Spring/spring-vault
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
289 Commits 13 Branches 0 Tags
3bfed52adc3e70e7dfffa67adf19d8aef4b71eec
Commit Graph

289 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Mark Paluch
3bfed52adc [maven-release-plugin] prepare for next development iteration 
See gh-229.
 2018-04-04 17:46:21 +02:00
Mark Paluch
c725dcff33 [maven-release-plugin] prepare release 2.0.1.RELEASE 
See gh-229.
 2018-04-04 17:45:39 +02:00
Mark Paluch
b024ebf495 Update changelog. 
See gh-229.
 2018-04-04 17:42:26 +02:00
Mark Paluch
388e21053b Upgrade to AWS Java SDK 1.11.308. 
Closes gh-237.
 2018-04-04 17:34:14 +02:00
Mark Paluch
537a2d921a Upgrade to Spring Security 5.0.3. 
Closes gh-236.
 2018-04-04 17:32:36 +02:00
Mark Paluch
a801e11753 Upgrade to Spring Data Kay SR6. 
Closes gh-235.
 2018-04-04 17:31:30 +02:00
Mark Paluch
353349f553 Upgrade to Jackson 2.9.5. 
Closes gh-234.
 2018-04-04 14:10:50 +02:00
Mark Paluch
d5e5438c47 Upgrade to netty 4.1.22.Final. 
Closes gh-232.
 2018-04-04 14:09:26 +02:00
Mark Paluch
e878d7de61 Upgrade to Spring Framework 5.0.5.RELEASE. 
Closes gh-227.
 2018-04-04 08:59:14 +02:00
Mark Paluch
ffd2536509 Polishing. 
Add author tags. Extract actual VaultDecryptionResult construction based on results in own method. Introduce Plaintext.empty() factory method. Guard Ciphertext.with(…) against null values.

See also gh-223.
Original pull request: gh-225.
 2018-03-21 15:26:35 +01:00
Mikko Koli
8ebd492db6 Allow empty plaintext for transit decryption. 
Fixes gh-223.
Original pull request: gh-225.
 2018-03-21 15:26:35 +01:00
Mark Paluch
bef6576c00 Guard tests against versions that do not support empty plaintext. 
See gh-223.
 2018-03-20 15:57:48 +01:00
Mark Paluch
a6807c09c3 Allow empty plaintext for transit encryption. 
We now allow construction and encryption of empty Plaintext objects. Empty plaintext can make sense from a security perspective.

Closes gh-223.
 2018-03-20 13:03:31 +01:00
Mark Paluch
61c1657743 Rotate non-renewable leases. 
We now support rotation of non-renewable leases in the sense that we expire the lease first and then obtain secrets from Vault again. Previously, non-renewable secrets were not rotated at all as rotation was tied to the renewal only and without renewal there was no rotation.

See gh-215.
 2018-03-20 12:50:47 +01:00
Mark Paluch
60d9534c9c Drop VaultToken on infrastructure errors during renewal. 
We now drop the VaultToken if an infrastructure error (connection refused/connection timeout/read timeout/…) occurs. Dropping the token prevents usage of an expired token.

Closes gh-222.
 2018-03-20 11:45:23 +01:00
Mark Paluch
b6a96451f4 Upgrade to Reactor Bismuth SR7. 
Closes gh-214.
 2018-03-07 09:00:31 +01:00
Mark Paluch
db29b39b7b Upgrade to Spring Data Kay SR5. 
Closes gh-213.
 2018-03-07 09:00:31 +01:00
Mark Paluch
972e77556d Upgrade to Vault 0.9.5. 
Reduce build matrix by removal of intermediate Vault versions.

Closes gh-212.
 2018-03-07 09:00:31 +01:00
Mark Paluch
7d6a5c0d0c Do not prepend slash to URIs with a scheme. 
See gh-206.
 2018-03-05 16:10:03 +01:00
Michael Bell
b72ed92729 Fix Javadoc example code in SecretLeaseContainer. 
Original pull request: gh-209.
Closes gh-207.
 2018-03-05 08:57:23 +01:00
Mark Paluch
aeb3f65a4c Annotate functional interfaces with FunctionalInterface. 
Closes gh-204.
 2018-02-28 14:52:12 +01:00
Mark Paluch
30a2e13b6a Polishing. 
See gh-202.
 2018-02-28 14:37:18 +01:00
Mark Paluch
bc5dec4d88 Return null on absent Policy via VaultSysTemplate.getPolicy(…). 
We now return null if a policy was not found. Previously, a VaultException was thrown.

Closes gh-202.
 2018-02-28 14:36:17 +01:00
Mark Paluch
b3a6322951 Polishing. 
Fix JavaDoc and reference doc versions and links.

See gh-198.
 2018-02-20 10:01:17 +01:00
Mark Paluch
d2c83b818f Prepare for next development iteration. 
See gh-198.
 2018-02-20 10:01:13 +01:00
Mark Paluch
4b1061d153 [maven-release-plugin] prepare release 2.0.0.RELEASE 
See gh-198.
 2018-02-20 09:43:14 +01:00
Mark Paluch
0d56e7695f Update changelog. 
See gh-198.
 2018-02-20 09:23:55 +01:00
Mark Paluch
88e1460be6 Upgrade to Spring Data Kay SR4. 
Closes gh-199.
 2018-02-20 09:19:26 +01:00
Mark Paluch
c49147513b Upgrade to Spring Framework 5.0.4. 
Closes gh-194.
 2018-02-19 13:19:09 +01:00
Mark Paluch
b2ad6ca82a Upgrade to AWS SDK 1.11.280. 
Closes gh-197.
 2018-02-19 11:31:03 +01:00
Mark Paluch
e20fd33a11 Upgrade to Netty 4.1.21.Final. 
Closes gh-196.
 2018-02-19 11:30:05 +01:00
Mark Paluch
3fc6dfcf11 Upgrade to Reactor Bismuth SR6. 
Closes gh-195.
 2018-02-19 11:28:59 +01:00
Mark Paluch
47d37b513b Upgrade to Spring Framework 5.0.4 snapshots. 
See gh-194.
 2018-02-19 11:28:17 +01:00
Mark Paluch
c3b2aee11d Add unit test for VaultPropertySource with profiles. 
See gh-193.
 2018-02-09 11:56:41 +01:00
Mark Paluch
78197da7ad Rename AwsIamAuthenticationOptions#serverName to serverId. 
Align naming with Vault's serverId that sets Vault-AWS-IAM-Server-ID headers on AWS requests for consistency. serverName builder/getter is deprecated now.

Closes gh-191.
 2018-02-06 11:10:35 +01:00
Mark Paluch
443fc03f8a Polishing 2018-01-31 16:07:53 +01:00
Mark Paluch
ef84690804 Upgrade to Vault 0.9.3. 
Closes gh-192.
 2018-01-31 16:07:48 +01:00
Mark Paluch
1e7c385eb2 Add Spring Vault guides to project site. 2018-01-25 10:02:14 +01:00
Mark Paluch
8f19127584 [maven-release-plugin] prepare for next development iteration 2018-01-25 09:48:54 +01:00
Mark Paluch
a94cbc15ae [maven-release-plugin] prepare release 2.0.0.RC2 2018-01-25 09:48:53 +01:00
Mark Paluch
11a346ef2b Polishing. 
Adjust generics and wording in reactive Template API.
 2018-01-25 09:44:34 +01:00
Mark Paluch
6791533e0e Update changelog. 
See gh-190.
 2018-01-25 09:34:43 +01:00
Mark Paluch
f07257464a Upgrade dependencies. 
Spring Framework 5.0.1 -> 5.0.3
Spring Data Kay SR1 -> Kay SR3
Reactor Bismuth SR3 -> Bismuth SR5
httpclient 4.5.3 -> 4.5.5
httpcore 4.4.8 -> 4.4.9
netty 4.1.17 -> 4.1.20
Jackson 2.9.2 -> 2.9.4

Closes gh-189
 2018-01-25 09:30:11 +01:00
Mark Paluch
35b5797c63 Polishing. 
See gh-187
 2018-01-23 10:49:11 +01:00
Mark Paluch
9ed2196068 Polishing. 
See gh-187
 2018-01-22 19:29:09 +01:00
Mark Paluch
28ff17d4f8 Add VaultBytesEncryptor and VaultBytesKeyGenerator. 
We now provide a Spring Security integration for Vault transit-based BytesEncryptor and BytesKeyGenerator.

VaultOperations operations = …;
VaultBytesKeyGenerator generator = new VaultBytesKeyGenerator(operations);

byte[] key = generator.generateKey();

VaultTransitOperations transit = …;
VaultBytesEncryptor encryptor = new VaultBytesEncryptor(transit, "my-key-name");

byte[] ciphertext = encryptor.encrypt(plaintext);
byte[] decrypted = encryptor.decrypt(ciphertext);

Closes gh-187.
 2018-01-22 12:11:05 +01:00
Mark Paluch
3e6fbe7581 Polishing. 
Remove PropertyTransformerSupport in favor of default method in PropertyTransformer and refactor PropertyTransformer to functional interface.

See gh-169.
 2018-01-17 15:36:30 +01:00
Mark Paluch
f4d05a4fb6 Retain JSON data type in PropertySource. 
We now retain the JSON data type in the property source. This change requires property transformers to accept/produce a Map of String to Object whereas it was String to String before.

See gh-169.
 2018-01-17 13:06:08 +01:00
Mark Paluch
49079a8a39 Remove lockfile 2018-01-17 12:46:00 +01:00
Mark Paluch
747a270604 Introduce reactive SessionManager. 
We now provide a reactive, lifecycle-aware SessionManager using WebClient. ReactiveSessionManager is mirroring imperative SessionManager functionality. Using AbstractReactiveVaultConfiguration will register an adapter between ReactiveSessionManager and SessionManager to reuse the same token for reactive and imperative API use.

Closes gh-159.
 2018-01-17 12:44:09 +01:00