Affected by GO-2024-3291 and 2 other vulnerabilities

GO-2024-3291: Re-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to its deletion in github.com/treeverse/lakefs

GO-2025-3479: lakeFS allows an authenticated user to cause a crash by exhausting server memory in github.com/treeverse/lakefs

GO-2025-4090: lakeFS affected by unauthenticated access to API usage metrics in github.com/treeverse/lakefs

authentication

package

v1.16.0 Latest Latest Go to latest Published: Apr 3, 2024 License: Apache-2.0 Imports: 7 Imported by: 2

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/treeverse/lakefs

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
type APIService
- func NewAPIService(apiEndpoint string, validateIDTokenClaims map[string]string, ...) (*APIService, error)
- func NewAPIServiceWithClients(apiClient apiclient.ClientWithResponsesInterface, logger logging.Logger, ...) (*APIService, error)
- func (s *APIService) ValidateSTS(ctx context.Context, code, redirectURI, state string) (string, error)
type DummyService
- func NewDummyService() *DummyService
- func (d DummyService) ValidateSTS(ctx context.Context, code, redirectURI, state string) (string, error)
type Service

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ErrNotImplemented          = errors.New("not implemented")
	ErrAlreadyExists           = errors.New("already exists")
	ErrInsufficientPermissions = errors.New("insufficient permissions")
	ErrUnexpectedStatusCode    = errors.New("unexpected status code")
	ErrInvalidRequest          = errors.New("invalid request")
)

Functions ¶

This section is empty.

Types ¶

type APIService ¶

type APIService struct {
	// contains filtered or unexported fields
}

func NewAPIService ¶

func NewAPIService(apiEndpoint string, validateIDTokenClaims map[string]string, logger logging.Logger) (*APIService, error)

func NewAPIServiceWithClients ¶

func NewAPIServiceWithClients(apiClient apiclient.ClientWithResponsesInterface, logger logging.Logger, validateIDTokenClaims map[string]string) (*APIService, error)

func (*APIService) ValidateSTS ¶

func (s *APIService) ValidateSTS(ctx context.Context, code, redirectURI, state string) (string, error)

ValidateSTS calls the external authentication service to validate the STS parameters validates the required claims and returns the external user id and expiration time

type DummyService ¶

type DummyService struct{}

func NewDummyService ¶

func NewDummyService() *DummyService

func (DummyService) ValidateSTS ¶

func (d DummyService) ValidateSTS(ctx context.Context, code, redirectURI, state string) (string, error)

type Service ¶

type Service interface {
	// ValidateSTS validates the STS parameters and returns the external user ID
	ValidateSTS(ctx context.Context, code, redirectURI, state string) (string, error)
}

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL