3 Commits

Author	SHA1	Message	Date
Tim Brooks	f2cbe20ea0	Remove default passwords from reserved users (elastic/x-pack-elasticsearch#1665) ... This is related to elastic/x-pack-elasticsearch#1217. This PR removes the default password of "changeme" from the reserved users. This PR adds special behavior for authenticating the reserved users. No ReservedRealm user can be authenticated until its password is set. The one exception to this is the elastic user. The elastic user can be authenticated with an empty password if the action is a rest request originating from localhost. In this scenario where an elastic user is authenticated with a default password, it will have metadata indicating that it is in setup mode. An elastic user in setup mode is only authorized to execute a change password request. Original commit: elastic/x-pack-elasticsearch@e1e101a237	2017-06-29 15:27:57 -05:00
Lisa Cawley	08fdac5a93	[DOCS] Move security APIs to Elasticsearch Ref (elastic/x-pack-elasticsearch#1877) ... * [DOCS] Move security APIs to Elasticsearch Ref * [DOCS] Update links to security APIs * [DOCS] Fix link to security APIs Original commit: elastic/x-pack-elasticsearch@d7a9d3f1ab	2017-06-28 11:02:40 -07:00
Jay Modi	1d08b4d1fb	Rest endpoints for token based access (elastic/x-pack-elasticsearch#1235) ... This commit adds rest endpoints for the creation of a new token and invalidation of an existing token. This builds upon the functionality that was introduced in elastic/x-pack-elasticsearch#1029. relates elastic/x-pack-elasticsearch#8 Original commit: elastic/x-pack-elasticsearch@d56611dfa3	2017-04-27 11:04:31 -04:00