Skip to content

[Backport 1.3] Expanding Authentication with SecurityRequest Abstraction (#3487)#3670

Merged
peternied merged 15 commits intoopensearch-project:1.3from
peternied:security-request-abstraction
Nov 14, 2023
Merged

[Backport 1.3] Expanding Authentication with SecurityRequest Abstraction (#3487)#3670
peternied merged 15 commits intoopensearch-project:1.3from
peternied:security-request-abstraction

Conversation

@peternied
Copy link
Copy Markdown
Member

Description

Backport of f20cc68 from #3430

Introduced a new abstraction, SecurityRequest & SecurityRequestChannel, to streamline and secure the authentication process in the OpenSearch Security plugin. By isolating the essential request components needed for authentication, we minimize potential risks associated with previous designs and provide a more maintainable architecture.

Signed-off-by: Peter Nied petern@amazon.com
(cherry picked from commit f20cc68)

Issues

Check List

  • New functionality includes testing
  • New functionality has been documented
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Peter Nied <petern@amazon.com>
…ion (opensearch-project#3430)

Backport of f20cc68 from opensearch-project#3430

Introduced a new abstraction, SecurityRequest & SecurityRequestChannel,
to streamline and secure the authentication process in the OpenSearch
Security plugin. By isolating the essential request components needed
for authentication, we minimize potential risks associated with previous
designs and provide a more maintainable architecture.

Signed-off-by: Peter Nied <petern@amazon.com>
(cherry picked from commit f20cc68)
@peternied
Copy link
Copy Markdown
Member Author

peternied commented Nov 8, 2023

Note; this will be in draft until the previous PR [1] can is merged.

Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Peter Nied <petern@amazon.com>
…action

Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Peter Nied <petern@amazon.com>
Signed-off-by: Peter Nied <petern@amazon.com>
@peternied
Copy link
Copy Markdown
Member Author

@RyanL1997 @DarshitChanpura @scrawfor99 Could I get a review please?

@peternied
Copy link
Copy Markdown
Member Author

org.opensearch.security.auditlog.compliance.RestApiComplianceAuditlogTest > testAutoInit FAILED

Seeing this failure what seems like consistently on the CI / build (11, windows-latest), I'll look into this

@peternied peternied merged commit b0799c1 into opensearch-project:1.3 Nov 14, 2023
@peternied peternied deleted the security-request-abstraction branch November 14, 2023 03:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants