Context, subject, sid string) ([]client.Client, error)

+ func (p *Persister) MarkJWTUsedForTime(ctx context.Context, jti string, exp time.Time) error

+ func (p *Persister) MigrateDown(ctx context.Context, steps int) error

+ func (p *Persister) MigrateUp(ctx context.Context) error

+ func (p *Persister) MigrateUpTo(ctx context.Context, steps int) (int, error)

+ func (p *Persister) MigrationStatus(ctx context.Context) (popx.MigrationStatuses, error)

+ func (p *Persister) NetworkID(ctx context.Context) uuid.UUID

+ func (p *Persister) Ping() error

+ func (p *Persister) PrepareMigration(_ context.Context) error

+ func (p *Persister) QueryWithNetwork(ctx context.Context) *pop.Query

+ func (p *Persister) RejectLogoutRequest(ctx context.Context, challenge string) error

+ func (p *Persister) RevokeAccessToken(ctx context.Context, id string) error

+ func (p *Persister) RevokeRefreshToken(ctx context.Context, id string) error

+ func (p *Persister) RevokeRefreshTokenMaybeGracePeriod(ctx context.Context, id string, _ string) error

+ func (p *Persister) RevokeSubjectClientConsentSession(ctx context.Context, user, client string) error

+ func (p *Persister) RevokeSubjectConsentSession(ctx context.Context, user string) error

+ func (p *Persister) RevokeSubjectLoginSession(ctx context.Context, subject string) error

+ func (p *Persister) Rollback(ctx context.Context) error

+ func (p *Persister) SetClientAssertionJWT(ctx context.Context, jti string, exp time.Time) error

+ func (p *Persister) SetClientAssertionJWTRaw(ctx context.Context, jti *oauth2.BlacklistedJTI) error

+ func (p *Persister) UpdateClient(ctx context.Context, cl *client.Client) error

+ func (p *Persister) UpdateKey(ctx context.Context, set string, key *jose.JSONWebKey) error

+ func (p *Persister) UpdateKeySet(ctx context.Context, set string, keySet *jose.JSONWebKeySet) error

+ func (p *Persister) UpdateWithNetwork(ctx context.Context, v interface{}) (int64, error)

+ func (p *Persister) VerifyAndInvalidateConsentRequest(ctx context.Context, verifier string) (*consent.AcceptOAuth2ConsentRequest, error)

+ func (p *Persister) VerifyAndInvalidateLoginRequest(ctx context.Context, verifier string) (*consent.HandledLoginRequest, error)

+ func (p *Persister) VerifyAndInvalidateLogoutRequest(ctx context.Context, verifier string) (*consent.LogoutRequest, error)

+ func (p Persister) WithFallbackNetworkID(nid uuid.UUID) persistence.Persister

v2.1.0-pre.2

Apr 3, 2023 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

v2.1.0-pre.1

Apr 3, 2023 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

v2.1.0-pre.0

Mar 31, 2023 GO-2026-4807

GO-2026-4807: Ory Hydra has a SQL injection via forged pagination tokens in github.com/ory/hydra

Other modules containing this package

github.com/ory/hydra

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL