OpenSearch/qa/smoke-test-graph-with-security
Jay Modi 295051ee8c Add a short-lived token based access mechanism (elastic/x-pack-elasticsearch#1029)
This commit adds a token based access mechanism that is a subset of the OAuth 2.0 protocol. The
token mechanism takes the same values as a OAuth 2 standard (defined in RFC 6749 and RFC 6750),
but differs in that we use XContent for the body instead of form encoded values. Additionally, this
PR provides a mechanism for expiration of a token; this can be used to implement logout
functionality that prevents the token from being used again.

The actual tokens are encrypted using AES-GCM, which also provides authentication. The key for
encryption is derived from a salt value and a passphrase that is stored on each node in the
secure settings store. By default, the tokens have an expiration time of 20 minutes and is
configurable up to a maximum of one hour.

Relates elastic/x-pack-elasticsearch#8

Original commit: elastic/x-pack-elasticsearch@3d201ac2bf
2017-04-26 08:00:03 -04:00
..
src/test/java/org/elasticsearch/smoketest Add a short-lived token based access mechanism (elastic/x-pack-elasticsearch#1029) 2017-04-26 08:00:03 -04:00
build.gradle Move integ test runner deps to cluster deps (elastic/x-pack-elasticsearch#1096) 2017-04-17 16:04:09 -07:00
roles.yml x-pack changes for elasticsearchelastic/elasticsearch#21964 2016-12-22 02:35:35 -05:00