open-vault/vault
Jim Kalafut 90e8d9267d
Fix identity token caching (#8412)
The namespace-partitioned cache flushing was not being used correctly,
which could leave standby nodes with stale information.

Fixes #8284
2020-02-26 15:56:19 -05:00
..
cluster Port some changes back to OSS (#8359) 2020-02-14 16:39:13 -08:00
external_tests external_tests: ensure derived cores are stable before proceeding on tests (#8342) 2020-02-13 13:18:53 -08:00
replication Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
seal Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
acl.go Check nil parameter value when processing an ACL. 2019-04-26 15:57:00 -07:00
acl_test.go Check nil parameter value when processing an ACL. 2019-04-26 15:57:00 -07:00
acl_util.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
audit.go Audit generate root requests and responses. (#8301) 2020-02-06 11:56:37 -05:00
audit_broker.go Allow plugins to submit audit requests/responses via extended SystemView (#6777) 2019-05-22 18:52:53 -04:00
audit_test.go audit: log invalid wrapping token request/response (#6541) 2019-07-05 14:15:14 -07:00
audited_headers.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
audited_headers_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
auth.go Backport OSS changes from enterprise (#7864) 2019-11-12 09:17:37 -08:00
auth_test.go AWS upgrade role entries (#7025) 2019-07-05 16:55:40 -07:00
barrier.go Shamir seals now come in two varieties: legacy and new-style. (#7694) 2019-10-18 14:46:00 -04:00
barrier_access.go Fix compile 2018-01-19 05:31:55 -05:00
barrier_aes_gcm.go Shamir seals now come in two varieties: legacy and new-style. (#7694) 2019-10-18 14:46:00 -04:00
barrier_aes_gcm_test.go Shamir seals now come in two varieties: legacy and new-style. (#7694) 2019-10-18 14:46:00 -04:00
barrier_test.go Shamir seals now come in two varieties: legacy and new-style. (#7694) 2019-10-18 14:46:00 -04:00
barrier_view.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
barrier_view_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
barrier_view_util.go The big one (#5346) 2018-09-17 23:03:00 -04:00
capabilities.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
capabilities_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
cluster.go Create network layer abstraction to allow in-memory cluster traffic (#8173) 2020-01-16 23:03:02 -08:00
cluster_test.go Port some changes back to OSS (#8359) 2020-02-14 16:39:13 -08:00
core.go Add persistent feature flags to be used on enterprise non-primaries. (#8391) 2020-02-19 18:06:53 -05:00
core_test.go provide vault server flag to exit on core shutdown (#7561) 2020-02-14 18:07:31 -08:00
core_util.go Port some changes back to OSS (#8359) 2020-02-14 16:39:13 -08:00
cors.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
counters.go add counters for active service tokens, and identity entities (#7541) 2019-10-08 13:58:19 -04:00
counters_test.go Fix token counters test (#7867) 2019-11-12 13:33:28 -05:00
dynamic_system_view.go Add identity templating helper to sdk/framework (#8088) 2020-01-06 10:16:52 -08:00
dynamic_system_view_test.go Add identity templating helper to sdk/framework (#8088) 2020-01-06 10:16:52 -08:00
expiration.go core: revoke the proper token on partial failures from token-related requests (#7835) 2019-11-08 13:14:03 -08:00
expiration_integ_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
expiration_test.go Don't allow registering a non-root zero TTL token lease (#7524) 2019-11-05 16:11:13 -05:00
expiration_util.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
generate_root.go Fix a regression introduced in #7698 that breaks root token generation. (#7727) 2019-10-24 10:23:31 -04:00
generate_root_recovery.go Run go fmt (#7823) 2019-11-07 08:54:34 -08:00
generate_root_test.go Shamir seals now come in two varieties: legacy and new-style. (#7694) 2019-10-18 14:46:00 -04:00
ha.go Unless we've been asked to stop, most failures should not result in (#7732) 2020-02-14 18:28:37 -08:00
identity_lookup.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
identity_lookup_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
identity_store.go Fix identity token caching (#8412) 2020-02-26 15:56:19 -05:00
identity_store_aliases.go Prevent entity alias creation when entity is in different NS than mount (#943) (#6886) 2019-06-14 12:53:00 -04:00
identity_store_aliases_test.go Prevent entity alias creation when entity is in different NS than mount (#943) (#6886) 2019-06-14 12:53:00 -04:00
identity_store_entities.go Fix a nil map pointer in mergeEntity. (#7711) 2019-10-22 09:57:24 -04:00
identity_store_entities_test.go Storage packer V1 updates (#6531) 2019-05-07 15:29:51 -04:00
identity_store_group_aliases.go Update group alias handling to better protect against namespace differences 2019-06-18 16:43:30 -04:00
identity_store_group_aliases_test.go Update group alias handling to better protect against namespace differences 2019-06-18 16:43:30 -04:00
identity_store_groups.go Remove 512 entity limit for groups (#7317) 2019-08-14 13:47:11 -04:00
identity_store_groups_test.go Fix some tests 2019-06-17 17:02:34 -04:00
identity_store_oidc.go Fix identity token caching (#8412) 2020-02-26 15:56:19 -05:00
identity_store_oidc_test.go Identity: Allow specifying a custom OIDC client_id field (#8165) 2020-02-13 23:15:35 -08:00
identity_store_oidc_util.go Fix identity token caching (#8412) 2020-02-26 15:56:19 -05:00
identity_store_schema.go Storage packer V1 updates (#6531) 2019-05-07 15:29:51 -04:00
identity_store_structs.go Fix identity case sensitivity loading in secondary cluster (#7327) 2019-09-30 10:27:25 -04:00
identity_store_test.go Storage packer V1 updates (#6531) 2019-05-07 15:29:51 -04:00
