GO-2024-3057: NetBird uses a static initialization vector (IV) in github.com/netbirdio/netbird

middleware

package

v0.37.1 Latest Latest Go to latest Published: Feb 24, 2025 License: BSD-3-Clause Imports: 14 Imported by: 3

Details

This section is empty.

This section is empty.

This section is empty.

type AccessControl struct {
	// contains filtered or unexported fields
}

AccessControl middleware to restrict to make POST/PUT/DELETE requests by admin only

func NewAccessControl(getUser GetUser) *AccessControl

NewAccessControl instance constructor

func (a *AccessControl) Handler(h http.Handler) http.Handler

Handler method of the middleware which forbids all modify requests for non admin users

type AuthMiddleware struct {
	// contains filtered or unexported fields
}

AuthMiddleware middleware to verify personal access tokens (PAT) and JWT tokens

func NewAuthMiddleware(
	authManager auth.Manager,
	ensureAccount EnsureAccountFunc,
	syncUserJWTGroups SyncUserJWTGroupsFunc,
) *AuthMiddleware

NewAuthMiddleware instance constructor

func (m *AuthMiddleware) Handler(h http.Handler) http.Handler

Handler method of the middleware which authenticates a user either by JWT claims or by PAT

type EnsureAccountFunc func(ctx context.Context, userAuth nbcontext.UserAuth) (string, string, error)

type GetUser func(ctx context.Context, userAuth nbcontext.UserAuth) (*types.User, error)

GetUser function defines a function to fetch user from Account by jwtclaims.AuthorizationClaims

type SyncUserJWTGroupsFunc func(ctx context.Context, userAuth nbcontext.UserAuth) error

Path	Synopsis
bypass