d6eb2c8261
Currently we copy the authorization header from every rest request to the action request. This is not necessary because the user associated with each request is copied into the context and then if the request leaves the node, the user will be serialized into a string and attached as a header. This commit removes the copying of the authorization header as it is not necessary and by not copying it, we limit the amount of copies we make of this sensitive information. Original commit: elastic/x-pack-elasticsearch@4e5ba4b4aa |
||
|---|---|---|
| .. | ||
| .settings | ||
| bin/shield | ||
| config/shield | ||
| dev-tools | ||
| docs | ||
| src | ||
| LICENSE.txt | ||
| NOTICE.txt | ||
| README.asciidoc | ||
| TESTING.asciidoc | ||
| pom.xml | ||
| test-signatures.txt | ||
README.asciidoc
= Elasticsearch Security Plugin This plugins adds security features to elasticsearch You can build the plugin with `mvn package`. The documentation is put in the `docs/` directory.