GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder
The highest tagged major version isv2.
provisionerdserver
packageThis package is not in the latest version of its module.
Details
Validgo.mod file
The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
- Redistributable license
Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
- Tagged version
Modules with tagged versions give importers more predictable builds.
Stable versionWhen a project reaches major version v1 it is considered stable.
- Learn more about best practices
Repository
Links
Open Source Insights
Documentation¶
Index¶
- Constants
- func InsertWorkspaceResource(ctx context.Context, db database.Store, jobID uuid.UUID, ...) error
- func MutateTags(userID uuid.UUID, tags map[string]string) map[string]string
- type Server
- func (server *Server) AcquireJob(ctx context.Context, _ *proto.Empty) (*proto.AcquiredJob, error)
- func (server *Server) CommitQuota(ctx context.Context, request *proto.CommitQuotaRequest) (*proto.CommitQuotaResponse, error)
- func (server *Server) CompleteJob(ctx context.Context, completed *proto.CompletedJob) (*proto.Empty, error)
- func (server *Server) FailJob(ctx context.Context, failJob *proto.FailedJob) (*proto.Empty, error)
- func (server *Server) UpdateJob(ctx context.Context, request *proto.UpdateJobRequest) (*proto.UpdateJobResponse, error)
- type TemplateVersionDryRunJob
- type TemplateVersionImportJob
- type WorkspaceProvisionJob
Constants¶
const (TagScope = "scope"TagOwner = "owner"ScopeUser = "user"ScopeOrganization = "organization")
Variables¶
This section is empty.
Functions¶
funcMutateTags¶added inv0.12.8
MutateTags adjusts the "owner" tag dependent on the "scope".If the scope is "user", the "owner" is changed to the user ID.This is for user-scoped provisioner daemons, where users shouldown their own operations.
Types¶
typeServer¶
type Server struct {AccessURL *url.URLIDuuid.UUIDLoggerslog.LoggerProvisioners []database.ProvisionerTypeGitAuthConfigs []*gitauth.ConfigTagsjson.RawMessageDatabasedatabase.StorePubsubpubsub.PubsubTelemetrytelemetry.ReporterTracertrace.TracerQuotaCommitter *atomic.Pointer[proto.QuotaCommitter]Auditor *atomic.Pointer[audit.Auditor]TemplateScheduleStore *atomic.Pointer[schedule.TemplateScheduleStore]UserQuietHoursScheduleStore *atomic.Pointer[schedule.UserQuietHoursScheduleStore]DeploymentValues *codersdk.DeploymentValuesAcquireJobDebouncetime.DurationOIDCConfighttpmw.OAuth2ConfigTimeNowFn func()time.Time}func (*Server)AcquireJob¶
AcquireJob queries the database to lock a job.
func (*Server)CommitQuota¶added inv0.12.7
func (server *Server) CommitQuota(ctxcontext.Context, request *proto.CommitQuotaRequest) (*proto.CommitQuotaResponse,error)
func (*Server)CompleteJob¶
func (server *Server) CompleteJob(ctxcontext.Context, completed *proto.CompletedJob) (*proto.Empty,error)
CompleteJob is triggered by a provision daemon to mark a provisioner job as completed.
func (*Server)UpdateJob¶
func (server *Server) UpdateJob(ctxcontext.Context, request *proto.UpdateJobRequest) (*proto.UpdateJobResponse,error)
typeTemplateVersionDryRunJob¶
type TemplateVersionDryRunJob struct {TemplateVersionIDuuid.UUID `json:"template_version_id"`WorkspaceNamestring `json:"workspace_name"`RichParameterValues []database.WorkspaceBuildParameter `json:"rich_parameter_values"`}TemplateVersionDryRunJob is the payload for the "template_version_dry_run" job type.
typeTemplateVersionImportJob¶added inv0.15.0
type TemplateVersionImportJob struct {TemplateVersionIDuuid.UUID `json:"template_version_id"`UserVariableValues []codersdk.VariableValue `json:"user_variable_values"`}
Source Files