natas_hw
/
grpc
0
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
49,486 Commits 242 Branches 349 Tags 892 MiB
Commit Graph

581 Commits

Author SHA1 Message Date
Ashitha Santhosh 74d554a4f0
Check for unsupported connection headers. (#27072) 
* Check for unsupported condition headers.
 2021-08-30 22:34:45 -07:00
yihuaz c66d2cc084
Allow access to Google API regional endpoints via Google Default Credentials (#27155) 
* fix Google API regional endpoint access issues

* address 1st round of comments

* fix minor nits
 2021-08-30 10:57:48 -07:00
Ashitha Santhosh 1ff1f8fd83
SDK authorization filter. (#26468) 
* SDK authorization filter.
 2021-08-25 21:00:35 -07:00
Chuan Ren e2ba0d9c0b
[3PI] Validate external account credentials token urls (#26966) 
* Validate token urls

* Update external_account_credentials.cc

* Update external_account_credentials.cc

* Remove regex

* Validate implicit flow

* Update credentials_test.cc

* Update google_default_credentials.cc

* Revert "Update credentials_test.cc"

This reverts commit c43e00de2b.

* Revert "Validate token urls"

* Add tests for grpc_google_default_credentials_create

* Update google_default_credentials.cc
 2021-08-24 14:37:03 -07:00
AJ Heller d10617edb5
Move resource_user ownership into chttp2 transport/server/connector v2 (#27032) 
Reintroducing PR #26643, which was reverted in #27029

Fixed a memory leak and added a test that would have caught it (ASAN build): ca0c8c4
 2021-08-18 17:04:00 -07:00
Craig Tiller f5d3ed2db1
Revert "Move resource_user ownership into chttp2 transport/server/connector (#26643)" (#27029) 
This reverts commit d1935a65a1. Will be rolled forward with a fix.
 2021-08-16 19:07:39 -07:00
AJ Heller d1935a65a1
Move resource_user ownership into chttp2 transport/server/connector (#26643) 2021-08-16 13:50:56 -07:00
itsemmanuelfrancis 994ee5da0c
Key-Cert Pair Validation (#26471) 
* Functions for checking if a private key and a certificate chain match
 2021-07-09 16:08:17 -07:00
yihuaz b9a69481c2
Revert "Support user provided "scope" in JWT and GDC (#26577)" (#26645) 
This reverts commit 6df967966b.
 2021-07-09 15:05:34 -07:00
yihuaz 6df967966b
Support user provided "scope" in JWT and GDC (#26577) 
* support scope overriding in jwt and gdc

* fix formatting

* fix bazel build issue

* fix clang tidy
 2021-07-01 10:26:33 -07:00
Mark D. Roth 34bf26357b
Change StringMatcher to not support case-insensitive regex matching. (#26567) 
* Change StringMatcher to not support case-insensitive regex matching.

* clang-format

* clang-tidy
 2021-06-29 09:25:33 -07:00
yihuaz 932dbed49d
Revert "Allow to specify user provided audience in google default credentials and JWT credentials (#26456)" (#26531) 
This reverts commit 5a91a513fd.
 2021-06-22 16:30:30 -07:00
ZhenLian 5a91a513fd
Allow to specify user provided audience in google default credentials and JWT credentials (#26456) 
* support user provided audience in gdc and jwt
 2021-06-11 09:44:46 -07:00
Lidi Zheng a3ae8e00a2
Revert "Allow to specify user provided audience in google default credentials and JWT credentials (#26392)" (#26440) 
This reverts commit 304262e135.
 2021-06-07 15:24:54 -07:00
Ashitha Santhosh b9a643a817
Static policy provider implementation. (#26134) 2021-06-03 23:18:08 -07:00
yihuaz 304262e135
Allow to specify user provided audience in google default credentials and JWT credentials (#26392) 
* support user provided audience in gdc and jwt

* fix 1st round of comments

* fix ruby and php to use new GDC API

* fix python clang issue

* address 2nd round of comments

* fix string_view issue

* remove length param in string_view constructor
 2021-06-03 16:02:19 -07:00
Ashitha Santhosh 9bbdb70cdc
Add uri sans (#26362) 
* Add uri sans
 2021-06-01 16:43:27 -07:00
Ashitha Santhosh c20356c1ba
Update conditional matcher ctors and include NotMatcher. (#26256) 2021-05-17 17:31:05 -07:00
Ashitha Santhosh c90fae35cb
IPMatcher implementation. (#26132) 2021-05-11 09:56:36 -07:00
Ashitha Santhosh 457fd3d41c
RBAC Engine implementation. (#25948) 2021-04-28 10:10:22 -07:00
Esun Kim 460898f11c
Migrated from grpc_error_string to grpc_error_std_string (#26068) 
* Added grpc_error_std_string
* Migrated to grpc_error_std_string
 2021-04-23 16:31:54 -07:00
Esun Kim ca945a58e9
Introduced grpc_error_handle (#25902) 
- Define grpc_error_handle
- Replace grpc_error* with grpc_error_handle
 2021-04-22 12:00:28 -07:00
Ashitha Santhosh 16684bf11b
Correct enum naming style. (#26012) 2021-04-21 10:08:46 -07:00
Ashitha Santhosh 628bf7fe08
RBAC engine matchers implementation. (#25997) 2021-04-19 13:05:27 -07:00
Ashitha Santhosh e438fa609b
Separate connection specific args in EvaluaetArgs. (#25969) 2021-04-16 16:57:48 -07:00
Ashitha Santhosh 0570bd9205
Plumbs SAN fields to tsi_peer. (#25874) 2021-04-16 09:12:38 -07:00
Ashitha Santhosh 8489a6050b
Revert "Rbac Matcher implementation. (#25653)" (#25957) 
This reverts commit 1fb4f715db.
 2021-04-12 17:22:44 -07:00
Ashitha Santhosh 1fb4f715db
Rbac Matcher implementation. (#25653) 2021-04-08 22:33:06 -07:00
Ryan Kohler c1e417a526
Allow the AWS_DEFAULT_REGION environment variable (#25760) 
* allow the AWS_DEFAULT_REGION environment variable

* changes requested by roth@

* linting
 2021-03-31 07:15:11 -07:00
Ashitha Santhosh bd86187f19
SDK authorization policy translator. (#25361) 
* SDK authorization policy translator.
 2021-03-05 09:05:11 -08:00
Ashitha Santhosh dbe50923b4
Add getter to grpc_metadata_batch. (#25395) 2021-03-03 13:02:22 -08:00
AJ Heller 0e3a02e903
Revert "Remove the `urgent` argument from iomgr tcp read API (#25494)" (#25592) 
This reverts commit a3398f9. Justification: see b/181367644. tl;dr: assuming urgent==false does not hold in all situations.
 2021-03-01 22:04:22 -08:00
AJ Heller a3398f924c
Remove the `urgent` argument from iomgr tcp read API (#25494) 
The urgent argument is a platform-specific flag that leaked into the (ideally) platform-independent HTTP/2 transport layer. In an effort to clean up the cross-platform API surface, it would be helpful if we can remove this argument from the TCP Read api without losing the performance optimization that was introduced along with it (see #18240).
 2021-02-24 12:30:14 -08:00
Yash Tibrewal f4e55b85bc Replace disrespectful term 2021-02-08 15:29:53 -08:00
Esun Kim 9bd7c4917a Fix unused-parameter warning 2021-01-19 18:18:09 -08:00
Ashitha Santhosh 4ca878799b Refactor [String/Header/Path]matchers in xds_api. 2021-01-15 12:32:54 -08:00
Yash Tibrewal ac4f4de196 xDS server config fetcher 2021-01-14 14:27:51 -08:00
ZhenLian e745f8cb55
Merge pull request #25018 from ZhenLian/zhen_dynamic_file_reloading_9 
Support Default Root Certs in Tls Credentials
 2021-01-07 09:40:31 -08:00
ZhenLian c48e39d5c2 Support Default Root Certs in Tls Credentials 2021-01-06 23:02:52 -08:00
Chuan Ren 06cc42eb85 Add support of implicit and explicit flows for external account creds 2021-01-05 13:20:42 -08:00
Mark D. Roth 393687c3b7
Merge pull request #24989 from renkelvin/base-fix 
Url encode the request before calling STS backend
 2021-01-05 12:51:34 -08:00
Chuan Ren 18ffe21abd Add support of url with query params to url creds 2020-12-21 16:43:34 -08:00
Chuan Ren 7cf95b881f Update external_account_credentials.cc 2020-12-21 10:45:44 -08:00
Chuan Ren d2aef5c27e Fix and improvements to aws creds 2020-12-14 15:09:59 -08:00
Yash Tibrewal c9e99945ec Add SANs matching for xDS credentials 2020-12-08 15:15:39 -08:00
ZhenLian 551009be68
Merge pull request #24805 from ZhenLian/zhen_dynamic_file_reloading_7 
refactor PemKeyCertPair to take absl::string_view
 2020-12-08 10:27:58 -08:00
AJ Heller 880a854f0e Convert URI parser to C++ #24701 2020-12-07 12:13:22 -08:00
ZhenLian de4e8a4680 refactor PemKeyCertPair 2020-12-07 12:10:45 -08:00
Esun Kim 6c440e820b
Merge pull request #24841 from veblush/tidy-google-readability-casting 
[Clang-Tidy] google-readability-casting
 2020-12-03 14:49:45 -08:00
Yash Tibrewal 096b2324e1 Experimental API for XdsServerCredentials 2020-12-01 12:47:52 -08:00