 Gyu-Ho Lee
|
35b11bf438
auth: replace NewContext with NewOutgoingContext
|
7 years ago |
 Hitoshi Mitake
|
e0c33ef881
auth, etcdserver: allow users to know their roles and permissions
|
7 years ago |
 Xiang Li
|
44a6c2121b
Merge pull request #7999 from hexfusion/grpc-gateway-auth
|
7 years ago |
|
Gyu-Ho Lee
|
5e059fd8dc
*: use metadata Incoming/OutgoingContext
|
7 years ago |
 Sam Batschelet
|
0caab26310
auth: support "authorization" token for grpc-gateway
|
7 years ago |
|
Hitoshi Mitake
|
0c655902f2
auth, etcdserver: protect revoking lease with auth
|
7 years ago |
 Hitoshi Mitake
|
e1306bff8f
*: simply ignore ErrAuthNotEnabled in clientv3 if auth is not enabled
|
7 years ago |
|
Hitoshi Mitake
|
c4a45c5713
auth, adt: introduce a new type BytesAffineComparable
|
7 years ago |
|
Gyu-Ho Lee
|
3edd36315d
auth: use atomic access to 'authStore.revision'
|
7 years ago |
|
Hitoshi Mitake
|
ad2111a6f4
auth: store cached permission information in a form of interval tree
|
7 years ago |
|
Hitoshi Mitake
|
c40b86bcde
auth, etcdserver: forbid invalid auth management
|
7 years ago |
|
Hitoshi Mitake
|
068d806bde
*: revoke a deleted role
|
7 years ago |
 Anthony Romano
|
52bc997e0b
auth: nil check AuthInfo when checking admin permissions
|
7 years ago |
|
Hitoshi Mitake
|
f8a290e7ca
*: support jwt token in v3 auth API
|
8 years ago |
|
Gyu-Ho Lee
|
6431382a75
auth: keep old revision in 'NewAuthStore'
|
7 years ago |
|
Hitoshi Mitake
|
9976d869c1
auth: correct initialization in NewAuthStore()
|
7 years ago |
|
Hitoshi Mitake
|
0191509637
auth, etcdserver: authenticate clients based on certificate CommonName
|
8 years ago |
|
Hitoshi Mitake
|
9886e9448e
auth, etcdserver: let maintenance services require root role
|
8 years ago |
|
Anthony Romano
|
c39a59c0be
auth: reject empty user name when checking op permissions
|
7 years ago |
|
Gyu-Ho Lee
|
55307d48ac
auth: fix gosimple errors
|
8 years ago |
 Vimal Kumar
|
dfe853ebff
auth: add a timeout mechanism to simple token
|
8 years ago |
|
Hitoshi Mitake
|
f85701a46f
auth, etcdserver: forbid adding a user with empty name
|
8 years ago |
|
Hitoshi Mitake
|
39e9b1f75a
auth, etcdserver: check password at API layer
|
8 years ago |
|
Hitoshi Mitake
|
bc5d7bbe03
auth, e2e, clientv3: the root role should be granted access to every key
|
8 years ago |
|
Hitoshi Mitake
|
ef6b74411c
auth, etcdserver: introduce revision of authStore for avoiding TOCTOU problem
|
8 years ago |
|
Anthony Romano
|
d4e0e419dc
auth: set bcrypt cost to minimum for test cases
|
8 years ago |
|
Hitoshi Mitake
|
66107b8653
auth: invalidate every token in disabling auth
|
8 years ago |
|
Hitoshi Mitake
|
8df37d53d6
auth, etcdserver: let Authenticate() fail if auth isn't enabled
|
8 years ago |
|
Hitoshi Mitake
|
18253e2723
*: support getting all users and roles in auth v3
|
8 years ago |
|
Anthony Romano
|
16db9e68a2
auth, etcdserver: separate auth checking apply from core apply
|
8 years ago |
