0cde3182eb
The ACL token state schema has been updated to utilise two new indexes which track expiration of tokens that are configured with an expiration TTL or time. A new state function allows listing ACL expired tokens which will be used by internal garbage collection. The ACL endpoint has been modified so that all validation happens within a single function call. This is easier to understand and see at a glance. The ACL token validation now also includes logic for expiry TTL and times. The ACL endpoint upsert tests have been condensed into a single, table driven test. There is a new token canonicalize which provides a single place for token canonicalization, rather than logic spread in the RPC handler. |
||
|---|---|---|
| .. | ||
| config | ||
| acl.go | ||
| acl_test.go | ||
| alloc.go | ||
| alloc_test.go | ||
| batch_future.go | ||
| batch_future_test.go | ||
| bitmap.go | ||
| bitmap_test.go | ||
| connect.go | ||
| connect_test.go | ||
| consul.go | ||
| consul_oss.go | ||
| consul_oss_test.go | ||
| consul_test.go | ||
| csi.go | ||
| csi_test.go | ||
| devices.go | ||
| devices_test.go | ||
| diff.go | ||
| diff_test.go | ||
| encoding.go | ||
| errors.go | ||
| errors_test.go | ||
| eval.go | ||
| event.go | ||
| extensions.go | ||
| funcs.go | ||
| funcs_test.go | ||
| generate.sh | ||
| handlers.go | ||
| job.go | ||
| job_test.go | ||
| network.go | ||
| network_test.go | ||
| node.go | ||
| node_class.go | ||
| node_class_test.go | ||
| node_test.go | ||
| operator.go | ||
| search.go | ||
| service_identities.go | ||
| service_registration.go | ||
| service_registration_test.go | ||
| services.go | ||
| services_test.go | ||
| streaming_rpc.go | ||
| structs.go | ||
| structs_codegen.go | ||
| structs_oss.go | ||
| structs_periodic_test.go | ||
| structs_test.go | ||
| testing.go | ||
| uuid.go | ||
| vault.go | ||
| volume_test.go | ||
| volumes.go | ||