boundary

History

Jeff Mitchell b41e983503 Reorder authz check for sessions (#2042 ) * Reorder session authz checks This implements a mechanism for service handlers to pass a repo satisfying an interface into the scope IDs listing function. The purpose of this interface is to allow the same function to perform authorization checking against resources rather than requiring service handlers to fetch all resources in the determined set of scopes and then perform this checking. While this could be done in each service handler, this approach centralizes the logic, which has the nice benefit of removing some boilerplate from service handler list functions that have adapted to it. Tests haven't changed, which is expected -- the function should return exactly what was being returned before, simply faster.		4 years ago
..
accounts	test(account): Fix parallel validation tests	4 years ago
authmethods	Reorder authz check for sessions (#2042 )	4 years ago
authtokens	Reorder authz check for sessions (#2042 )	4 years ago
credentiallibraries	refact(credentialstore): Switch subtype attributes to oneof	4 years ago
credentialstores	Reorder authz check for sessions (#2042 )	4 years ago
groups	Reorder authz check for sessions (#2042 )	4 years ago
health	feat(controller): Add health endpoint (#1882 )	4 years ago
host_catalogs	Reorder authz check for sessions (#2042 )	4 years ago
host_sets	feat(hostsets): Classify all proto fields	4 years ago
hosts	feat(hosts): Classify host proto fields	4 years ago
managed_groups	feat(managedgroups): Classify resources for audit events	4 years ago
roles	Reorder authz check for sessions (#2042 )	4 years ago
scopes	Reorder authz check for sessions (#2042 )	4 years ago
sessions	Reorder authz check for sessions (#2042 )	4 years ago
targets	Reorder authz check for sessions (#2042 )	4 years ago
users	Reorder authz check for sessions (#2042 )	4 years ago
workers	Update to go-kms-wrapping version 2, and plugin-based KMS (#1901 )	4 years ago
errors.go	refactor (controller): Use a grpc server for the grpc-gateway (#1576 )	5 years ago
errors_test.go	refactor (controller): Use a grpc server for the grpc-gateway (#1576 )	5 years ago
filtering.go	Update primary error functions to take a context, deprecate old functions (#1358 )	5 years ago
filtering_test.go	Events: add node for formatting/filtering cloudevents (#1390 )	5 years ago
marshler.go	True up some spelling	5 years ago
mask_manager.go	Mask manager can now include mask paths w/ a specified prefix which would be filtered otherwise (#1654 )	5 years ago
mask_manager_test.go	Mask manager can now include mask paths w/ a specified prefix which would be filtered otherwise (#1654 )	5 years ago
option_test.go	Add external ID to host output (#1705 )	4 years ago
options.go	Add external ID to host output (#1705 )	4 years ago
outgoing_response_filter.go	refact(authmethods): Add top level token type to Authenticate (#2010 )	4 years ago
outgoing_response_filter_test.go	feat(authmethods): Add typed attributes to authenticate request and response	4 years ago
subtypes.go	Add more OIDC error output. (#1108 )	5 years ago
subtypes_test.go	Add scaffolding for external host plugins and convert aws/azure over (#1581 )	5 years ago
verifiers.go	Enhance worker connection security (#1641 )	5 years ago
verifiers_test.go	refactor (controller): Use a grpc server for the grpc-gateway (#1576 )	5 years ago