open-vault/vault
Jeff Mitchell 71d92ef093 ACL Templating (#4994)
* Initial work on templating

* Add check for unbalanced closing in front

* Add missing templated assignment

* Add first cut of end-to-end test on templating.

* Make template errors be 403s and finish up testing

* Review feedback
2018-08-15 11:42:56 -07:00
..
acl.go Fix some cases where unauthorized calls could return 400 (#5083) 2018-08-10 08:59:58 -05:00
acl_test.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
audit.go Defer setting views read/write until the end of postUnseal (#4392) 2018-04-19 13:29:43 -04:00
audit_broker.go Errwrap everywhere (#4252) 2018-04-05 11:49:21 -04:00
audit_test.go Move to "github.com/hashicorp/go-hclog" (#4227) 2018-04-02 17:46:59 -07:00
audited_headers.go Errwrap everywhere (#4252) 2018-04-05 11:49:21 -04:00
audited_headers_test.go Add context to the NewSalt function (#4102) 2018-03-08 11:21:11 -08:00
auth.go Plumbing request context through to expiration manager (#5021) 2018-08-01 21:39:39 -04:00
auth_test.go Add request timeouts in normal request path and to expirations (#4971) 2018-07-24 14:50:49 -07:00
barrier.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
barrier_access.go Fix compile 2018-01-19 05:31:55 -05:00
barrier_aes_gcm.go Revert some of commit 050ab805a7565c5b0cadb0176023031ee5f0d17b. (#4768) 2018-06-14 13:44:13 -04:00
barrier_aes_gcm_test.go Move to "github.com/hashicorp/go-hclog" (#4227) 2018-04-02 17:46:59 -07:00
barrier_test.go Add context to storage backends and wire it through a lot of places (#3817) 2018-01-19 01:44:44 -05:00
barrier_view.go Check for nil value in BarrierView.Put (#4804) 2018-06-20 09:32:06 -04:00
barrier_view_test.go Make mount view read only until after mount persist (#3910) 2018-02-09 14:04:25 -05:00
capabilities.go disallow token use if entity is invalid (#4791) 2018-06-19 12:57:19 -04:00
capabilities_test.go Move TokenEntry into logical. (#4729) 2018-06-08 17:24:27 -04:00
cluster.go Errwrap everywhere (#4252) 2018-04-05 11:49:21 -04:00
cluster_test.go Add request timeouts in normal request path and to expirations (#4971) 2018-07-24 14:50:49 -07:00
core.go ACL Templating (#4994) 2018-08-15 11:42:56 -07:00
core_test.go Add request timeouts in normal request path and to expirations (#4971) 2018-07-24 14:50:49 -07:00
cors.go Fix nil pointer 2018-06-09 16:57:57 -04:00
dynamic_system_view.go ACL Templating (#4994) 2018-08-15 11:42:56 -07:00
expiration.go Plumbing request context through to expiration manager (#5021) 2018-08-01 21:39:39 -04:00
expiration_integ_test.go Don't call LeaseExtend on login renewal paths when period is provided (#3803) 2018-01-18 12:19:18 -05:00
expiration_test.go Plumbing request context through to expiration manager (#5021) 2018-08-01 21:39:39 -04:00
generate_root.go Tackle #4929 a different way (#4932) 2018-07-24 13:57:25 -07:00
generate_root_test.go Add context to storage backends and wire it through a lot of places (#3817) 2018-01-19 01:44:44 -05:00
ha.go ACL Templating (#4994) 2018-08-15 11:42:56 -07:00
identity_lookup.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
identity_lookup_test.go Pass context to backends (#3750) 2018-01-08 10:31:38 -08:00
identity_store.go Add locking when adding aliases to existing entities (#4965) 2018-07-24 22:01:58 -04:00
identity_store_aliases.go Add locking when adding aliases to existing entities (#4965) 2018-07-24 22:01:58 -04:00
identity_store_aliases_ext_test.go Add key information to list endpoints in identity. (#4634) 2018-05-25 14:34:24 -04:00
identity_store_aliases_test.go Add locking when adding aliases to existing entities (#4965) 2018-07-24 22:01:58 -04:00
identity_store_entities.go Remove unused variable 2018-08-09 16:47:58 -04:00
identity_store_entities_ext_test.go Changes the way policies are reported in audit logs (#4747) 2018-06-14 09:49:33 -04:00
identity_store_entities_test.go Tackle #4929 a different way (#4932) 2018-07-24 13:57:25 -07:00
identity_store_ext_test.go Identity: Remove unused MemDB indexes and unused functions (#4817) 2018-06-24 07:45:53 -04:00
identity_store_group_aliases.go Identity: Remove unused MemDB indexes and unused functions (#4817) 2018-06-24 07:45:53 -04:00
identity_store_group_aliases_ext_test.go disable identity for local mounts (#4407) 2018-04-23 13:46:14 -04:00
identity_store_group_aliases_test.go Identity: Remove unused MemDB indexes and unused functions (#4817) 2018-06-24 07:45:53 -04:00
identity_store_groups.go Add mount_path and mount_type to group lookups (#5074) 2018-08-09 13:07:24 -05:00
identity_store_groups_ext_test.go Add key information to list endpoints in identity. (#4634) 2018-05-25 14:34:24 -04:00
identity_store_groups_test.go Identity: Remove unused MemDB indexes and unused functions (#4817) 2018-06-24 07:45:53 -04:00
identity_store_schema.go Identity: Remove unused MemDB indexes and unused functions (#4817) 2018-06-24 07:45:53 -04:00
