GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder

tailnet

package

v2.12.3 Latest Latest Go to latest Published: Jun 24, 2024 License: AGPL-3.0 Imports: 29 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/coder/coder

Links

Open Source Insights

Documentation ¶

Index ¶

Constants ¶

View Source

const (
	EventHeartbeats = "tailnet_coordinator_heartbeat"

	HeartbeatPeriod  = time.Second * 2
	MissedHeartbeats = 3
)

Variables ¶

This section is empty.

Functions ¶

func NewPGCoord ¶

func NewPGCoord(ctx context.Context, logger slog.Logger, ps pubsub.Pubsub, store database.Store) (agpl.Coordinator, error)

NewPGCoord creates a high-availability coordinator that stores state in the PostgreSQL database and receives notifications of updates via the pubsub.

func ServeWorkspaceProxy ¶

func ServeWorkspaceProxy(ctx context.Context, conn net.Conn, ma agpl.MultiAgentConn) error

Types ¶

type ClientService ¶ added in v2.7.0

type ClientService struct {
	*agpl.ClientService
}

func NewClientService ¶ added in v2.7.0

func NewClientService(
	logger slog.Logger,
	coordPtr *atomic.Pointer[agpl.Coordinator],
	derpMapUpdateFrequency time.Duration,
	derpMapFn func() *tailcfg.DERPMap,
) (
	*ClientService, error,
)

NewClientService returns a ClientService based on the given Coordinator pointer. The pointer is loaded on each processed connection.

func (*ClientService) ServeMultiAgentClient ¶ added in v2.7.0

func (s *ClientService) ServeMultiAgentClient(ctx context.Context, version string, conn net.Conn, id uuid.UUID) error

type HTMLCoordinator ¶ added in v2.5.0

type HTMLCoordinator struct {
	ID           uuid.UUID
	HeartbeatAge time.Duration
}

type HTMLDebug ¶ added in v2.5.0

type HTMLDebug struct {
	Coordinators []*HTMLCoordinator
	Peers        []*HTMLPeer
	Tunnels      []*HTMLTunnel
}

type HTMLPeer ¶ added in v2.5.0

type HTMLPeer struct {
	ID            uuid.UUID
	CoordinatorID uuid.UUID
	LastWriteAge  time.Duration
	Node          string
	Status        database.TailnetStatus
}

type HTMLTunnel ¶ added in v2.5.0

type HTMLTunnel struct {
	CoordinatorID uuid.UUID
	SrcID         uuid.UUID
	DstID         uuid.UUID
	LastWriteAge  time.Duration
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL