Skip to content

Basic auth checker #83

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jwong101 merged 41 commits into from
May 2, 2026
Merged

Basic auth checker #83

Show file tree
Hide file tree
Changes from 39 commits
Commits
Show all changes
41 commits
Select commit Hold shift + click to select a range
11b9c21
rough draft basic auth
gabejgladstone Apr 3, 2026
686933f
WIP
gladstone-9 Apr 6, 2026
f3bb77b
style: clippy fmt
gladstone-9 Apr 10, 2026
adeb618
refactor: Remove HttpBasicAuth Value
gladstone-9 Apr 11, 2026
27af3ba
refactor: remove dup function
gladstone-9 Apr 13, 2026
7d01f13
refactor: remove dup function
gladstone-9 Apr 13, 2026
42a1388
fix(analyzer): classify chained api.fetch and lower inner call for .t…
gladstone-9 Apr 13, 2026
2f61f80
Unit test for Basic Check Auth
gladstone-9 Apr 13, 2026
4c0ab93
Fix re-export handling so FSRT follows export { X } from './module'
gladstone-9 Apr 15, 2026
9542fd6
Add URL-aware auth header checker with Bearer admin detection
gladstone-9 Apr 15, 2026
b1d7ae1
Extend AuthHeaderChecker to detect Basic auth on Forge platform API s…
gladstone-9 Apr 16, 2026
41061a5
Add --scan-functions flag to scan all function bodies for auth header…
gladstone-9 Apr 16, 2026
24047d5
Replace api.atlassian.com substring check with full Atlassian URL cla…
gladstone-9 Apr 18, 2026
9f8ce03
chore: address cargo clippy warnings
gladstone-9 Apr 18, 2026
7f5acb7
feat(bearer checks) more comprehensive bearer checks
gladstone-9 Apr 18, 2026
1979e20
undo permissions resolver change
gladstone-9 Apr 20, 2026
60c8956
PartialConst value added to decouple scanners
gladstone-9 Apr 20, 2026
5b48378
chore: remove unneeded cloning
gladstone-9 Apr 20, 2026
81d84ff
revert changes to secret checker
gladstone-9 Apr 20, 2026
ac2501c
Atlassian URL check cleanup
gladstone-9 Apr 20, 2026
6545185
SCAN_FUNCTIONS cleanup
gladstone-9 Apr 21, 2026
63fcac6
chore: remove unused func
gladstone-9 Apr 21, 2026
3f082b3
removed feat: export resolver
gladstone-9 Apr 21, 2026
1bda7af
refactor: Added RequestGraph intrinsic
gladstone-9 Apr 21, 2026
4c17a1d
chore: unused function removed
gladstone-9 Apr 21, 2026
ae847f6
consolidate tests
gladstone-9 Apr 21, 2026
d271cd3
Update report
gladstone-9 Apr 21, 2026
a67d3f1
refactor(auth-checker): move auth scheme detection to IR-level inspec…
gladstone-9 Apr 23, 2026
5e2c82d
chore: clippy
gladstone-9 Apr 23, 2026
352b1e0
explicit relative paths
gladstone-9 Apr 24, 2026
24c0554
explicit relative paths dict
gladstone-9 Apr 24, 2026
dde9fe2
chore: comment update
gladstone-9 Apr 29, 2026
01b7668
feat: remove custom check name to prevent logging.
gladstone-9 Apr 29, 2026
b4cf23d
feat: return specific api call in proof
gladstone-9 Apr 29, 2026
02d1729
feat + bug: url reconstruction bug fix and more flexible api version …
gladstone-9 Apr 30, 2026
5202607
chore: update test harness
gladstone-9 Apr 30, 2026
41506c4
feat: update vuln report naming, severity, and batch requests
gladstone-9 May 1, 2026
febb7a4
feat: Update vuln severity
gladstone-9 May 1, 2026
a38ddcb
chore: bearer admin check_name change
gladstone-9 May 1, 2026
d79ade5
chore: vuln description update
gladstone-9 May 2, 2026
c29bd57
chore: bearer auth name update
gladstone-9 May 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading