5c27d8308c
Update enrollments to use raft commands. Fixes #1130
2022-08-04 10:14:39 -04:00
fe1b0463d7
Update authenticators to use raft commands. Fixes #1099
2022-08-04 10:14:21 -04:00
f60c06491e
Update MFA to use raft commands. Closes #1128
2022-08-02 14:56:51 -04:00
d068397cd0
Rename controller model handler types to manager. Fixes #1124
2022-08-01 14:00:01 -04:00
cb0a634414
Update edge services to use raft commands. Fixes #1118
2022-07-29 15:56:09 -04:00
748036985d
Convert posture check types handler to manager. Fixes #1120
2022-07-29 15:38:58 -04:00
3b57f19d61
Convert identity type handler to manager Fixes #1117
2022-07-29 15:36:14 -04:00
0e827df0e2
Convert external jwt signers to raft commands. Fixes #1116
2022-07-29 14:56:56 -04:00
9303b24547
Update service policies to use raft commands. Fixes #1111
2022-07-28 18:40:47 -04:00
d0ed5aa00e
Update service edge router policies to use raft commands. Fixes #1110
2022-07-28 18:31:19 -04:00
e198f16c3d
Convert edge router policies to raft commands. Fixes #1108
2022-07-28 18:30:26 -04:00
22d36f5115
Merge pull request #1109 from openziti/raft-cas
...
Convert CAs to use raft style commands. Fixes #1100
2022-07-27 15:48:42 -04:00
f999fae248
Merge pull request #1106 from openziti/raft-config-types
...
Raft config types
2022-07-27 15:48:28 -04:00
8de719e31d
Merge pull request #1105 from openziti/model-refactor
...
Handles changes to UpdatedFields and EntityManager. Consolidate bolt
2022-07-27 15:48:00 -04:00
6b9cfeac4b
Convert CAs to use raft style commands. Fixes #1100
2022-07-27 14:46:03 -04:00
605935c224
Update config types to use raft style commands. Fixes #1101
2022-07-27 14:45:22 -04:00
387d54adb1
Handles changes to UpdatedFields and EntityManager. Consolidate bolt
...
sink/source to edgeEntity. Make patch conversion method optional
2022-07-27 11:33:37 -04:00
9e6cfaa47d
fixes #1103 allow multiple advertise hostnames for listeners
2022-07-26 16:06:47 -04:00
226e87d642
Convert auth policies to use raft commands. Fixes #1097
2022-07-20 16:58:34 -04:00
bae7e40b61
Update for foundation changes
2022-07-01 15:55:30 -04:00
12df770d04
Update copyright
2022-06-30 17:45:08 -04:00
b53fa0cd98
Remove event log and georegions
2022-06-30 10:35:19 -04:00
91ea3816b8
Update for terminator terminology changes
2022-06-22 16:24:01 -04:00
9ae2eb825c
adds jwks support
...
- ext-jwt-signers now support jwks endpoints in addition to static
certificates
- ext-jwt-signers now require either kid+cert or jkwsEndpoint
- ext-jwt-signers now requires issuer and audience fields
- jwksEndpoints are initially cached and will be revalidated on invalid
auth once every 5s at most
- adds more external id tests
2022-06-07 09:57:22 -04:00
0c66342f8d
Update deps and address review comments
2022-06-02 23:15:23 -04:00
2f6a3bc828
Update handler -> manager for base types and config
2022-06-02 00:05:54 -04:00
7cf9dc135d
Initial support for raft and command style architecture
2022-06-01 23:52:07 -04:00
7381423974
use cmap generics, update fabric
2022-05-27 11:02:51 -04:00
c5f156dd9e
adds x509 claims support for external ids to CAs
...
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
35cf029952
fix partial update panic for ext jwt update events
2022-05-20 14:51:09 -04:00
a09104c3ea
remove debug output
2022-05-20 14:35:26 -04:00
2a6ea4944d
adds ext jwt update event listning for jwt auth mod cache
2022-05-20 14:29:13 -04:00
72729fd731
adds the ability to create identity enrollments
2022-05-12 12:40:49 -04:00
de9cd7298f
Merge pull request #985 from openziti/adds.authenticator.enrollment.reissue
...
Adds authenticato re-enrollment
2022-05-06 10:37:53 -04:00
fa9a72a240
adds nil checks on identity lookups
2022-04-22 12:20:15 -04:00
ab7b2e80fd
use centralized logic to add signers for cache load and live def
2022-04-21 15:06:18 -04:00
fb1bff0083
adds re-enrollment for existing authenticators
...
- REST API Endpoints in Management API
- adds JWT to Management API enrollments endpoint
2022-04-21 15:01:28 -04:00
b2f44c949b
Merge pull request #982 from openziti/adds.enrollment.refresh.logic
...
adds refresh expired enrollment logic and tests
2022-04-21 11:03:35 -04:00
afd39af571
fixes ext jwt startup cache to use kid not fingerprint
2022-04-21 10:15:23 -04:00
642dec4c25
adds refresh expired enrollment logic and tests
2022-04-20 16:13:41 -04:00
c32fa95ca8
Merge pull request #961 from openziti/add.ext.jwt.aud.iss.checks
...
adds optional issuer and audience properties to ext jwt signers
2022-04-12 08:54:53 -04:00
59af07dcd0
fixes is admin not set on updates (put/patch)
2022-04-08 11:20:15 -04:00
ec51635f26
adds optional issuer and audience properties to ext jwt signers
2022-04-06 15:48:17 -04:00
5f62d05a9a
Merge pull request #952 from openziti/update-deps
...
Update to transport and storage libs. Update workflows
2022-03-31 11:14:29 -04:00
be958338b4
add error return on err in cert auth
2022-03-31 10:38:30 -04:00
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
ba84d2fae9
adds settable kid to ext jwt signers, fixes default auth policy
2022-03-30 13:51:23 -04:00
5129f3c8d7
adds partial authentication enforcement
...
- required ext jwt signer requires bearer token on requests
- adds auth query output for ext jwt
- enforces requireTotp auth policy
- allows partial auth to setup MFA but not remove
2022-03-30 10:10:52 -04:00
708dcfe0c9
adds auth policy / disabled identity auth logic
2022-03-29 14:26:04 -04:00
a34ae130b8
adds externalId, plumbs auth url, use external id
...
- adding tests and boundaries to values
- updating foundation
- squash, rebase
2022-03-28 10:54:27 -04:00
Paul Lorenz