Affected by GO-2023-1747 and 3 other vulnerabilities

GO-2023-1747: Hop-by-hop abuse to malform header mutator in github.com/ory/oathkeeper

GO-2026-4799: Ory Oathkeeper has an authentication bypass by cache key confusion in github.com/ory/oathkeeper

GO-2026-4804: Ory Oathkeeper has a path traversal authorization bypass in github.com/ory/oathkeeper

GO-2026-4810: Ory Oathkeeper has an authentication bypass by usage of untrusted header in github.com/ory/oathkeeper

middleware

package

v0.40.1 Latest Latest Go to latest Published: Jan 17, 2023 License: Apache-2.0 Imports: 18 Imported by: 0

Details

This section is empty.

View Source

var ErrDenied = herodot.ErrUnauthorized

This section is empty.

type Middleware interface {
	UnaryInterceptor() grpc.UnaryServerInterceptor
	StreamInterceptor() grpc.StreamServerInterceptor
}

func New(ctx context.Context, opts ...Option) (Middleware, error)

New creates an Oathkeeper middleware from the options. By default, it tries to read the configuration from the file "oathkeeper.yaml".

type Option func(*options)

func WithConfigFile(configFile string) Option

WithConfigFile sets the path to the config file to use for the middleware.

func WithLogger(logger *logrusx.Logger) Option

WithLogger sets the logger for the middleware.