Spring/spring-vault
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
714 Commits 13 Branches 0 Tags
2.4.x
Commit Graph

412 Commits

Author SHA1 Message Date
Mark Paluch
55048867a2 Allow reuse of library-specific configuration code in ClientHttpRequestFactoryFactory and ClientHttpConnectorFactory. 
See gh-760
 2023-03-07 15:47:28 +01:00
Mark Paluch
6c225db445 Do not revoke batch tokens. 
We now track the token type and no longer attempt revoking batch tokens.
Also, refactor code duplicates to use LoginTokenUtil.

Closes gh-764
 2023-03-07 15:47:28 +01:00
Mark Paluch
e33d8cf751 [maven-release-plugin] prepare for next development iteration 2023-03-07 15:47:22 +01:00
Mark Paluch
f2a57c22c3 [maven-release-plugin] prepare release 2.4.0-M2 2023-03-07 15:47:22 +01:00
Mark Paluch
300b37c7c4 Upgrade dependencies 
See gh-721
 2023-03-07 15:47:22 +01:00
Mark Paluch
8ea17c318a Upgrade to Spring Data 2021.2.1. 
Closes gh-701
 2022-06-24 15:27:48 +02:00
Mark Paluch
6fbd42349e Polishing. 
Simplify variable names. Remove unused internal methods. Use CharSequence instead of String to accept keystore passwords.

Closes gh-711
See gh-708
 2022-06-24 15:11:41 +02:00
Bogdan Cardoş
09530fa198 Overload createKeyStore to allow password parameter to be set 
- Overload the CertificateBundle.createKeyStore() to allow a String password parameter to be set
- Overload the static KeystoreUtil.createKeyStore() to allow a String password parameter to be set
- Added javadoc and unit tests
- Code formatting, best practices and cosmetic changes

Fixes gh-708
Original pull request: gh-711
 2022-06-24 15:11:41 +02:00
Mark Paluch
0ca12874dd Polishing 
Refine docs setup, remove changelog in favor of GitHub releases.

See gh-706
 2022-05-27 15:46:36 +02:00
Mark Paluch
25460970f7 [maven-release-plugin] prepare for next development iteration 2022-05-27 15:21:01 +02:00
Mark Paluch
8c9beaa708 [maven-release-plugin] prepare release 2.4.0-M1 2022-05-27 15:21:01 +02:00
Mark Paluch
4ae1bee2c1 Upgrade to HttpCore 4.4.15, Jetty Reactive HttpClient 3.0.5, Google IAM Credential 2.2.0, Google Auth OAuth2 1.7.0, BouncyCastle 1.70 
Closes gh-704
 2022-05-27 15:17:26 +02:00
Mark Paluch
709894a005 Replace synchronized usage with ReentrantLock 
Closes gh-702
 2022-05-23 15:29:15 +02:00
Mark Paluch
5d87845569 Refine PemObject header/footer detection. 
Closes gh-616
 2022-05-23 14:31:01 +02:00
Mark Paluch
6d9cb15da5 Switch back to Spring Data GA version. 
See gh-701
 2022-05-20 10:19:57 +02:00
Mark Paluch
7d4b71850a Add support for RevisionRepository. 
Vault repositories can now implement RevisionRepository to access older secret revisions.

See gh-593
 2022-05-20 09:54:00 +02:00
Mark Paluch
f4fd3ee475 Support versioned key/value secrets engine using Vault repositories. 
We now support CRUD operations using key/value secrets engine version 2 and optimistic locking through Vault's cas mechanism.

Closes gh-593
 2022-05-19 11:36:46 +02:00
Mark Paluch
67ea636651 Introduce property mapper to apply request properties. 
Closes gh-700
 2022-05-18 10:31:37 +02:00
Mark Paluch
8e8a924f54 Polishing. 
Fix typos, update minimum Vault version to 0.9.6. Add since and author tags.

Closes gh-686.
 2022-05-18 10:11:38 +02:00
My-Lan Aragon
78c26bea81 Add hash and signature algorithm to VaultSignRequest and VaultSignatureVerificationRequest 2022-05-18 10:11:38 +02:00
Mark Paluch
fb324a7ce3 Upgrade to Spring Javaformat 0.0.29. 
Closes gh-698
 2022-05-18 10:11:34 +02:00
Alex Bremora
75f5cf98b0 Add missing properties in VaultCertificateRequest. 
Original pull request: gh-685.
Fixes gh-682
 2022-05-18 09:49:46 +02:00
Mark Paluch
84e120d111 Polishing. 
Correctly propagate certificate format.

See gh-688
 2022-05-17 16:28:28 +02:00
Mark Paluch
978cf7bd78 Upgrade to Spring Data 2021.2.0. 
Closes gh-696
 2022-05-17 16:22:26 +02:00
Mark Paluch
c0f81dfa75 Upgrade to Spring Framework 5.3.20. 
Closes gh-692
 2022-05-17 16:12:07 +02:00
Mark Paluch
ac7beb9da2 Support PEM encoded certificates and EC for private keys. 
We now support PEM, PEM-bundle and DER-encoded certificate bundles along with RSA and EC key types. Keys can be provided either in their plain representation or wrapped within a PKCS8 container.

Original pull request: gh-688.
Closes gh-678
Closes gh-683
 2022-05-17 16:12:07 +02:00
Mark Paluch
26a77a2199 Update license headers for 2022. 
Closes gh-679
 2022-01-05 09:47:57 +01:00
Mark Paluch
004fef2a5f Polishing. 
Update since and author tags. Guard tests against older Vault versisons.

