open-vault/api
Jeff Mitchell 5d44c54947
Changes the way policies are reported in audit logs (#4747)
* This changes the way policies are reported in audit logs.

Previously, only policies tied to tokens would be reported. This could
make it difficult to perform after-the-fact analysis based on both the
initial response entry and further requests. Now, the full set of
applicable policies from both the token and any derived policies from
Identity are reported.

To keep things consistent, token authentications now also return the
full set of policies in api.Secret.Auth responses, so this both makes it
easier for users to understand their actual full set, and it matches
what the audit logs now report.
2018-06-14 09:49:33 -04:00
..
test-fixtures moved the test cert keys to appropriate test-fixtures folder 2016-02-29 15:49:08 -05:00
api_integration_test.go Purge opened connections on retries during tests (#4452) 2018-04-26 11:28:58 -04:00
api_test.go Redo API locking (#3508) 2017-11-02 09:30:04 -05:00
auth.go Remove RevokePrefix from the API too as we simply do not support it any 2016-04-05 11:00:12 -04:00
auth_token.go Use RenewTokenAsSelf instead 2017-07-07 17:14:44 -04:00
client.go Clean up request logic and use retryable's more efficient handling (#4670) 2018-06-01 09:12:43 -04:00
client_test.go Redo API client locking (#4551) 2018-05-25 14:38:06 -04:00
help.go
logical.go Re-add capability to unwrap pre-0.6.2 wrapping tokens 2018-05-15 20:01:58 -04:00
renewer.go Grace is deprecated so mark as such 2018-05-09 10:02:06 -04:00
renewer_integration_test.go Move timeout declaration outside of for loop, break out early if renewed cleanly (#4522) 2018-05-07 13:47:55 -07:00
renewer_test.go Remove outdated renewer test 2018-05-09 12:33:20 -04:00
request.go Clean up request logic and use retryable's more efficient handling (#4670) 2018-06-01 09:12:43 -04:00
request_test.go Clean up request logic and use retryable's more efficient handling (#4670) 2018-06-01 09:12:43 -04:00
response.go Allow returning warnings and other data in 404s in the Go API (#4256) 2018-04-03 22:35:45 -04:00
secret.go Changes the way policies are reported in audit logs (#4747) 2018-06-14 09:49:33 -04:00
secret_test.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
ssh.go Add SignKey endpoint for SSH API client 2017-08-18 12:59:08 -04:00
ssh_agent.go Move checkHCLKeys into hclutil (#4749) 2018-06-12 12:38:08 -04:00
ssh_agent_test.go Fix output-related tests (#4288) 2018-04-05 20:43:29 -04:00
sys.go
sys_audit.go Purge structs from API. 2018-04-09 22:23:56 -04:00
sys_auth.go Purge structs from API. 2018-04-09 22:23:56 -04:00
sys_capabilities.go Fix panic when running capabilities CLI command with multiple paths (#4553) 2018-05-11 11:58:12 -04:00
sys_config_cors.go Cors headers (#2021) 2017-06-17 00:04:55 -04:00
sys_generate_root.go CLI Enhancements (#3897) 2018-02-12 18:12:16 -05:00
sys_health.go Sync some bits over 2018-01-22 21:44:49 -05:00
sys_init.go Add support for PGP encrypting the initial root token. (#1883) 2016-09-13 18:42:24 -04:00
sys_leader.go Add leader cluster address to status/leader output. (#3061) 2017-07-31 18:25:27 -04:00
sys_leases.go moving client calls to new endpoint (#2867) 2017-07-25 11:58:33 -04:00
sys_mounts.go Purge structs from API. 2018-04-09 22:23:56 -04:00
sys_plugins.go Add API functions and completions for plugins (#4194) 2018-03-26 13:40:33 -04:00
sys_policy.go More syncing 2017-10-23 16:52:56 -04:00
sys_rekey.go Fix missing verification nonce field 2018-05-29 16:13:08 -04:00
sys_rekey_ext_test.go Finish api tests for verification 2018-05-20 19:01:24 -04:00
sys_rotate.go Restore compatibility with pre-0.6.1 servers for CLI/Go API calls 2016-08-14 14:52:45 -04:00
sys_seal.go adding recovery info to seal status (#3706) 2017-12-18 09:58:14 -05:00
sys_stepdown.go Provide 'sys/step-down' and 'vault step-down' 2016-02-26 19:43:55 -05:00