[Pkg-freeipa-devel] custodia: Changes to 'upstream'

Sat Oct 3 05:26:14 UTC 2015

New branch 'upstream' available with the following commits:
commit d0e0407e37f85ff086f5f655bf5ce6c59d8e89e2
Author: Simo Sorce <simo at redhat.com>
Date:   Sat Aug 1 15:48:16 2015 -0400

    Release version 0.1.0

commit e749f6ecaea9a17f7411cbeb31a690140108db7c
Author: Christian Heimes <cheimes at redhat.com>
Date:   Mon Jul 13 11:56:59 2015 +0200

    add docs/source/_static to fix sphinx build error
    
    Signed-off-by: Christian Heimes <cheimes at redhat.com>
    Reviewed-by: Simo Sorce <simo at redhat.com>
    Closes #7

commit de85fcc1b0c882c1f0447dfade44de23e81ce471
Author: Christian Heimes <cheimes at redhat.com>
Date:   Mon Jul 13 11:53:28 2015 +0200

    Add travis CI support
    
    The .travis.yml configures Travis CI. We only need Python 2.7 as the
    rest is handled by different tox environments. In order to enable Travis
    CI, please read http://docs.travis-ci.com/user/getting-started/ and
    do step 1) and step 2).
    
    Signed-off-by: Christian Heimes <cheimes at redhat.com>
    Reviewed-by: Simo Sorce <simo at redhat.com>
    Closes #6

commit 908574caa96a80483fa642e08b3b1e9ad1cd1c60
Author: Christian Heimes <cheimes at redhat.com>
Date:   Mon Jul 13 11:07:05 2015 +0200

    kill() and waitpid() custodia process
    
    The test suite leaves child processes behind. The teardown class method
    now call Popen.kill() and Popen.wait() to kill and wait for its child
    process.
    
    Signed-off-by: Christian Heimes <cheimes at redhat.com>
    Reviewed-by: Simo Sorce <simo at redhat.com>
    Closes #5

commit ee720f695b4c5b5098356351acf7d32776f04f2a
Author: Simo Sorce <simo at redhat.com>
Date:   Thu Jul 9 13:58:35 2015 -0400

    Make KEMClient actually check the reply
    
    Uses the same method as the server, the request and response are quite
    symmetrical here.
    also fix a bug with the subject name missing in the replies.
    Adapt tests.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 1c37dfa859682cc749829c33b96c760b4b8bf21b
Author: Simo Sorce <simo at redhat.com>
Date:   Thu Jul 9 10:02:18 2015 -0400

    Use tox instead of nosetests in Makefile
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit a547415764620791621a08ff8a720a448b8c8848
Author: Simo Sorce <simo at redhat.com>
Date:   Thu Jul 9 09:28:27 2015 -0400

    Add audit log
    
    The Secrets class now logs any GET/SET/DEL of a key in a audit log file.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 991e3295432e7e0abb86b6129c91e2d14381e124
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Jul 8 16:37:14 2015 -0400

    Unquote the path before processing
    
    This avoids issues where spaces get turned to %20 and then name
    matching comparisons (like for KEMHandler) fail.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 5f85b79d56f338ef77ef7ff719a73815435fdf34
Author: Christian Heimes <cheimes at redhat.com>
Date:   Tue Jul 7 12:47:16 2015 +0200

    Automatic testing with py.test, coverage and tox
    
    The patch provides test automation with tox. Just run 'tox' in the
    source root to create virtual envs, install custodia from the sources
     and run the tests on Python 2.7 and 3.4.
    
    Signed-off-by: Christian Heimes <cheimes at redhat.com>
    Reviewed-by: Simo Sorce <simo at redhat.com>
    Closes: #4

commit 3b135033f4d70c59a9b6880c13b38238ff593081
Author: Christian Heimes <christian at python.org>
Date:   Wed Jul 8 11:12:25 2015 +0200

    Fix typos in tests and add cleanup
    
    The patch fixes to typos in the tear down function of two test suites.
    The tests now cleanup and remove temporary files like Unix socket and
    test databases.
    
    Reviewed-by: Simo Sorce <simo at redhat.com>
    Closes: #3

commit c4e6d1ffdd348b7a78ea7da6f8af774c4ce0b3c4
Author: Christian Heimes <christian at python.org>
Date:   Wed Jul 8 11:18:17 2015 +0200

    Fix setup.py and dependencies
    
    setup.py now correctly references LICENSE instead of COPYING. README.md
    has been renamed to README and a symbolic link README -> README.md has
    been added. distutils is unable to handle a symbolic link as README.
    
