6a2c82deca
add timeout posture query property, -1 == no timeout
...
Provides a location for future configurable timeouts and allows
SDKs to detect whether no timeout/timeouts are supported.
2021-02-10 17:13:23 -05:00
2360d44b05
moves posture data to not time out
2021-02-10 16:51:40 -05:00
46166db9cc
fixes orphaned ottca enrollments
...
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
5b1101bb24
Merge pull request #505 from openziti/fix.484.edge.router.list
...
fixes #484 adds current identity edge router lookup
2021-02-04 09:28:10 -05:00
2c6814aaa4
edge router enhancements for browZer support ( #499 )
2021-02-04 06:09:46 -05:00
e34d25b0dd
fixes #484 adds current identity edge router lookup
2021-02-03 15:37:15 -05:00
252e105f3c
add typeId to authQuery
2021-01-26 15:12:22 -05:00
4051c47dd5
Merge branch 'main' into mfa
2021-01-26 13:52:59 -05:00
f2431ab9b3
bulk posture response
2021-01-25 13:55:41 -05:00
8d4397c0d9
Merge pull request #474 from openziti/fix.misspelled.builddate
...
fixes buildDate spelling (missing d)
2021-01-20 10:44:57 -05:00
b5b8fa8397
Add doc saying only one check integrity op can run at a time
2021-01-20 10:15:21 -05:00
744fa99b8a
Add check integrity guardrails so we can only run a single operation at a time
2021-01-19 16:18:10 -05:00
4fbacdcdc8
fixes buildDate spelling (missing d)
2021-01-19 14:00:50 -05:00
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
65be49c609
Add appId and appVersion to sdkInfo
2021-01-18 10:38:43 -05:00
807a061a93
adds expiration-seconds and expires-at headers
...
- also adds expiresSeconds to current api session and login
2021-01-14 11:30:44 -05:00
cf66c361f9
adds service updates endpoint stub
2021-01-13 13:49:06 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
5c70087d98
adds GET /protocols to the Edge Rest API
2020-11-20 17:52:05 -05:00
f5e0e1f25e
fixes #424 allow non-admins to list service terminators
2020-11-20 09:46:44 -05:00
2577cc6bd4
fixes #406 adds WindowsServer in addition to Windows
2020-11-12 10:33:19 -05:00
6ad6b3264c
fixes #403
...
Process posture responses now allow an array of digital signer
fingerprints to be submitted and checked.
2020-11-11 21:31:17 -05:00
e0cf6a7ea5
fixes #397 and fixes #398
...
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
53f702c212
Merge pull request #369 from openziti/add.online.status
...
Add.online.status
2020-10-31 08:35:39 -04:00
394a844878
fixes for mop/sdks
...
- case insensitive checks for domain/os
- no minimum mac addresses on posture responses
2020-10-30 14:13:43 -04:00
ac187ffa99
posture check implementation
...
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
c726f158d6
fixes #365 adds hasApiSession and hasEdgeRouterConnection
2020-10-20 15:00:22 -04:00
9216db9b0a
make binding required
2020-10-14 10:42:36 -04:00
568eb129c7
address PR comments
...
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
f0fec7512c
swgger fixes
2020-10-13 08:08:12 -04:00
4fc4aee36c
swagger def for posture checks and types
...
- polymorphic posture checks with copied base entity properties
- go-swagger 0.25 generated api
2020-10-12 07:37:19 -04:00
94bb1b25b6
edge api version support
2020-10-07 07:25:14 -04:00
b23bf3efd8
fix #321 add policy display fields for reads
...
- adds *Display fields for policy list and detail
- adds *Display fields for both set of policy attributes
- adds API tests
2020-10-01 08:09:46 -04:00
50bc204dd5
Add edge terminator validator
2020-09-29 09:27:05 -04:00
50c6b3e4b3
Support identity dial/bind
2020-09-29 09:27:03 -04:00
6814db98c1
adds public ip address for #226
2020-09-09 10:42:20 -04:00
ada72b335b
Merge branch 'master' into e2e.router.termination
2020-07-31 09:50:09 -04:00
bb3ca676e8
Address review comments
2020-07-28 10:14:23 -04:00
951c80b8d0
Integrate data integrity check/repair framework and add REST API. Fixes GH-258
2020-07-28 10:05:46 -04:00
e39c21b6a1
e2e support fixes #173
...
- adds edge level edge_transport xgress
- adds service encyrptionRequired flag (rest API, protobuffs)
- adds edge router encryption checks
2020-07-27 16:18:46 -04:00
1242a1b950
fixes #240
...
- adds spec router
- updates swagger to allow for both JSON and YAML spec bodies
- pulls spec from generated rest server
2020-07-09 09:29:09 -04:00
943ff0e231
Merge pull request #232 from openziti/fix.expiresAt.231
...
fixxes #231 - adds expiresAt properties
2020-07-07 14:05:51 -04:00
fe7031ee2f
Ensure IsOnline is present in common routers. Fixes GH-237
2020-07-07 10:08:21 -04:00
ef82289db9
add expiresAt to ottca
2020-07-01 10:23:15 -04:00
b6a7843a5a
fixxes #231 - adds expiresAt properties
2020-07-01 09:15:04 -04:00
7e9d9a63f1
Fix session create response. fail faster on rotating hs tests
2020-06-22 11:10:09 -04:00
3829ac1f58
Fix policy advice service and also some typos
2020-06-19 15:51:38 -04:00
84e1436679
Add snapshot db API. Fixes GH-206. Update openapi to 0.24
2020-06-19 14:48:46 -04:00
4cff1b8690
move to version map per ekoby request
2020-06-17 16:41:13 -04:00
Andrew Martinez