9692 Commits

Author SHA1 Message Date
Mitchell Hashimoto
c67357342c logical: add credential info to logical backend structures 2015-03-30 14:23:32 -07:00
Mitchell Hashimoto
5a4eb13750 api: update the SPEC 2015-03-30 12:22:34 -07:00
Mitchell Hashimoto
ea3057d950 http: start implementing /sys/login (incomplete) 2015-03-30 12:21:06 -07:00
Mitchell Hashimoto
f547b717a7 api: re-use proper token constant 2015-03-30 11:14:51 -07:00
Mitchell Hashimoto
4b48996a41 command/auth: tests work wihtout vault installed 2015-03-30 11:07:31 -07:00
Mitchell Hashimoto
a6b9e87350 command/auth: setting tokens works 2015-03-30 10:55:41 -07:00
Mitchell Hashimoto
8e427cc3d4 command: load configuration 2015-03-30 10:25:24 -07:00
Mitchell Hashimoto
9abd4e4ec5 command/token: HelperPath 2015-03-30 10:11:17 -07:00
Mitchell Hashimoto
4b35cbccb6 token/disk: implement unencrypted disk store 2015-03-30 09:21:59 -07:00
Mitchell Hashimoto
224f788123 command/token: helper to read/write tokens from a helper 2015-03-29 17:42:26 -07:00
Mitchell Hashimoto
9d8d24f7fb command/auth: boilerplate 2015-03-29 16:42:45 -07:00
Mitchell Hashimoto
b89ac8e3c5 command/init: show root token 2015-03-29 16:25:53 -07:00
Mitchell Hashimoto
82ae75aa79 http: root token in init 2015-03-29 16:22:09 -07:00
Mitchell Hashimoto
39f2da0fbe command: unit tests pass 2015-03-29 16:20:34 -07:00
Mitchell Hashimoto
a015c5a4f7 vault: tests passing 2015-03-29 16:18:08 -07:00
Mitchell Hashimoto
06e06cde9c http: support auth 2015-03-29 16:14:54 -07:00
Armon Dadgar
a573f89048 vault: Make audit/ a protected path 2015-03-27 14:00:57 -07:00
Armon Dadgar
1607ddbde3 vault: Adding basic audit table load/unload 2015-03-27 14:00:38 -07:00
Armon Dadgar
ed5d347aec vault: Allow passing in audit factory methods 2015-03-27 13:45:13 -07:00
Armon Dadgar
3d0242c714 audit: Basic interface 2015-03-27 13:43:23 -07:00
Armon Dadgar
06e30b425e Fixing compilation errors due to API change 2015-03-24 16:20:05 -07:00
Armon Dadgar
2b72e23cb5 vault: Testing core ACL enforcement 2015-03-24 15:55:27 -07:00
Armon Dadgar
dfe7d7308e vault: testing root privilege restrictions 2015-03-24 15:52:07 -07:00
Armon Dadgar
0f39544930 vault: ignore a nil policy object, as it has no permissions 2015-03-24 15:49:17 -07:00
Armon Dadgar
e6c3405f2c vault: adding auth/token/lookup/ support 2015-03-24 15:39:33 -07:00
Armon Dadgar
8758410671 vault: adding auth/token/revoke/ and auth/token/revoke-orphan/ 2015-03-24 15:30:09 -07:00
Armon Dadgar
e9af589010 vault: Passthrough of client token to token store 2015-03-24 15:12:52 -07:00
Armon Dadgar
f1e7cd05c4 vault: Adding auth/token/create endpoint 2015-03-24 15:10:46 -07:00
Armon Dadgar
d21d08e079 vault: Allow providing token ID during creation 2015-03-24 14:22:50 -07:00
Armon Dadgar
f1e97cb72a vault: utility string set methods 2015-03-24 13:56:07 -07:00
Armon Dadgar
faedba0be8 vault: utility string search methods 2015-03-24 13:44:47 -07:00
Armon Dadgar
475f8766c5 vault: test missing and invalid tokens 2015-03-24 11:57:08 -07:00
Armon Dadgar
4def415f3b vault: Adding ACL enforcement 2015-03-24 11:37:07 -07:00
Armon Dadgar
ca962aeb03 vault: Special case root policy 2015-03-24 11:27:21 -07:00
Armon Dadgar
5cbecba333 logical: Special error for permission denied 2015-03-24 11:23:59 -07:00
Armon Dadgar
db2e1388fc vault: Adding ClientToken 2015-03-24 11:09:25 -07:00
Armon Dadgar
3ccd20cb58 vault: wire tokens into expiration manager 2015-03-23 18:11:15 -07:00
Armon Dadgar
32ef2c4a32 vault: Give expiration manager a token store reference 2015-03-23 18:00:14 -07:00
Armon Dadgar
f4bde1d5a2 vault: Generate a root token when initializing 2015-03-23 17:31:30 -07:00
Armon Dadgar
dd3ca5f70e vault: Remove core reference 2015-03-23 17:29:36 -07:00
Armon Dadgar
3b5f8c1e66 vault: only log expiration notice if useful 2015-03-23 17:27:46 -07:00
Armon Dadgar
0bc92207fb vault: Adding method to generate root token 2015-03-23 17:16:37 -07:00
Armon Dadgar
200bc60e71 vault: Support policy CRUD 2015-03-23 14:43:31 -07:00
Armon Dadgar
f781193704 vault: first pass at HandleLogin 2015-03-23 13:56:43 -07:00
Armon Dadgar
e3f8956850 vault: Track the token store in core 2015-03-23 13:41:05 -07:00
Armon Dadgar
50098306ee vault: token tracks generation path and meta data 2015-03-23 13:39:43 -07:00
Armon Dadgar
5b663aa148 credential: simplify interface 2015-03-23 13:39:16 -07:00
Armon Dadgar
3615eca722 vault: extend router to handle login routing 2015-03-23 11:47:55 -07:00
Mitchell Hashimoto
b08606b8fd main: hook up consul backend 2015-03-21 17:25:12 +01:00
Mitchell Hashimoto
3b702cc14d logical/consul: actual test that the token works 2015-03-21 17:23:44 +01:00