OpenSearch/x-pack/plugin/security
Albert Zaharovits 2b7456db7f
Improve auditing of API key authentication #58928
1. Add the `apikey.id`, `apikey.name` and `authentication.type` fields
to the `access_granted`, `access_denied`, `authentication_success`, and
(some) `tampered_request` audit events. The `apikey.id` and `apikey.name`
are present only when authn using an API Key.
2. When authn with an API Key, the `user.realm` field now contains the effective
realm name of the user that created the key, instead of the synthetic value of
`_es_api_key`.
2020-07-09 13:26:18 +03:00
..
cli Replace compile configuration usage with api (7.x backport) (#58721) 2020-06-30 15:57:41 +02:00
forbidden Add an OpenID Connect authentication realm (#40674) (#41178) 2019-04-15 12:41:16 +03:00
licenses Include vendored code notices in distribution notice files (#57017) (#57569) 2020-06-04 10:34:24 -07:00
qa Remove deprecated usage of testCompile configuration (#57921) (#58083) 2020-06-14 22:30:44 +02:00
src Improve auditing of API key authentication #58928 2020-07-09 13:26:18 +03:00
build.gradle Replace compile configuration usage with api (7.x backport) (#58721) 2020-06-30 15:57:41 +02:00