75 Commits (e42a2d127dacccd2cc13aad6de506b82fcdcb87a)

Author	SHA1	Message	Date
Jeff Mitchell	23156afa11	Add in most of the proxy flow (#326)	6 years ago
Jeff Mitchell	1822c47ef5	Migrate KMS code to the new database DEKs (#324)	6 years ago
Jeff Mitchell	a4c20164f3	Add add/remove/set hosts functions to host-sets command (#316)	6 years ago
Jeff Mitchell	514856c020	Fix broken CLI output	6 years ago
Jeff Mitchell	b8c8d29008	Switch ordering of CLI create/update vs static commands (#314)	6 years ago
Jeff Mitchell	1f065316ee	Initial (#313)	6 years ago
Jeff Mitchell	20aef738c4	Add host-catalogs CLI command. (#312)	6 years ago
Jeff Mitchell	17ecb6f2ce	Separate accounts/host catalogs/host sets into their own packages (#311)	6 years ago
Jeff Mitchell	936c970635	Remove unneeded and breaking test	6 years ago
Jeff Mitchell	28df6eb7b0	Update config encrypt/decrypt CLI command (#309) ... This updates the command to our emergent standards. It also enables using a separate config file for a config kms, which allows non-string values to be encrypted. This allowed some nice cleanup as well.	6 years ago
Jeff Mitchell	b53812a5c1	Add ability to skip automatic auth method creation (#306) ... This is useful if you, for instance, want Terraform to be 100% responsible for creation of resources (outside of the static ones that cannot be removed or modified, like u_anon). This will mean using the recovery mechanism for initial setup, but that isn't an issue once TF supports that :-)	6 years ago
Jeff Mitchell	490be8a7e4	Add ability to skip role creation on scope create (#308) ... * Initial work on scope creation skipping * Fix things	6 years ago
Jeff Mitchell	8f579c75c3	paum -> ampw (#303)	6 years ago
Jeff Mitchell	74544f6324	Encrypt tokens on the way out and decrypt on the way in (#302) ... * Encrypt tokens on the way out and decrypt on the way in This isn't a security feature related to tokens specifically; it's so that we can discard cryptographically bad tokens before we ever hit the DB. This way we can't pass through a DDoS to the database due to fetching obviously invalid token values. I'm using base58 to encode the resulting value as there aren't great base62 options, and allowing base64 / and + values can hamper usability by creating copying/highlighting breaks.	6 years ago
Jeff Mitchell	ac4d9fa311	Add nonce storage and replay prevention test (#293)	6 years ago
Jeff Mitchell	414a2ab2c3	Remove some dead, dead, dead, dead code	6 years ago
Jeff Mitchell	b47cca0329	Add (non-db aspects of) the recovery key workflow (#286)	6 years ago
Todd Knight	d5678c4f80	Handler for Host CRUDL actions (#287)	6 years ago
Jim	9570897032	basic keys mgmt repo (#264)	6 years ago
Jeff Mitchell	adfc5681be	Auth methods CLI (#277)	6 years ago
Jeff Mitchell	282177afc2	Remove the default org (#270)	6 years ago
Jeff Mitchell	fff15bc9f3	Rename KMS purpose 'controller' to 'root'	6 years ago
Jeff Mitchell	efaf58b568	Add users CLI command and do some cleanup (#269)	6 years ago
Jeff Mitchell	6080d93f8f	Add authtokens CLI command (#268)	6 years ago
Jeff Mitchell	d3a1cd949b	Update password auth method flags to fit current standards	6 years ago
Jeff Mitchell	bb6b189513	Create a default role on new scope creation (#265)	6 years ago
Jeff Mitchell	e89e9d1349	Add groups CLI command (#266)	6 years ago
Jeff Mitchell	b75a6fc5e5	Update scopes CLI command in the model of the roles command (#262) ... * Update scopes CLI command in the model of the roles command * Pull help functions to helper methods	6 years ago
Jeff Mitchell	5d104a7a01	Migrate off Vault's internalshared folder to the separated-out repo	6 years ago
Todd Knight	245c7fbb44	Add Account Update handler (#257) ... * Allow updating accounts (not username or pw). * Updating new field names to LoginName. * Adding creation with password test. * Fixing documentation for WithLoginName	6 years ago
Jeff Mitchell	203e2b5dc2	Initial worker porting steps (#232)	6 years ago
Jeff Mitchell	4cfab04307	Migrate user name to login name (#255)	6 years ago
Jeff Mitchell	6661117d4c	The name. The name. The name!	6 years ago
Jeff Mitchell	bbd200101f	Move update versioning to query parameter, and fix up scope API tests (#244) ... * Move update versioning to query parameter, and fix up scope API tests * Add version checks for update requests in other services	6 years ago
Jeff Mitchell	f07bb9dae6	Fix breakage after change to template from previous PR	6 years ago
Jeff Mitchell	d74e30d94a	Minor, easy, linting fixes	6 years ago
Jeff Mitchell	8dd5de49b9	Minor update to default role description text	6 years ago
Todd Knight	f84991c0f1	Use authenticate and Auth Method repo functions (#242)	6 years ago
Jeff Mitchell	908a299ea3	Convert SDK to the new options API (#238)	6 years ago
Jeff Mitchell	2bbc1163c4	Save the entire token, not just the ID (#211) ... This allows us to use the token's scope to set the default scope for an action in the client instead of relying on env vars.	6 years ago
Jeff Mitchell	388a13b10d	Convert scopes to the new paradigm (#206)	6 years ago
Jeff Mitchell	982693d8f5	Update tests	6 years ago
Jeff Mitchell	99653727bb	Migrate grants to more structured output (#194)	6 years ago
Todd Knight	28dbcd84bd	Authenticate Handler API and SDK, and much more (#183)	6 years ago
Jeff Mitchell	acce195dcb	Organizations -> orgs consistency (#189) ... * Organizations -> orgs consistency * Fix up some tests and some mistaken substitutions	6 years ago
Jeff Mitchell	16b56a37ed	Rename base.New -> base.NewCommand for clarity	6 years ago
Jeff Malnick	8afcbd4c8e	Add config CLI command and encrypt/decrypt sub-commands (#77)	6 years ago
Jeff Mitchell	8de5371499	Enable UI handling logic with dev passthrough directories. (#145) ... * Enable UI handling logic with dev passthrough directories. * Add tests and fix a couple of things	6 years ago
Jim	cc5114bdef	refactor scopes to conform to public id usage and repo error msgs (#117)	6 years ago
Jeff Mitchell	5333482ff8	Fix gorm newlines issue (#108) ... Even if you made a custom formatter for gorm, it would blithely println anything returned, including nils, resulting in lots of new lines when we were ignoring output. This also creates a custom logger that doesn't do anything when newlines are found.	6 years ago