    The six package is listed in requirements.txt, too.
    
    Reviewed-by: Simo Sorce <simo at redhat.com>
    Closes: #2

commit 77d841778fa5ec2793b3879e475439c2365ec4f6
Author: Simo Sorce <simo at redhat.com>
Date:   Sun Jun 7 15:14:42 2015 -0400

    Fix Python 3 portablility issues
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 43e1f39ebe1c58408b05329644007fb1799751fa
Author: Simo Sorce <simo at redhat.com>
Date:   Fri Jun 5 15:18:23 2015 -0400

    Use reasonable algorithms based on key type
    
    If 'signing_algorithms' is not explicitly set in the configuration
    file use a reasonable default based on the server key type.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 3cf9508e5b018bc242bc1ceed6c2cb522e90a00f
Author: Simo Sorce <simo at redhat.com>
Date:   Fri Jun 5 14:02:34 2015 -0400

    Fix name checking for kem backend
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 1b55bc36f4176c0d4c6ea8ac5196b48776c08eeb
Author: Simo Sorce <simo at redhat.com>
Date:   Fri Jun 5 13:00:50 2015 -0400

    Change KEMClient to be able to encrypt requests
    
    Also fix errors in handling encrypted requests, as well errors in
    the test suite.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit eff99ee7a065e6e122dbd7cee136a2651073d224
Author: Simo Sorce <simo at redhat.com>
Date:   Fri Jun 5 10:56:29 2015 -0400

    Add basic debugging capabilities
    
    If debug is set to True, then custodia's own Exception handlers will
    print a stack trace to standard output to aid debugging.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit f68ec64138d5b259788f25b54deec12e80a95ec7
Author: Simo Sorce <simo at redhat.com>
Date:   Thu Jun 4 17:20:59 2015 -0400

    Assume keys are JWK objects
    
    This way clients that already have JWK key objects do not have to
    export/import them. Other clients can simply call JWK upfront like
    in the modified test.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 36ad4a2d0a0d80cf51334047d793540b91e2d5f6
Author: Simo Sorce <simo at redhat.com>
Date:   Thu Jun 4 15:44:47 2015 -0400

    Add client class to build and parse kem tokens
    
    This makes it easier to build clients.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit a5035f59f3b0293dcf42e5e7b69143bc1eb3281a
Author: Simo Sorce <simo at redhat.com>
Date:   Thu Jun 4 15:44:01 2015 -0400

    Change KEM Parsing to actually check claims
    
    The name ('sub') and the time ('exp') must be checked before letting
    the reuqest proceed.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 7e7450a7a20b29d141bc9e189c6fc563a03bb6b9
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Jun 3 11:13:03 2015 -0400

    Do not use the same key for encryption and signing
    
    using the same key for signing and encryption is generally a frown
    upon approach in the scirty community as it may lead to some attacks.
    
    Change the code to use key pairs, where the first key is the signing
    key and the second one is the encryption key.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 613beb4e87f3ba3990c8a6c2cc4cc72a32faec90
Author: Simo Sorce <simo at redhat.com>
Date:   Fri May 29 14:19:43 2015 -0400

    Add pylint/pep8 checks to ./tests too
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 3319d29beb9a6c7f414ef535d1cfb151f576c5f1
Author: Simo Sorce <simo at redhat.com>
Date:   Thu May 28 10:37:10 2015 -0400

    Use str to give back more human readable messages
    
    These messages are returned as is by the HTTP server as the status
    code reason, str() returns a more human readable format.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit eaef79904119b87c696c3f7609b708bebd2dcdb5
Author: Simo Sorce <simo at redhat.com>
Date:   Wed May 27 20:18:59 2015 -0400

    Fix packages in setup.py
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit c242f5bb58d3bb4546372b18fa7b00c081b586e6
Author: Simo Sorce <simo at redhat.com>
Date:   Tue May 26 18:00:24 2015 -0400

    Properly handle inputs from a query string
    
    parse_qs will always return lists even for single-valued parameters,
    check for it in the Validator and properly handle the case.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 0050d9d6e7dadfbceb1dd684fea74710d694fd61
Author: Simo Sorce <simo at redhat.com>
Date:   Tue May 26 17:00:48 2015 -0400

    List special configuration names in one place
    
    This way checks and hives are created from the same list and will not
    get out of sync (they are before this commit).
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 3312c70e87f4137dba3ec2175e9f90b69b918246
Author: Simo Sorce <simo at redhat.com>
Date:   Tue May 26 16:56:47 2015 -0400

