kaancfidan / bouncer Goto Github PK
View Code? Open in Web Editor NEWJWT-based authentication and authorization service
License: MIT License
JWT-based authentication and authorization service
License: MIT License
In the reverse proxy scenario, it might be useful for some users if bouncer also performed TLS termination.
TLS termination should be optional and should only be forced when a certificate is configured during deployment.
When multiple route policies are matched to an anonymous request, if the most narrow path is allowed anonymously, the request should be allowed
gosec warning:
[/github/workspace/main.go:47] - G114 (CWE): Use of net/http serve function that has no support for setting timeouts (Confidence: HIGH, Severity: MEDIUM)
46:
47: err = http.ListenAndServe(f.listenAddress, nil)
48: log.Fatal(err)
Wildcard based route configuration is prone to errors and security problems.
Implement a path tree-like configuration to setup route policies more explicitly.
https://github.com/lestrrat-go/jwx is an up-to-date alternative.
Config:
routePolicies:
- path: /**
allowAnonymous: true
- path: /**
methods: [DELETE]
allowAnonymous: false
Expected behavior:
Only DELETE requests should be authenticated, all others pass anonymously.
Actual behavior:
DELETE also passes anonymously.
A few test cases that cover reading actual config files and respond to actual HTTP requests are needed.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.