{"push_id":781517157,"size":11,"distinct_size":11,"ref":"refs/heads/task/master/TK-260_allow_unauthenticated","head":"cdadc98de6f9cd715551bf536007fca4a2b8f580","before":"bb4d583af0c8915b1ecca3f4d41be550fba45734","commits":[{"sha":"b210114ea9a4bb29faf53aefd81320af89a4c85a","author":{"email":"9b901a8aa8f9cb43919b4b0a1ed56e1b3667e623@puppetlabs.com","name":"Nate Wolfe"},"message":"(TK-275) Add :match-request to config rule\n\nThis commit adds a new section to the rule specified in the\nconfiguration file called :match-request that now contains the :type,\n:path, :method, and :query-params fields.\n\nNote this :match-request section only exists in the configuration file.\nIn-memory Rules are not changed; the keys will be at the top-level.","distinct":true,"url":"https://api.github.com/repos/jeffmccune/trapperkeeper-authorization/commits/b210114ea9a4bb29faf53aefd81320af89a4c85a"},{"sha":"4ec5c55441155e80c5b513865f6d75de278118ab","author":{"email":"e03af91b74e23222643f12da1afb3f8a0e1a45b0@gmail.com","name":"Justin May"},"message":"Merge pull request #7 from nwolfe/feature/master/tk275-match-request-subsection\n\n(TK-275) Add :match-request to config rule","distinct":true,"url":"https://api.github.com/repos/jeffmccune/trapperkeeper-authorization/commits/4ec5c55441155e80c5b513865f6d75de278118ab"},{"sha":"bef096d84a2f8bcd638a865cb8a1333250b86b24","author":{"email":"f3e731dfa293c7a83119d8aacfa41b5d2d780be9@puppetlabs.com","name":"Jeff McCune"},"message":"(maint) Cleanup imports","distinct":true,"url":"https://api.github.com/repos/jeffmccune/trapperkeeper-authorization/commits/bef096d84a2f8bcd638a865cb8a1333250b86b24"},{"sha":"d5d2b61c7412a60715f43de37ff439fbded82467","author":{"email":"f3e731dfa293c7a83119d8aacfa41b5d2d780be9@puppetlabs.com","name":"Jeff McCune"},"message":"(TK-260) Add complete set default rules to integration tests\n\nThe default list of rules in the service integration test is intended to\nmodel the default list of rules used by Puppet itself because this is a\nreal-world use case of the desired behavior of the library.  Without\nthis patch the default rules in the test contains only the first rule\nfrom the old Ruby auth.conf [1] file.  This patch fills out a\ntranslation of the rest of the rules from the master branch.\n\n[1]: https://github.com/puppetlabs/puppet/blob/826cee5/conf/auth.conf","distinct":true,"url":"https://api.github.com/repos/jeffmccune/trapperkeeper-authorization/commits/d5d2b61c7412a60715f43de37ff439fbded82467"},{"sha":"2bf3c6040a9c3d4517f8a2d34909a93c20cd6b20","author":{"email":"f3e731dfa293c7a83119d8aacfa41b5d2d780be9@puppetlabs.com","name":"Jeff McCune"},"message":"(TK-260) Make the request helper function variadic\n\nWithout this patch the request helper function will create a request\nwith the :ssl-client-cert key mapped to a value of nil.  This is a\nproblem because if this key is mapped then the value should be a\ncertificate according to the schema.  This patch addresses the problem\nby not mapping the key if a certificate is not provided as an argument.\n\nIn order to accomplish this the patch moves the certificate argument to\nthe last position so that it is optional.","distinct":true,"url":"https://api.github.com/repos/jeffmccune/trapperkeeper-authorization/commits/2bf3c6040a9c3d4517f8a2d34909a93c20cd6b20"},{"sha":"ee31b8533943ce638e3f6a2749ae02167daffe4a","author":{"email":"f3e731dfa293c7a83119d8aacfa41b5d2d780be9@puppetlabs.com","name":"Jeff McCune"},"message":"(TK-260) Add allow_unauthenticated rule attribute\n\nWithout this patch there is no mechanism to allow a request that has not\nbeen authenticated.  This is a problem because some requests in Puppet,\ne.g. the certificate status and CRL resources need to be accessible by\nunauthenticated clients.\n\nThis patch addresses the problem by adding the allow_unauthenticated\nattribute to an auth.conf rule.  If set to true, the request does not\nneed to have an identifying name (no name will be treated as the empty\nstring) and does not need to have a client certificate.","distinct":true,"url":"https://api.github.com/repos/jeffmccune/trapperkeeper-authorization/commits/ee31b8533943ce638e3f6a2749ae02167daffe4a"},{"sha":"606e41254176dd34c1b199ab01d776c6bd14001f","author":{"email":"f3e731dfa293c7a83119d8aacfa41b5d2d780be9@puppetlabs.com","name":"Jeff McCune"},"message":"(TK-260) Allow :ssl-client-cert nil in request map\n\nWithout this patch the schema of a request does not allow a nil value\nfor the :ssl-client-cert key.  This patch makes it allowed for\n  additional flexibility.","distinct":true,"url":"https://api.github.com/repos/jeffmccune/trapperkeeper-authorization/commits/606e41254176dd34c1b199ab01d776c6bd14001f"},{"sha":"05c8018dff54841f7a04af9196e4a2053bccf2d7","author":{"email":"f3e731dfa293c7a83119d8aacfa41b5d2d780be9@puppetlabs.com","name":"Jeff McCune"},"message":"(maint) Fix typo","distinct":true,"url":"https://api.github.com/repos/jeffmccune/trapperkeeper-authorization/commits/05c8018dff54841f7a04af9196e4a2053bccf2d7"},{"sha":"660891398a7dba3b0aa18cca85e7bb8fcf0c7f6d","author":{"email":"f3e731dfa293c7a83119d8aacfa41b5d2d780be9@puppetlabs.com","name":"Jeff McCune"},"message":"(TK-260) Error if allow_unauthenticated with allow/deny\n\nWithout this patch the system will not complain if there are allow/deny\nstatements inside of a rule with allow_unauthenticated true.  This is a\nproblem because we want to make sure this is treated as an error.  This\npatch addresses the problem by adding logic to the core\n`validate-auth-config-rule!` function.","distinct":true,"url":"https://api.github.com/repos/jeffmccune/trapperkeeper-authorization/commits/660891398a7dba3b0aa18cca85e7bb8fcf0c7f6d"},{"sha":"90e47d0608cd885272b1e42270713852d06a1328","author":{"email":"f3e731dfa293c7a83119d8aacfa41b5d2d780be9@puppetlabs.com","name":"Jeff McCune"},"message":"(TK-260) Rename allow_unauthenticated to allow-unauthenticated","distinct":true,"url":"https://api.github.com/repos/jeffmccune/trapperkeeper-authorization/commits/90e47d0608cd885272b1e42270713852d06a1328"},{"sha":"cdadc98de6f9cd715551bf536007fca4a2b8f580","author":{"email":"f3e731dfa293c7a83119d8aacfa41b5d2d780be9@puppetlabs.com","name":"Jeff McCune"},"message":"(maint) Delete errant equals-rule function","distinct":true,"url":"https://api.github.com/repos/jeffmccune/trapperkeeper-authorization/commits/cdadc98de6f9cd715551bf536007fca4a2b8f580"}]}