    Add server_socket [global] configuration option
    
    This allows admins to configure where the socket needs to be created
    ithout forcing to change the cwd of the daemon to the same place.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 62a302e6676a5ac113eee6143c8bcf6418f28b84
Author: Simo Sorce <simo at redhat.com>
Date:   Tue May 26 15:02:06 2015 -0400

    Make the socket world accessible by default
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 41d2241a038f2b0ddf797cf9a60ec52d1e96d3c7
Author: Simo Sorce <simo at redhat.com>
Date:   Tue May 26 15:04:34 2015 -0400

    Remove pylint star-args exceptions
    
    Newer pylint version completely removed the star-args warning, including
    recognizing the exception in the source code.
    Remove it from all source code to avoid annoyinf pylint errors about
    unrecognized exceptions, and add a general exception in the pylint makefile
    invocation, as apparently it is ok there. This will avoid warnings if older
    versions of pylint are used.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit bcffccf4e50d09c4ddb1e47dd41f594f891a95c6
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 28 15:28:21 2015 -0400

    We do not require cherrypy
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit f85ee3c9ef9839b06c1af654a54e3e32175f7d2e
Author: Simo Sorce <simo at redhat.com>
Date:   Sat Apr 25 15:40:03 2015 -0400

    Add tests and fixes for 'simple' keys
    
    A missing query would not lead to the default 'simple' type being selected.
    Add tests for PUT/GET/DELETE of a simple key.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit db42ea6f015d3d15728d1c26576531286c522ce7
Author: Simo Sorce <simo at redhat.com>
Date:   Fri Apr 24 15:28:57 2015 -0400

    Basic custodia testing
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit a2ed51acfdff399a6ad6cd486eb22da9acf59280
Author: Simo Sorce <simo at redhat.com>
Date:   Mon Apr 20 16:08:28 2015 -0400

    Add support for signed/encrypted messages
    
    The new 'kem' type allows the backend to authorize access to keys based on
    a signed request where the key mus be whitelisted in advance in a kemkeys
    database.
    The reply is encrypted with the client public key.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit b9e31bf1cc44bdfeaf0454dadb578c4dbb8d588b
Author: Simo Sorce <simo at redhat.com>
Date:   Thu Apr 16 16:44:51 2015 -0400

    Move message parsing and validation
    
    Create a message module to deal with message types and validation.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit f77b0158f87a13efc1d315b1bcb58cccf4406e88
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Apr 15 17:50:38 2015 -0400

    Add skeleton docs dir
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 974837af648f2fbc80f3468e7a90fca7d11f8e29
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Apr 15 17:44:10 2015 -0400

    Add Simple encrypted store.
    
    This uses JWCrypto to encrypt any key stored in the sqlite database
    with a master key.
    The master key is stored in a file and must be provided by the
    configuration.
    
    A sample key and configuration is provided too.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 3ad95956864a8b8727dc3661e208e04b688baf8e
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Apr 8 09:51:32 2015 -0400

    Allow to filter by keytype on key GET

commit 575efc8bd229cfa5ef7d73c4b53c1e27f6f267d5
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Apr 8 09:00:37 2015 -0400

    Return only key/containers names on LIST operation

commit e538bf2ae154588dd45a8f01fe1cc1c08441de03
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Apr 8 09:05:17 2015 -0400

    Always initialize db on store class instantiation
    
    This will precreate the default tale if it doesn't exist and fail
    early if there are general database issues.
    
    Also change all CSStoreError events to report a 500 error and not
    silently transform them into innocuous 'no such data' errors.

commit fe108073bb183b3c52676aaabfb2bff829310ff0
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 23:56:10 2015 -0400

    Move authz checks from Secrets to own class
    
    Add a Namespace authorization class to use in the pipeline instead
    of performing authorization within the Secrets class

commit 393ec7cfd371de985ede02811592997162b6a381
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 22:56:22 2015 -0400

    Move pipeline from server class to request handler
    
    Doesn't really make sense to have it on the server class,
    just snatch the config from it.

commit f5e002a3d066ed29e5cf4154b6dfa6fd1732785b
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 22:44:54 2015 -0400

    Add basic framework for authorization plugins

commit 0c8c416289514889ec095c203880a8ce1e4c23d4
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 22:23:47 2015 -0400

    Change authenticators to return a result
    
    Authenticators will not signal anymore validity by adding a request
    attributes.
    Instead they can return on of three values:
    - True, indicates positive authentication
    - False, indicate explicit failure
    - None, inicates neither success nor failure, not applicable

commit 50abe3fd6ec1ed43a14fad94ad1fe2081f6e9cee
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 21:54:00 2015 -0400

