OpenSearch/x-pack/plugin/security/qa
Tim Vernum cde8725e3c
Create API Key on behalf of other user (#53943)
This change adds a "grant API key action"

   POST /_security/api_key/grant

that creates a new API key using the privileges of one user ("the
system user") to execute the action, but creates the API key with
the roles of the second user ("the end user").

This allows a system (such as Kibana) to create API keys representing
the identity and access of an authenticated user without requiring
that user to have permission to create API keys on their own.

This also creates a new QA project for security on trial licenses and runs
the API key tests there

Backport of: #52886
2020-03-23 18:50:07 +11:00
..
basic-enable-security Apply 2-space indent to all gradle scripts (#49071) 2019-11-14 11:01:23 +00:00
security-basic Create API Key on behalf of other user (#53943) 2020-03-23 18:50:07 +11:00
security-disabled Avoid NPE in set_security_user without security (#53543) 2020-03-17 13:30:07 +11:00
security-not-enabled Avoid NPE in set_security_user without security (#53543) 2020-03-17 13:30:07 +11:00
security-trial Create API Key on behalf of other user (#53943) 2020-03-23 18:50:07 +11:00
tls-basic Apply 2-space indent to all gradle scripts (#49071) 2019-11-14 11:01:23 +00:00
build.gradle [7.x] Smarter copying of the rest specs and tests (#52114) (#52798) 2020-02-26 08:13:41 -06:00