8ca42ec6f8
Revert "Update to rbac policy struct and end2end authz test. ( #27074 )" ( #28552 )
...
This reverts commit b64167a034
3 years ago
b64167a034
Update to rbac policy struct and end2end authz test. ( #27074 )
...
* Empty principals checks for authenticated connection
* fix sanity check
* clang-format
* principals:[] will result in ANY
* minor correction after merging
* clang-format
* formatting
* clang-format
* remove unnecessary header
* Remove unnecessary target from BUILD
3 years ago
d884a7a440
RBAC Authorization Engine updates based on A41 proposal ( #27754 )
...
* RBAC Authorization Engine updates based on A41 proposal
* Fix headermatcher
* Support for metadata
* Maps host to :authority, special-case te and :method
* removes method hardcoding
* add factory methods
* minor formatting
* fix test
* formatting
* remove constructors
* fix api usage
* ReqServerName test in xds_end2end_test
* Initialize bool
3 years ago
10b2b50569
Reland empty target introduction to ease the internal merge of #25586 ( #28408 )
...
* revert #28172
* fix missing arena dependency
* add missing dependency
* sync to upstream/master
3 years ago
4b881c5947
Remove grpc_mdelem ( #28267 )
...
* Automated change: Fix sanity tests
* content-type
* Automated change: Fix sanity tests
* clang-format
* fix
* Move colon prefixed metadata
* Automated change: Fix sanity tests
* Automated change: Fix sanity tests
* try to fix windows failure
* try and scale sizes better
* ambiguity fix?
* wip metadatavalueasslice
* Fix status code for resource exhaustion
* Revert "Revert "Move a bunch of slice typed metadata to new system (#28107 )" (#28208 )"
This reverts commit 7717587063
3 years ago
ecd968391a
Authorization Matchers: Fix header matcher to check for :method, :path and :authority ( #28371 )
...
* Authorization Matchers: Fix header matcher to check for :method, :path and :authority
* Reviewer comments
3 years ago
4fd524cd17
Fix presence match in authorization. ( #28269 )
...
* Fix presence match in authorization.
* Remove header
* Add test
* fix regex to include whitespace characters
3 years ago
1290364374
Plumb subject field and add to authz flow. ( #27615 )
...
* Plumb subject field and add to authz flow.
* formatting
* Test on empty principal
* resolving comments
* resolving comment
* update subject check in test
3 years ago
220cf641fa
Reland slice metadata conversion ( #28210 )
...
* Fix status code for resource exhaustion
* Revert "Revert "Move a bunch of slice typed metadata to new system (#28107 )" (#28208 )"
This reverts commit 7717587063
3 years ago
7717587063
Revert "Move a bunch of slice typed metadata to new system ( #28107 )" ( #28208 )
...
This reverts commit 4d432aefc1
3 years ago
4d432aefc1
Move a bunch of slice typed metadata to new system ( #28107 )
...
* Eliminate most of grpc_message metadata handling
* Eliminate most of host metadata handling
* Remove more callouts without fixing code
* fiiixes
* typo
* Automated change: Fix sanity tests
* try-shrink
* Automated change: Fix sanity tests
* size tweaks
* less tricks
* deunique
* commonize
* commonize
* Automated change: Fix sanity tests
* size tuning, fixes
* Automated change: Fix sanity tests
* fix
* size tuning, fixes
* remove constexpr
* fix
* reuse code
* fix
* tweak code
* more tweaks
* tell no lies
* fixes
* fixes
* Automated change: Fix sanity tests
* fix
* fix
* fix
* fix
* fix?
* fix binder
* fix
* fix
* fixes
* Automated change: Fix sanity tests
* fix
Co-authored-by: ctiller <ctiller@users.noreply.github.com>
3 years ago
e5d0b95870
Revert "Introduce empty targets to ease the internal merge of #25586 ( #28122 )" ( #28172 )
...
This reverts commit 171c64eee2
3 years ago
171c64eee2
Introduce empty targets to ease the internal merge of #25586 ( #28122 )
...
* add empty targets
* fix format error
* fix build format error
* address reviewer's comments
* fix test build rules
* remove server_auth_fiter from grpc_secure
3 years ago
6af45a35ba
Tooling to remove redundant grpc_core:: namespace references ( #28030 )
...
