Spring/spring-vault
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
874 Commits 13 Branches 0 Tags
ff43ffa1d0d70c1932fc2f8926c5a2a999f8e368
Commit Graph

398 Commits

Author SHA1 Message Date
Mark Paluch
ff43ffa1d0 Move off deprecated Base64Utils. 
Closes gh-874
 2024-08-07 08:45:16 +02:00
Mark Paluch
867c56c32c Add expiry Predicate to SecretLeaseContainer to determine whether a Lease is expired. 
Closes gh-809
 2024-06-06 15:31:20 +02:00
Mark Paluch
9fd2e6034a Fix Certificate.of(…) factory method retaining the private key. 
Closes gh-857
 2024-06-06 14:59:15 +02:00
Mark Paluch
14626b1ba1 Resume lease renewal after restart. 
Secret renewals are resumed after restarting secrets by re-registering LeaseRenewalScheduler.

Also, guard concurrent renewals that might have been in progress while the renewal scheduler has been in progress.

Closes gh-867
 2024-06-06 14:55:53 +02:00
Mark Paluch
114f944faa Polishing. 
Refactor AuthenticationSteps creation into static factory method.

Extend tests, add documentation.

See gh-821
Original pull request: gh-853
 2024-06-06 12:08:39 +02:00
Nanne Baars
fdcab61e3a Add GitHub authentication. 
Closes gh-821
Original pull request: gh-853
 2024-06-06 12:08:32 +02:00
Mark Paluch
af060ac44f Default to IMDSv2 for AWS-EC2 metadata retrieval. 
See gh-865
 2024-06-06 09:58:28 +02:00
Mark Paluch
dac9e36c37 Add support for IMDSv2 on EC2 instances. 
Closes gh-865
 2024-06-06 09:51:58 +02:00
Mark Paluch
3cf4e01f84 Polishing. 
Configure ResponseTimeout for a Request, move off deprecated API by always configuring a PoolingHttpClientConnectionManager.

See gh-861
Original pull request: gh-866
 2024-05-16 16:02:06 +02:00
Nurlan Turdaliev
579b8d63d7 Apply read timeout to http-components request factory. 
Closes gh-861
Original pull request: gh-866
 2024-05-16 16:01:44 +02:00
Mark Paluch
5427861514 Extend copyright license headers to 2024. 
Closes #851
 2024-01-12 13:59:06 +01:00
Mark Paluch
27a755851e Fix Lease revocation on SecretLeaseContainer destroy. 
Closes gh-844
 2023-12-27 16:13:55 +01:00
Mark Paluch
e8b4e4236f Consistently use Instant for next trigger computation. 
Deprecate Date-based variant.

Closes gh-831
 2023-11-01 16:39:29 +01:00
Mark Paluch
269a8e128e Polishing. 
Reorder methods. Reformat code. Add since tags. Convert revocation timestamp into instant.

See: gh-477
Original pull request: gh-820
 2023-11-01 16:14:12 +01:00
Nanne Baars
8d7292c049 Add notAfter and userIds to the certificate request. 
Closes: gh-477
Original pull request: gh-820
 2023-11-01 16:13:33 +01:00
Mark Paluch
3e0820d1a4 Polishing. 
Move off deprecated API.

See gh-829
 2023-10-23 11:06:03 +02:00
Mark Paluch
af1f9a40e7 Refine VaultResponseSupport metadata copying. 
Replace static copy method with an instance method.

Closes gh-823
 2023-10-17 09:43:03 +02:00
Mark Paluch
f42bd967c5 Polishing. 
Add since and author tags. Reorder fields.

Introduce empty VaultTokenRequest and refactor interface methods to default methods for delegation on the interface level.

See gh-690
Original pull request: gh-803
 2023-10-16 15:59:05 +02:00
Nanne Baars
e3261c6165 Support role_name and entity_alias while creating a token. 
Closes: gh-690
Original pull request: gh-803
 2023-10-16 15:58:59 +02:00
Mark Paluch
d8a7b05cc2 Polishing. 
Add since and author tags. Remove unused imports. Reorder methods.

See gh-745
Original pull request: gh-791
 2023-10-16 14:48:30 +02:00
Nanne Baars
253e8665d4 Support prehashed for the Transit engine. 
Closes gh-745
Original pull request: gh-791
 2023-10-16 14:48:18 +02:00
Mark Paluch
196d3c7470 Polishing. 
Extract method to avoid code duplications.

Add author and since tags. Add reactive batch rewrap support.

See: gh-687
Original pull request: gh-819
 2023-10-16 14:33:51 +02:00
Nanne Baars
347e3b771c Add transit rewrap batch method. 
Closes: gh-687
Original pull request: gh-819
 2023-10-16 14:25:13 +02:00
Mark Paluch
c1406d7fb9 Polishing. 
Align Object Mapping with imperative approach. Refactor read methods to improve empty handling without the use of exceptions. Revert code reorganization. Improve encapsulation.

Reformat code. Simplify tests.

See gh-576
Original pull request: gh-807
 2023-09-25 14:47:33 +02:00
Timothy R. Weiand
c303f55312 ReactiveVaultTemplate for the key-value backend version 2. 
Closes gh-576
Original pull request: gh-807
 2023-09-25 14:39:26 +02:00
Mark Paluch
c7f47b2d5b Polishing. 
Add author and since tags. Refine nullability and toString rendering.

