20 Commits (jeff-error-cli-update)

Author	SHA1	Message	Date
Jeff Mitchell	9237d6f787	Rename authorize to authorize-session (#531) ... As pointed out by Rob, this makes it clearer what the action actually is. We were sort of torn on it before, but I've definitely come around to it.	6 years ago
Todd Knight	f76d5aed9f	Additional validation for add|set|remove methods. (#527)	6 years ago
Jeff Mitchell	43c2deddff	Add permissions concepts and the beginning of the perms table (#526)	6 years ago
Jeff Mitchell	fa700dc002	Add account ID templating (#518) ... * Remove default role and create via the same mechanism as other initial resources	6 years ago
Jeff Mitchell	6ddfe407a3	Update allowed formats of ACL strings (#508)	6 years ago
Jeff Mitchell	cefea936c3	Update ACLs to allow type=*. (#504)	6 years ago
Jeff Mitchell	a38f40606e	Create default roles in scopes to allow authentication and listing scopes/auth methods (#502)	6 years ago
Jeff Mitchell	33b0021547	Add Sessions CLI command and add session cleanup to worker (#388)	6 years ago
Jeff Mitchell	07a7e9750a	Tie together the database-driven session handling with the worker and add relevant CLI comands (#370)	6 years ago
Jeff Mitchell	73a38b1433	Remove some unneeded resource types and fix the resource typing for default role in global scope (#256)	6 years ago
Jeff Mitchell	6661117d4c	The name. The name. The name!	6 years ago
Jeff Mitchell	322b13ae98	Standardize static group -> group naming (#236)	6 years ago
Jeff Mitchell	99653727bb	Migrate grants to more structured output (#194)	6 years ago
Todd Knight	28dbcd84bd	Authenticate Handler API and SDK, and much more (#183)	6 years ago
Jeff Mitchell	acce195dcb	Organizations -> orgs consistency (#189) ... * Organizations -> orgs consistency * Fix up some tests and some mistaken substitutions	6 years ago
Todd Knight	847ca1cc78	Grant management added to Roles API and SDK (#185) ... * Adding grants related methods to Roles. * Adding grants back after the merge of Principals. * Adding tests for Grant related custom methods. * Improving api handler methods. * Fixing tests and sdk field. * Adding todos for adding principals and grants to List and Update Role responses. * Fix up Set* tests and fix SetPrincipals bug. * Making AddPrincipals and RemovePrincipals similar to the tests for AddGrants and RemoveGrants. * Add JSON grants to output (#187) I also changed canonical_grants to grants_canonical and used grants_json. I believe that when members are simply different formats of other members this is the preferred way to have it in the API. Let me know if you disagree and we can dig in more. * Regenerate the API role resource. Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	6 years ago
Jeff Mitchell	bcdcaffa6f	Port over 162 and 165 to master (#176) ... Co-authored-by: Jim Lambert <jlambert@hashicorp.com> Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>	6 years ago
Jeff Mitchell	d8f11af4d7	Move actions, resource (types), and scopes to packages. (#149)	6 years ago
Jeff Mitchell	993a6f1680	Remove "projects" from grant strings (#143) ... This removes the ability for a grant string to switch projects, in accordance with our updated design. It mostly removes code, with a few test fixes, and also adds one additional check (and test) to ensure a grant errors rather than do-nothing succeeds if both id and type are empty.	6 years ago
Jeff Mitchell	f41bf6e31e	Add permission grant string parsing and validation and ACL implementation (#109) ... This adds parsing and validation for grant strings along with the ability to create canonical JSON and text strings from a grant. It also adds an ACL implementation, allowing a collection of grant strings to then be checked against a resource/action tuple and indicate if it's allowed. Note that only specific sets of provided data in grant strings is allowed. This vastly simplifies logic. Test coverage is 100%. A future update will consolidate and migrate types between this and IAM but I didn't want to mix that in with this.	6 years ago