oauth2-proxy/oauth2-proxy

Pattern Findings

64 matches across 4 categories. Click a row to expand file-level details.

Over-Commented Block40 hits · 40 pts

Severity	File	Line	Snippet
LOW	testdata/openredirects.txt	21	/%5cgoogle.com
LOW	testdata/openredirects.txt	41	//%5cwww.whitelisteddomain.tld@google.com
LOW	testdata/openredirects.txt	61	////%5cexample.com
LOW	testdata/openredirects.txt	81	////example.com@google.com/%2e%2e%2f
LOW	testdata/openredirects.txt	101	////www.whitelisteddomain.tld@google.com/%2f..
LOW	testdata/openredirects.txt	121	///example.com//
LOW	testdata/openredirects.txt	141	///localdomain.pw//
LOW	testdata/openredirects.txt	161	//;@google.com
LOW	testdata/openredirects.txt	181	//google%00.com
LOW	testdata/openredirects.txt	201	//https://example.com@google.com//
LOW	testdata/openredirects.txt	221	//localdomain.pw:80#@www.whitelisteddomain.tld/
LOW	contrib/local-environment/docker-compose.yaml	1	# This docker-compose file can be used to bring up an example instance of oauth2-proxy
LOW	contrib/local-environment/docker-compose-keycloak.yaml	1	# This docker-compose file can be used to bring up an example instance of oauth2-proxy
LOW	contrib/local-environment/docker-compose-gitea.yaml	1	# This docker-compose file can be used to bring up an example instance of oauth2-proxy
LOW	contrib/local-environment/docker-compose-traefik.yaml	1	# This docker-compose file can be used to bring up an example instance of oauth2-proxy
LOW	contrib/local-environment/docker-compose-nginx.yaml	1	# This docker-compose file can be used to bring up an example instance of oauth2-proxy
LOW	…rib/local-environment/docker-compose-alpha-config.yaml	1	# This docker-compose file can be used to bring up an example instance of oauth2-proxy
LOW	pkg/middleware/stored_session.go	21	// TODO: This should probably be configurable by the end user.
LOW	pkg/apis/options/alpha_options.go	1	package options
LOW	pkg/apis/options/alpha_options.go	21	InjectRequestHeaders []Header `yaml:"injectRequestHeaders,omitempty"`
LOW	pkg/apis/options/header.go	21	// This option only applies to injected request headers.
LOW	pkg/apis/options/server.go	1	package options
LOW	pkg/apis/options/server.go	41
LOW	pkg/apis/options/upstreams.go	61	ID string `yaml:"id,omitempty"`
LOW	pkg/apis/options/upstreams.go	81	RewriteTarget string `yaml:"rewriteTarget,omitempty"`
LOW	pkg/apis/options/upstreams.go	101	// Static will make all requests to this upstream have a static response.
LOW	pkg/apis/options/app.go	1	package options
LOW	pkg/apis/options/providers.go	41	// for GoogleOptions.UseOrganizationID
LOW	pkg/apis/options/providers.go	81	// ADFSConfig holds all configurations for ADFS provider.
LOW	pkg/apis/options/providers.go	101	// must be set from the supported providers group,
LOW	pkg/apis/options/providers.go	281	AdminAPIUserScope string `yaml:"adminAPIUserScope,omitempty"`
LOW	pkg/apis/options/providers.go	301	// default set to 'false'
LOW	pkg/apis/options/login_url_parameters.go	1	package options
LOW	pkg/apis/options/login_url_parameters.go	21	// default:
LOW	pkg/apis/options/login_url_parameters.go	41	// default: ["login"]
LOW	pkg/apis/options/login_url_parameters.go	61	// as backslash is not considered to be an escape character. Alternatively
LOW	pkg/apis/options/login_url_parameters.go	81	// Allow specifies rules about how the default (if any) may be
LOW	pkg/apis/sessions/interfaces.go	21	// Lock is an interface for controlling session locks
LOW	pkg/app/redirect/director.go	41	}
LOW	pkg/sessions/persistence/ticket.go	21	// saveFunc performs a persistent store's save functionality using

Fake / Example Data20 hits · 20 pts

Severity	File	Line	Snippet
LOW	oauthproxy_test.go	1858	"name": "John Doe",
LOW	oauthproxy_test.go	2111	Email: "user@example.com",
LOW	main_test.go	29	google_admin_email="admin@example.com"
LOW	main_test.go	172	AdminEmail: "admin@example.com",
LOW	providers/digitalocean_test.go	95	b := testDigitalOceanBackend(`{"account": {"email": "user@example.com"}}`)
LOW	providers/digitalocean_test.go	104	assert.Equal(t, "user@example.com", email)
LOW	providers/gitlab_test.go	43	"email": "foo@bar.com",
LOW	providers/gitlab_test.go	217	expectedValue: "foo@bar.com",
LOW	contrib/local-environment/dex.yaml	29	- email: "admin@example.com"
LOW	contrib/local-environment/kubernetes/values.yaml	35	- email: "admin@example.com"
LOW	…b/local-environment/keycloak/oauth2-proxy-users-0.json	7	"username": "admin@example.com",
LOW	…b/local-environment/keycloak/oauth2-proxy-users-0.json	8	"email": "admin@example.com",
LOW	pkg/middleware/jwt_session_test.go	39	"name": "John Doe",
LOW	pkg/apis/sessions/session_state_test.go	321	Email: "user@example.com",
LOW	pkg/apis/sessions/session_state_test.go	341	{"email", []string{"user@example.com"}},
LOW	pkg/header/injector_test.go	403	Email: "user@example.com",
LOW	pkg/header/injector_test.go	409	"X-Auth-Request-Email": []string{"user@example.com"},
LOW	pkg/validation/options_test.go	61	o.Providers[0].GoogleConfig.AdminEmail = "admin@example.com"
LOW	pkg/validation/options_test.go	84	o.Providers[0].GoogleConfig.AdminEmail = "admin@example.com"
LOW	pkg/validation/options_test.go	94	o.Providers[0].GoogleConfig.AdminEmail = "admin@example.com"

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet
MEDIUM	contrib/local-environment/docker-compose-nginx.yaml	6	# This file is an extension of the main compose file and must be used with it
MEDIUM	…rib/local-environment/docker-compose-alpha-config.yaml	7	# This file is an extension of the main compose file and must be used with it

AI Slop Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet
MEDIUM	pkg/apis/options/providers.go	92	// or providers utilize OIDC configurations.
MEDIUM	pkg/logger/logger.go	404	// These functions utilize the standard logger.

Score History

Severity Breakdown

Pattern Findings