GoogleApacheHttpTransport breaks with the current 4.5.x HttpClient dependency so we're switching to NetHttpTransport that uses HttpURLConnection.
Closes gh-463.
We now resolve property placeholders during configuration class parsing using Environment.resolveRequiredPlaceholders(…).
Previously, only placeholders in non-renewable property sources were resolved as they were part of BeanDefinition. Rotating/renewable property sources used a scalar RequestedSecret object which did not participate in bean definition.
Resolves gh-420.
This commit updates URLs to prefer the https protocol. Redirects are not followed to avoid accidentally expanding intentionally shortened URLs (i.e. if using a URL shortener).
Original pull request: gh-394.
PrefixAwareUriBuilderFactory now no longer injects components from a base URI into a URI that is considered an absolute one (URI starting with https: or http: protocol schemes).
Resolves gh-377.
We now attach HttpStatusCodeException as cause when constructing VaultException for error handling purposes.
Previously, the cause was unset which required message parsing to detect the actual cause.
See gh-319.
Convert space to tab indentation. Rename Gcp…Provider to Gcp…Accessor. Merge default implementation of accessors into DefaultGcpCredentialAccessors enum. Reduce builder method visibility of accessor configuration methods to expose fewer public methods. Javadoc, formatting, extract methods.
Original pull request: gh-287.
See gh-261
We now provide a LeaseEndpoints enum that reflects differences between Vault versions regarding their lease endpoints.
Related pull request: gh-282.
Closes gh-262.
We now support Azure as authentication backend allowing applications to authenticate that run on VM instances with a bound managed service identity.
Closes gh-284.
We now use pretty-printed (formatted) JSON for policy creation/updating to avoid templating character clashes between compact JSON formatting and Vault 0.11's policy templating feature.
Closes gh-288.
Adapt to changes in Reactor Netty and Spring Framework 5.1 RC1.
Disable ClientCertificateAuthenticationOperatorIntegrationTests as HttpClient (Reactor Netty) has issues with multiple SSL configurations.
Closes gh-281.
We now provide a Template API to interact with Vault wrapping endpoints introduced in Vault 0.6.2.
Object body = …;
WrappedMetadata metadata = wrappingOperations.wrap(body, Duration.ofSeconds(100));
VaultResponse response = wrappingOperations.read(metadata.getToken());
Closes gh-208.
We now support customization of the context path through VaultEndpoint.setPath(…). The path can also be part of an URI. Empty paths or a single slash are translated to the default context path of v1 denoting the supported API version.
Closes gh-260.
Extract methods. Make ReactiveLifecycleAwareSessionManager.isTokenRenewable(…) an instance method with protected visibilit to align with LifecycleAwareSessionManager.
See gh-257.
We now log the HTTP status text along the HTTP status itself and a potential error message. Client errors (HTTP status 4xx) are logged on WARN level as feedback to the application as client errors aren't considered fatal.
We also introduce VaultSessionManagerException and VaultTokenRenewalException to provide exceptions with a specific context.
Closes gh-257.
Related ticket: gh-203.
