aboutsummaryrefslogtreecommitdiffhomepage
path: root/src/core/security
Commit message (Collapse)AuthorAge
* Change the ownership model of the auth processor.Gravatar Julien Boeuf2015-08-30
| | | | | | | | | - The processor now belongs to the server credentials in core. - The server credentials now needs to be refcounted. - Changed slighly the vtable of credentials to make it easier to avoid memory leaks (free'ing the pointer is now done at the common layer, the implementations of the creds are now only reponsible for destructing the implementations' specific members.
* Merge branch 'master' of github.com:grpc/grpc into cpp_auth_md_processorGravatar Julien Boeuf2015-08-28
|\
* | Adding C++ metadata processor.Gravatar Julien Boeuf2015-08-28
| | | | | | | | | | | | | | | | - Had to chnage the core API to add a destroy function pointer in grpc_auth_metadata_processor. - Tested end to end. - Fixed some issues in the server_auth_filter (we were not checking the length which put us at risk of an overflow).
* | Merge branch 'master' of github.com:grpc/grpc into cpp_auth_md_processorGravatar Julien Boeuf2015-08-27
|\ \
* \ \ Merge branch 'master' of github.com:grpc/grpc into cpp_auth_md_processorGravatar Julien Boeuf2015-08-26
|\ \ \
| | | * Credentials cleanup:Gravatar Julien Boeuf2015-08-25
| | |/ | | | | | | | | | | | | | | | | | | | | | - Removing service_accounts credentials. These credentials just have drawbacks compared to service_account_jwt_access credentials, notably in terms for security. - Renaming Google specific credentials with a Google prefix for C and C++. This should be done as well for wrapped languages.
| | * Adding void* at then end of security related method in order to have a ↵Gravatar Julien Boeuf2015-08-25
| |/ | | | | | | stable ABI.
| * Merge pull request #3034 from yang-g/sec_conn_leakGravatar jboeuf2015-08-24
| |\ | | | | | | Move the default roots check before allocation
| * \ Merge pull request #2818 from ctiller/y12kdm3Gravatar Vijay Pai2015-08-24
| |\ \ | | | | | | | | Add a test of non-blocking API behavior
| | | * Move the default roots check before allocationGravatar yang-g2015-08-24
| | | |
| * | | Have a richer interface for auth metadata processors.Gravatar Julien Boeuf2015-08-19
| | |/ | |/|
| | * Merge github.com:grpc/grpc into y12kdm3Gravatar Craig Tiller2015-08-18
| | |\ | | |/ | |/|
| * | clang-format all sourceGravatar Craig Tiller2015-08-18
| | |
| | * Merge github.com:grpc/grpc into y12kdm3Gravatar Craig Tiller2015-08-17
| | |\ | | |/ | |/|
* / | Few improvements:Gravatar Julien Boeuf2015-08-14
|/ / | | | | | | | | | | - Guarantee the lifetime of objects passed to the processor. - Add an option for implementers of the processor to make it non-blocking.
* | Merge pull request #2847 from jboeuf/client_auth_filter_error_handlingGravatar Jorge Canizales2015-08-12
|\ \ | | | | | | C client library auth: produce adequate error codes and messages.
| | * Merge github.com:grpc/grpc into y12kdm3Gravatar Craig Tiller2015-08-12
| | |\ | |_|/ |/| | | | | | | | | | | Conflicts: src/core/security/google_default_credentials.c test/core/security/verify_jwt.c
| * | Fixing error code as discussed during the review.Gravatar Julien Boeuf2015-08-11
| | |
* | | :(Gravatar yang-g2015-08-07
| | |
* | | Fix gce detectionGravatar yang-g2015-08-07
| | |
| * | Better error codes for client_auth_filter. Fixes #2484.Gravatar Julien Boeuf2015-08-07
|/ /
* | Merge pull request #2829 from ctiller/tell-the-world-about-ALL-the-thingsGravatar Yang Gao2015-08-07
|\ \ | | | | | | Provide marginally better debug information for client side auth problems
* \ \ Merge pull request #2788 from ctiller/kinetic-lopsided-poetryGravatar Nicolas Noble2015-08-07
|\ \ \ | | | | | | | | Testing port server
| | * | Print error message on client auth errorGravatar Craig Tiller2015-08-06
| |/ / |/| |
| | * Add a test of non-blocking API behaviorGravatar Craig Tiller2015-08-06
| | | | | | | | | | | | ... also fix things that were broken :)
* | | Merge branch 'master' of github.com:grpc/grpc into ↵Gravatar Julien Boeuf2015-08-05
|\ \ \ | | |/ | |/| | | | server_creds_auth_md_processor
* | | Cleanup.Gravatar Julien Boeuf2015-08-05
| | |
* | | Fixing API (thanks Craig for the comments) and associated tests.Gravatar Julien Boeuf2015-08-05
| | |
| | * Merge github.com:grpc/grpc into kinetic-lopsided-poetryGravatar Craig Tiller2015-08-05
| | |\ | | |/ | |/|
| | * Testing port serverGravatar Craig Tiller2015-08-04
| | | | | | | | | | | | | | | | | | | | | | | | run_tests.py will start a server (if it's not running, or if the running port server mismatches the 'current' one) that serves ports to use for tests. The server is left running after run_tests.py finishes, so that in environments such as Mac and Windows where tests run unshielded from each other, we don't start jumping on already used ports.
* | | Merge branch 'auth_md_processor' into server_creds_auth_md_processorGravatar Julien Boeuf2015-08-03
|\ \ \
| * | | Properly send GRPC_STATUS_UNAUTHENTICATED from server auth failuresGravatar Craig Tiller2015-07-31
| | | |
| * | | Merge branch 'auth_md_processor' of github.com:jboeuf/grpc into ↵Gravatar Craig Tiller2015-07-31
| |\ \ \ | | |_|/ | |/| | | | | | complain-with-both-passion-and-meaning
| | | * Allow specific pollers to be wokenGravatar Craig Tiller2015-07-29
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, if two threads call grpc_completion_queue_pluck on the same completion queue for different tags, there is a 50% chance that we deliver the completion wakeup to the wrong poller - forcing the correct poller to wait until its polling times out before it can return an event up to the application. This change tweaks our polling interfaces so that we can indeed wake a specific poller. Nothing has been performance tuned yet. It's definitely sub-optimal in a number of places. Wakeup file-descriptors should be recycled. We should have a path that avoids calling poll() followed by epoll(). We can probably live without it right at the second though. This code will fail on Windows at least (I'll do that port when I'm in the office and have a Windows machine).
| * | Merge github.com:grpc/grpc into ↵Gravatar Craig Tiller2015-07-28
| |\ \ | | | | | | | | | | | | sometimes-its-good-just-to-check-in-with-each-other
| | * \ Merge branch 'master' of github.com:grpc/grpc into ssl_force_client_authGravatar Julien Boeuf2015-07-27
| | |\ \
| | | * \ Merge github.com:grpc/grpc into warbling-wombatGravatar Craig Tiller2015-07-26
| | | |\ \
| * | | \ \ Merge github.com:grpc/grpc into ↵Gravatar Craig Tiller2015-07-26
| |\ \ \ \ \ | | | |_|/ / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | sometimes-its-good-just-to-check-in-with-each-other Conflicts: src/core/iomgr/tcp_server_windows.c
| | * | | | Merge pull request #2605 from yang-g/fake_transport_security_to_privateGravatar jboeuf2015-07-24
| | |\ \ \ \ | | | | | | | | | | | | | | Fake transport security to private
| | * \ \ \ \ Merge pull request #2617 from jboeuf/jwt_creds_renamingGravatar Yang Gao2015-07-23
| | |\ \ \ \ \ | | | | | | | | | | | | | | | | Renaming jwt_credentials to service_account_jwt_access_credentials.
| * | | | | | | Merge github.com:grpc/grpc into ↵Gravatar Craig Tiller2015-07-23
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | sometimes-its-good-just-to-check-in-with-each-other
| | | | | | * | Merge github.com:grpc/grpc into warbling-wombatGravatar Craig Tiller2015-07-23
| | | | | | |\ \ | | | |_|_|_|/ / | | |/| | | | |
| | | * | | | | Renaming jwt_credentials to service_account_jwt_access_credentials.Gravatar Julien Boeuf2015-07-22
| | | | | | | |
| | | | | | * | Canonicalize metadata keys in coreGravatar Craig Tiller2015-07-22
| | | | |_|/ / | | | |/| | |
| | | | * | | move fake_transport_security_credentials to private APIGravatar yang-g2015-07-21
| | | |/ / /
| | | | * / Adding option to force client auth on the server SSL creds.Gravatar Julien Boeuf2015-07-21
| | | |/ /
* | | | | Putting the auth metadata processor on the server creds.Gravatar Julien Boeuf2015-07-21
| | | | |
| | * | | Add grpc_call_get_peerGravatar Craig Tiller2015-07-20
| | |/ /
* | | / Getting started on metadata processor set on server creds.Gravatar Julien Boeuf2015-07-19
| |_|/ |/| |
| * | Merge github.com:grpc/grpc into ↵Gravatar Craig Tiller2015-07-17
| |\| | | | | | | | | | sometimes-its-good-just-to-check-in-with-each-other