identity_store_structs.go Add locking when adding aliases to existing entities (#4965) 2018-07-24 22:01:58 -04:00
identity_store_test.go Merge Identity Entities if two claim the same alias (#5075) 2018-08-09 15:37:36 -05:00
identity_store_upgrade.go Add locking when adding aliases to existing entities (#4965) 2018-07-24 22:01:58 -04:00
identity_store_util.go Merge Identity Entities if two claim the same alias (#5075) 2018-08-09 15:37:36 -05:00
init.go core: Cancel context before taking state lock (#5020) 2018-08-01 12:07:37 -07:00
init_test.go Move to "github.com/hashicorp/go-hclog" (#4227) 2018-04-02 17:46:59 -07:00
keyring.go Errwrap everywhere (#4252) 2018-04-05 11:49:21 -04:00
keyring_test.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
logical_cubbyhole.go Errwrap everywhere (#4252) 2018-04-05 11:49:21 -04:00
logical_cubbyhole_test.go Add context to storage backends and wire it through a lot of places (#3817) 2018-01-19 01:44:44 -05:00
logical_passthrough.go Errwrap everywhere (#4252) 2018-04-05 11:49:21 -04:00
logical_passthrough_test.go Add context to storage backends and wire it through a lot of places (#3817) 2018-01-19 01:44:44 -05:00
logical_system.go ACL Templating (#4994) 2018-08-15 11:42:56 -07:00
logical_system_helpers.go Port some ent mount changes (#4330) 2018-04-11 14:32:55 -04:00
logical_system_integ_test.go Add request timeouts in normal request path and to expirations (#4971) 2018-07-24 14:50:49 -07:00
logical_system_test.go Plumbing request context through to expiration manager (#5021) 2018-08-01 21:39:39 -04:00
mount.go Plumbing request context through to expiration manager (#5021) 2018-08-01 21:39:39 -04:00
mount_test.go Add request timeouts in normal request path and to expirations (#4971) 2018-07-24 14:50:49 -07:00
plugin_catalog.go Errwrap everywhere (#4252) 2018-04-05 11:49:21 -04:00
plugin_catalog_test.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
plugin_reload.go Add debug comment when singleton reload is skipped (#4625) 2018-05-23 17:52:11 -07:00
policy.go ACL Templating (#4994) 2018-08-15 11:42:56 -07:00
policy_store.go ACL Templating (#4994) 2018-08-15 11:42:56 -07:00
policy_store_ext_test.go ACL Templating (#4994) 2018-08-15 11:42:56 -07:00
policy_store_test.go ACL Templating (#4994) 2018-08-15 11:42:56 -07:00
policy_test.go Fix output-related tests (#4288) 2018-04-05 20:43:29 -04:00
rekey.go Tackle #4929 a different way (#4932) 2018-07-24 13:57:25 -07:00
rekey_test.go Tackle #4929 a different way (#4932) 2018-07-24 13:57:25 -07:00
request_forwarding.go HA: Bump the max send/recv size for the gRPC server (#4844) 2018-06-29 09:52:23 -07:00
request_forwarding_service.pb.go Make proto 2018-07-10 20:49:48 -04:00
request_forwarding_service.proto adding option go_package to protos (#4687) 2018-06-04 10:19:26 -04:00
request_handling.go ACL Templating (#4994) 2018-08-15 11:42:56 -07:00
request_handling_test.go Add request timeouts in normal request path and to expirations (#4971) 2018-07-24 14:50:49 -07:00
rollback.go Rollback: Only grab statelock if we are running async (#5064) 2018-08-07 17:48:43 -07:00
rollback_test.go fixing rollback test 2018-07-31 22:45:38 -04:00
router.go Revert some of commit 050ab805a7565c5b0cadb0176023031ee5f0d17b. (#4768) 2018-06-14 13:44:13 -04:00
router_access.go Sync 2017-10-23 15:35:28 -04:00
router_ext_test.go Remove old workaround for a rollback error (#4206) 2018-03-27 16:34:06 -04:00
router_test.go Add a test for nil-ing out request tokenentry 2018-06-08 19:55:39 -04:00
seal.go Factor out a bunch of shared code 2018-05-21 17:46:32 -04:00
seal_access.go More work on recovery test 2018-05-20 18:42:14 -04:00
seal_test.go Use atomic values in seal to avoid some data races (#4040) 2018-02-23 17:18:48 -05:00
seal_testing.go Tackle #4929 a different way (#4932) 2018-07-24 13:57:25 -07:00
sealunwrapper.go Errwrap everywhere (#4252) 2018-04-05 11:49:21 -04:00
sealunwrapper_test.go Move to "github.com/hashicorp/go-hclog" (#4227) 2018-04-02 17:46:59 -07:00
testing.go Add request timeouts in normal request path and to expirations (#4971) 2018-07-24 14:50:49 -07:00
token_store.go Plumbing request context through to expiration manager (#5021) 2018-08-01 21:39:39 -04:00
token_store_ext_test.go Two-pronged fix for renew policy checking (#4960) 2018-07-24 12:03:11 -07:00
token_store_test.go Plumbing request context through to expiration manager (#5021) 2018-08-01 21:39:39 -04:00
ui.go adds ability to override default CSP with warning (#395) 2018-04-03 09:34:14 -05:00
ui_test.go Fix compilation and tests failures (#4254) 2018-04-03 14:07:43 -04:00
util.go Removed unused methods 2017-01-03 12:51:35 -05:00
util_test.go Utility Enhancements 2016-04-05 20:32:59 -04:00
wrapping.go Plumbing request context through to expiration manager (#5021) 2018-08-01 21:39:39 -04:00