Commit Graph

483 Commits

Author SHA1 Message Date
Max Lambrecht 30c0ddb5e2 Minor fix in method signature
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-05-01 06:52:42 -03:00
Max Lambrecht 0c4801cf49 Remove double synchronization that is no longer recommended, add synchronized to method instead
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-05-01 05:32:04 -03:00
Max Lambrecht c7212b9c76 Make constructor private in X509SourceManager
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-30 13:17:34 -03:00
Max 7d12743fb5 Adding backoff retry to watchX509Context.
Changing X509ContextException and X509ContextException to make them checked.
Address multiple PR comments.
Adding tests to Address and TrustDomain.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-30 09:33:46 -03:00
Max 8e64bb63a0 Improve methods to avoid unnecessary extra get operation
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-28 12:26:08 -03:00
Max Lambrecht 96b27c8277 Amending names and comments
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-27 06:47:28 -03:00
Max Lambrecht 571dd3c5d4 Minor change in logging
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-27 06:32:33 -03:00
Max Lambrecht c26f0339a6 Delete unused classes
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-27 06:18:03 -03:00
Max Lambrecht bf6053c18c Process federated bundles from X509Context update
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-26 16:31:04 -03:00
Max Lambrecht ecabc0f288 Minor fixes
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-26 15:16:11 -03:00
Max Lambrecht 44cda6e809 Refactor error handling: use Exceptions instead of Result wrapper type
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-26 13:58:21 -03:00
Max Lambrecht 8e06cb12d7 Refactor: changing name jwtKeys and x509Roots by jwtAuthorities and x509Authorities
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-23 11:42:18 -03:00
Max Lambrecht 928b075661 Moving and cleaning dependencies
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-23 07:39:55 -03:00
Max Lambrecht 91f06d83bc Adding more info in readme and completing an example
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-22 11:54:14 -03:00
Max Lambrecht 219a2e2e71 Refactoring SSL Context factory. Refactoring WorkloadAPIClient and X509Source
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-22 10:01:55 -03:00
Max Lambrecht 2cccc1c988 Refactoring Results in multiple methods. Refactoring the X509Source config.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-21 13:01:26 -03:00
Max Lambrecht 15978d8313 Add comments to provide more details about the X509Source
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-20 12:14:35 -03:00
Max Lambrecht 07169bf411 Add Exception to error result
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-20 11:49:45 -03:00
Max Lambrecht 5eb49938ba Make FetchJwtSvid return a Result
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-20 11:26:50 -03:00
Max Lambrecht 3e05e37b10 Changing return value from Optional to Result. Other refactors. Improving comments.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-20 10:56:36 -03:00
Max Lambrecht 43f9d79e8c [WIP]-Define v2 interface, refactor in modules
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-04-10 14:21:27 -03:00
Max 8c3866ee85
Merge pull request #21 from transferwise/log-throwable-listener-on-error
Log throwable when StreamObserver#onError is triggered
2019-11-26 13:20:59 -05:00
Levani Kokhreidze 29445c1c71 Log throwable when StreamObserver#onError is triggered
Signed-off-by: Levani Kokhreidze <levani.codes@gmail.com>
2019-11-02 19:21:19 +02:00
Max fbae0043de
Merge pull request #19 from maxlambrecht/master
Bump version to 0.5.0
2019-08-06 18:49:04 -03:00
Max Lambrecht 8f21a508b3 Bump version to 0.5.0
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2019-08-06 18:36:54 -03:00
Max fa4b3da370
Merge pull request #18 from transferwise/send-chain
Use the certificate chain as provided by the workload api
2019-08-06 18:29:15 -03:00
Jonathan Oddy 89d2b5edeb Use the certificate chain as provided by the workload api
Signed-off-by: Jonathan Oddy <jonathan.oddy@transferwise.com>
2019-08-02 19:09:31 +01:00
Max 2edd5a7c35
Merge pull request #17 from rturner3/macos-netty-fix
Fix Netty ManagedChannel init for macOS
2019-07-31 14:56:37 -03:00
Ryan Turner ca65e6148e Fix Netty ManagedChannel init for macOS
Signed-off-by: rturner3 <turner@uber.com>
2019-07-30 14:52:31 -07:00
Max 9652e72c9b
Merge pull request #15 from transferwise/bump-protobuf-versions
Bump grpc versions to current
2019-07-16 13:10:18 -03:00
Jonathan Oddy 3be54af836 Bump protobuf versions to current stable
Signed-off-by: Jonathan Oddy <jonathan.oddy@transferwise.com>
2019-07-10 12:20:09 +01:00
Max d27f540d81
Merge pull request #14 from maxlambrecht/master
Updating gradle and dependencies
2018-12-26 10:34:19 -03:00
Max Lambrecht 96550b7e57 minor amendment in README
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-12-26 10:18:21 -03:00
Max Lambrecht d20756d172 Updating dependencies and gradle wrapper verion. Adding clarifications to README. Adding method to install the Provider programmatically
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-12-20 11:40:54 -03:00
Max 3fbd7a05c2
Merge pull request #13 from maxlambrecht/master
Expose methods to improve usability
2018-11-28 09:33:31 -03:00
Max Lambrecht e6ecd4b73c Expose methods to improve usability
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-11-28 06:27:03 -03:00
Max 19f6e4a92d
Merge pull request #12 from maxlambrecht/master
Adding SpiffeContextFactory
2018-11-08 22:05:15 -03:00
Max Lambrecht 6345cadc60 Add SpiffeContextFactory
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-11-05 17:14:53 -03:00
Max adbda7b957
Merge pull request #11 from maxlambrecht/federation-support
Adding Federation support
2018-09-26 10:12:24 -03:00
Max Lambrecht 6e9ab4bf99 Allow accepted spiffeid list to be empty to disable the validation by spiffe id
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-09-21 15:23:28 -03:00
Max Lambrecht 70e7ad4346 Adding CountDownLatch to make the SpiffeIdManager consumer wait until the SpiffeSVID has been initialized
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-09-18 14:15:58 -03:00
Max Lambrecht cdfffa4207 Minor amendment in README
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-09-14 16:35:09 -03:00
Max Lambrecht a5b28922c9 This PR includes the following changes
- workload.proto updated to the last version
- updated SpiffeSVID, X509SVIDFetcher and SpiffeIdManager to read the Federated
Bundles and use them in the TrustStore checkClient validation method.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-09-14 16:27:49 -03:00
Max 178070dcd9
Merge pull request #8 from maxlambrecht/dev
Removing BouncyCastle dependency and using JCE standard library
2018-09-05 12:32:27 -03:00
Max a0d9746971
Merge pull request #9 from maxlambrecht/exposing-svid
Exposing SpiffeSVID to the library users
2018-09-05 12:31:44 -03:00
Max Lambrecht f2d492e586 Exposing SpiffeSVID and SpiffeIdManager
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-09-04 12:20:59 -03:00
Max Lambrecht 66414f0eb9 Removing BouncyCastle dependency and using JCE standard library
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-09-04 12:06:04 -03:00
Max 5a8662563e
Merge pull request #5 from maxlambrecht/spiffe-provider
SPIFFE based Java Security Provider (KeyStore and TrustStore)
2018-08-22 13:59:24 -03:00
Max Lambrecht 2f6c960a91 Adding LICENSE
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-08-22 10:53:38 -03:00
Max Lambrecht 613f34da1c Use optimistic read
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2018-08-17 10:24:58 -03:00