Horst Gutmann 6d1b00c745 AuthJWT: Fix JWT query param leak (CVE-2023-1387) [9.4.x] (#823) ...

* fix JWT query param leak

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>
Co-authored-by: Kalle Persson <kalle.persson@grafana.com>
(cherry picked from commit 9e205a0)

* skip broken test

(cherry picked from commit 58e235a)

2023-04-27 14:36:34 +03:00

..

authproxy

[v9.4.x] Auth: Fix orgrole picker disabled if isSynced user (#65553)

2023-04-05 09:55:43 +01:00

ctxkey

pkg/web: restrict handler types (#48495)

2022-05-20 12:45:18 -04:00

model

[v9.4.x] Reqcontext: Use err status code instead of always fallback (#63977)

2023-03-01 18:48:33 -03:00

auth_jwt.go

AuthJWT: Fix JWT query param leak (CVE-2023-1387) [9.4.x] (#823)

2023-04-27 14:36:34 +03:00

auth_proxy_test.go

[v9.4.x] Authn: Anon session service (#63520)

2023-02-22 09:55:17 +01:00

contexthandler_test.go

[v9.4.x] Auth: Rotate token patch (#62782)

2023-02-02 18:05:38 +01:00

contexthandler.go

[v9.4.x] Auth: Remove the session cookie only if it's invalid or revoked (#66430)

2023-04-13 09:53:31 +02:00