mirror of https://github.com/optim-enterprises-bv/vault.git synced 2025-12-26 15:27:26 +00:00

Files

hc-github-team-secure-vault-core d94e9d1531 Backport of Update httpguts for GO-2022-0236 fix into release/1.12.x (#17524 )

## Backport

This PR is auto-generated from #17520 to be assessed for backporting due to the inclusion of the label backport/1.12.x.

The below text is copied from the body of the original PR.

---

[`govulncheck`](https://go.dev/blog/vuln) reports that the `api` package has a call chain that includes
`golang.org/x/net/http/httpguts.HeaderValuesContainsToken`, a vulnerable function.

---

<details>
<summary> Overview of commits </summary>

  - 6bede50176 

</details>

Co-authored-by: Christopher Swenson <christopher.swenson@hashicorp.com>

2022-10-12 15:27:31 -07:00

auth

update vault auth submodules to api/v1.8.0 (#17228 )

2022-09-20 10:51:51 -04:00

test-fixtures

Add More TLS Tests and Verification of TLS Root Certificate (#11300 )

2021-04-12 08:39:40 -07:00

api_test.go

Add HTTP PATCH support to KV (#12687 )

2021-10-13 15:24:31 -04:00

auth_test.go

[Vault-5248] MFA support for api login helpers (#14900 )

2022-04-15 11:13:15 -07:00

auth_token.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

auth.go

[Vault-5248] MFA support for api login helpers (#14900 )

2022-04-15 11:13:15 -07:00

client_test.go

Use %q for quoted strings where appropriate (#15216 )

2022-08-03 12:32:45 -06:00

client.go

agent: add disable_keep_alives configurable (#16479 )

2022-07-28 12:59:49 -07:00

go.mod

Backport of Update httpguts for GO-2022-0236 fix into release/1.12.x (#17524 )

2022-10-12 15:27:31 -07:00

go.sum

Backport of Update httpguts for GO-2022-0236 fix into release/1.12.x (#17524 )

2022-10-12 15:27:31 -07:00

help.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

kv_test.go

KV helper methods for api package (#15305 )

2022-05-25 11:17:13 -07:00

kv_v1.go

Add a sentinel error for missing KV secrets (#16699 )

2022-08-12 19:29:42 -04:00

kv_v2.go

Add a sentinel error for missing KV secrets (#16699 )

2022-08-12 19:29:42 -04:00

kv.go

Add a sentinel error for missing KV secrets (#16699 )

2022-08-12 19:29:42 -04:00

lifetime_watcher.go

update gofumpt to 0.3.1 and reformat the repo (#17055 )

2022-09-07 17:31:20 -07:00

logical.go

Propagate context within UnwrapWithContext func (#15351 )

2022-05-10 16:30:05 -04:00

output_policy.go

Global flag that outputs minimum policy HCL required for an operation (#14899 )

2022-04-27 16:35:18 -07:00

output_string.go

refactor: replace strings.Replace with strings.ReplaceAll (#15392 )

2022-08-03 15:22:48 -04:00

plugin_helpers_test.go

Global flag that outputs minimum policy HCL required for an operation (#14899 )

2022-04-27 16:35:18 -07:00

plugin_helpers.go

feature: secrets/auth plugin multiplexing (#14946 )

2022-08-29 21:42:26 -05:00

README.md

Developer Quickstart docs improvements (#16199 )

2022-06-30 08:50:35 -07:00

renewer_test.go

TestLifetimeWatcher: Address race condition in test assertions (#15969 )

2022-06-14 09:44:51 -04:00

request_test.go

Clean up request logic and use retryable's more efficient handling (#4670 )

2018-06-01 09:12:43 -04:00

request.go

Fix SRV Lookups (#8520 )

2020-03-11 14:22:58 +01:00

response.go

VAULT-1303 when a request to vault fails, show namespace if set (#12196 )

2021-07-30 12:32:05 -04:00

secret.go

Fix integer overflows with new parseutil (#15437 )

2022-05-16 13:57:19 -04:00

ssh_agent_test.go

Run a more strict formatter over the code (#11312 )

2021-04-08 09:43:39 -07:00

ssh_agent.go

update gofumpt to 0.3.1 and reformat the repo (#17055 )

2022-09-07 17:31:20 -07:00

ssh.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_audit.go

update gofumpt to 0.3.1 and reformat the repo (#17055 )

2022-09-07 17:31:20 -07:00

sys_auth.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_capabilities.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_config_cors.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_generate_root.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_hastatus.go

Add autopilot automated upgrades and redundancy zones (#15521 )

2022-05-20 16:49:11 -04:00

sys_health.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_init.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_leader.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_leases.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_mfa.go

[Vault-5248] MFA support for api login helpers (#14900 )

2022-04-15 11:13:15 -07:00

sys_monitor.go

api/monitor: Adding log format to monitor command and debug (#15536 )

2022-05-24 13:10:53 -04:00

sys_mounts_test.go

Plugins: Consistently use plugin_version (#17171 )

2022-09-20 12:35:50 +01:00

sys_mounts.go

backport of commit 21d13633d7 (#17284 )

2022-09-22 16:14:33 -04:00

sys_plugins_test.go

backport of commit 4dd8fc6ed5 (#17458 )

2022-10-07 16:22:16 +01:00

sys_plugins.go

backport of commit 4dd8fc6ed5 (#17458 )

2022-10-07 16:22:16 +01:00

sys_policy.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_raft.go

Add autopilot automated upgrades and redundancy zones (#15521 )

2022-05-20 16:49:11 -04:00

sys_rekey.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_rotate.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys_seal.go

HCP link integration (#16939 )

2022-09-06 14:11:04 -04:00

sys_stepdown.go

Replace http method strings with net/http constants (#14677 )

2022-03-24 13:58:03 -04:00

sys.go

api: separate sys out further

2015-03-11 17:46:41 -05:00

README.md

Vault API

This provides the github.com/hashicorp/vault/api package which contains code useful for interacting with a Vault server.

For examples of how to use this module, see the vault-examples repo. For a step-by-step walkthrough on using these client libraries, see the developer quickstart.