wbtiger
/
foundationdb
mirror of https://github.com/apple/foundationdb.git
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
26,043 Commits 36 Branches 335 Tags 299 MiB
Commit Graph

23 Commits

Author SHA1 Message Date
Jingyu Zhou 0d60cabb30 Fix workload failure due to unhandled error 2023-04-19 14:38:25 -07:00
Jingyu Zhou a350a929b9
Merge pull request #9494 from sfc-gh-jslocum/bg_cp_improvements 
addressing review comments and fixmes in bg commit proxy code
 2023-02-28 12:30:58 -08:00
Josh Slocum 716a9c3817 addressing review comments and fixmes in bg commit proxy code 2023-02-27 10:51:47 -06:00
Josh Slocum 1e7368aa21 removing double counted counter 2023-02-27 10:18:50 -06:00
Josh Slocum faf8ec6281 adding authz blob management tests to ensure tenant-scoped clients cannot do blob management 2023-02-27 08:06:36 -06:00
Josh Slocum 6187811f71
Reworking getBlobGranuleRanges to also use commit proxy rpc for authz, and adding test (#9470) 2023-02-24 17:15:32 -06:00
Josh Slocum 910965a5a6
Adding additional blob granule authz tests (#9443) 
* added granule location authz tests

* added authz test for blob worker endpoint

* addressing comments

* fixing ide build
 2023-02-24 09:32:05 -06:00
Josh Slocum 354bfef099
Added blob granules authz test, and fixed a bug it found (#9433) 
* Adding blob granules authz test

* Fixing tenant race found by authz test
 2023-02-22 10:53:45 -06:00
Junhyun Shim 2497aa5701
Clamp GetKeyServerLocations result to tenant prefix (#9424) 2023-02-21 18:55:24 +01:00
Junhyun Shim d9c126a2d9
Introduce WipedString for Arena block holding AuthZ tokens (#9381) 
* Enable secure allocation mode in Arena

This mode allows zeroing out blocks holding sensitive data after use

* Introduce WipedString to all token-holding memory

Also introduce a option flag "sensitive"

* Make pointer equivalency a hard requirement for non-ASAN builds

So that we can detect when Arena/malloc/memory-wipe behavior changes
 2023-02-16 10:44:32 +01:00
Junhyun Shim ea0083cda2 Remove redundant calls to setAuthToken 2023-02-08 18:56:10 +01:00
Junhyun Shim d32d3dd085 Make token option NOT survive transaction hard resets 2023-02-08 18:12:22 +01:00
Junhyun Shim ce652fa284 Replace AuthZ's use of tenant names in token with tenant ID 
Also, to minimize audit log loss, handle token usage audit logging at each usage.
This has a side-effect of making the token use log less bursty.
This also subtly changes the dedup cache policy.
Dedup time window used to be 5 seconds (default) since the start of batch-logging.
Now it's 5 seconds from the first usage since the closing of the previous dedup window
 2023-02-03 21:46:31 +01:00
A.J. Beamon b10d1f227b Remove tenant name from the TenantInfo object 2023-01-20 14:04:43 -08:00
A.J. Beamon e1d48d28bf Remove tenant name from the TenantInfo object 2023-01-13 08:58:15 -08:00
A.J. Beamon f999623bb1 Add a tenant lookup interface and use it when starting transactions 2023-01-06 15:51:12 -08:00
Junhyun Shim 2374dd01f6 Apply review suggestions 2022-11-08 00:37:12 +01:00
Junhyun Shim 7f47dfeab1 Harden TLog-read testcase against transient errors 2022-11-07 19:44:00 +01:00
Junhyun Shim bbba45d3ab Fix clang format 2022-11-07 12:11:17 +01:00
Junhyun Shim b6e5372a68 Keep up with test framework changes for AuthzSecurity workload 2022-11-07 12:07:25 +01:00
Junhyun Shim 085e38cdfd Merge remote-tracking branch 'origin/main' into authz-security-tests 2022-10-26 15:09:02 +02:00
Junhyun Shim 8e752309c0 Add cross-tenant commit/get + TLog peek security tests 2022-10-26 12:51:59 +02:00
Junhyun Shim 25c22a3add Add cross-tenant-get negative security test 2022-10-12 16:21:12 +02:00