472b32c668
fixes GHSA-q8g9-jc4c-jp6q limit pre-auth request body buffering
...
- caps buffered HTTP request bodies at 1 MiB across the client, management, fabric management, and OIDC web APIs
- rejects oversized bodies with 413 REQUEST_ENTITY_TOO_LARGE before authentication
- surfaces request body read errors instead of ignoring them
- returns after writing the request context error response in the client API handler
- adds integration coverage for oversized bodies with and without Content-Length
2026-07-23 17:04:43 -04:00
fb2034245d
fixes openziti/ziti#3356 adds www-authenticate headers ( #3561 )
...
* fixes openziti/ziti#3356 adds www-authenticate headers
- www-authenticate headers are returned on 401s from API requests
- www-authenticate headers are returned during authentication to signal
addtional JWT bearer tokens needed (secondary ext jwt)
- adds support for additional headers on API errors
- adds SecurityTokenCtx for centralized security header processing
(legacy, jwt, etc.)
- adds SecurityCtx for centralized identity, auth policy, MFA handling
- refactors existing JWT authentication methods (oidc, legacy) to use
centralized processing where possible
2026-02-24 10:01:36 -05:00
da9ef76d19
Optimize imports
2026-01-28 15:01:35 -05:00
2ffc6e1151
Update ziti version to 2.0
2026-01-28 12:34:10 -05:00
46f10c48d2
Fix PATCH of tags with empty map. Fixes #3348
2025-12-15 21:06:03 -05:00
701fe9ffd9
Move fabric router/service/terminators rest api code common location
2025-12-05 10:35:25 -05:00
c5f67f6a1a
Cluster operations should return 503 if there's no leader. Also add 503s for other operations where appropriate. Fixes #2738
2025-02-14 11:56:10 -05:00
e16f97a7ea
Router data model fixes. Add standard error when no leader is present. Fixes #2232
2025-01-07 19:21:53 -05:00
38617b244e
Merge pull request #1658 from openziti/auth-rate-limiter
...
Add auth rate limiter. Fixes #1657 . Also add links fablab stress test.
2023-12-21 10:53:04 -05:00
04873a250d
Add auth rate limiter. Fixes #1657 . Also add links fablab stress test.
2023-12-21 09:48:04 -05:00
126ee5d79c
codespell: Add spelling check and fix all issues
...
Signed-off-by: Mario Trangoni <mjtrangoni@gmail.com >
2023-12-19 10:52:42 +01:00
f3d67b7f49
Update fabric imports
2023-09-28 23:34:28 -04:00
23110fccb2
Implement entity change events. Fixes openziti/fabric#562
2023-04-25 11:38:03 -04:00
bf76453ce8
Update to go 1.20
2023-04-25 11:32:34 -04:00
d1d0fe781b
Update for storage API changes.
2023-04-25 11:32:33 -04:00
858642bc38
Move UpdatedFields to fabric. Start moving model layer to generics
2022-07-27 11:33:24 -04:00
3d49022f4a
Update for foundation changes
2022-07-01 14:29:12 -04:00
eaa75d48c6
Initial support for distributed model via RAFT
2022-06-02 22:49:55 -04:00
69bc2fb0cc
Update to transport/v2
2022-05-10 11:58:41 -04:00
fc28b414b7
don't raise a 403 on CORS pre-flight if 'Authorization' header is present ( #362 )
2022-04-27 11:49:27 -04:00
f12594602c
adds a default panic 500 HTTP status code
2022-03-21 09:50:53 -04:00
41155960ea
Merge pull request openziti/fabric#302 from openziti/responder.set.content.length
...
sets content-length http response header
2022-01-06 13:28:25 -05:00
778bb6d57c
changes debug logs to errors, provide fallback content on producer err
2022-01-06 13:21:59 -05:00
0ee7b73e63
adds an error log for HTTP timeouts
2022-01-06 12:04:08 -05:00
f128087d5e
sets content-length http response header
...
Setting the content-length header for HTTP responses allows the golang
net/http library to avoid chunking the response.
2022-01-06 11:51:12 -05:00
52cfbbbe29
Add REST based management API
2021-11-30 13:57:35 -05:00
Andrew Martinez