* Tooling to remove redundant grpc_core:: namespaces
These references tend to show up in our C++ code after C modules get
converted. Many get caught in review, many get missed.
* use it
* clang-format
3 years ago
a629c9a03e
Reland resource quota work ( #28017 )
...
* Check if memory owner available prior to polling it
The transport may drop the memory owner during its destruction sequence
* tcp_fix
* Revert "Revert "New resource quota integration (#27643 )" (#28014 )"
This reverts commit 0ea2c37263
3 years ago
0ea2c37263
Revert "New resource quota integration ( #27643 )" ( #28014 )
...
This reverts commit 39f0877d25
3 years ago
39f0877d25
New resource quota integration ( #27643 )
...
* new resource quota integration
* Automated change: Fix sanity tests
* fix
* fix
* fixes
* fixes
* fixes
* Automated change: Fix sanity tests
* fixes
* fixes
* Automated change: Fix sanity tests
* fixes
* fix
* fixes
* windows-fix
* fixes
* fixes
* fix
* fix-asan
* banned
* banned
* fixes
* clang-tidy-fix
* Automated change: Fix sanity tests
* fix-cronet
* review feedback
* review feedback
* Automated change: Fix sanity tests
* fixes
* bug fix
* fixes
* compile fix
* exclude megabyte size payloads from 1byte tests
* windows fix
* start moving ios
* keep moving windows
* Get windows compilation working.
* Automated change: Fix sanity tests
* better
* fixes
* remove slice buffer from memory_allocator.h
* Revert "remove slice buffer from memory_allocator.h"
This reverts commit 234a63b6e3
3 years ago
2e14f6fa70
Support Custom Post-handshake Verification in TlsCredentials ( #25631 )
...
* custom verification refactoring - post-handshake verification
3 years ago
468768865b
Make Buildifier Sanity Test Strict ( #27807 )
...
* Fix all lint errors in repo.
* Use strict buildifier by default
* Whoops. That file does not exist
* Attempt fix to buildifier invocation
* Add missing copyright
3 years ago
acb4686d92
Add Tests for the cmp() functions in Tls*SecurityConnector ( #27672 )
3 years ago
0b2598df07
Add support for Workforce pool credentials ( #27583 )
...
* first commit
* Update external_account_credentials.cc
* Fix CI issues
3 years ago
d1297bcc17
C++ struct-ify httpcli/internal_request and credential_test/request_metadata_state ( #27618 )
...
* httpcli.request
* credential tests request_metadata_state struct
* Update by review
* more c++ify
* fix asan error
* update by review
* Update by review 2
* Fix sanity test
3 years ago
a1db97be90
Revert "Revert "Revert "Revert "File watcher authorization policy provider implementation"" ( #27605 )" ( #27644 )" ( #27645 )
...
This reverts commit b8e01f73a0
3 years ago
b8e01f73a0
Revert "Revert "Revert "File watcher authorization policy provider implementation"" ( #27605 )" ( #27644 )
...
This reverts commit 5912aedb2b
3 years ago
5912aedb2b
Revert "Revert "File watcher authorization policy provider implementation"" ( #27605 )
...
* Revert "Revert "File watcher authorization policy provider implementation (#26779 )" (#27591 )"
This reverts commit a1ad74f7af
3 years ago
d1e01ac139
Add a test for a (now-illegal) build file construct ( #27602 )
...
* Add a test for a (now-illegal) build file construct
* add to test suite!
* fix
* fix
* fix syntax
3 years ago
a1ad74f7af
Revert "File watcher authorization policy provider implementation ( #26779 )" ( #27591 )
...
This reverts commit 310accd077
3 years ago
310accd077
File watcher authorization policy provider implementation ( #26779 )
...
* File watcher authorization policy provider implementation
3 years ago
1c6634ac44
Changed grpc_error_get|set_str to use std string instead of slice ( #27466 )
...
* Changed grpc_error_get|set_str to use std string
* Fix init order in tests with gtest
* Undo gtest-tify credentials_test
3 years ago
9b41852a5e
channel_init --> core configuration system ( #27347 )
...
