luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity
open-vault/http
History
Christopher Swenson 7a977fd6ea
events: Check token and ACLs on request (#19138) 
This checks the request against the `read` permission for
`sys/events/subscribe/{eventType}` on the initial subscribe.

Future work includes moving this to its own verb (`subscribe`)
and periodically rechecking the request.

Tested locally by minting a token with the wrong permissions
and verifying that they are rejected as expected, and that
they work if the policy is adjusted to `sys/event/subscribe/*`
(or the specific topic name) with `read` permissions.

I had to change the `core.checkToken()` to be publicly accessible,
as it seems like the easiest way to check the token on the
`logical.Request` against all relevant policies, but without
going into all of the complex logic further in `handleLogical()`.

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 		2023-02-10 20:56:00 +00:00
..
web_ui Make web_ui complient with Go's native embedding (#14246) 2022-02-24 09:12:36 -05:00
assets.go update gofumpt to 0.3.1 and reformat the repo (#17055) 2022-09-07 17:31:20 -07:00
assets_stub.go Convert to Go 1.17 go:build directive (#13579) 2022-01-05 12:02:03 -06:00
auth_token_test.go Revert the WithContext changes to vault tests (#14947) 2022-04-07 15:12:58 -04:00
cors.go Migrate to sdk/internalshared libs in go-secure-stdlib (#12090) 2021-07-15 20:17:31 -04:00
custom_header_test.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
events.go events: Check token and ACLs on request (#19138) 2023-02-10 20:56:00 +00:00
events_test.go events: Check token and ACLs on request (#19138) 2023-02-10 20:56:00 +00:00
forwarded_for_test.go Create global quotas of each type in every NewTestCluster. (#18038) 2022-11-29 14:38:33 -05:00
forwarding_bench_test.go TestClusterCore's TLSConfig becomes a method and does a Clone. (#18914) 2023-01-31 11:05:16 -05:00
forwarding_test.go TestClusterCore's TLSConfig becomes a method and does a Clone. (#18914) 2023-01-31 11:05:16 -05:00
handler.go events: Allow subscribing to events in namespaces (#19134) 2023-02-10 19:02:42 +00:00
handler_test.go Plugins: Consistently use plugin_version (#17171) 2022-09-20 12:35:50 +01:00
help.go Vault-4010 Unauthenticated panic when processing "help" requests (#14704) 2022-03-24 12:19:14 -07:00
help_test.go Vault-4010 Unauthenticated panic when processing "help" requests (#14704) 2022-03-24 12:19:14 -07:00
http_test.go Customizing HTTP headers in the config file (#12485) 2021-10-13 11:06:33 -04:00
logical.go events: Check token and ACLs on request (#19138) 2023-02-10 20:56:00 +00:00
logical_test.go Vault test cluster helper refactorings, mostly audit related (#18928) 2023-02-01 08:33:16 -05:00
plugin_test.go Support version selection for database plugins (#16982) 2022-09-09 17:32:28 +01:00
sys_audit_test.go
…
sys_auth_test.go Vault test cluster helper refactorings, mostly audit related (#18928) 2023-02-01 08:33:16 -05:00
sys_config_cors_test.go Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00
sys_config_state_test.go Add experiment system + events experiment (#18682) 2023-01-16 16:07:18 +00:00
sys_feature_flags.go Feature flags API (#10613) 2021-01-06 16:05:00 -06:00
sys_generate_root.go SSCT Tokens Feature [OSS] (#14109) 2022-02-17 11:43:07 -08:00
sys_generate_root_test.go Vault test cluster helper refactorings, mostly audit related (#18928) 2023-02-01 08:33:16 -05:00
sys_health.go Move version out of SDK. (#14229) 2022-12-07 13:29:51 -05:00
sys_health_test.go OSS parts of #1891 (sys/health license addition) (#11676) 2021-05-20 13:32:15 -04:00
sys_hostinfo_test.go Revert the WithContext changes to vault tests (#14947) 2022-04-07 15:12:58 -04:00
sys_in_flight_requests.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
sys_in_flight_requests_test.go VAULT-1564 report in-flight requests (#13024) 2021-12-08 17:34:42 -05:00
sys_init.go Revert #18683 (#18942) 2023-02-01 13:34:53 -06:00
sys_init_test.go OSS portion of wrapper-v2 (#16811) 2022-08-23 15:37:16 -04:00
sys_internal_test.go
…
sys_leader.go Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00
sys_leader_test.go core: Record the time a node became active (#10489) 2020-12-11 16:50:19 -08:00
sys_lease_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
sys_metrics.go Customizing HTTP headers in the config file (#12485) 2021-10-13 11:06:33 -04:00
sys_metrics_test.go Vault test cluster helper refactorings, mostly audit related (#18928) 2023-02-01 08:33:16 -05:00
sys_monitor_test.go Make API not depend on SDK (#18962) 2023-02-06 09:41:56 -05:00
sys_mount_test.go Vault test cluster helper refactorings, mostly audit related (#18928) 2023-02-01 08:33:16 -05:00
sys_mounts_test.go Revert the WithContext changes to vault tests (#14947) 2022-04-07 15:12:58 -04:00
sys_policy_test.go
…
sys_raft.go Use %q for quoted strings where appropriate (#15216) 2022-08-03 12:32:45 -06:00
sys_rekey.go Support processing parameters sent as a URL-encoded form (#8325) 2020-02-12 14:20:22 -08:00
sys_rekey_test.go The big one (#5346) 2018-09-17 23:03:00 -04:00
sys_rotate_test.go OSS side barrier encryption tracking and automatic rotation (#11007) 2021-02-25 14:27:25 -06:00
sys_seal.go Implement sys/seal-status and sys/leader in system backend (#10725) 2021-01-20 14:04:24 -06:00
sys_seal_test.go Move version out of SDK. (#14229) 2022-12-07 13:29:51 -05:00
sys_wrapping_test.go return 403 for wrapping requests when no token provided (#18859) 2023-01-31 13:57:50 -05:00
testing.go Create global quotas of each type in every NewTestCluster. (#18038) 2022-11-29 14:38:33 -05:00
unwrapping_raw_body_test.go Revert the WithContext changes to vault tests (#14947) 2022-04-07 15:12:58 -04:00
util.go VAULT-6614 Enable role based quotas for lease-count quotas (OSS) (#16157) 2022-07-05 13:02:00 -04:00