-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Filebeat] Add HMAC template function for httpjson input #27168
Conversation
311e4c7
to
856f959
Compare
856f959
to
e20cd8f
Compare
💚 Build Succeeded
Expand to view the summary
Build stats
Test stats 🧪
Trends 🧪💚 Flaky test reportTests succeeded. Expand to view the summary
Test stats 🧪
|
@kaiyan-sheng I'd be interested in your thoughts on this one. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
/test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
All looks good! just a minor renaming for consistency and will be good to go :)
@marc-gr changes made. |
/test |
* Add HMAC template function for httpjson input * Updates per comment * Rename parameters in function body Co-authored-by: Marc Guasch <[email protected]> (cherry picked from commit a0452d9)
…7228) * Add HMAC template function for httpjson input * Updates per comment * Rename parameters in function body Co-authored-by: Marc Guasch <[email protected]> (cherry picked from commit a0452d9) Co-authored-by: Alex Resnick <[email protected]>
What does this PR do?
Adds a
[[hmac "sha256" "secret" "string1" (formatDate (now) "RFC1123")]]
function that can be used to calculate hmac signatures for API authentication.Why is it important?
A lot of APIs use an HMAC signature to authenticate API calls. These signatures need to be generated at runtime, usually comprised of elements of the call. See https://docs.fireeye.com/iSight/index.html#/authentication as an example. Also https://elasticstack.slack.com/archives/CNEDGGJQ3/p1627286354468400
Checklist
CHANGELOG.next.asciidoc
orCHANGELOG-developer.next.asciidoc
.Author's Checklist
How to test this PR locally
Run the integration tests located at x-pack/filebeat/input/httpjson/internal/v2/value_tpl_test.go
Related issues
Use cases
https://docs.fireeye.com/iSight/index.html#/authentication
Screenshots
Logs