* channel_init --> core configuration system
* Automated change: Fix sanity tests
* fixes
* Automated change: Fix sanity tests
* fixes
* fixes
* eliminate grpc_base_c
* fixes
* fix merge
* fix
* update visibility
* fixes
* feedback
* fix comment
Co-authored-by: ctiller <ctiller@users.noreply.github.com>
3 years ago
835eacc32d
Check for mtls authenticated ( #27360 )
...
* Check for mtls authenticated.
3 years ago
3763be8796
add APIs for creating errors from C++ strings ( #27310 )
...
* add API for creating errors from C++ strings
* add missing include
3 years ago
ea389c00c2
Adjust include order per style guide ( #27175 )
...
Introduce clang-format configuration to sort includes closer to our rules.
3 years ago
b062fcd5c6
Ensure consistency of include style for <grpc.* headers ( #27233 )
...
* Add a tool to ensure consistency in how grpc public headers are included
* Apply tool
* add to test suite
* isort
3 years ago
74d554a4f0
Check for unsupported connection headers. ( #27072 )
...
* Check for unsupported condition headers.
3 years ago
c66d2cc084
Allow access to Google API regional endpoints via Google Default Credentials ( #27155 )
...
* fix Google API regional endpoint access issues
* address 1st round of comments
* fix minor nits
3 years ago
1ff1f8fd83
SDK authorization filter. ( #26468 )
...
* SDK authorization filter.
3 years ago
e2ba0d9c0b
[3PI] Validate external account credentials token urls ( #26966 )
...
* Validate token urls
* Update external_account_credentials.cc
* Update external_account_credentials.cc
* Remove regex
* Validate implicit flow
* Update credentials_test.cc
* Update google_default_credentials.cc
* Revert "Update credentials_test.cc"
This reverts commit c43e00de2b
3 years ago
d10617edb5
Move resource_user ownership into chttp2 transport/server/connector v2 ( #27032 )
...
Reintroducing PR #26643 , which was reverted in #27029
Fixed a memory leak and added a test that would have caught it (ASAN build): ca0c8c4
3 years ago
f5d3ed2db1
Revert "Move resource_user ownership into chttp2 transport/server/connector ( #26643 )" ( #27029 )
...
This reverts commit d1935a65a1
3 years ago
d1935a65a1
Move resource_user ownership into chttp2 transport/server/connector ( #26643 )
3 years ago
994ee5da0c
Key-Cert Pair Validation ( #26471 )
...
* Functions for checking if a private key and a certificate chain match
3 years ago
b9a69481c2
Revert "Support user provided "scope" in JWT and GDC ( #26577 )" ( #26645 )
...
This reverts commit 6df967966b
3 years ago
6df967966b
Support user provided "scope" in JWT and GDC ( #26577 )
...
* support scope overriding in jwt and gdc
* fix formatting
* fix bazel build issue
* fix clang tidy
3 years ago
34bf26357b
Change StringMatcher to not support case-insensitive regex matching. ( #26567 )
...
* Change StringMatcher to not support case-insensitive regex matching.
* clang-format
* clang-tidy
3 years ago
932dbed49d
Revert "Allow to specify user provided audience in google default credentials and JWT credentials ( #26456 )" ( #26531 )
...
This reverts commit 5a91a513fd
3 years ago
5a91a513fd
Allow to specify user provided audience in google default credentials and JWT credentials ( #26456 )
...
* support user provided audience in gdc and jwt
4 years ago
a3ae8e00a2
Revert "Allow to specify user provided audience in google default credentials and JWT credentials ( #26392 )" ( #26440 )
...
This reverts commit 304262e135
4 years ago
b9a643a817
Static policy provider implementation. ( #26134 )
4 years ago
304262e135
Allow to specify user provided audience in google default credentials and JWT credentials ( #26392 )
...
* support user provided audience in gdc and jwt
* fix 1st round of comments
* fix ruby and php to use new GDC API
* fix python clang issue
* address 2nd round of comments
* fix string_view issue
* remove length param in string_view constructor
4 years ago
Jan Tattermusch
Ashitha Santhosh
yihuaz
Craig Tiller
Yash Tibrewal
ZhenLian
Richard Belleville
Chuan Ren
Esun Kim
AJ Heller
Mark D. Roth
itsemmanuelfrancis
Lidi Zheng