Affected by GO-2023-1747 and 3 other vulnerabilities

GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

GO-2026-4799: Ory Oathkeeper has an authentication bypass by cache key confusion in github.com/ory/oathkeeper

GO-2026-4804: Ory Oathkeeper has a path traversal authorization bypass in github.com/ory/oathkeeper

GO-2026-4810: Ory Oathkeeper has an authentication bypass by usage of untrusted header in github.com/ory/oathkeeper

proxy

package

v0.33.1-beta.1 Latest Latest Go to latest Published: Dec 18, 2019 License: Apache-2.0 Imports: 13 Imported by: 3

Details

View Source

const (
	SessionCtxKey key
)

This section is empty.

func ConfigureBackendURL(r *http.Request, rl *rule.Rule) error

func EnrichRequestedURL(r *http.Request)

EnrichRequestedURL sets Scheme and Host values in a URL passed down by a http server. Per default, the URL does not contain host nor scheme values.

func NewSimpleResponseWriter() *simpleResponseWriter

type Proxy struct {
	// contains filtered or unexported fields
}

func NewProxy(r proxyRegistry) *Proxy

func (d *Proxy) Director(r *http.Request)

func (d *Proxy) RoundTrip(r *http.Request) (*http.Response, error)

type RequestHandler struct {
	// contains filtered or unexported fields
}

func NewRequestHandler(r requestHandlerRegistry) *RequestHandler

func (d *RequestHandler) HandleRequest(r *http.Request, rl *rule.Rule) (session *authn.AuthenticationSession, err error)