Seth Vargo
780c58d10f
Preserve pointer
2016-03-10 15:55:47 -05:00
Seth Vargo
bbb45c4370
Fix failing policy-write integration test
...
This was a flawed test. Previously the test passed in a fixture that
corresponded to a CLI config file, not an actual policy. The test
_should_ have been failing, but it wasn't. This commit adds a new
fixture.
2016-03-10 15:45:49 -05:00
Seth Vargo
b47a8b1873
Parse policy HCL syntax and keys
2016-03-10 15:25:25 -05:00
Seth Vargo
80d627fc0a
Parse HCL keys in command config
2016-03-10 15:25:25 -05:00
Seth Vargo
ffbe97c7ca
Print errors on extra keys in server config
...
This does NOT apply to the backend config, since each backend config
could have a variation of options that differ based off of the
configured backend itself. This may be an optimization that can be made
in the future, but I think each backend should be responsible for
performing its own configuration validation instead of overloading the
config itself with this functionality.
2016-03-10 15:25:25 -05:00
Seth Vargo
a68e78eae4
Update to newest HCL
2016-03-10 15:25:25 -05:00
Chris Hoffman
1d7fe31eac
Adding verify_connection to config, docs updates, misc cleanup
2016-03-09 23:08:05 -05:00
Jeff Mitchell
a389a3cd10
Fix path help description for rekey_backup
2016-03-09 21:04:54 -05:00
Jeff Mitchell
7168fded73
changelog++
2016-03-09 17:26:48 -05:00
Jeff Mitchell
03bbbade50
Merge pull request #1155 from hashicorp/token-roles
...
Add roles to the Token credential backend
2016-03-09 17:23:57 -05:00
Jeff Mitchell
8b6df2a1a4
Merge branch 'master' into token-roles
2016-03-09 17:23:34 -05:00
Jeff Mitchell
bc632c9039
changelog++
2016-03-09 17:17:04 -05:00
Jeff Mitchell
b45dd3f119
changelog++
2016-03-09 17:15:42 -05:00
Jeff Mitchell
4fdcc286aa
Add accessor to returned auth
2016-03-09 17:15:42 -05:00
Vishal Nayak
b4d52b4724
Merge pull request #1192 from hashicorp/accessor-audit
...
Enable printing of accessor in audit logs
2016-03-09 17:12:39 -05:00
Jeff Mitchell
2a698c7786
Merge pull request #1168 from hashicorp/revoke-force
...
Add forced revocation.
2016-03-09 16:59:52 -05:00
Jeff Mitchell
8d4fcec5f9
Add unit test for forced revocation
2016-03-09 16:47:58 -05:00
vishalnayak
c75cb1678d
Enable printing of accessor in audit logs
2016-03-09 16:18:36 -05:00
vishalnayak
bb5ce47325
changelog++
2016-03-09 15:48:49 -05:00
Vishal Nayak
c2d8536b99
Merge pull request #1188 from hashicorp/token-accessors
...
Accessor paths for lookup and revocation of tokens
2016-03-09 15:38:21 -05:00
vishalnayak
b8bd534c53
In-URL accessor for auth/token/lookup-accessor endpoint
2016-03-09 14:54:52 -05:00
vishalnayak
64bc542c8f
Restore old regex expressions for token endpoints
2016-03-09 14:08:52 -05:00
vishalnayak
d1d37d5933
fix all the broken tests
2016-03-09 13:45:36 -05:00
vishalnayak
da9ad9cee3
Provide accessor to revove-accessor in the URL itself
2016-03-09 13:08:37 -05:00
vishalnayak
76900d6d72
Added tests for lookup-accessor and revoke-accessor endpoints
2016-03-09 12:50:26 -05:00
Jeff Mitchell
b2a89bf47c
Add website docs
2016-03-09 12:49:12 -05:00
Jeff Mitchell
cc833a030e
Address final feedback
2016-03-09 11:59:54 -05:00
vishalnayak
a5468237ed
Added tests for 'sys/capabilities-accessor' endpoint
2016-03-09 11:29:09 -05:00
Jeff Mitchell
36c8e042ac
Address review feedback
2016-03-09 11:07:13 -05:00
Jeff Mitchell
12f58773fe
Use role's allowed policies if none are given
2016-03-09 10:42:04 -05:00
Jeff Mitchell
23b93970b4
Merge pull request #1191 from AndrewBrown-JustEat/AndrewBrown-JustEat-vault-docs
...
Minor documentation change
2016-03-09 10:01:12 -05:00
Vishal Nayak
fd707634d6
Merge pull request #1190 from grunzwei/master
...
fix github tests to use the provided GITHUB_ORG environment variable
2016-03-09 09:51:28 -05:00
AndrewBrown-JustEat
ead568987c
Minor documentation change
2016-03-09 14:50:23 +00:00
vishalnayak
16c4b52df3
Added docs for /sys/capabilities-accessor
2016-03-09 09:48:32 -05:00
vishalnayak
928d872ed9
Add docs for new token endpoints
2016-03-09 09:31:09 -05:00
vishalnayak
c7c9e0b8cf
New prefix for accessor indexes
2016-03-09 09:09:09 -05:00
Nathan Grunzweig
3a98f99aa7
fix github tests to use the provided GITHUB_ORG environment variable
...
(tests fail for non hashicorp people)
2016-03-09 15:34:03 +02:00
vishalnayak
2a35de81dc
AccessorID --> Accessor, accessor_id --> accessor
2016-03-09 06:23:31 -05:00
vishalnayak
7b996523cd
Error text corrections and minor refactoring
2016-03-08 22:27:24 -05:00
vishalnayak
edfba16e95
ErrUserInput --> StatusBadRequest
2016-03-08 21:47:24 -05:00
Jeff Mitchell
c2727991c1
Add a necessary IAM permission to the example
2016-03-08 21:29:34 -05:00
vishalnayak
9da292932e
Implemented /sys/capabilities-accessor and a way for setting HTTP error code in all the responses
2016-03-08 19:14:29 -05:00
vishalnayak
048f3b2fe4
Lay the foundation for returning proper HTTP status codes
2016-03-08 18:27:03 -05:00
vishalnayak
5dcc6f0573
Implemented /auth/token/revoke-accessor in token_store
2016-03-08 18:07:27 -05:00
vishalnayak
bb927e34d1
Implemented lookup-accessor as a token_store endpoint
2016-03-08 17:38:19 -05:00
vishalnayak
c7033b1506
placeholders for revoke-accessor and lookup-accessor
2016-03-08 15:13:29 -05:00
vishalnayak
4ed3a85f73
Clear the accessor index during revocation
2016-03-08 14:06:10 -05:00
vishalnayak
a713720bd4
Create indexing from Accessor ID to Token ID
2016-03-08 14:06:10 -05:00
vishalnayak
38a5d75caa
Introduced AccessorID in TokenEntry and returning it along with token
2016-03-08 14:06:10 -05:00
vishalnayak
9368a08d1f
changelog++
2016-03-08 13:16:08 -05:00
