6a2c82deca
add timeout posture query property, -1 == no timeout
...
Provides a location for future configurable timeouts and allows
SDKs to detect whether no timeout/timeouts are supported.
2021-02-10 17:13:23 -05:00
5b5fe97961
fix ptr to string in error message
2021-02-09 14:01:20 -05:00
9fab8e6ed0
fix formatting message
...
Some deps altered after a go test ./... and go mod tidy
2021-02-09 13:57:49 -05:00
46166db9cc
fixes orphaned ottca enrollments
...
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
18513f7ee4
Merge pull request #504 from openziti/api.session.performance
...
moves hasApiSession lookup to api model and limit 1
2021-02-04 09:32:01 -05:00
65832b8da5
fix missing formatted log call, spelling
2021-02-04 09:24:00 -05:00
e34d25b0dd
fixes #484 adds current identity edge router lookup
2021-02-03 15:37:15 -05:00
5c47c31016
moves hasApiSession lookup to api model and limit 1
...
This move isolates the cost of hasApiSession to the identity endpoint
lookups in the REST API. Being in the model caused this cost to be
shared on all identity lookups for internal logic.
Limit 1 is an attempt to reduce the cost of searching over a large set.
API Sessions do not have an index on identity id so there is still some
cost.
2021-02-03 14:01:53 -05:00
5de4d629f3
Merge pull request #498 from openziti/add.server.header
...
fixes #497 send session header
2021-02-01 15:07:24 -05:00
df1f2a1a75
fixes #497 send session header
...
- add server headers during HTTP handler delegation rather than at HTTP
response time
- remove all old header setting locations
- remove unused status writer and other response code
- add manual set on authentication for session headers
2021-02-01 14:28:29 -05:00
cab720ed47
limit public query options to 500 whe "none" is specified
2021-02-01 09:27:55 -05:00
252e105f3c
add typeId to authQuery
2021-01-26 15:12:22 -05:00
4051c47dd5
Merge branch 'main' into mfa
2021-01-26 13:52:59 -05:00
5e5aa87c39
Merge pull request #485 from openziti/bulk.posture.response
...
bulk posture response endpoint
2021-01-26 09:11:27 -05:00
f2431ab9b3
bulk posture response
2021-01-25 13:55:41 -05:00
e1e31c2ecb
Fix edge-router association lists
2021-01-23 14:54:03 -05:00
8d4397c0d9
Merge pull request #474 from openziti/fix.misspelled.builddate
...
fixes buildDate spelling (missing d)
2021-01-20 10:44:57 -05:00
f5dc8e5799
Fix return status
2021-01-20 10:12:39 -05:00
4882da1970
Add service list timer. Fix tunneler leak
2021-01-20 09:29:33 -05:00
744fa99b8a
Add check integrity guardrails so we can only run a single operation at a time
2021-01-19 16:18:10 -05:00
4fbacdcdc8
fixes buildDate spelling (missing d)
2021-01-19 14:00:50 -05:00
2d61799c24
add posture check MFA tests
2021-01-19 08:37:29 -05:00
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
65be49c609
Add appId and appVersion to sdkInfo
2021-01-18 10:38:43 -05:00
c370dff45c
Notify clients to refresh after restart
2021-01-15 16:20:13 -05:00
803eb5d5d6
Move service policy enforcer to use service events
2021-01-15 15:28:59 -05:00
2194d8a2e2
Implement service change notifications
2021-01-15 15:28:59 -05:00
807a061a93
adds expiration-seconds and expires-at headers
...
- also adds expiresSeconds to current api session and login
2021-01-14 11:30:44 -05:00
cf66c361f9
adds service updates endpoint stub
2021-01-13 13:49:06 -05:00
014b0f3876
fixes REST API enrollment details
2021-01-12 17:35:45 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
4498318767
Make query parse errors into ApiErrors so they're not 500 errors ( #443 )
2020-12-16 11:30:51 -05:00
7329106691
Use manual start for tunnel hosting
2020-12-16 11:08:06 -05:00
5c70087d98
adds GET /protocols to the Edge Rest API
2020-11-20 17:52:05 -05:00
f5e0e1f25e
fixes #424 allow non-admins to list service terminators
2020-11-20 09:46:44 -05:00
6ad6b3264c
fixes #403
...
Process posture responses now allow an array of digital signer
fingerprints to be submitted and checked.
2020-11-11 21:31:17 -05:00
e0cf6a7ea5
fixes #397 and fixes #398
...
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
53f702c212
Merge pull request #369 from openziti/add.online.status
...
Add.online.status
2020-10-31 08:35:39 -04:00
394a844878
fixes for mop/sdks
...
- case insensitive checks for domain/os
- no minimum mac addresses on posture responses
2020-10-30 14:13:43 -04:00
ac187ffa99
posture check implementation
...
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
c726f158d6
fixes #365 adds hasApiSession and hasEdgeRouterConnection
2020-10-20 15:00:22 -04:00
129bff6d8f
Merge pull request #348 from openziti/terminator.binding.required
...
make binding required on terminators
2020-10-14 14:43:42 -04:00
73dc0f3b0b
Narrow json types for list items ( #346 )
...
* Narrow json types for list items
2020-10-14 11:17:55 -04:00
9216db9b0a
make binding required
2020-10-14 10:42:36 -04:00
0fb231ca2d
Merge pull request #344 from openziti/add.posture.check.api.logic
...
adds Edge API posture check logic
2020-10-13 17:23:47 -04:00
568eb129c7
address PR comments
...
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
8981128ee1
Fix slice allocation to set capacity not length ( #345 )
2020-10-13 14:07:24 -04:00
5e834504ec
adds Edge API routing
...
- adds mocked posture data for identities
- refines OS
- adds migrations for posture check types
2020-10-13 08:20:57 -04:00
f0fec7512c
swgger fixes
2020-10-13 08:08:12 -04:00
Andrew Martinez