7782 Commits

Author SHA1 Message Date
Mitchell Hashimoto
9d8d24f7fb command/auth: boilerplate 2015-03-29 16:42:45 -07:00
Mitchell Hashimoto
b89ac8e3c5 command/init: show root token 2015-03-29 16:25:53 -07:00
Mitchell Hashimoto
82ae75aa79 http: root token in init 2015-03-29 16:22:09 -07:00
Mitchell Hashimoto
39f2da0fbe command: unit tests pass 2015-03-29 16:20:34 -07:00
Mitchell Hashimoto
a015c5a4f7 vault: tests passing 2015-03-29 16:18:08 -07:00
Mitchell Hashimoto
06e06cde9c http: support auth 2015-03-29 16:14:54 -07:00
Armon Dadgar
a573f89048 vault: Make audit/ a protected path 2015-03-27 14:00:57 -07:00
Armon Dadgar
1607ddbde3 vault: Adding basic audit table load/unload 2015-03-27 14:00:38 -07:00
Armon Dadgar
ed5d347aec vault: Allow passing in audit factory methods 2015-03-27 13:45:13 -07:00
Armon Dadgar
3d0242c714 audit: Basic interface 2015-03-27 13:43:23 -07:00
Armon Dadgar
06e30b425e Fixing compilation errors due to API change 2015-03-24 16:20:05 -07:00
Armon Dadgar
2b72e23cb5 vault: Testing core ACL enforcement 2015-03-24 15:55:27 -07:00
Armon Dadgar
dfe7d7308e vault: testing root privilege restrictions 2015-03-24 15:52:07 -07:00
Armon Dadgar
0f39544930 vault: ignore a nil policy object, as it has no permissions 2015-03-24 15:49:17 -07:00
Armon Dadgar
e6c3405f2c vault: adding auth/token/lookup/ support 2015-03-24 15:39:33 -07:00
Armon Dadgar
8758410671 vault: adding auth/token/revoke/ and auth/token/revoke-orphan/ 2015-03-24 15:30:09 -07:00
Armon Dadgar
e9af589010 vault: Passthrough of client token to token store 2015-03-24 15:12:52 -07:00
Armon Dadgar
f1e7cd05c4 vault: Adding auth/token/create endpoint 2015-03-24 15:10:46 -07:00
Armon Dadgar
d21d08e079 vault: Allow providing token ID during creation 2015-03-24 14:22:50 -07:00
Armon Dadgar
f1e97cb72a vault: utility string set methods 2015-03-24 13:56:07 -07:00
Armon Dadgar
faedba0be8 vault: utility string search methods 2015-03-24 13:44:47 -07:00
Armon Dadgar
475f8766c5 vault: test missing and invalid tokens 2015-03-24 11:57:08 -07:00
Armon Dadgar
4def415f3b vault: Adding ACL enforcement 2015-03-24 11:37:07 -07:00
Armon Dadgar
ca962aeb03 vault: Special case root policy 2015-03-24 11:27:21 -07:00
Armon Dadgar
5cbecba333 logical: Special error for permission denied 2015-03-24 11:23:59 -07:00
Armon Dadgar
db2e1388fc vault: Adding ClientToken 2015-03-24 11:09:25 -07:00
Armon Dadgar
3ccd20cb58 vault: wire tokens into expiration manager 2015-03-23 18:11:15 -07:00
Armon Dadgar
32ef2c4a32 vault: Give expiration manager a token store reference 2015-03-23 18:00:14 -07:00
Armon Dadgar
f4bde1d5a2 vault: Generate a root token when initializing 2015-03-23 17:31:30 -07:00
Armon Dadgar
dd3ca5f70e vault: Remove core reference 2015-03-23 17:29:36 -07:00
Armon Dadgar
3b5f8c1e66 vault: only log expiration notice if useful 2015-03-23 17:27:46 -07:00
Armon Dadgar
0bc92207fb vault: Adding method to generate root token 2015-03-23 17:16:37 -07:00
Armon Dadgar
200bc60e71 vault: Support policy CRUD 2015-03-23 14:43:31 -07:00
Armon Dadgar
f781193704 vault: first pass at HandleLogin 2015-03-23 13:56:43 -07:00
Armon Dadgar
e3f8956850 vault: Track the token store in core 2015-03-23 13:41:05 -07:00
Armon Dadgar
50098306ee vault: token tracks generation path and meta data 2015-03-23 13:39:43 -07:00
Armon Dadgar
5b663aa148 credential: simplify interface 2015-03-23 13:39:16 -07:00
Armon Dadgar
3615eca722 vault: extend router to handle login routing 2015-03-23 11:47:55 -07:00
Mitchell Hashimoto
b08606b8fd main: hook up consul backend 2015-03-21 17:25:12 +01:00
Mitchell Hashimoto
3b702cc14d logical/consul: actual test that the token works 2015-03-21 17:23:44 +01:00
Mitchell Hashimoto
07f8e262fe logical/consul 2015-03-21 17:19:37 +01:00
Mitchell Hashimoto
26583fb05f logical/framework: auto-extend leases if requested 2015-03-21 16:20:30 +01:00
Mitchell Hashimoto
c3342cd344 logical/aws: refactor access key create to the secret file 2015-03-21 11:49:56 +01:00
Mitchell Hashimoto
f08879971e logical/aws: remove debug I was using to test rollback :) 2015-03-21 11:20:22 +01:00
Mitchell Hashimoto
f99f6c910e logical/aws: WAL entry for users, rollback 2015-03-21 11:18:46 +01:00
Mitchell Hashimoto
a04df95177 logical/testing: immediate rollback, ignore RollbackMinAge 2015-03-21 11:18:33 +01:00
Mitchell Hashimoto
c872e0f788 logical/framework: rollback should return error, easier API 2015-03-21 11:08:13 +01:00
Mitchell Hashimoto
c9e64725d7 logical/framework: rollback needs to have access to request for storage 2015-03-21 11:03:59 +01:00
Armon Dadgar
e7648877c5 vault: playing with credential store interface 2015-03-20 13:54:57 -07:00
Armon Dadgar
972fc8238b vault: implement the sys/auth* endpoints 2015-03-20 12:48:19 -07:00