Original pull request: gh-808
See gh-789
 2023-09-22 14:02:49 +02:00
Jeroen Willemsen
c5a087acef Add support for custom kv2 metadata. 
Original pull request: gh-808
Closes gh-789
 2023-09-22 13:57:05 +02:00
Mark Paluch
5cc5254b38 Upgrade dependencies. 
AWS Java SDK 2.20.152, HTTP Client 5.2.1, HTTP Core 5.2.3, Jackson 2.15.2, Jetty Reactive HTTP Client 4.0, Kotlin 1.8.22, Kotlin Coroutines 1.7.3, Mockito 5.5.0, Netty 4.1.98.Final, Spring Data 2023.0.0-M3, Spring Security 6.2.0-M3, Reactor 2023.0.0-M3.

Closes gh-817
 2023-09-22 10:39:17 +02:00
Mark Paluch
c9a2deceb7 Polishing. 
Introduce convenience methods for Policy and VaultEndpoint creation.

See gh-816
 2023-09-21 12:05:26 +02:00
Mark Paluch
03a114b538 Restart (rotate) leases after token rotation or expiry. 
SecretLeaseContainer now restarts all secrets if the login token has been rotated or has expired as leases associated with a token are revoked upon login token expiry.

Closes gh-815
 2023-09-21 11:26:26 +02:00
Mark Paluch
8babcd387d Introduce AuthenticationEventMulticaster interface. 
Closes gh-816
 2023-09-21 11:26:13 +02:00
Mark Paluch
548bc7e53b Polishing. 
Reformat code. Simplify flow.

See gh-689
Original pull request: gh-802
 2023-06-29 16:57:52 +02:00
Nanne Baars
1367275b66 Support JWT Authentication 
Closes gh-689
Original pull request: gh-802
 2023-06-29 16:57:46 +02:00
Mark Paluch
d877da4328 Upgrade to Spring Data 3.1. 
Closes #800
 2023-06-20 14:59:39 +02:00
Mark Paluch
1eccf7d5f1 Polishing. 
Add since tags, increment license header years, add javadoc.

See gh-726
Original pull request: gh-792
 2023-06-19 14:38:01 +02:00
Nanne Baars
288871aeb2 Add support for versioned transit keys. 
Closes gh-726
Original pull request: gh-792
 2023-06-19 14:37:39 +02:00
Mark Paluch
02e4e0ca5d Move off deprecated Base64Utils. 
Closes gh-797
 2023-06-19 11:33:39 +02:00
Mark Paluch
a7984632cd Polishing. 
See gh-661
Original pull request: gh-793
 2023-06-19 11:25:24 +02:00
Nanne Baars
92eef9fe68 Add plaintext backup and convergent encryption support and version to Vault transit keys. 
Closes gh-661
Original pull request: gh-793
 2023-06-19 11:24:39 +02:00
Mark Paluch
b47022906e Move AWS IAM authentication into nested class. 
Having the AWS IAM authentication code inside the method body creating AwsIamAuthentication causes class loading of the AwsCredentialsProvider class although the return type is ClientAuthentication.

With the code moved to an inner class, we mitigate that issue without actually knowing why the JVM attempts to load AwsIamAuthentication even the method isn't used.

Closes gh-786
 2023-04-20 18:02:05 +02:00
Mark Paluch
6a4a2a19e8 Add reactive health check. 
Closes gh-783
 2023-04-19 09:38:27 +02:00
Mark Paluch
42cdfaa2c9 Polishing. 
Reformat code. Rollback Jackson customizations on request objects in favor of explicit request body creaction.

Reduce method visibility to avoid unintended exposure.

See gh-620
Original pull request: gh-778
 2023-04-19 09:04:52 +02:00
James Luke
0fe33b78f5 Add reactive support for transit operations. 
Closes gh-620
Original pull request: gh-778
 2023-04-19 09:04:41 +02:00
Mark Paluch
4f7f7e9021 Polishing. 
Rename consistently role option. Add since and author tags.

Closes gh-780
 2023-04-19 08:33:09 +02:00
Andy Lintner
1e8753eaca Role name can now be used with cert auth 
When using TLS authentication, the Vault API allows the caller to specify
a role to use for authorization. Previously, we did not allow this to be
specified, which caused Vault to select one of the roles associated with
the certificate.

See gh-780
 2023-04-19 08:33:09 +02:00
Mark Paluch
c31b5abd0a Move off deprecated ClassTypeInformation. 
Closes gh-782
 2023-04-19 08:07:12 +02:00
Mark Paluch
2ab0fa3773 Upgrade to Spring Javaformat 0.38. 
Closes gh-781
 2023-04-19 08:03:05 +02:00
Mark Paluch
fda78f4664 Convert identifier to String when writing entity to SecretDocument 
We now properly convert the identifier value into String before writing it to SecretDocument.

Closes gh-777
 2023-04-19 07:58:27 +02:00
Mark Paluch
f90d2fe098 Allow dropping tokens from the session manager for easier recovery on lookup failures. 
Closes gh-684
 2023-03-20 13:29:34 +01:00
Mark Paluch
62ca6ad40f Refine logging on revocation failures. 
We now log token accessors if a token revocation has failed.

Closes gh-766
 2023-03-20 13:12:21 +01:00