Affected by GO-2023-1747 and 3 other vulnerabilities

GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

GO-2026-4799: Ory Oathkeeper has an authentication bypass by cache key confusion in github.com/ory/oathkeeper

GO-2026-4804: Ory Oathkeeper has a path traversal authorization bypass in github.com/ory/oathkeeper

GO-2026-4810: Ory Oathkeeper has an authentication bypass by usage of untrusted header in github.com/ory/oathkeeper

judge

package

v0.15.0 Latest Latest Go to latest Published: Apr 29, 2019 License: Apache-2.0 Imports: 7 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/ory/oathkeeper

Links

Documentation ¶

Index ¶

Constants
type Handler
- func NewHandler(handler *proxy.RequestHandler, logger logrus.FieldLogger, matcher rule.Matcher, ...) *Handler
- func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request)

Constants ¶

View Source

const (
	JudgePath = "/judge"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Handler ¶

type Handler struct {
	Logger         logrus.FieldLogger
	RequestHandler *proxy.RequestHandler
	KeyManager     rsakey.Manager
	Matcher        rule.Matcher
	H              herodot.Writer
	Router         *httprouter.Router
}

func NewHandler ¶

func NewHandler(handler *proxy.RequestHandler, logger logrus.FieldLogger, matcher rule.Matcher, router *httprouter.Router) *Handler

func (*Handler) ServeHTTP ¶

func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request)

Source Files ¶

View all Source files

handler.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL