luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity
open-vault/vault
History
Michel Vocks 2b5aca4300
Token identity support (#6267) 
* Implemented token backend support for identity

* Fixed tests

* Refactored a few checks for the token entity overwrite. Fixed tests.

* Moved entity alias check up so that the entity and entity alias is only created when it has been specified in allowed_entity_aliases list

* go mod vendor

* Added glob pattern

* Optimized allowed entity alias check

* Added test for asterisk only

* Changed to glob pattern anywhere

* Changed response code in case of failure. Changed globbing pattern check. Added docs.

* Added missing token role get parameter. Added more samples

* Fixed failing tests

* Corrected some cosmetical review points

* Changed response code for invalid provided entity alias

* Fixed minor things

* Fixed failing test
 		2019-07-01 11:39:54 +02:00
..
cluster Raft Storage Backend (#6888) 2019-06-20 12:14:58 -07:00
external_tests Raft tests (#7008) 2019-06-28 14:08:53 -04:00
replication Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
seal Raft Storage Backend (#6888) 2019-06-20 12:14:58 -07:00
acl.go Check nil parameter value when processing an ACL. 2019-04-26 15:57:00 -07:00
acl_test.go Check nil parameter value when processing an ACL. 2019-04-26 15:57:00 -07:00
acl_util.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
audit.go Allow plugins to submit audit requests/responses via extended SystemView (#6777) 2019-05-22 18:52:53 -04:00
audit_broker.go Allow plugins to submit audit requests/responses via extended SystemView (#6777) 2019-05-22 18:52:53 -04:00
audit_test.go Allow plugins to submit audit requests/responses via extended SystemView (#6777) 2019-05-22 18:52:53 -04:00
audited_headers.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
audited_headers_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
auth.go Port some stuff (#6939) 2019-06-20 16:02:11 -04:00
auth_test.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
barrier.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
barrier_access.go Fix compile 2018-01-19 05:31:55 -05:00
barrier_aes_gcm.go Clear the Barrier AEAD cache on keyring reload (#6870) 2019-06-12 08:56:16 -07:00
barrier_aes_gcm_test.go Clear the Barrier AEAD cache on keyring reload (#6870) 2019-06-12 08:56:16 -07:00
barrier_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
barrier_view.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
barrier_view_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
barrier_view_util.go The big one (#5346) 2018-09-17 23:03:00 -04:00
capabilities.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
capabilities_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
cluster.go storage/raft: fix races in tests (#6996) 2019-06-27 10:00:03 -07:00
cluster_test.go Move cluster logic out of vault package (#6601) 2019-04-17 13:50:31 -07:00
core.go storage/raft: fix races in tests (#6996) 2019-06-27 10:00:03 -07:00
core_test.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
core_util.go Move cluster logic out of vault package (#6601) 2019-04-17 13:50:31 -07:00
cors.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
counters.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
counters_test.go Add code for writing and reading request counters to storage. (#5918) 2019-03-05 14:55:07 -05:00
dynamic_system_view.go core: add generic request forwarding bits to oss (#6866) 2019-06-11 13:13:03 -07:00
expiration.go Port over some SP v2 bits (#6516) 2019-05-01 13:47:41 -04:00
expiration_integ_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
expiration_test.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
expiration_util.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
generate_root.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
generate_root_test.go Update to api 1.0.1 and sdk 0.1.8 2019-04-15 14:10:07 -04:00
ha.go storage/raft: fix races in tests (#6996) 2019-06-27 10:00:03 -07:00
identity_lookup.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
identity_lookup_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
identity_store.go Add OIDC token generation to Identity (#6900) 2019-06-21 10:23:39 -07:00
identity_store_aliases.go Prevent entity alias creation when entity is in different NS than mount (#943) (#6886) 2019-06-14 12:53:00 -04:00
identity_store_aliases_test.go Prevent entity alias creation when entity is in different NS than mount (#943) (#6886) 2019-06-14 12:53:00 -04:00
identity_store_entities.go Prevent entity alias creation when entity is in different NS than mount (#943) (#6886) 2019-06-14 12:53:00 -04:00
identity_store_entities_test.go Storage packer V1 updates (#6531) 2019-05-07 15:29:51 -04:00
identity_store_group_aliases.go Update group alias handling to better protect against namespace differences 2019-06-18 16:43:30 -04:00
identity_store_group_aliases_test.go Update group alias handling to better protect against namespace differences 2019-06-18 16:43:30 -04:00
identity_store_groups.go Update group alias handling to better protect against namespace differences 2019-06-18 16:43:30 -04:00
identity_store_groups_test.go Fix some tests 2019-06-17 17:02:34 -04:00
identity_store_oidc.go Support EC and EdDSA in identity tokens (#6992) 2019-06-27 08:34:48 -07:00
identity_store_oidc_test.go Support EC and EdDSA in identity tokens (#6992) 2019-06-27 08:34:48 -07:00
identity_store_schema.go Storage packer V1 updates (#6531) 2019-05-07 15:29:51 -04:00
identity_store_structs.go Add OIDC token generation to Identity (#6900) 2019-06-21 10:23:39 -07:00
identity_store_test.go Storage packer V1 updates (#6531) 2019-05-07 15:29:51 -04:00
identity_store_upgrade.go Prevent entity alias creation when entity is in different NS than mount (#943) (#6886) 2019-06-14 12:53:00 -04:00
identity_store_util.go Update group alias handling to better protect against namespace differences 2019-06-18 16:43:30 -04:00
init.go storage/raft: fix races in tests (#6996) 2019-06-27 10:00:03 -07:00
init_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
keyring.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
keyring_test.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
logical_cubbyhole.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
logical_cubbyhole_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
logical_passthrough.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
logical_passthrough_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
logical_system.go Fix key upgrade and raft tests (#6949) 2019-06-21 11:38:21 -06:00
logical_system_helpers.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
logical_system_integ_test.go Update to api 1.0.1 and sdk 0.1.8 2019-04-15 14:10:07 -04:00
logical_system_paths.go Standardize how we format deprecated values in traditional path-help (#7007) 2019-06-27 14:52:52 -04:00
logical_system_raft.go Raft Storage Backend (#6888) 2019-06-20 12:14:58 -07:00
logical_system_test.go Storage packer V1 updates (#6531) 2019-05-07 15:29:51 -04:00
mount.go Sync 2019-06-20 20:55:10 -04:00
mount_test.go Fix a case where mounts could be duplicated (#6771) 2019-06-04 10:33:36 -07:00
mount_util.go Add new license callback init step for logical backends. (#6887) 2019-06-17 14:11:35 -04:00
namespaces.go The big one (#5346) 2018-09-17 23:03:00 -04:00
plugin_catalog.go Update to api 1.0.1 and sdk 0.1.8 2019-04-15 14:10:07 -04:00
plugin_catalog_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
plugin_reload.go Sync plugin reload file 2019-04-23 10:22:56 -04:00
policy.go Add OIDC token generation to Identity (#6900) 2019-06-21 10:23:39 -07:00
policy_store.go Sync 2019-06-20 20:55:10 -04:00
policy_store_test.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
policy_store_util.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
policy_test.go Fix hasMountPath for segment wildcard mounts; introduce priority order (#6532) 2019-04-10 17:46:17 -04:00
policy_util.go The big one (#5346) 2018-09-17 23:03:00 -04:00
raft.go storage/raft: fix races in tests (#6996) 2019-06-27 10:00:03 -07:00
rekey.go Raft Storage Backend (#6888) 2019-06-20 12:14:58 -07:00
rekey_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
request_forwarding.go storage/raft: fix races in tests (#6996) 2019-06-27 10:00:03 -07:00
request_forwarding_rpc.go storage/raft: fix races in tests (#6996) 2019-06-27 10:00:03 -07:00
request_forwarding_rpc_util.go The big one (#5346) 2018-09-17 23:03:00 -04:00
request_forwarding_service.pb.go Raft Storage Backend (#6888) 2019-06-20 12:14:58 -07:00
request_forwarding_service.proto Raft Storage Backend (#6888) 2019-06-20 12:14:58 -07:00
request_handling.go Check ctx again after getting state lock when forwarding 2019-06-27 20:36:16 -04:00
request_handling_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
request_handling_util.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
rollback.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
rollback_test.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
router.go Fix a case where mounts could be duplicated (#6771) 2019-06-04 10:33:36 -07:00
router_access.go The big one (#5346) 2018-09-17 23:03:00 -04:00
router_test.go Fix a deadlock if a panic happens during request handling (#6920) 2019-06-19 09:40:57 -04:00
router_testing.go Fix a deadlock if a panic happens during request handling (#6920) 2019-06-19 09:40:57 -04:00
seal.go Raft Storage Backend (#6888) 2019-06-20 12:14:58 -07:00
seal_access.go Send initialized information via sys/seal-status (#5424) 2018-09-27 14:03:37 -07:00
seal_autoseal.go Raft Storage Backend (#6888) 2019-06-20 12:14:58 -07:00
seal_test.go Raft Storage Backend (#6888) 2019-06-20 12:14:58 -07:00
seal_testing.go Raft Storage Backend (#6888) 2019-06-20 12:14:58 -07:00
seal_testing_util.go Fix test 2019-06-23 23:05:51 -04:00
sealunwrapper.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
sealunwrapper_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
testing.go Allow turning on client auth in test clusters (#6958) 2019-06-23 21:50:27 -04:00
testing_util.go Fix leader info repopulation (#6167) 2019-02-05 21:01:18 -05:00
token_store.go Token identity support (#6267) 2019-07-01 11:39:54 +02:00
token_store_test.go Token identity support (#6267) 2019-07-01 11:39:54 +02:00
token_store_util.go The big one (#5346) 2018-09-17 23:03:00 -04:00
ui.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
ui_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
util.go Removed unused methods 2017-01-03 12:51:35 -05:00
util_test.go Utility Enhancements 2016-04-05 20:32:59 -04:00
wrapping.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
wrapping_util.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00