Added

• allow HEAD root url authentication #39
• log http method on any request. #42
• doc: 1.6.0, 1.7.0 support #52

Fix

• test: adapt to method signature change after 1.5.1 #55
• test: run custom install and test commands in ci

Added

• allow disabling ipwhitelist by setting its value to false. #41
• updated pom to depend on elasticsearch-parent project
• travis test matrix for different ES versions close
• travis use cache and docker based infrastructure. #40

Changed

• restored default healthcheck for authenticated users. #38 (thanks @feaster83)

Commit elastic/elasticsearch@10af60b
changes how transport module is initialized, breaking HttpBasicServerModule for Guice.

• updated depenencies
• HttpBasicServerModule inherits calls HttpServerModule's configure, which binds an HttpServerTransport

Updated integration tests

• new abstract class for common functionality, from which all integration tests inherit.
• using the HttpRequestBuilder for buliding the request.
• abstract class HttpBasicServerPluginIntegrationTest sets the host to localhost. The test requests will also have localhost, making tests consistent.

fixed security problem in ip authentication.

security problem introduced in commit 53d1cf8

changes:

• remove usage of 'Host' header to identify client's ip
• the request ip is used to ip authenticate direct connected clients
• add usage of trusted proxy chain
• the trusted proxy chain is used to ip authenticate indirect connected clients
• added unit and integration tests
• updated log messages

fixed security problem in ip authentication. ES 1.3.0 compatible

security problem introduced in commit 53d1cf8

changes:

• remove usage of 'Host' header to identify client's ip
• the request ip is used to ip authenticate direct connected clients
• add usage of trusted proxy chain
• the trusted proxy chain is used to ip authenticate indirect connected clients
• added unit and integration tests
• updated log messages

fixed security problem in ip authentication.

security problem introduced in commit 53d1cf8

changes:

• remove usage of 'Host' header to identify client's ip
• the request ip is used to ip authenticate direct connected clients
• add usage of trusted proxy chain
• the trusted proxy chain is used to ip authenticate indirect connected clients
• added unit and integration tests
• updated log messages

Updated to Elasticsearch 1.0.0