mirror of
https://github.com/gitpod-io/gitpod.git
synced 2025-12-08 17:36:30 +00:00
80dc959279
Using JWT tokens for encoding/decoding/validation of state params carried throughout the OIDC/OAuth2 flow. Validating of integrity is crucial, as this piece of information contains the ID of the OIDC client to continue with when Gitpod receives the callback from a 3rd party. Tests should show that expiration time is checked and signature validation is effective.
134 lines
6.4 KiB
Modula-2
134 lines
6.4 KiB
Modula-2
module github.com/gitpod-io/gitpod/public-api-server
|
|
|
|
go 1.19
|
|
|
|
require (
|
|
github.com/AdaLogics/go-fuzz-headers v0.0.0-20220708163326-82d177caec6e
|
|
github.com/bufbuild/connect-go v1.0.0
|
|
github.com/coreos/go-oidc/v3 v3.5.0
|
|
github.com/gitpod-io/gitpod/common-go v0.0.0-00010101000000-000000000000
|
|
github.com/gitpod-io/gitpod/components/gitpod-db/go v0.0.0-00010101000000-000000000000
|
|
github.com/gitpod-io/gitpod/components/public-api/go v0.0.0-00010101000000-000000000000
|
|
github.com/gitpod-io/gitpod/gitpod-protocol v0.0.0-00010101000000-000000000000
|
|
github.com/gitpod-io/gitpod/usage-api v0.0.0-00010101000000-000000000000
|
|
github.com/go-chi/chi/v5 v5.0.8
|
|
github.com/golang/mock v1.6.0
|
|
github.com/google/go-cmp v0.5.9
|
|
github.com/google/uuid v1.3.0
|
|
github.com/gorilla/handlers v1.5.1
|
|
github.com/grpc-ecosystem/go-grpc-middleware v1.3.0
|
|
github.com/hashicorp/golang-lru v0.5.4
|
|
github.com/prometheus/client_golang v1.13.0
|
|
github.com/relvacode/iso8601 v1.1.0
|
|
github.com/sirupsen/logrus v1.9.0
|
|
github.com/sourcegraph/jsonrpc2 v0.0.0-20200429184054-15c2290dcb37
|
|
github.com/spf13/cobra v1.4.0
|
|
github.com/stretchr/testify v1.8.1
|
|
github.com/stripe/stripe-go/v72 v72.122.0
|
|
golang.org/x/oauth2 v0.3.0
|
|
google.golang.org/grpc v1.51.0
|
|
google.golang.org/protobuf v1.28.1
|
|
gorm.io/gorm v1.24.1
|
|
)
|
|
|
|
require (
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/blang/semver v3.5.1+incompatible // indirect
|
|
github.com/cenkalti/backoff/v4 v4.1.3 // indirect
|
|
github.com/cespare/xxhash/v2 v2.1.2 // indirect
|
|
github.com/configcat/go-sdk/v7 v7.6.0 // indirect
|
|
github.com/cyphar/filepath-securejoin v0.2.3 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/felixge/httpsnoop v1.0.1 // indirect
|
|
github.com/go-jose/go-jose/v3 v3.0.0 // indirect
|
|
github.com/go-sql-driver/mysql v1.6.0 // indirect
|
|
github.com/golang-jwt/jwt/v4 v4.4.3 // indirect
|
|
github.com/golang/protobuf v1.5.2 // indirect
|
|
github.com/gorilla/websocket v1.5.0 // indirect
|
|
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect
|
|
github.com/heptiolabs/healthcheck v0.0.0-20211123025425-613501dd5deb // indirect
|
|
github.com/inconshreveable/mousetrap v1.0.1 // indirect
|
|
github.com/jinzhu/inflection v1.0.0 // indirect
|
|
github.com/jinzhu/now v1.1.5 // indirect
|
|
github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
|
|
github.com/opentracing/opentracing-go v1.2.0 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/prometheus/client_model v0.2.0 // indirect
|
|
github.com/prometheus/common v0.37.0 // indirect
|
|
github.com/prometheus/procfs v0.8.0 // indirect
|
|
github.com/slok/go-http-metrics v0.10.0 // indirect
|
|
github.com/spf13/pflag v1.0.5 // indirect
|
|
golang.org/x/crypto v0.0.0-20220214200702-86341886e292 // indirect
|
|
golang.org/x/net v0.4.0 // indirect
|
|
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4 // indirect
|
|
golang.org/x/sys v0.3.0 // indirect
|
|
golang.org/x/text v0.5.0 // indirect
|
|
golang.org/x/time v0.0.0-20220922220347-f3bd1da661af // indirect
|
|
golang.org/x/xerrors v0.0.0-20220609144429-65e65417b02f // indirect
|
|
google.golang.org/appengine v1.6.7 // indirect
|
|
google.golang.org/genproto v0.0.0-20220616135557-88e70c0c3a90 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
gorm.io/datatypes v1.0.7 // indirect
|
|
gorm.io/driver/mysql v1.4.4 // indirect
|
|
)
|
|
|
|
replace github.com/gitpod-io/gitpod/common-go => ../common-go // leeway
|
|
|
|
replace github.com/gitpod-io/gitpod/gitpod-protocol => ../gitpod-protocol/go // leeway
|
|
|
|
replace github.com/gitpod-io/gitpod/components/gitpod-db/go => ../gitpod-db/go // leeway
|
|
|
|
replace github.com/gitpod-io/gitpod/components/public-api/go => ../public-api/go // leeway
|
|
|
|
replace github.com/gitpod-io/gitpod/usage-api => ../usage-api/go // leeway
|
|
|
|
replace k8s.io/api => k8s.io/api v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/apiextensions-apiserver => k8s.io/apiextensions-apiserver v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/apimachinery => k8s.io/apimachinery v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/apiserver => k8s.io/apiserver v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/cli-runtime => k8s.io/cli-runtime v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/client-go => k8s.io/client-go v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/cloud-provider => k8s.io/cloud-provider v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/cluster-bootstrap => k8s.io/cluster-bootstrap v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/code-generator => k8s.io/code-generator v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/component-base => k8s.io/component-base v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/cri-api => k8s.io/cri-api v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/csi-translation-lib => k8s.io/csi-translation-lib v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/kube-aggregator => k8s.io/kube-aggregator v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/kube-controller-manager => k8s.io/kube-controller-manager v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/kube-proxy => k8s.io/kube-proxy v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/kubelet => k8s.io/kubelet v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/legacy-cloud-providers => k8s.io/legacy-cloud-providers v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/metrics => k8s.io/metrics v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/sample-apiserver => k8s.io/sample-apiserver v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/component-helpers => k8s.io/component-helpers v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/controller-manager => k8s.io/controller-manager v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/kubectl => k8s.io/kubectl v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/mount-utils => k8s.io/mount-utils v0.24.4 // leeway indirect from components/common-go:lib
|
|
|
|
replace k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.24.4 // leeway indirect from components/common-go:lib
|