Kv group auth #80

suprjinx · 2024-11-09T14:46:06Z

Fixes #75

interactor unit test

doc/openapi/paths/secrets.yml

app/lib/clients/vault/oidc.rb

README.md

app/lib/clients/vault/identity_alias.rb

app/lib/clients/vault/policy.rb

app/lib/clients/vault/identity_alias.rb

app/lib/clients/vault/identity.rb

app/lib/clients/vault/identity_alias.rb

test/models/domain_test.rb

test/lib/clients/vault/identity_alias_test.rb

GeorgeJahad

I know I had a lot of comments on this one, but I think it really is better now. Thanks!

suprjinx added 17 commits September 6, 2024 15:34

Add better auth error propogation from interactor to controller; added

e7615c7

interactor unit test

Merge branch 'main' of github.com:suprjinx/astral

0c2c8c5

Merge branch 'main' of github.com:suprjinx/astral

9793f3f

Merge branch 'main' of github.com:suprjinx/astral

a2b6f6a

Merge branch 'main' of github.com:g-research/astral

08fa788

Merge branch 'main' of github.com:G-Research/astral

88b65d4

Merge branch 'main' of github.com:G-Research/astral

d87c082

Merge branch 'main' of github.com:g-research/astral

04c97b9

Merge branch 'main' of github.com:G-Research/astral

52d4dca

Merge branch 'main' of github.com:G-Research/astral

aa81e34

Merge branch 'main' of github.com:g-research/astral

f6b76ab

Merge branch 'main' of github.com:G-Research/astral

17cd743

Merge branch 'main' of github.com:suprjinx/astral

0902c95

Merge branch 'main' of github.com:G-Research/astral

01dc025

Merge branch 'main' of github.com:G-Research/astral

b3ba014

First cut on group read-only policy

f9ba077

Use group_array for writing role

5bf0c07

GeorgeJahad reviewed Nov 11, 2024

View reviewed changes

doc/openapi/paths/secrets.yml Outdated Show resolved Hide resolved

suprjinx marked this pull request as draft November 11, 2024 18:15

suprjinx added 6 commits November 11, 2024 13:19

fix openapi doc

42479b7

support checking for group role when verifying

4662ca7

add test and code fix for group read capability

fffb882

simplify signature for group/consumer_policy matching

4a442fe

Comments clarification

39d244a

New unit test for verify_policy

62af744

suprjinx marked this pull request as ready for review November 12, 2024 18:40

GeorgeJahad reviewed Nov 12, 2024

View reviewed changes

app/lib/clients/vault/oidc.rb Outdated Show resolved Hide resolved

suprjinx added 2 commits November 13, 2024 15:11

remove readme merge error

439b6a2

Use database to track kv groups

fda2d3b

GeorgeJahad reviewed Nov 14, 2024

View reviewed changes

README.md Show resolved Hide resolved

dry up entity_alias and group_alias to use shared write_identity_alias

c9d0664

GeorgeJahad reviewed Nov 15, 2024

View reviewed changes

app/lib/clients/vault/identity_alias.rb Outdated Show resolved Hide resolved

GeorgeJahad reviewed Nov 15, 2024

View reviewed changes

app/lib/clients/vault/identity_alias.rb Outdated Show resolved Hide resolved

suprjinx added 13 commits November 15, 2024 18:30

WIP to check identity_alias before creation

a0f91a1

Merge branch 'main' of github.com:G-Research/astral

795c8e2

Merge branch 'main' into kv_group_auth

7a2afcb

changes for tests green

81a5614

rename policy path for astral

0464d64

fix rubocop

5fc3440

rename to specify entity

cb53b8e

rename vars only

5d85704

test description change

a11c887

revert entity -> identity change

13608b1

Some additional tests for identity/identity_alias

7f5823d

one more test for group preservation

12b366d

Some extra integration test for read-group membership

128b1c0