 eugene
|
169c49ee92
|
remove unused OIDC configuration handling
|
2026-01-22 17:14:07 -05:00 |
|
|
eugene
|
f1e0b1dc3b
|
cleanup internal OIDC client
better handle refresh
|
2026-01-22 17:14:07 -05:00 |
|
|
eugene
|
fc6f4efccd
|
start auth_method only once
|
2026-01-22 17:14:05 -05:00 |
|
|
eugene
|
2804ea33ea
|
bind: clear token if bind request is rejected
|
2026-01-15 13:01:51 -05:00 |
|
|
eugene
|
ae1af0a61e
|
handle null jwt
|
2025-12-26 09:46:08 -05:00 |
|
|
eugene
|
c896a5fdd3
|
fix: ziti_refresh crash if identity never reached controller
|
2025-12-24 10:08:35 -05:00 |
|
|
eugene
|
d8f3edf5a1
|
log refresh token
|
2025-12-23 14:18:26 -05:00 |
|
|
eugene
|
6b3dcc15e6
|
prevent concurrent oidc refresh calls
|
2025-12-23 14:18:26 -05:00 |
|
|
eugene
|
1c07446abb
|
remove unused refresh_grant handling and simplify token refresh request
|
2025-12-23 14:18:26 -05:00 |
|
|
Shawn Carey
|
3a7fcd31c6
|
don't log from prepare callback (#974)
|
2025-12-22 09:35:13 -05:00 |
|
|
eugene
|
6efa61c8b5
|
make sure ziti_ctrl uses correct auth header
controller capabilities can be misleading
|
2025-12-18 09:14:10 -05:00 |
|
|
eugene
|
5c00139084
|
let application start external auth at any time
pop up ext auth errors only if user action is needed
|
2025-12-16 12:13:52 -05:00 |
|
|
eugene
|
3adb0ea139
|
clear stickiness token if not sent by ER
|
2025-12-16 09:22:28 -05:00 |
|
|
eugene
|
bb210782ba
|
win32 compile fix
|
2025-12-16 09:12:59 -05:00 |
|
|
eugene
|
07e7fe708f
|
implement using stickiness token
|
2025-12-16 09:12:58 -05:00 |
|
|
eugene
|
1045b2bf9a
|
add sticky token map
|
2025-12-16 09:12:58 -05:00 |
|
|
eugene
|
d4553b078c
|
add STC package dependency in CMake and vcpkg configuration
|
2025-12-16 09:12:58 -05:00 |
|
|
eugene
|
efc400649a
|
add sticky header id
|
2025-12-16 09:12:58 -05:00 |
|
|
eugene
|
f5a45ec693
|
simplify external OIDC token refresh
do not restart auth_method unnecessarily
|
2025-12-16 08:56:30 -05:00 |
|
|
eugene
|
56a94a653a
|
better handle of close state on service connections
|
2025-12-15 11:00:11 -05:00 |
|
|
eugene
|
29e29d0bf1
|
ziti model: add ziti_service.terminator_strategy
|
2025-12-12 09:55:08 -05:00 |
|
|
eugene
|
a5cfd6b5a4
|
update content type definitions
|
2025-12-12 09:07:48 -05:00 |
|
|
eugene
|
67ed76adea
|
regenerate protobuf with latest
|
2025-12-12 08:58:24 -05:00 |
|
|
eugene
|
db21c0e0a2
|
refactor OIDC callback socket handling to use poll instead of select
|
2025-12-10 13:57:38 -05:00 |
|
|
eugene
|
54e43ae413
|
add more diagnostic logging
|
2025-12-10 11:56:28 -05:00 |
|
|
eugene
|
8dd7ea8c85
|
fix token log
|
2025-12-10 11:47:22 -05:00 |
|
|
eugene
|
4728037e9c
|
add session expiration handling and disconnect channels on expiration
|
2025-12-10 11:37:55 -05:00 |
|
|
eugene
|
6bb0d739d4
|
add channel disconnect method
|
2025-12-10 11:37:55 -05:00 |
|
|
eugene
|
40ad03c029
|
add expiration method to auth methods for handling token expiration
|
2025-12-10 11:37:55 -05:00 |
|
|
eugene
|
15d54a3200
|
support parsing of ISO 8601 timestamps with timezone offsets
|
2025-12-09 21:41:56 -05:00 |
|
|
eugene
|
6d2c4e03cc
|
handle inconsistent OIDC advertisement
fallback to legacy auth if the controller reports OIDC_AUTH capability without OIDC API (seen in v1.1.15 controller)
|
2025-12-06 10:28:56 -05:00 |
|
|
eugene
|
3372b1a4b8
|
JWT auth: enroll just-in-time if possible
|
2025-12-05 16:35:48 -05:00 |
|
|
eugene
|
ded1595da0
|
add error codes for enrollment failures
|
2025-12-05 16:19:38 -05:00 |
|
|
eugene
|
fb823ff91a
|
implement support for token-based enrollment
|
2025-12-05 15:03:06 -05:00 |
|
|
eugene
|
6c6b3a74dd
|
ensure listener_id contains printable characters
[fixes #879]
|
2025-12-03 16:35:25 -05:00 |
|
|
eugene
|
cf5f5a6337
|
ziti_dump: print jwt payload
|
2025-12-03 14:20:47 -05:00 |
|
|
eugene
|
fac9799633
|
move jwt_payload function to utils
|
2025-12-03 10:44:48 -05:00 |
|
|
Shawn Carey
|
c7d58f431e
|
don't replace tlsuv log level if it was set before ziti_log_init
|
2025-11-24 15:00:00 -05:00 |
|
|
eugene
|
fb4807fd56
|
remove unused external auth from internal OIDC client
|
2025-11-11 12:06:02 -05:00 |
|
|
eugene
|
335ea58385
|
better logging
|
2025-11-11 12:06:02 -05:00 |
|
|
ekoby
|
6c4582879e
|
use external OIDC client
|
2025-11-11 12:06:02 -05:00 |
|
|
ekoby
|
d966d36446
|
split extern OIDC client
|
2025-11-11 12:06:02 -05:00 |
|
|
ekoby
|
cea165fe3d
|
ziti_json_req: fix memory management for JSON objects in OIDC
|
2025-11-11 08:26:52 -05:00 |
|
|
ekoby
|
ec89dd624f
|
misc fixes
- uninit variable
- possible NULL-defer
- cleanup unused functions
|
2025-11-07 13:49:15 -05:00 |
|
|
ekoby
|
f374796ae8
|
invalidate sessions for changed services
|
2025-11-03 15:32:38 -05:00 |
|
|
ekoby
|
3808706d8b
|
clear stale update tag on service refresh failure; trigger forced refresh on controller recovery
|
2025-11-03 15:01:45 -05:00 |
|
|
eugene
|
60bc80d9e2
|
oidc: try all edge-oidc URLs for auth
When authenticating with the internal OIDC provider, cycle through all available endpoints
|
2025-11-01 10:34:38 -04:00 |
|
|
eugene
|
8ad5f9ac6b
|
do not clobber non-ha controller list
|
2025-10-31 15:36:28 -04:00 |
|
|
eugene
|
6307970428
|
avoid wiping auth if connection fails
|
2025-10-30 12:23:16 -04:00 |
|
|
Shawn Carey
|
1d888fedd5
|
don't free ztx->identity_data until context event has been sent (#939)
|
2025-10-29 15:23:01 -04:00 |
|