    Python3 compatibility fixes

commit 4ee02b9496ff7a89d762b3aa1659629d2ac504af
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 18:48:22 2015 -0400

    Mute lint

commit 00cceea25687bc91f605bc6bbdd834122dd0af45
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 18:42:59 2015 -0400

    Initial API definitions
    
    Very much a work in progress, but it is a start

commit 2760061c014558325f2011a02e5150f4efa2eb6a
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 18:42:05 2015 -0400

    Add detection of conflicts when creating elements

commit 6e5a83f9d9ed80268ba29b1d2404f5d9897fe0c0
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 18:39:01 2015 -0400

    Add explicit exception for storage conflicts

commit bdac4205f9467f752b5a8e3f424bfd82e67d7b9c
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 18:26:05 2015 -0400

    Add functions to create and destroy containers

commit fc5dae8f16f5e4c2b3f0b6a22b93a0ab2844bb02
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 17:41:05 2015 -0400

    Add code and tests to delete keys

commit e35d48dbb2362fe06f62e19c2594ef1fdfc4c8c5
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 17:33:28 2015 -0400

    Add interface to remove data from store

commit 5ed4b17854977c38944b8670b2264b2a9d8c2121
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 17:01:02 2015 -0400

    Actually strip only the base container
    
    If there are intermediate containers list them with empty strings
    as values.

commit a438d0d27d70cfdc2dcfdd929564375184bb88ff
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 16:45:48 2015 -0400

    Defensive parsing
    
    Allow only specific commands, we do not want to allow users to end up
    being able to access internal functions with arbitrary names.

commit 2f80a39339bdea5d8917e4c2bd2abf2b42c3c5b5
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 16:37:15 2015 -0400

    Reorganize code so each main action is separate
    
    Each container or key action has its own function regardles of HTTP
    verbs used.

commit c975057c632e5cd9f3eeeecd9ee0f73aeca3dabc
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 16:28:17 2015 -0400

    Check that intermediate containers exist
    
    If a container does not exist PUTing a key should fail

commit ec754903728595bd3a29fff5993dd1495506c188
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 15:39:48 2015 -0400

    Return 201 on successful key creation

commit 02457aaa7b1d46626fecd3560dd5259d82f4c1ee
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 15:35:28 2015 -0400

    Allow caller to decide if replace is allowed
    
    When storing the caller decide if the DB can silently replace an
    existing value or not.
    
    Defaults to False

commit 222189b0a4883740d151c7432e04c6b36deaffcd
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 17:15:00 2015 -0400

    Remove ununsed case with wrong name

commit 74c7ff48e5917f0fda458f25fcbc39df8ed791d5
Author: Simo Sorce <simo at redhat.com>
Date:   Tue Apr 7 12:08:37 2015 -0400

    Add Sqlite store unit tests

commit f4a225670049f631332c89ce9db35ef41560e016
Author: Simo Sorce <simo at redhat.com>
Date:   Mon Apr 6 17:04:02 2015 -0400

    Add more unit tests for Secrets

commit 3c9c13227a1469f6b3331a77f21bd1bad0c82905
Author: Simo Sorce <simo at redhat.com>
Date:   Mon Apr 6 14:11:32 2015 -0400

    Initial testsuite commit

commit 18f7a10d2bad6e8050fb1d34c82398ad8acf628c
Author: Simo Sorce <simo at redhat.com>
Date:   Mon Apr 6 10:46:27 2015 -0400

    Improve secrets.py
    
    Require expicit namespace in name for GET, then check the user is
    authorized to access it.
    
    Return lists of keys filtering them by explicit namespace or using
    the default namespace.
    The list is returned as a dict of keys with full key names as arguments.

commit 2440cbbc6e84235381a2f62050ad8009033588d7
Author: Simo Sorce <simo at redhat.com>
Date:   Thu Apr 2 11:14:01 2015 -0400

    Move Secrets class to its own file

commit 07ebcde1a29e80a21251cf2aad24909dbe760107
Author: Simo Sorce <simo at redhat.com>
Date:   Mon Apr 6 17:02:12 2015 -0400

    Fix sqlite's list() command
    
    When listing do not add a / to the user filter it prevents matching
    key names with a prefix.
    
    When returning keys return a dict of key value pairs.
    If no values are available instead return None

commit d2f4eb8ab433b45d503aa98e3028deab0c0b79c4
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Apr 1 18:13:22 2015 -0400

    Add simple secrets storage API to Root
    
    This is a very simple implementation of a prototype API.
    Anyone that has access to the server and causes an authentication
    plugin to set the 'remote_user' value in the request, can retrieve
    and store secrets,
    
    Secrets are namespaced to the user requsteing them, so sharing secrets
    between multiple users is not possible.
    
