5c27d8308c
Update enrollments to use raft commands. Fixes #1130
2022-08-04 10:14:39 -04:00
fe1b0463d7
Update authenticators to use raft commands. Fixes #1099
2022-08-04 10:14:21 -04:00
f60c06491e
Update MFA to use raft commands. Closes #1128
2022-08-02 14:56:51 -04:00
d068397cd0
Rename controller model handler types to manager. Fixes #1124
2022-08-01 14:00:01 -04:00
cb0a634414
Update edge services to use raft commands. Fixes #1118
2022-07-29 15:56:09 -04:00
3b57f19d61
Convert identity type handler to manager Fixes #1117
2022-07-29 15:36:14 -04:00
0e827df0e2
Convert external jwt signers to raft commands. Fixes #1116
2022-07-29 14:56:56 -04:00
9303b24547
Update service policies to use raft commands. Fixes #1111
2022-07-28 18:40:47 -04:00
d0ed5aa00e
Update service edge router policies to use raft commands. Fixes #1110
2022-07-28 18:31:19 -04:00
e198f16c3d
Convert edge router policies to raft commands. Fixes #1108
2022-07-28 18:30:26 -04:00
6b9cfeac4b
Convert CAs to use raft style commands. Fixes #1100
2022-07-27 14:46:03 -04:00
605935c224
Update config types to use raft style commands. Fixes #1101
2022-07-27 14:45:22 -04:00
387d54adb1
Handles changes to UpdatedFields and EntityManager. Consolidate bolt
...
sink/source to edgeEntity. Make patch conversion method optional
2022-07-27 11:33:37 -04:00
226e87d642
Convert auth policies to use raft commands. Fixes #1097
2022-07-20 16:58:34 -04:00
bae7e40b61
Update for foundation changes
2022-07-01 15:55:30 -04:00
12df770d04
Update copyright
2022-06-30 17:45:08 -04:00
91ea3816b8
Update for terminator terminology changes
2022-06-22 16:24:01 -04:00
7d017ba34a
addresses #1064 name on edge router patch can not be nil
2022-06-22 12:14:29 -04:00
be7f82d149
Fix tag update on edge router with PATCH. Fixes #1043
2022-06-10 14:15:09 -04:00
e6c938808f
adds missing /identity/:id/enrollments link
2022-06-08 14:25:20 -04:00
39460988df
adds identity enrollments endpoint
...
- removes unused details field
- adds tests, adds validation formats
2022-06-08 13:53:23 -04:00
9ae2eb825c
adds jwks support
...
- ext-jwt-signers now support jwks endpoints in addition to static
certificates
- ext-jwt-signers now require either kid+cert or jkwsEndpoint
- ext-jwt-signers now requires issuer and audience fields
- jwksEndpoints are initially cached and will be revalidated on invalid
auth once every 5s at most
- adds more external id tests
2022-06-07 09:57:22 -04:00
f68321d19c
fixes openziti/edge#1035 defaults from nil to empty slice
2022-06-06 16:17:02 -04:00
0014b39f7e
update xweb to v2
2022-06-06 14:33:42 -04:00
2f6a3bc828
Update handler -> manager for base types and config
2022-06-02 00:05:54 -04:00
7cf9dc135d
Initial support for raft and command style architecture
2022-06-01 23:52:07 -04:00
7381423974
use cmap generics, update fabric
2022-05-27 11:02:51 -04:00
7c9dda9191
Merge pull request #1019 from openziti/update.fabric.xweb.move
...
updates fabric w/ xweb moved out
2022-05-27 08:59:26 -04:00
601f73e7fb
fixes post/update ripple breakage
2022-05-26 17:16:02 -04:00
6fcde2ee3c
fix scenarios where nil or non map is provided in data causes a panic
...
- fixes edge #1020
- adds higher level error
- adds store level error
2022-05-26 17:03:43 -04:00
47b210c67b
updates fabric w/ xweb moved out
2022-05-26 11:27:09 -04:00
c5f156dd9e
adds x509 claims support for external ids to CAs
...
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
72729fd731
adds the ability to create identity enrollments
2022-05-12 12:40:49 -04:00
de9cd7298f
Merge pull request #985 from openziti/adds.authenticator.enrollment.reissue
...
Adds authenticato re-enrollment
2022-05-06 10:37:53 -04:00
0243212f83
Use ZitiSession const from golang sdk instead of foundation (so we can remove it from foundation)
2022-05-02 17:20:03 -04:00
fb1bff0083
adds re-enrollment for existing authenticators
...
- REST API Endpoints in Management API
- adds JWT to Management API enrollments endpoint
2022-04-21 15:01:28 -04:00
642dec4c25
adds refresh expired enrollment logic and tests
2022-04-20 16:13:41 -04:00
59de4af681
adds ids to identity authenticator detail
2022-04-13 14:20:10 -04:00
8d8a2503e4
fixes issues where external ids were not handled on display/update
2022-04-12 09:46:41 -04:00
c32fa95ca8
Merge pull request #961 from openziti/add.ext.jwt.aud.iss.checks
...
adds optional issuer and audience properties to ext jwt signers
2022-04-12 08:54:53 -04:00
59af07dcd0
fixes is admin not set on updates (put/patch)
2022-04-08 11:20:15 -04:00
ec51635f26
adds optional issuer and audience properties to ext jwt signers
2022-04-06 15:48:17 -04:00
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
ba84d2fae9
adds settable kid to ext jwt signers, fixes default auth policy
2022-03-30 13:51:23 -04:00
5129f3c8d7
adds partial authentication enforcement
...
- required ext jwt signer requires bearer token on requests
- adds auth query output for ext jwt
- enforces requireTotp auth policy
- allows partial auth to setup MFA but not remove
2022-03-30 10:10:52 -04:00
708dcfe0c9
adds auth policy / disabled identity auth logic
2022-03-29 14:26:04 -04:00
329d1eb4d1
Update deps and fix test
2022-03-28 18:19:14 -04:00
a34ae130b8
adds externalId, plumbs auth url, use external id
...
- adding tests and boundaries to values
- updating foundation
- squash, rebase
2022-03-28 10:54:27 -04:00
99e3b283b6
adds auth policy CRUD, does not affect authentication
2022-03-25 14:40:07 -04:00
1459cd3b7b
Merge pull request #918 from openziti/add.ext.jwt.authenticator
...
adds ext-jwt authenticator
2022-03-21 15:56:04 -04:00
Paul Lorenz