open-vault/vault
Jeff Mitchell 1c7157e632 Reintroduce the ability to look up obfuscated values in the audit log
with a new endpoint '/sys/audit-hash', which returns the given input
string hashed with the given audit backend's hash function and salt
(currently, always HMAC-SHA256 and a backend-specific salt).

In the process of adding the HTTP handler, this also removes the custom
HTTP handlers for the other audit endpoints, which were simply
forwarding to the logical system backend. This means that the various
audit functions will now redirect correctly from a standby to master.
(Tests all pass.)

Fixes #784
2015-11-18 20:26:03 -05:00
..
acl.go
acl_test.go vault: adding another ACL test 2015-07-05 17:34:34 -06:00
audit.go Reintroduce the ability to look up obfuscated values in the audit log 2015-11-18 20:26:03 -05:00
audit_test.go Reintroduce the ability to look up obfuscated values in the audit log 2015-11-18 20:26:03 -05:00
auth.go Rearchitect MountTable locking and fix rollback. 2015-11-11 11:54:52 -05:00
auth_test.go Run preSeal if postUnseal fails. 2015-11-02 13:29:33 -05:00
barrier.go
barrier_aes_gcm.go Bump AESGCM version; include path in the GCM tags. 2015-09-19 17:04:37 -04:00
barrier_aes_gcm_test.go Bump AESGCM version; include path in the GCM tags. 2015-09-19 17:04:37 -04:00
barrier_test.go
barrier_view.go
barrier_view_test.go
core.go Rearchitect MountTable locking and fix rollback. 2015-11-11 11:54:52 -05:00
core_test.go Add no-default-policy flag and API parameter to allow exclusion of the 2015-11-09 17:30:50 -05:00
dynamic_system_view.go Rename core's 'policy' to 'policyStore' for clarification 2015-11-06 12:07:42 -05:00
expiration.go Fix removing secondary index from exp manager. 2015-11-04 10:50:31 -05:00
expiration_test.go Fix removing secondary index from exp manager. 2015-11-04 10:50:31 -05:00
keyring.go Fixed comment spelling mistake and removed unnecessary variable allocation 2015-10-15 14:51:30 -04:00
keyring_test.go
logical_cubbyhole.go Directly pass the cubbyhole backend to the token store and bypass logic in router 2015-09-15 13:50:37 -04:00
logical_cubbyhole_test.go Use split-out hashicorp/uuid 2015-10-12 14:07:12 -04:00
logical_passthrough.go Check TTL provided to generic backend on write 2015-10-29 11:05:21 -04:00
logical_passthrough_test.go Add revocation/renewal functions in all cases in the generic backend. 2015-10-07 11:42:23 -04:00
logical_system.go Reintroduce the ability to look up obfuscated values in the audit log 2015-11-18 20:26:03 -05:00
logical_system_helpers.go Fix a logic bug around setting both a mount default and max at the same time. Ping #688. 2015-10-12 14:57:43 -04:00
logical_system_test.go Reintroduce the ability to look up obfuscated values in the audit log 2015-11-18 20:26:03 -05:00
mount.go Rearchitect MountTable locking and fix rollback. 2015-11-11 11:54:52 -05:00
mount_test.go Move more cubby logic outside of router into auth setup 2015-09-15 13:50:37 -04:00
policy.go Fix warnings returned by make vet 2015-09-26 21:17:39 -07:00
policy_store.go Create a "default" policy with sensible rules. 2015-11-09 15:44:09 -05:00
policy_store_test.go Fix warnings returned by make vet 2015-09-26 21:17:39 -07:00
policy_test.go
rollback.go Address feedback from review 2015-11-15 17:32:57 -05:00
rollback_test.go Address feedback from review 2015-11-15 17:32:57 -05:00
router.go Move more cubby logic outside of router into auth setup 2015-09-15 13:50:37 -04:00
router_test.go Use split-out hashicorp/uuid 2015-10-12 14:07:12 -04:00
testing.go Reintroduce the ability to look up obfuscated values in the audit log 2015-11-18 20:26:03 -05:00
token_store.go Add no-default-policy flag and API parameter to allow exclusion of the 2015-11-09 17:30:50 -05:00
token_store_test.go Add no-default-policy flag and API parameter to allow exclusion of the 2015-11-09 17:30:50 -05:00
util.go
util_test.go