oauth2-proxy

mirror of https://github.com/oauth2-proxy/oauth2-proxy.git synced 2026-10-02 20:51:20 +02:00

Files

T

Madan Kumar e05f04ef08 fix(encryption): return an error instead of panicking on a short GCM ciphertext (#3527 )

* fix(encryption): return an error instead of panicking on a short GCM ciphertext

gcmCipher.Decrypt slices ciphertext[:nonceSize] without first checking the
length, so a ciphertext shorter than the 12-byte GCM nonce triggers a
slice-bounds-out-of-range panic instead of returning an error. The sibling
cfbCipher.Decrypt already guards its IV length and returns a descriptive error;
mirror that guard for GCM so decrypting a malformed (e.g. truncated) cookie
fails cleanly. Adds a test covering both ciphers.

Signed-off-by: Madan Kumar <winklemad@outlook.com>

* docs(changelog): add entry for the GCM short-ciphertext fix

Signed-off-by: Madan Kumar <winklemad@outlook.com>

---------

Signed-off-by: Madan Kumar <winklemad@outlook.com>

2026-10-01 09:18:17 +02:00

apis

fix(bitbucket): auth failure due to Bitbucket API changes (#3477 )

2026-10-01 09:00:53 +02:00

app

Merge commit from fork

2026-04-13 18:22:56 +02:00

authentication

chore(goconsts): use proper constants for http methods

2026-06-08 12:54:58 +02:00

fix: strip the port from the request host when matching cookie domains (#3546 )

2026-09-30 17:31:29 +02:00