Update JWT documentation to recommend only using jwt_header or audit logging not both #5914
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Stephen Crawford <[email protected]>
Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Signed-off-by: Stephen Crawford <[email protected]>
Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Signed-off-by: Stephen Crawford <[email protected]>
Signed-off-by: Stephen Crawford <[email protected]>
Signed-off-by: Stephen Crawford <[email protected]>
Signed-off-by: Stephen Crawford <[email protected]>
stephen-crawford
requested review from
hdhalter,
kolchfa-aws,
Naarcha-AWS,
vagimeli,
ananzh,
AMoo-Miki and
natebower
as code owners
|
Thanks, @scrawfor99 ! Is this ready for doc review? And does it have an associate issue? |
|
Hi @hdhalter it should be all set for doc review. This is the associated issue: opensearch-project/security#3875 |
hdhalter
added
4 - Doc review
|
Thanks, @scrawfor99 - Is backporting to 2.11 and 1.3 appropriate? |
|
Hi @hdhalter yep! |
Naarcha-AWS
reviewed
Dec 20, 2023
Co-authored-by: Naarcha-AWS <[email protected]> Signed-off-by: Stephen Crawford <[email protected]>
Naarcha-AWS
approved these changes
Dec 21, 2023
|
The backport to To backport manually, run these commands in your terminal: # Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add ../.worktrees/backport-1.3 1.3
# Navigate to the new working tree
pushd ../.worktrees/backport-1.3
# Create a new branch
git switch --create backport/backport-5914-to-1.3
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 7d8a6a379d2307b60f171a3d8e1a59edeb2a6488
# Push it to GitHub
git push --set-upstream origin backport/backport-5914-to-1.3
# Go back to the original working tree
popd
# Delete the working tree
git worktree remove ../.worktrees/backport-1.3Then, create a pull request where the |
|
The backport to To backport manually, run these commands in your terminal: # Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add ../.worktrees/backport-2.11 2.11
# Navigate to the new working tree
pushd ../.worktrees/backport-2.11
# Create a new branch
git switch --create backport/backport-5914-to-2.11
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 7d8a6a379d2307b60f171a3d8e1a59edeb2a6488
# Push it to GitHub
git push --set-upstream origin backport/backport-5914-to-2.11
# Go back to the original working tree
popd
# Delete the working tree
git worktree remove ../.worktrees/backport-2.11Then, create a pull request where the |
Naarcha-AWS
pushed a commit
that referenced
this pull request
Dec 21, 2023
…logging not both (#5914) * readd auth token doc Signed-off-by: Stephen Crawford <[email protected]> * Fix vale Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Fix embedded command Signed-off-by: Stephen Crawford <[email protected]> * Blank lines after headings Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * change Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Style guidelines Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * warn about audit logging of custom headers Signed-off-by: Stephen Crawford <[email protected]> * Update _security/authentication-backends/jwt.md Co-authored-by: Naarcha-AWS <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> --------- Signed-off-by: Stephen Crawford <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> Co-authored-by: kolchfa-aws <[email protected]> Co-authored-by: Melissa Vagi <[email protected]> Co-authored-by: Naarcha-AWS <[email protected]> (cherry picked from commit 7d8a6a3)
1 task
Naarcha-AWS
added a commit
that referenced
this pull request
Dec 21, 2023
…logging not both (#5914) (#5955) * readd auth token doc Signed-off-by: Stephen Crawford <[email protected]> * Fix vale Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Fix embedded command Signed-off-by: Stephen Crawford <[email protected]> * Blank lines after headings Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * change Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Style guidelines Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * warn about audit logging of custom headers Signed-off-by: Stephen Crawford <[email protected]> * Update _security/authentication-backends/jwt.md Co-authored-by: Naarcha-AWS <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> --------- Signed-off-by: Stephen Crawford <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> Co-authored-by: kolchfa-aws <[email protected]> Co-authored-by: Melissa Vagi <[email protected]> Co-authored-by: Naarcha-AWS <[email protected]> (cherry picked from commit 7d8a6a3) Co-authored-by: Stephen Crawford <[email protected]>
Naarcha-AWS
added a commit
that referenced
this pull request
Jan 10, 2024
* Update JWT documentation to recommend only using jwt_header or audit logging not both (#5914) * readd auth token doc Signed-off-by: Stephen Crawford <[email protected]> * Fix vale Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Fix embedded command Signed-off-by: Stephen Crawford <[email protected]> * Blank lines after headings Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * change Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Co-authored-by: Melissa Vagi <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Style guidelines Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Signed-off-by: Stephen Crawford <[email protected]> * Apply suggestions from code review Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * Update _security/access-control/authentication-tokens.md Co-authored-by: kolchfa-aws <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> * warn about audit logging of custom headers Signed-off-by: Stephen Crawford <[email protected]> * Update _security/authentication-backends/jwt.md Co-authored-by: Naarcha-AWS <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> --------- Signed-off-by: Stephen Crawford <[email protected]> Signed-off-by: Stephen Crawford <[email protected]> Co-authored-by: kolchfa-aws <[email protected]> Co-authored-by: Melissa Vagi <[email protected]> Co-authored-by: Naarcha-AWS <[email protected]> (cherry picked from commit 7d8a6a3) * Add `http.compression` Parameter Reference (#6051) * * [DOC] Added 'Search' nodes description in 'Creating a cluster' page * [DOC] fix the tabulation of searchable snapshots snippet example Signed-off-by: Carlos Neto <[email protected]> * [DOC] add `http.compression` parameter reference Signed-off-by: Carlos Neto <[email protected]> * Update network-settings.md --------- Signed-off-by: Carlos Neto <[email protected]> Co-authored-by: Naarcha-AWS <[email protected]> (cherry picked from commit 7f84859) --------- Co-authored-by: Stephen Crawford <[email protected]> Co-authored-by: Carlos Neto <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Because of the interaction between the audit logging system and custom REST headers, it is recommended users only use either custom JWT headers or audit logging; not both. If a user configures a custom JWT header other than
Authorizationthe audit log may record the JWT passed in requests. This can then be parsed from the logs or potentially re-used depending on the user's construction of the token.A long term fix for this scenario will be pursued but this change should be made to notify users in the meantime.
Checklist
For more information on following Developer Certificate of Origin and signing off your commits, please check here.