Spencer
d07ae11da6
[es] disable wildcards in destructive actions ( #88986 )
...
Co-authored-by: spalger <spalger@users.noreply.github.com>
2021-02-03 09:29:37 -07:00
Aleh Zasypkin
951aa66fe4
Expose AnonymousAccess service through Security OSS plugin. ( #87091 )
2021-01-15 10:18:58 +01:00
Aleh Zasypkin
31e66979b9
Do not embedd credentials into ES URL and enable anonymous tests. ( #87987 )
2021-01-12 13:51:54 +01:00
Aleh Zasypkin
caa14d44ef
Increase waiting delay in session cleanup tests. ( #85127 )
2020-12-08 13:55:22 +01:00
Aleh Zasypkin
0a42b6534c
Migrate privilege/role/user-related operations to a new Elasticsearch client. ( #84641 )
2020-12-04 14:24:30 +01:00
Aleh Zasypkin
59a405dc80
Make all providers to preserve original URL when session expires. ( #84229 )
2020-12-02 11:32:22 +01:00
Aleh Zasypkin
8981d0e9e2
Make it possible to use Kibana anonymous authentication provider with ES anonymous access. ( #84074 )
2020-12-02 09:32:49 +01:00
Mikhail Shustov
5ec6fe315f
[DX] Bump TS version to v4.1 ( #83397 )
...
* bump version to 4.1.1-rc
* fix code to run kbn bootstrap
* fix errors
* DO NOT MERGE. mute errors and ping teams to fix them
* Address EuiSelectableProps configuration in discover sidebar
* use explicit type for EuiSelectable
* update to ts v4.1.2
* fix ts error in EuiSelectable
* update docs
* update prettier with ts version support
* Revert "update prettier with ts version support"
This reverts commit 3de48db3ec
2020-11-24 16:04:33 +01:00
Aleh Zasypkin
e3ca8a928d
Implement AnonymousAuthenticationProvider. ( #79985 )
2020-11-23 11:41:08 +01:00
Aleh Zasypkin
a63c390ae0
Remove redundant call to _authenticate API after access token is created. ( #82980 )
2020-11-10 18:12:47 +01:00
Aleh Zasypkin
45ddd69ca2
Prevent Kerberos and PKI providers from initiating a new session for unauthenticated XHR/API requests. ( #82817 )
...
* Prevent Kerberos and PKI providers from initiating a new session for unauthenticated XHR requests.
* Review#1: fix comment.
2020-11-09 17:34:20 +01:00
Aleh Zasypkin
7904ee0ceb
Add support for provider specific session timeout settings. ( #82583 )
2020-11-06 17:07:44 +01:00
Thom Heymann
bc8a1dac99
ECS audit logging ( #74640 )
...
* ECS audit logging
* Apply suggestions from code review
Co-authored-by: Larry Gregory <larry.gregory@elastic.co>
* Update x-pack/plugins/security/server/authentication/audit_events.ts
Co-authored-by: Larry Gregory <larry.gregory@elastic.co>
* Update docs/settings/security-settings.asciidoc
Co-authored-by: Larry Gregory <larry.gregory@elastic.co>
* remove audit trail service from core
* fix test
* Updated docs and added beta warning
* Added dev docs
* Tweaks
* Plugin list changes
* Apply suggestions from technical writers
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
* Added docs suggestion
* Added api integration tests
* Added suggestions from platform team
* Update x-pack/plugins/security/server/audit/audit_service.test.ts
Co-authored-by: Joe Portner <5295965+jportner@users.noreply.github.com>
* Update x-pack/plugins/security/server/audit/audit_service.test.ts
Co-authored-by: Joe Portner <5295965+jportner@users.noreply.github.com>
* Update x-pack/plugins/security/server/audit/audit_service.test.ts
Co-authored-by: Joe Portner <5295965+jportner@users.noreply.github.com>
* Update docs/user/security/audit-logging.asciidoc
Co-authored-by: Joe Portner <5295965+jportner@users.noreply.github.com>
* Update docs/settings/security-settings.asciidoc
Co-authored-by: Joe Portner <5295965+jportner@users.noreply.github.com>
* Update x-pack/plugins/security/server/config.ts
Co-authored-by: Joe Portner <5295965+jportner@users.noreply.github.com>
* Added suggestions from PR
* Grouped events table
* Update x-pack/plugins/security/server/audit/audit_events.ts
Co-authored-by: Larry Gregory <larry.gregory@elastic.co>
* Update x-pack/plugins/security/server/audit/audit_events.ts
Co-authored-by: Larry Gregory <larry.gregory@elastic.co>
* Fixed ECS version number in docs
Co-authored-by: Larry Gregory <larry.gregory@elastic.co>
* Added suggestions from code review
* Removed beta
* Added suggestions from code review
Co-authored-by: Larry Gregory <larry.gregory@elastic.co>
Co-authored-by: Kaarina Tungseth <kaarina.tungseth@elastic.co>
Co-authored-by: Joe Portner <5295965+jportner@users.noreply.github.com>
2020-10-16 20:40:38 +01:00
Aleh Zasypkin
dca9e70616
Ignore intermediate unauthenticated session during repeated authentication attempt. ( #79300 )
2020-10-05 20:07:23 +02:00
Aleh Zasypkin
9a0dfcff04
Re-enable session lifespan, idle timeout api integration tests and use unique names for the security test reports. ( #77746 )
2020-09-18 11:08:10 +02:00
spalger
6122610374
skip flaky suite ( #76239 )
2020-09-17 22:35:53 -07:00
spalger
f078672c54
skip flaky suite ( #76223 )
2020-08-27 23:01:53 -07:00
Aleh Zasypkin
e46e66210f
Implement Server-Side sessions ( #68117 )
2020-08-18 08:38:23 +02:00
