72 Commits (a67d5c8abb6cbeaa79e1d6bb5b41aba341bcaab4)

Author	SHA1	Message	Date
Jeff Mitchell	37e9fed2e3	Allow not destroying dev databases (#366) ... This also shifts some logic around to better prepare for non-dev-mode workloads, although it does not actually call the KMS creation functions and initial auth method creation from non-dev commands yet.	6 years ago
Jeff Mitchell	c4e2b88022	Add database URL. (#365) ... * Add database URL. This allows specification of either a file://, env://, or other string. If it starts with file:// or env:// the actual value will be read from those resources. * Tidy up the KMS output * Also run migrations in test mode when specifying the URL	6 years ago
Jeff Mitchell	570e52cabb	Add missing set-grants to role command	6 years ago
Jeff Mitchell	f4ad22b247	Move default port to a TCP target attribute (#361)	6 years ago
Jeff Mitchell	eb88d0381a	Fix default port update handling	6 years ago
Jeff Mitchell	a598fdfb13	Fix targets CLI command	6 years ago
Jeff Mitchell	97985883df	Fix token storage	6 years ago
Jeff Mitchell	a00ee7a948	Add Result types to Go SDK and properly populate body/map fields (#358)	6 years ago
Jeff Mitchell	1b2f73d1d4	Fix some old logic in some CLI commands (#357)	6 years ago
Jeff Mitchell	6201357902	Use scope-specific token DEKs (#342)	6 years ago
Todd Knight	33e7b4538e	WorkerCoordination and GetSession API refactoring (#354) ... * Possible api changes. * Worker API update. * Updating import alias name. * Moving session down a level as a member of the GetSessionResponse. * Marshal the auth flag into the GetSessionResponse proto instead of the session.	6 years ago
Jeff Mitchell	2914b4c14c	Use base58 for a few more user-facing values (#356)	6 years ago
Jeff Mitchell	1f80edbffc	Add missing default-port flag to targets command (#355)	6 years ago
Jeff Mitchell	c689af4306	Implement a TOFU mechanism on auth to worker (#348) ... This sets us up to better support multiple connections per session at some future point.	6 years ago
Jeff Mitchell	f8237fb945	Move some packages into SDK, out of internal	6 years ago
Jeff Mitchell	36f975a952	Add some recovery KMS functions needed for external clients (#339)	6 years ago
Todd Knight	c3ecea172d	Generate new version of SDK resources and Add Tests (#331)	6 years ago
Jeff Mitchell	23156afa11	Add in most of the proxy flow (#326)	6 years ago
Jeff Mitchell	a4c20164f3	Add add/remove/set hosts functions to host-sets command (#316)	6 years ago
Jeff Mitchell	b8c8d29008	Switch ordering of CLI create/update vs static commands (#314)	6 years ago
Jeff Mitchell	1f065316ee	Initial (#313)	6 years ago
Jeff Mitchell	20aef738c4	Add host-catalogs CLI command. (#312)	6 years ago
Jeff Mitchell	17ecb6f2ce	Separate accounts/host catalogs/host sets into their own packages (#311)	6 years ago
Jeff Mitchell	28df6eb7b0	Update config encrypt/decrypt CLI command (#309) ... This updates the command to our emergent standards. It also enables using a separate config file for a config kms, which allows non-string values to be encrypted. This allowed some nice cleanup as well.	6 years ago
Jeff Mitchell	b53812a5c1	Add ability to skip automatic auth method creation (#306) ... This is useful if you, for instance, want Terraform to be 100% responsible for creation of resources (outside of the static ones that cannot be removed or modified, like u_anon). This will mean using the recovery mechanism for initial setup, but that isn't an issue once TF supports that :-)	6 years ago
Jeff Mitchell	490be8a7e4	Add ability to skip role creation on scope create (#308) ... * Initial work on scope creation skipping * Fix things	6 years ago
Jeff Mitchell	8f579c75c3	paum -> ampw (#303)	6 years ago
Jeff Mitchell	74544f6324	Encrypt tokens on the way out and decrypt on the way in (#302) ... * Encrypt tokens on the way out and decrypt on the way in This isn't a security feature related to tokens specifically; it's so that we can discard cryptographically bad tokens before we ever hit the DB. This way we can't pass through a DDoS to the database due to fetching obviously invalid token values. I'm using base58 to encode the resulting value as there aren't great base62 options, and allowing base64 / and + values can hamper usability by creating copying/highlighting breaks.	6 years ago
Jeff Mitchell	414a2ab2c3	Remove some dead, dead, dead, dead code	6 years ago
Jeff Mitchell	b47cca0329	Add (non-db aspects of) the recovery key workflow (#286)	6 years ago
Todd Knight	d5678c4f80	Handler for Host CRUDL actions (#287)	6 years ago
Jim	9570897032	basic keys mgmt repo (#264)	6 years ago
Jeff Mitchell	adfc5681be	Auth methods CLI (#277)	6 years ago
Jeff Mitchell	282177afc2	Remove the default org (#270)	6 years ago
Jeff Mitchell	fff15bc9f3	Rename KMS purpose 'controller' to 'root'	6 years ago
Jeff Mitchell	efaf58b568	Add users CLI command and do some cleanup (#269)	6 years ago
Jeff Mitchell	6080d93f8f	Add authtokens CLI command (#268)	6 years ago
Jeff Mitchell	d3a1cd949b	Update password auth method flags to fit current standards	6 years ago
Jeff Mitchell	e89e9d1349	Add groups CLI command (#266)	6 years ago
Jeff Mitchell	b75a6fc5e5	Update scopes CLI command in the model of the roles command (#262) ... * Update scopes CLI command in the model of the roles command * Pull help functions to helper methods	6 years ago
Jeff Mitchell	5d104a7a01	Migrate off Vault's internalshared folder to the separated-out repo	6 years ago
Jeff Mitchell	203e2b5dc2	Initial worker porting steps (#232)	6 years ago
Jeff Mitchell	4cfab04307	Migrate user name to login name (#255)	6 years ago
Jeff Mitchell	6661117d4c	The name. The name. The name!	6 years ago
Jeff Mitchell	bbd200101f	Move update versioning to query parameter, and fix up scope API tests (#244) ... * Move update versioning to query parameter, and fix up scope API tests * Add version checks for update requests in other services	6 years ago
Jeff Mitchell	f07bb9dae6	Fix breakage after change to template from previous PR	6 years ago
Todd Knight	f84991c0f1	Use authenticate and Auth Method repo functions (#242)	6 years ago
Jeff Mitchell	908a299ea3	Convert SDK to the new options API (#238)	6 years ago
Jeff Mitchell	2bbc1163c4	Save the entire token, not just the ID (#211) ... This allows us to use the token's scope to set the default scope for an action in the client instead of relying on env vars.	6 years ago
Jeff Mitchell	388a13b10d	Convert scopes to the new paradigm (#206)	6 years ago