GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

The highest tagged major version is v2.

coderdenttest

package

v0.27.3 Latest Latest Go to latest Published: Aug 1, 2023 License: AGPL-3.0 Imports: 29 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/coder/coder

Links

Open Source Insights

Documentation ¶

Index ¶

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	Keys = map[string]ed25519.PublicKey{}
)

Functions ¶

func AddFullLicense ¶ added in v0.25.0

func AddFullLicense(t *testing.T, client *codersdk.Client) codersdk.License

AddFullLicense generates a license with all features enabled.

func AddLicense ¶

func AddLicense(t *testing.T, client *codersdk.Client, options LicenseOptions) codersdk.License

AddLicense generates a new license with the options provided and inserts it.

func GenerateLicense ¶

func GenerateLicense(t *testing.T, options LicenseOptions) string

GenerateLicense returns a signed JWT using the test key.

func New ¶

func New(t *testing.T, options *Options) (*codersdk.Client, codersdk.CreateFirstUserResponse)

New constructs a codersdk client connected to an in-memory Enterprise API instance.

func NewWithAPI ¶

func NewWithAPI(t *testing.T, options *Options) (
	*codersdk.Client, io.Closer, *coderd.API, codersdk.CreateFirstUserResponse,
)

func NewWorkspaceProxy ¶ added in v0.23.0

func NewWorkspaceProxy(t *testing.T, coderdAPI *coderd.API, owner *codersdk.Client, options *ProxyOptions) *wsproxy.Server

NewWorkspaceProxy will configure a wsproxy.Server with the given options. The new wsproxy will register itself with the given coderd.API instance. The first user owner client is required to create the wsproxy on the coderd api server.

Types ¶

type LicenseOptions ¶

type LicenseOptions struct {
	AccountType string
	AccountID   string
	Trial       bool
	AllFeatures bool
	GraceAt     time.Time
	ExpiresAt   time.Time
	Features    license.Features
}

type Options ¶

type Options struct {
	*coderdtest.Options
	AuditLogging                bool
	BrowserOnly                 bool
	EntitlementsUpdateInterval  time.Duration
	SCIMAPIKey                  []byte
	UserWorkspaceQuota          int
	ProxyHealthInterval         time.Duration
	LicenseOptions              *LicenseOptions
	NoDefaultQuietHoursSchedule bool
	DontAddLicense              bool
	DontAddFirstUser            bool
}

type ProxyOptions ¶ added in v0.23.0

type ProxyOptions struct {
	Name        string
	Experiments codersdk.Experiments

	TLSCertificates []tls.Certificate
	AppHostname     string
	DisablePathApps bool

	// ProxyURL is optional
	ProxyURL *url.URL
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL