Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Update copyright | Jon Bratseth | 2023-10-09 | 28 | -33/+33 |
| | |||||
* | Group fingerprints by token id | jonmv | 2023-09-28 | 1 | -6/+26 |
| | |||||
* | Use switch expressions | jonmv | 2023-09-28 | 1 | -0/+3 |
| | |||||
* | Address review | jonmv | 2023-09-28 | 1 | -1/+2 |
| | |||||
* | Set up token-tell-handler with data-plane token filter | jonmv | 2023-09-28 | 1 | -0/+31 |
| | |||||
* | Allow empty clients | Morten Tokle | 2023-09-21 | 1 | -1/+0 |
| | |||||
* | Misc improvements to `CloudDataPlaneFilter(Test)` | Bjørn Christian Seime | 2023-07-19 | 3 | -12/+9 |
| | |||||
* | Split token authz into dedicated filter `CloudTokenDataPlaneFilter` | Bjørn Christian Seime | 2023-07-19 | 4 | -163/+266 |
| | |||||
* | Don't ignore expired tokens while processing config | Bjørn Christian Seime | 2023-07-17 | 1 | -6/+1 |
| | |||||
* | Add expiration concept to data plane tokens | Bjørn Christian Seime | 2023-07-12 | 1 | -9/+25 |
| | |||||
* | Fail if PEM does not contain any certificate entries | Bjørn Christian Seime | 2023-06-19 | 1 | -0/+2 |
| | |||||
* | Split each certificate into separate config entries | Bjørn Christian Seime | 2023-06-19 | 1 | -2/+2 |
| | |||||
* | Simplify token API by using fixed context for fingerprints | Tor Brede Vekterli | 2023-06-15 | 1 | -1/+1 |
| | | | | | | | | | | Fingerprints are now always derived using the a fixed context of `Vespa token fingerprint`. Enforcement has been added that a `TokenDomain` cannot be initialized with a context equal to the fingerprint context. This changes the fingerprint outputs from their previous values, but that's fine since they are not yet in use anywhere. | ||||
* | Misc improvements | Bjørn Christian Seime | 2023-06-15 | 1 | -11/+18 |
| | | | | | | | Remove duplicate unit tests. Improve symbol names. Use `Map` to simplify code and reduce cost. Introduce constant for the number of bytes in token check hash. Improve code comments. | ||||
* | Improve validation of config | Bjørn Christian Seime | 2023-06-15 | 1 | -1/+13 |
| | | | | Verify that at least one client definition requires certificate. Add note on legacy mode. | ||||
* | Support tokens in Cloud data plane filter | Bjørn Christian Seime | 2023-06-14 | 1 | -16/+89 |
| | |||||
* | Allow subdomains in CORS filters | Valerij Fredriksen | 2023-06-06 | 3 | -21/+45 |
| | |||||
* | Move metrics definitions to metrics:ai.vespa.metrics | gjoranv | 2023-05-08 | 2 | -3/+3 |
| | |||||
* | Use enums for remaining container metrics. | yngveaasheim | 2023-03-15 | 1 | -2/+3 |
| | |||||
* | Use ContainerMetrics enum more places | Yngve Aasheim | 2023-01-20 | 1 | -2/+3 |
| | |||||
* | Revert "Revert collect(Collectors.toList())" | Henning Baldersheim | 2022-12-04 | 2 | -2/+2 |
| | |||||
* | Revert collect(Collectors.toList()) | Henning Baldersheim | 2022-12-04 | 2 | -2/+2 |
| | |||||
* | collect(Collectors.toList()) -> toList() | Henning Baldersheim | 2022-12-02 | 2 | -2/+2 |
| | |||||
* | Move config to configdefinitions | Morten Tokle | 2022-11-22 | 1 | -0/+1 |
| | |||||
* | Introduce Cloud data plane security filter | Bjørn Christian Seime | 2022-11-22 | 2 | -0/+153 |
| | |||||
* | Cleanup RequestResourceMapper API | Bjørn Christian Seime | 2022-11-15 | 2 | -9/+3 |
| | |||||
* | remove obsolete code | Morten Tokle | 2022-11-11 | 2 | -25/+6 |
| | |||||
* | Revert "remove obsolete code" | Henning Baldersheim | 2022-11-10 | 2 | -6/+25 |
| | |||||
* | remove obsolete code | Morten Tokle | 2022-11-10 | 2 | -25/+6 |
| | |||||
* | Prevent browser API caching | Morten Tokle | 2022-10-25 | 2 | -2/+1 |
| | |||||
* | Prevent browsers caching api responses | Morten Tokle | 2022-10-24 | 1 | -0/+1 |
| | |||||
* | Allow 'Vespa-Csrf-Token' header | Bjørn Christian Seime | 2022-09-26 | 1 | -1/+2 |
| | |||||
* | compare oranges with oranges | Andreas Eriksen | 2022-08-17 | 1 | -1/+1 |
| | |||||
* | Add Referrer-Policy header | Morten Tokle | 2022-08-01 | 1 | -0/+1 |
| | |||||
* | Move rule-based-filter config to configdefinitions module/bundle | gjoranv | 2022-07-27 | 2 | -9/+2 |
| | | | | | | | .. to remove import-package from config-model to jdisc-security-filters. - Keep the old config def for a while in case it's needed by hosted Vespa config models. | ||||
* | Add x-frame-options | Morten Tokle | 2022-06-28 | 1 | -0/+1 |
| | |||||
* | Fix javadoc | Valerij Fredriksen | 2022-06-27 | 1 | -2/+2 |
| | |||||
* | Create CSP response filter | Valerij Fredriksen | 2022-06-27 | 2 | -0/+37 |
| | |||||
* | Use '@Inject' from 'annotations' in multiple bundles | Bjørn Christian Seime | 2022-05-06 | 6 | -6/+6 |
| | |||||
* | Move User from controller-api to jdisc-security-filters | Bjørn Christian Seime | 2022-04-27 | 2 | -0/+103 |
| | |||||
* | Add comment about why there is no path segment validation in rule filter | jonmv | 2022-04-11 | 1 | -0/+2 |
| | |||||
* | Only create Path if there are any patterns to match against | jonmv | 2022-04-11 | 1 | -2/+1 |
| | |||||
* | Avoid segment validation in rule based filter | jonmv | 2022-04-11 | 1 | -1/+1 |
| | |||||
* | Support custom JSON + error code as string | Bjørn Christian Seime | 2021-11-16 | 1 | -18/+41 |
| | |||||
* | Update 2020 Oath copyrights. | gjoranv | 2021-10-27 | 1 | -1/+1 |
| | |||||
* | Update 2019 Oath copyrights. | gjoranv | 2021-10-27 | 1 | -1/+1 |
| | |||||
* | Update Verizon Media copyright notices. | gjoranv | 2021-10-07 | 2 | -2/+2 |
| | |||||
* | Update 2018 copyright notices. | gjoranv | 2021-10-07 | 15 | -15/+15 |
| | |||||
* | Remove null dimension values | Morten Tokle | 2021-06-11 | 1 | -0/+2 |
| | |||||
* | Add request and acl mapping values as metric dimensions | Morten Tokle | 2021-06-11 | 2 | -17/+73 |
| |