    Secrets must to be of type "simple" and can only have one value.
    The value can be anything that can be reprsented in json format.
    It is recommended to pass a base64 encoded value.

commit 2e03a2254a27159dcbdb3618b642ba78f4432494
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Apr 1 18:12:06 2015 -0400

    Add code to parse body and put it in the request
    
    Accept a maximum of 10 Megabytes and relies on proper Content-length
    being set by the client

commit bb1c7cc1b597b1df1d7ff2a8b3cd37690b7a63f9
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Apr 1 14:18:08 2015 -0400

    Minor server.py fixes
    
    Silence pylint errors due to python3 imports
    Switch to HTTP 1.0 by default, this terminates each request by
    default which make it handier for manual testing with clients
    like curl.
    Properly handle a consumer returning nothing (None) as output.

commit 13f91045b2481710763e7bf58ac542f19f349bd4
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Apr 1 14:14:44 2015 -0400

    Consumers can define entire subtrees
    
    Each "page" is added to a parent consumer by callin add_sub() on the
    desired parent and provide a "page name" and the consumer class that
    handles it.

commit ce33244e99c311856b405aa36acbd7f35db393ab
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Apr 1 14:13:41 2015 -0400

    Fix sqlite store bugs
    
    Use print statement that works in python3
    Create table so that keys are unique.
    Return directly the bare value associated with the key, if any.

commit 531f83b91ddfe5c811bad5b1aebfc9beb9fca1b1
Author: Simo Sorce <simo at redhat.com>
Date:   Mon Mar 30 15:09:37 2015 -0400

    Provide more complete parsing of a request path

commit bf60cceb94032069bdc0a713e1f44f15a1d9670a
Author: Simo Sorce <simo at redhat.com>
Date:   Mon Mar 30 14:46:22 2015 -0400

    Add some documentation in form of class comments

commit 2cae3084f806990af51b68370a0c8793a1e033b1
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Mar 25 15:57:59 2015 -0400

    Make stores directly availble to consumers

commit d40890b01fb600f09127cff0285472dfbba30442
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Mar 25 15:45:19 2015 -0400

    Adjust the code to be python3 happy
    
    This required the renaming of the http directory to avoid clashes with the
    python3 own http/server module.

commit 98085f982e98466b994c033be55047ce370dcac5
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Mar 25 15:18:34 2015 -0400

    Initial sinple store infrastructure

commit 136e1ae76a79ada048a5eb5808b40b8969c7aaf2
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Mar 25 13:35:29 2015 -0400

    Require positive authentication in all cases
    
    Provide a SimpleNULLAuth class for people that want to allow
    unauthenticated access fto specific paths for whatever reason.

commit f134e09fa91fd1e00f538ef3e403ff6a35d21e8e
Author: Simo Sorce <simo at redhat.com>
Date:   Mon Mar 23 15:41:35 2015 -0400

    Add simple header auth module
    
    This is useful when authentication is handled by a proxy sitting in
    front of custodia.
    Alternatively it can be used with shared secrets/bearer tokens sent
    in plain text in the headers.

commit 26fbab88d505c8e9cd1aded7cdea85775ce635c8
Author: Simo Sorce <simo at redhat.com>
Date:   Mon Mar 23 15:26:48 2015 -0400

    Add basic authentication framework
    
    This kicks in before any request is parsed at all.
    The whole request is provided so technically it can be as complex
    as wanted.

commit 5ec6d0478e991fc8148de78a28f04e34a38aad78
Author: Simo Sorce <simo at redhat.com>
Date:   Fri Mar 20 16:02:54 2015 -0400

    Configure consumers via config file
    
    This is how new backends and mechanism can be defined on per-instance basis

commit 6ae6483edefb23edc419f108267bec1682b5b696
Author: Simo Sorce <simo at redhat.com>
Date:   Wed Mar 11 15:32:52 2015 -0400

    Abandon cherrypy, it doesn't work for unix sockets
    
    Intorduce a minimal custom server based on python's base HTTP classes.
    
    Signed-off-by: Simo Sorce <simo at redhat.com>

commit 8a4473d294f0bf521eb8e5ae9ad36a6876b42117
Author: Simo Sorce <simo at redhat.com>
Date:   Sat Feb 28 20:55:12 2015 -0500

    Initial Commit
    
    Signed-off-by: Simo Sorce <simo at redhat.com>