open-vault/builtin/logical
Steven Clark 6cfce7bf29
Enforce ACME accounts to a specific directory path (#20363)
* Enforce ACME accounts to a specific directory path

 - Accounts and correspondingly orders, authz should not cross
   the path boundaries. So we now tag an ACME account with a specific
   directory based on the requested role/issuer values in the path.
 - If an operation occurs on a different acme directory path it will
   cause a failure of the request.
 - Add some go doc to a few places and reorder the methods in the
   acme_wrappers.go class to highlight the wrappers and not intertwine
   the helper functions
 - Rename path_acme_new_account.go to path_acme_account.go as it has
   several account related methods now.

* Get rid of bad test case

 - The previous commit contained a bug fix for us properly
   loading issuers within the ACME path, that exposed
   this broken/bad test case. Simply remove it.
2023-04-26 12:47:31 -04:00
..
aws Revert changes to STS leases but keep the ttl field (#20034) 2023-04-13 15:02:39 -05:00
consul openapi: Add display attributes for Consul (#19413) 2023-04-13 11:31:37 -04:00
database openapi: Add display attributes for database plugin (#19414) 2023-04-10 14:22:02 -04:00
nomad Add support for docker testclusters (#20247) 2023-04-24 14:25:50 -04:00
pki Enforce ACME accounts to a specific directory path (#20363) 2023-04-26 12:47:31 -04:00
pkiext Add ACME revocation handlers (#20340) 2023-04-25 16:48:30 -04:00
rabbitmq Add support for docker testclusters (#20247) 2023-04-24 14:25:50 -04:00
ssh Add support for docker testclusters (#20247) 2023-04-24 14:25:50 -04:00
totp openapi: Add display attributes for TOTP plugin (#19544) 2023-04-10 13:32:15 -04:00
transit openapi: Add display attributes for transit plugin (#19575) 2023-04-10 14:20:53 -04:00