Original pull request: gh-677
See gh-676
 2022-01-05 09:46:21 +01:00
Alex Bremora
29379d70bc Add private_key_type property to VaultCertificateResponse. 
Original pull request: gh-677
Closes gh-676
 2022-01-05 09:46:05 +01:00
Mark Paluch
a6ff9f3135 Consider LeaseStrategy outcome whether to retry session token renewal. 
LeaseStrategy.shouldDrop(…) now controls whether to retry the session token. Dropping the token terminates renewals while retaining the token leads to another renewal. Additionally, we introduced LeaseStrategy.retainOnIoError() to retain tokens on network failures (IOException).

Closes gh-646
 2021-11-19 11:53:58 +01:00
Mark Paluch
8dbd492d14 Polishing. 
Move off deprecated Reactor Netty API.

See gh-654
 2021-11-19 11:11:07 +01:00
Mark Paluch
a503fef1b0 Enable System Properties-driven proxy configuration for Reactor Netty. 
Also, upgrade to newest Reactor Netty.

Closes gh-654
 2021-11-19 10:58:53 +01:00
Mark Paluch
2c4862b425 Polishing. 
Refactor User/Pass authentication to be used with LDAP, Okta, and RADIUS. Remove LdapAuthentication to avoid duplications.

See: gh-668.
 2021-11-19 10:54:45 +01:00
sokomishalov
1b33f4e195 Add support for username/password authentication. 
Closes gh-668
 2021-11-19 10:54:30 +01:00
fivesmallq
0e7b65d5c0 Fix typos in KubernetesAuthentication. 
Closes gh-669
 2021-11-19 09:57:13 +01:00
Nikola Kološnjaji
b4a3af8c0f Fix typos in GcpIamAuthenticationOptions and GcpIamCredentialsAuthenticationOptions. 
See gh-657
 2021-10-01 14:28:24 +02:00
Mark Paluch
b54ddc460f Enable authentication steps for AzureMsiAuthentication for reactive usage. 
Closes gh-665.
 2021-09-27 15:44:20 +02:00
Mark Paluch
86dbf474bb Consider absent secretId in AppRole authentication steps. 
We now skip secretId retrieval when using AppRole authentication steps to avoid Unknown SecretId configuration errors.

Also, renamed AbsentSecretId.INSTANCE to ABSENT_SECRET_ID to cause more meaningful messages when used in toString.

Closes gh-656
 2021-06-18 09:52:12 +02:00
Mark Paluch
93653bc880 Expose CA chain through CertificateBundle. 
We now expose access to the CA chain by providing getX509IssuerCertificates(). Additionally, a KeyStore can be created containing the full CA chain.

Closes gh-648.
 2021-06-11 11:09:25 +02:00
Willi Schönborn
7621f438ab Bumped Azure Instance Metadata API version to 2017-12-01. 
vmScaleSetName is only exposed in 2017-12-01 and later.
See https://docs.microsoft.com/en-us/azure/virtual-machines/linux/instance-metadata-service\?tabs\=windows\#response-1

Closes gh-644
 2021-06-11 09:42:34 +02:00
Bun-Ny TAN
bd03f3dfa6 Fix assertion message. 
See gh-649
 2021-06-11 09:38:29 +02:00
Mark Paluch
398697662d Guard tests against versions not supporting versioned k/v backend. 2021-03-16 10:51:07 +01:00
Mark Paluch
6b09379f6b Polishing. 
Make SslConfiguration.enabledProtocols and enabledCipherSuites non-null. Update since tags. Add author tags. Update documentation.

See gh-635
Original pull request: gh-640.
 2021-03-16 10:45:56 +01:00
Ryan Gow
58d63c2aba Add ability to configure client TLS enabled protocol versions and cipher suites via Spring properties. 
- Adding the ability to explicitly configure the enabled SSL protocol
versions and cipher suites used by the Vault HTTP client via the
following Spring properties:

* vault.ssl.enabled-protocols
* vault.ssl.enabled-cipher-suites

- Properties should be a comma-separated list of String constants that
correspond to those used by the enabled SSL provider.

Closes gh-635
Original pull request: gh-640.
 2021-03-16 10:41:52 +01:00
Mark Paluch
8b7f7e3a9b Allow external injection of Loggers into SecretLeaseContainer and PropertySources. 
Several types are now enabled for reflective injection of the Logger to allow logger re-routing if needed. Especially for Spring Cloud Vault we reconfigure loggers so that components can log their failures during the bootstrap phase while the actual logging framework is not yet configured.

Closes gh-636.
 2021-03-10 15:14:51 +01:00
Mark Paluch
20c1d743c6 Polishing. 
Rename GoogleCloudIamAuthenticationOptionsBuilder to GcpIamCredentialsAuthenticationOptionsBuilder.

See gh-600.
 2021-03-10 11:27:10 +01:00
Mark Paluch
f156c561c0 Polishing. 
Update documentation, extract base class for GCP IAM authentication options.

Closes gh-600.
Original pull request: gh-619.
 2021-02-19 14:31:03 +01:00
Andreas Gebauer
6bfd192dd8 Add support for GCP IAM credentials API. 
We now support the IAM Credentials API in addition to the deprecated IAM API for signing JWT.

Closes gh-600.
Original pull request: gh-619.
 2021-02-19 14:30:08 +01:00
Mark Paluch
59f555c8a1 Polishing. 
Add author tag. Fix tests.

Resolves gh-617.
Original pull request: gh-618.
 2021-02-16 15:41:44 +01:00
Bruno Rodrigues
cc2f78a426 Add required scope to GCP SignJwt credentials. 
Resolves gh-617.
Original pull request: gh-618.
 2021-02-16 15:23:16 +01:00