identity_store_upgrade.go Prevent entity alias creation when entity is in different NS than mount (#943) (#6886) 2019-06-14 12:53:00 -04:00
identity_store_util.go add counters for active service tokens, and identity entities (#7541) 2019-10-08 13:58:19 -04:00
init.go Observer pattern for service registration interface (#8123) 2020-01-24 09:42:03 -08:00
init_test.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
keyring.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
keyring_test.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
logical_cubbyhole.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
logical_cubbyhole_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
logical_passthrough.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
logical_passthrough_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
logical_raw.go Run go fmt (#7823) 2019-11-07 08:54:34 -08:00
logical_system.go Add missed description field for GET /sys/auth/:path/tune endpoint (#8193) 2020-02-15 10:32:47 -08:00
logical_system_helpers.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
logical_system_integ_test.go plugin: fix panic on router.MatchingSystemView if backend is nil (#7991) 2019-12-10 10:48:30 -08:00
logical_system_paths.go oss changes for entropy augmentation feature (#7670) 2019-10-17 10:33:00 -07:00
logical_system_pprof.go sys/pprof: fix pprof index description (#7564) 2019-10-03 17:02:41 -07:00
logical_system_raft.go Raft retry join (#7856) 2020-01-13 17:02:16 -08:00
logical_system_test.go Add missed description field for GET /sys/auth/:path/tune endpoint (#8193) 2020-02-15 10:32:47 -08:00
mount.go Backport OSS changes from enterprise (#7864) 2019-11-12 09:17:37 -08:00
mount_test.go Port some changes that got out of sync 2019-10-28 11:38:14 -04:00
mount_util.go Port filtered paths changes back to OSS (#7741) 2019-10-27 13:30:38 -07:00
namespaces.go The big one (#5346) 2018-09-17 23:03:00 -04:00
plugin_catalog.go Typo (#7586) 2019-10-07 08:08:18 -07:00
plugin_catalog_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
plugin_reload.go Sync plugin reload file 2019-04-23 10:22:56 -04:00
policy.go Add identity templating helper to sdk/framework (#8088) 2020-01-06 10:16:52 -08:00
policy_store.go Add maximum amount of random entropy requested (#7144) 2019-07-24 18:22:23 -07:00
policy_store_test.go core/policy & core/token: Remove Dead Test Code (#7774) 2019-11-04 10:36:07 +01:00
policy_store_util.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
policy_test.go Fix hasMountPath for segment wildcard mounts; introduce priority order (#6532) 2019-04-10 17:46:17 -04:00
policy_util.go The big one (#5346) 2018-09-17 23:03:00 -04:00
raft.go Run goimports (#8251) 2020-01-27 21:11:00 -08:00
rekey.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
rekey_test.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
request_forwarding.go Create network layer abstraction to allow in-memory cluster traffic (#8173) 2020-01-16 23:03:02 -08:00
request_forwarding_rpc.go Remove unnecessary locking during heartbeating (#7877) 2019-11-20 17:24:49 -08:00
request_forwarding_rpc_util.go The big one (#5346) 2018-09-17 23:03:00 -04:00
request_forwarding_service.pb.go Rerun proto gen as some got gen'd with old proto version (#7090) 2019-07-09 01:02:20 +02:00
request_forwarding_service.proto Raft Storage Backend (#6888) 2019-06-20 12:14:58 -07:00
request_handling.go core: revoke the proper token on partial failures from token-related requests (#7835) 2019-11-08 13:14:03 -08:00
request_handling_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
request_handling_util.go Fix various read only storage errors 2019-07-05 18:13:49 -04:00
rollback.go Fixed a bunch of typos (#7146) 2019-07-18 21:10:15 -04:00
rollback_test.go Switch to go modules (#6585) 2019-04-13 03:44:06 -04:00
router.go plugin: fix panic on router.MatchingSystemView if backend is nil (#7991) 2019-12-10 10:48:30 -08:00
router_access.go The big one (#5346) 2018-09-17 23:03:00 -04:00
router_test.go Fix a deadlock if a panic happens during request handling (#6920) 2019-06-19 09:40:57 -04:00
router_testing.go AWS upgrade role entries (#7025) 2019-07-05 16:55:40 -07:00
seal.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
seal_access.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
seal_autoseal.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
seal_autoseal_test.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
seal_test.go Shamir seals now come in two varieties: legacy and new-style. (#7694) 2019-10-18 14:46:00 -04:00
seal_testing.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
seal_testing_util.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
sealunwrapper.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
sealunwrapper_test.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
testing.go Bump API/SDK and adapt to move from SDK stuff 2020-02-15 14:58:05 -05:00
testing_util.go Fix leader info repopulation (#6167) 2019-02-05 21:01:18 -05:00
token_store.go Fix panic when creating batch tokens for role that doesn't exist. (#8021) 2019-12-16 09:31:32 -05:00
token_store_test.go Migrate built in auto seal to go-kms-wrapping (#8118) 2020-01-10 20:39:52 -05:00
token_store_util.go The big one (#5346) 2018-09-17 23:03:00 -04:00
ui.go UI - raft config and snapshotting (#7410) 2019-10-14 13:23:29 -05:00
ui_test.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
util.go Removed unused methods 2017-01-03 12:51:35 -05:00
util_test.go Utility Enhancements 2016-04-05 20:32:59 -04:00
wrapping.go oss changes for entropy augmentation feature (#7670) 2019-10-17 10:33:00 -07:00
wrapping_util.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00