Jay Modi 2d893df7e9 Add better authorization for scroll requests and remove signing (elastic/x-pack-elasticsearch#1416) ...

This commit adds better security for scroll requests in that they are now tied to a single user as
we only authorize the request that creates the scroll. This is accomplished by adding a
SearchOperationListener that listens for new scroll contexts and stores the authentication on the
ScrollContext. Then upon
retrieval of the search context for a query or fetch, the current authentication is compared to the
authentication that was present when the scroll context was created. If the current authentication
belongs to a different user, then a SearchContextMissingException will be thrown to prevent leaking
a valid vs invalid scroll id.

Additionally, signing of a scroll id is only performed when there is a older node in the cluster
that would expect the scroll id to be signed. Once this is backported to 5.x, we can remove this
bwc layer for 6.0/master.

Original commit: elastic/x-pack-elasticsearch@0e5dcafd32

2017-06-06 10:23:18 -06:00

..

bin/x-pack

Rename core plugin and transport dirs

2017-02-10 11:02:42 -08:00

bwc

Build: allow building snapshot of release branches (elastic/x-pack-elasticsearch#1582)

2017-05-30 09:04:27 -04:00

config/x-pack

Rename core plugin and transport dirs

2017-02-10 11:02:42 -08:00

keys

Rename core plugin and transport dirs

2017-02-10 11:02:42 -08:00

licenses

Update Netty to 4.1.11.Final

2017-05-12 15:54:05 -04:00

ml-cpp-snapshot

Build: Switch ml snapshot dependency to a local project (elastic/x-pack-elasticsearch#1559)

2017-05-26 01:15:12 -07:00

src

Add better authorization for scroll requests and remove signing (elastic/x-pack-elasticsearch#1416)

2017-06-06 10:23:18 -06:00

build.gradle

Build: Switch ml snapshot dependency to a local project (elastic/x-pack-elasticsearch#1559)

2017-05-26 01:15:12 -07:00