Derek Collison
1cbfbfa071
Basic account support
...
Signed-off-by: Derek Collison <derek@nats.io >
2018-09-29 13:04:19 +02:00
Derek Collison
16c0f5b7f4
Update for nkey changes
...
Signed-off-by: Derek Collison <derek@nats.io >
2018-09-13 11:41:28 -07:00
Ivan Kozlovic
846544ecfe
Merge pull request #747 from nats-io/update_route_perms
...
[CHANGED] Cluster permissions moved out of cluster's authorization
2018-09-11 10:04:13 -06:00
Ivan Kozlovic
e1202dd30a
[CHANGED] Cluster permissions moved out of cluster's authorization
...
It will be possible to set subjects permissions regardless of the
presence of an authorization block.
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2018-09-10 17:03:50 -06:00
Derek Collison
129866bb76
Make warning style
...
Signed-off-by: Derek Collison <derek@nats.io >
2018-09-10 15:32:26 -07:00
Derek Collison
fff62d5bf7
Warn on plaintext passwords in config and redact from logs
...
Signed-off-by: Derek Collison <derek@nats.io >
2018-09-10 15:29:42 -07:00
Derek Collison
3d2cb0e7d1
Basic nkey support and nonce handling
...
Signed-off-by: Derek Collison <derek@nats.io >
2018-09-10 15:29:42 -07:00
Derek Collison
4b7cca2f5e
Report route filtering on source server
...
Signed-off-by: Derek Collison <derek@nats.io >
2018-09-05 11:55:15 -07:00
Derek Collison
5955f22d65
Add in route permission support
...
Signed-off-by: Derek Collison <derek@nats.io >
2018-08-23 14:42:43 -07:00
Derek Collison
65188f9768
Added parser for new style authorizations
...
Signed-off-by: Derek Collison <derek@nats.io >
2018-08-22 20:41:48 -07:00
Ivan Kozlovic
bf3bc81722
Add route permissions
...
The `client.perms` struct is left unchanged. We simply map Import
and Export semantics to existing Publish and Subscribe ones.
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2018-06-21 17:04:10 -06:00
Derek Collison
6299e034cb
dynamic buffer updates
...
Signed-off-by: Derek Collison <derek@nats.io >
2018-06-04 17:45:05 -07:00
Derek Collison
4dd4d2bd9d
lock users access
...
Signed-off-by: Derek Collison <derek@nats.io >
2018-06-04 17:45:05 -07:00
Derek Collison
d3213df7f1
Fix data race
...
Signed-off-by: Derek Collison <derek@nats.io >
2018-06-04 17:45:05 -07:00
Derek Collison
00901acc78
Update license to Apache 2
2018-03-15 22:31:07 -07:00
Christophe de Vienne
2b7cb173ff
Set info.AuthRequired when CustomClientAuthentication is defined
2017-09-08 10:56:21 +02:00
Christophe de Vienne
e556854f54
Rename Custom*Auth to Custom*Authentication
...
Simplify and complete tests based on Ivan advice.
2017-09-08 10:54:20 +02:00
Christophe de Vienne
b473674907
Add back custom Auth api
...
The removal of SetClientAuthMethod removed any possibility of providing
a custom auth backend.
This patch add it back as a Option attribute, so we can wait comfortably for #434 ,
which aims to provide more extensible external Auth.
2017-09-07 17:39:34 +02:00
Tyler Treat
84c8c511e4
Pass auth check if cluster username is not set
2017-06-19 14:18:08 -05:00
Tyler Treat
1e964e4aab
Address CR feedback
2017-06-14 16:48:11 -05:00
Tyler Treat
77a973fc8d
Send error when we drop a client subscription
2017-06-14 12:08:44 -05:00
Tyler Treat
4675603b60
Remove impossible branch logic
2017-06-13 16:23:07 -05:00
Tyler Treat
44966230db
Handle permissions changes on config reload
2017-06-13 16:04:38 -05:00
Tyler Treat
fa12181094
Add support for reloading users credentials
2017-06-12 13:17:30 -05:00
Tyler Treat
9ba55f0f21
Add support for reloading single-user and token authentication
2017-06-12 11:52:11 -05:00
Tyler Treat
5d36a7797e
Fix Options Clone
...
Ensure Options.Clone() only initializes Users and Routes when the
Options it's cloning has them initialized.
2017-06-07 16:54:40 -05:00
Tyler Treat
cc30af8ede
Address code review feedback
2017-06-05 17:43:42 -05:00
Tyler Treat
9902c3da84
First pass at implementing config reload
2017-05-30 16:18:36 -05:00
Derek Collison
76de921f65
Cleanup for Auth
2017-04-20 12:41:48 -07:00
Christophe de Vienne
f94983a9a4
Add TLS infos to ClientAuth interface
...
It makes it possible to implement a Auth that uses client TLS certificates
to identify them.
2016-12-21 10:31:22 +01:00
Derek Collison
7730fac9e2
Authorization enforcement and performance tweaks
2016-06-16 17:07:25 -07:00
Colin Sullivan
2baac47820
Address issues found by golint.
...
* No functional changes
* Did not address the ALL_CAPS issues
* Did not modify public APIs and field names.
2016-03-15 15:21:13 -06:00
Máximo Cuadros Ortiz
65ae9c16f2
extendable auth methods
2014-11-27 00:26:13 +01:00
