7 Commits

Author	SHA1	Message	Date
Jeff Mitchell	49d525ebf3	Reintroduce the ability to look up obfuscated values in the audit log ... with a new endpoint '/sys/audit-hash', which returns the given input string hashed with the given audit backend's hash function and salt (currently, always HMAC-SHA256 and a backend-specific salt). In the process of adding the HTTP handler, this also removes the custom HTTP handlers for the other audit endpoints, which were simply forwarding to the logical system backend. This means that the various audit functions will now redirect correctly from a standby to master. (Tests all pass.) Fixes #784	2015-11-18 20:26:03 -05:00
Jeff Mitchell	1a22cb0b12	Expand HMAC support in Salt; require an identifier be passed in to specify type but allow generation with and without. Add a StaticSalt ID for testing functions. Fix bugs; unit tests pass.	2015-09-18 17:38:30 -04:00
Jeff Mitchell	a4ca14cfbc	Add HMAC capability to salt. Pass a salt into audit backends. Require it for audit.Hash.	2015-09-18 17:38:22 -04:00
Nate Brown	71a738ad7d	Logging authentication errors and bad token usage	2015-06-18 18:30:18 -07:00
Armon Dadgar	a76cd4c58d	audit: Document that arguments must not be modified	2015-04-27 14:24:11 -07:00
Armon Dadgar	104c252283	audit: Adding basic interface methods	2015-04-01 13:54:50 -07:00
Armon Dadgar	3d0242c714	audit: Basic interface	2015-03-27 13:43:23 -07:00