open-vault/logical
Jeff Mitchell cb1a686e3b
Strip empty strings from database revocation stmts (#5955)
* Strip empty strings from database revocation stmts

It's technically valid to give empty strings as statements to run on
most databases. However, in the case of revocation statements, it's not
only generally inadvisable but can lead to lack of revocations when you
expect them. This strips empty strings from the array of revocation
statements.

It also makes two other changes:

* Return statements on read as empty but valid arrays rather than nulls,
so that typing information is inferred (this is more in line with the
rest of Vault these days)

* Changes field data for TypeStringSlice and TypeCommaStringSlice such
that a client-supplied value of `""` doesn't turn into `[]string{""}`
but rather `[]string{}`.

The latter and the explicit revocation statement changes are related,
and defense in depth.
2018-12-14 09:12:26 -05:00
..
framework Strip empty strings from database revocation stmts (#5955) 2018-12-14 09:12:26 -05:00
plugin Run all builtins as plugins (#5536) 2018-11-06 17:21:24 -08:00
testing Run all builtins as plugins (#5536) 2018-11-06 17:21:24 -08:00
auth.go Batch tokens (#755) 2018-10-15 12:56:24 -04:00
connection.go Sync over 2017-10-23 16:43:07 -04:00
error.go Translate AWS Rate limiting errors to 502 errors (#5270) 2018-09-18 15:26:06 -05:00
identity.pb.go Fix compilation/protobuf 2018-09-22 17:58:39 -04:00
identity.proto Pass identity metadata through to plugins (#4967) 2018-07-23 12:45:06 -04:00
lease.go logical/aws: Harden WAL entry creation (#5202) 2018-09-27 09:54:59 -05:00
lease_test.go Remove Unix() invocations on 'time.Time' objects and removed conversion of time to UTC 2016-07-08 18:30:18 -04:00
logical.go Move to "github.com/hashicorp/go-hclog" (#4227) 2018-04-02 17:46:59 -07:00
plugin.pb.go Fix compilation/protobuf 2018-09-22 17:58:39 -04:00
plugin.proto Add PluginEnv to SystemView (#5028) 2018-08-03 09:32:17 -07:00
request.go The big one (#5346) 2018-09-17 23:03:00 -04:00
request_util.go The big one (#5346) 2018-09-17 23:03:00 -04:00
response.go Framework and API changes to support OpenAPI (#5546) 2018-11-05 12:24:39 -08:00
response_util.go fix panic when listing nil resp (#5886) 2018-12-03 09:18:28 -08:00
response_util_test.go Add error logical.ErrUpstreamRateLimited and return 502 from RespondCommonError 2018-09-05 11:07:50 -05:00
secret.go Sync over 2017-10-23 16:43:07 -04:00
storage.go Clean up error string formatting (#4304) 2018-04-09 14:35:21 -04:00
storage_inmem.go Convert logical.InmemStorage to a wrapper around physical/inmem. 2018-02-12 11:16:16 -05:00
storage_inmem_test.go vault: Passthrough backend uses logical.Backend 2015-03-15 14:27:06 -07:00
system_view.go Run all builtins as plugins (#5536) 2018-11-06 17:21:24 -08:00
testing.go Offline token revocation fix 2018-06-05 18:53:27 -04:00
token.go Add token type to sentinel docs, fix up some names, and better codify what Sentinel reports for various token types (#5630) 2018-10-27 11:07:27 -07:00
translate_response.go Batch tokens (#755) 2018-10-15 12:56:24 -04:00