Calvin Leung Huang
3058e9b86a
Add denylist check when filtering passthrough headers ( #5436 )
...
* Add denylist check when filtering passthrough headers
* Minor comment update
2018-10-01 12:20:31 -07:00
Jeff Mitchell
49d5849d26
Merge Identity Entities if two claim the same alias ( #5075 )
...
* Merge Identity Entities if two claim the same alias
Past bugs/race conditions meant two entities could be created each
claiming the same alias. There are planned longer term fixes for this
(outside of the race condition being fixed in 0.10.4) that involve
changing the data model, but this is an immediate workaround that has
the same net effect: if two entities claim the same alias, assume they
were created due to this race condition and merge them.
In this situation, also automatically merge policies so we don't lose
e.g. RGPs.
2018-08-09 15:37:36 -05:00
Jim Kalafut
f3c7df607d
Update ParseStringSlice and address lint/vet warnings ( #5069 )
2018-08-09 11:13:37 -07:00
Vishal Nayak
e2bb2ec3b9
Errwrap everywhere ( #4252 )
...
* package api
* package builtin/credential
* package builtin/logical
* package command
* package helper
* package http and logical
* package physical
* package shamir
* package vault
* package vault
* address feedback
* more fixes
2018-04-05 11:49:21 -04:00
Josh Soref
e43b76ef97
Spelling ( #4119 )
2018-03-20 14:54:10 -04:00
Brian Kassouf
4121791cb9
Add the ability to glob allowed roles in the Database Backend ( #3387 )
...
* Add the ability to glob allowed roles in the Database Backend
* Make the error messages better
* Switch to the go-glob repo
2017-10-30 13:24:25 -07:00
Dan Everton
246602dda4
More efficient s3 paging ( #2780 )
2017-06-16 11:09:15 -04:00
vishalnayak
fb15c97c6c
Fix index out of range bug in ParseKeyValues
2017-05-17 21:47:13 -04:00
Brian Kassouf
d9ce189b33
Use the same TLS cert for the server and client
2017-04-19 15:46:07 -07:00
Chris Hoffman
d6edfc2a25
Rename ParseDedupAndSortStrings to ParseDedupLowercaseAndSortStrings ( #2614 )
2017-04-19 10:39:07 -04:00
Chris Hoffman
8efdae67e5
List Handling in API and CLI ( #2584 )
2017-04-18 16:02:31 -04:00
Jeff Mitchell
cfd522e0f0
Use ParseStringSlice on PKI organization/organizational unit. ( #2561 )
...
After, separately dedup and use new flag to not lowercase value.
Fixes #2555
2017-04-04 08:54:18 -07:00
Brian Kassouf
9ee0c34179
Allowed/Denied parameters support for globs ( #2438 )
...
* Add check for globbed strings
* Add tests for the acl globbing
* Fix bad test case
2017-03-03 14:50:55 -08:00
vishalnayak
a247b959ea
Don't sanitize disallowed_policies on token role
2017-01-17 21:34:14 -05:00
Vishal Nayak
b4011f7129
Don't add default policy to child token if parent does not have it ( #2164 )
2016-12-16 00:36:39 -05:00
Jeff Mitchell
347cd93b2a
Fix bugs and add test case for arbitrary string slice
2016-08-03 14:57:36 -04:00
Jeff Mitchell
7d1f0facb8
Add arbitrary string slice parsing.
...
Like the KV function, this supports either separated strings or JSON
strings, base64-encoded or not.
Fixes #1619 in theory.
2016-08-03 14:24:16 -04:00
Jeff Mitchell
3329d38959
Cleanup
2016-08-03 13:09:12 -04:00
vishalnayak
59930fda8f
AppRole authentication backend
2016-07-26 09:32:41 -04:00
vishalnayak
8caec3fe27
Address review feedback from @jefferai
2016-07-22 08:44:16 -04:00
vishalnayak
d5c669038a
Added service-tags config option to provide additional tags to registered service
2016-07-22 04:41:48 -04:00
vishalnayak
15f29c6956
Updates to policy and string helpers
2016-05-05 10:22:28 -04:00
vishalnayak
5f1829af67
Utility Enhancements
2016-04-05 20:32:59 -04:00
