Jeff Mitchell
|
c460ff10ca
|
Push a lot of logic into Router to make a bunch of it nicer and enable a
lot of cleanup. Plumb config and calls to framework.Backend.Setup() into
logical_system and elsewhere, including tests.
|
2015-09-10 15:09:54 -04:00 |
Jeff Mitchell
|
93ef9a54bd
|
Internally refactor Lease/LeaseGracePeriod into TTL/GracePeriod
|
2015-08-20 18:00:51 -07:00 |
Armon Dadgar
|
ffeb6ea76c
|
vault: allow increment to be duration string. Fixes #340
|
2015-06-17 15:58:20 -07:00 |
Armon Dadgar
|
ae421f75b7
|
vault: fixing issues with token renewal
|
2015-06-17 14:28:13 -07:00 |
Armon Dadgar
|
538c795f9b
|
vault: Adding method to consume a limited use token
|
2015-04-17 11:51:04 -07:00 |
Armon Dadgar
|
fd3948d476
|
vault: Tokens can have a use count specified
|
2015-04-17 11:34:25 -07:00 |
Armon Dadgar
|
818ce0a045
|
vault: token store allows specifying display_name
|
2015-04-15 14:24:07 -07:00 |
Mitchell Hashimoto
|
5eff7f1b57
|
vault: upper bound on test
|
2015-04-10 21:22:17 -07:00 |
Mitchell Hashimoto
|
992028e23e
|
vault: the expiration time should be relative to the issue time
|
2015-04-10 21:21:06 -07:00 |
Armon Dadgar
|
a6d974c74e
|
vault: revoking a token should revoke all secrets it has generated
|
2015-04-10 15:12:04 -07:00 |
Armon Dadgar
|
1e2863e2b8
|
vault: remove unused RevokeAll method
|
2015-04-10 14:59:49 -07:00 |
Armon Dadgar
|
13836e8612
|
vault: groundwork to allow auth renew
|
2015-04-10 13:59:49 -07:00 |
Armon Dadgar
|
4679febdf3
|
logical: Refactor LeaseOptions to share between Secret and Auth
|
2015-04-09 12:14:04 -07:00 |
Armon Dadgar
|
82c5d9c478
|
vault: Enforce non-renewability
|
2015-04-08 17:03:46 -07:00 |
Mitchell Hashimoto
|
9378d0388a
|
vault: token store inehrits policies by default
|
2015-04-07 14:19:52 -07:00 |
Armon Dadgar
|
493ee49e4d
|
vault: unify the token renew response
|
2015-04-06 16:35:39 -07:00 |
Armon Dadgar
|
b8d69a357c
|
vault: Use Auth for lease and renewable
|
2015-04-03 14:04:50 -07:00 |
Armon Dadgar
|
2feba52f40
|
vault: Adding auth/token/renew endpoint
|
2015-04-03 12:11:49 -07:00 |
Armon Dadgar
|
c82fbbb8c3
|
vault: Support prefix based token revocation
|
2015-04-03 11:40:08 -07:00 |
Mitchell Hashimoto
|
1dcb37c6b6
|
vault: lookup-self for TokenStore to look up your own store
|
2015-03-31 12:51:00 -07:00 |
Mitchell Hashimoto
|
63f259cc8d
|
vault: lookup without a token looks up self
|
2015-03-31 12:50:07 -07:00 |
Mitchell Hashimoto
|
6a72ea61d5
|
vault: convert TokenStore to logical/framework
|
2015-03-31 12:48:19 -07:00 |
Mitchell Hashimoto
|
c9acfa17cb
|
vault: get rid of HangleLogin
|
2015-03-30 20:26:39 -07:00 |
Mitchell Hashimoto
|
e9a3a34c27
|
vault: tests passing
|
2015-03-29 16:18:08 -07:00 |
Armon Dadgar
|
23864839bb
|
vault: testing root privilege restrictions
|
2015-03-24 15:52:07 -07:00 |
Armon Dadgar
|
b354f03cb2
|
vault: adding auth/token/lookup/ support
|
2015-03-24 15:39:33 -07:00 |
Armon Dadgar
|
4a4d1d3e45
|
vault: adding auth/token/revoke/ and auth/token/revoke-orphan/
|
2015-03-24 15:30:09 -07:00 |
Armon Dadgar
|
26f05f7a20
|
vault: Passthrough of client token to token store
|
2015-03-24 15:12:52 -07:00 |
Armon Dadgar
|
6fd3cae2c2
|
vault: Adding auth/token/create endpoint
|
2015-03-24 15:10:46 -07:00 |
Armon Dadgar
|
b5332404d1
|
vault: Allow providing token ID during creation
|
2015-03-24 14:22:50 -07:00 |
Armon Dadgar
|
cd3ee5cc03
|
vault: Remove core reference
|
2015-03-23 17:29:36 -07:00 |
Armon Dadgar
|
3607eae208
|
vault: Adding method to generate root token
|
2015-03-23 17:16:37 -07:00 |
Armon Dadgar
|
56d99fe580
|
vault: token tracks generation path and meta data
|
2015-03-23 13:39:43 -07:00 |
Armon Dadgar
|
8cc88981d6
|
vault: token store is a credential implementation
|
2015-03-18 19:11:52 -07:00 |
Armon Dadgar
|
481a3a2a91
|
vault: testing token revocation
|
2015-03-18 13:50:36 -07:00 |
Armon Dadgar
|
ded5dc71e9
|
vault: First pass token store
|
2015-03-18 13:19:19 -07:00 |