219c19c8e7
fix map passed by reference in shallow struct copy
2021-03-08 15:58:57 -05:00
fff256487c
status to state in broker
2021-03-08 15:04:51 -05:00
90ca54adb8
adds thread safe router state
...
Router state used to be stored and accessed in a thread unsafe way.
State is now locks on a mutex for setting values and values are copied
out for referencing.
2021-03-08 14:55:36 -05:00
3edbc4a16e
reduce from 80 bytes to 80 bits
...
Our secrets were huuuuuge.
2021-03-05 10:03:50 -05:00
1b253839fc
Merge branch 'main' into add.session.route
2021-03-04 09:47:10 -05:00
5eb8649186
move routePath to /sessions/id/route-path
2021-03-04 09:44:12 -05:00
ba97da239f
Update for system entity changes
2021-03-03 14:51:28 -05:00
735eb1d80f
Move ApiError and FieldError to foundation
2021-03-03 14:44:26 -05:00
005234cb39
add route path to session
2021-03-01 18:02:25 -05:00
d72d20966a
Merge pull request #555 from openziti/fix-session-client-id
...
Fix fabric session client id. should be edge session id not token. Ad…
2021-02-26 09:51:23 -05:00
d64d18308d
Merge pull request #554 from openziti/fix-update-terminator
...
Fix update terminator. Add test for terminator updates. Remove unused…
2021-02-26 09:47:04 -05:00
560137fb65
Fix fabric session client id. should be edge session id not token. Add test for events.
2021-02-26 09:38:13 -05:00
8a160d93b1
Fix update terminator. Add test for terminator updates. Remove unused store_events
2021-02-26 09:04:32 -05:00
7e60583043
fix swagger parameter names, allow mfa codes on headers for get/delete
...
- swagger copy pasta was using the same parameter name for everything,
"body", which made error messages read "error in body for body"
- parameter rename ripples into parameter property definitions
- allow mfa codes in GET and DELETe as libuv doesn't allow them to have
bodies (-.-)
2021-02-25 14:23:12 -05:00
75029f8600
centralize edge router properties, add supportedProtocols to edge
...
session
- centralized edge router properties so adding/altering affects all
edge router output
- adds supportedProtocols to edge session create response
- mark urls on edge session create response as deprecated
2021-02-23 15:07:43 -05:00
b784577f36
add new error state for router sync, move defers to catch router info
2021-02-19 20:58:53 -05:00
69bb67d237
fix exiting workers, panic recovery is unrelate but a good change
2021-02-19 20:14:24 -05:00
1eb262c734
Merge pull request #544 from openziti/fix.er.connect.disconnect.panic
...
ignore duplicate connecting routers, do not dereference er hostnames
2021-02-19 11:31:22 -05:00
4afc0bd0b6
fix dupe connection testing by looking at strat stat not network state
2021-02-19 11:18:09 -05:00
a51cf270f2
ignore duplicate connecting routers, do not dereference er hostnames
...
hostnames may be a nil pointer at times now due to the fact that edge
routers may be waiting to sync and may be "online" but edge hellos
have not been exchanged.
2021-02-19 10:19:26 -05:00
5ec44c3d3e
add migration to remove api sessions/sessions on migration from 18->19
2021-02-19 09:54:55 -05:00
155bbd8217
Validate sessions on controller instead of edge router
2021-02-17 20:38:13 -05:00
707a5a7362
Merge branch 'main' into additional.posture.os.unit.tests
2021-02-17 13:11:04 -05:00
4b75b638da
use send instead of send w/ tx
2021-02-17 13:02:49 -05:00
d2774ae41d
fix lint errors
2021-02-17 12:55:58 -05:00
919d7a3d6b
add hearbeat invalid api token delete
2021-02-17 12:19:06 -05:00
7eb3699f9b
additional os posture checks
2021-02-16 13:24:21 -05:00
74d4187f22
documentation, split shared options for instant sync, renames
2021-02-15 14:56:56 -05:00
f55751c77e
fix worker count
2021-02-15 13:59:51 -05:00
d76fcbc168
merge stops in instant strat, add broker stop to shutdown
2021-02-15 13:39:07 -05:00
fdb2fb35ad
rename routerTx to routerSender
2021-02-15 13:22:07 -05:00
a8f1b8b79a
moves sync strat/state to headers
2021-02-15 13:22:07 -05:00
d07618c9d5
modular edge router sync
...
- edge router sync is now modular and can have different strategies
- plans to make this configurabe in the future with multiple strat
- legacy strategy is called "instant" and is the only option
- instant strat now supports control signaling and resync requests
- edge routers now do not remove connections till after a full sync
- added the ability for the controller to report the er sync status
- added er syn status to GET /edge-routers list and detail
- improved log output in sync logic
2021-02-15 13:22:07 -05:00
ecc404ab8a
Merge pull request #494 from openziti/remove.posture.timer
...
moves posture data to not time out
2021-02-11 14:12:12 -05:00
6a2c82deca
add timeout posture query property, -1 == no timeout
...
Provides a location for future configurable timeouts and allows
SDKs to detect whether no timeout/timeouts are supported.
2021-02-10 17:13:23 -05:00
2360d44b05
moves posture data to not time out
2021-02-10 16:51:40 -05:00
2c1a9dd82b
ignores dupe router startup
...
A second edge router starting up could offline the original according to
the edge. This would cause issues w/ API Session and Session
distribution.
2021-02-10 10:58:50 -05:00
5b5fe97961
fix ptr to string in error message
2021-02-09 14:01:20 -05:00
9fab8e6ed0
fix formatting message
...
Some deps altered after a go test ./... and go mod tidy
2021-02-09 13:57:49 -05:00
35fa25d5af
use ast.BoolNodeTrue
2021-02-09 13:55:03 -05:00
46166db9cc
fixes orphaned ottca enrollments
...
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
c23bf9dbcf
fixes os PATCH for posture checks
...
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
18513f7ee4
Merge pull request #504 from openziti/api.session.performance
...
moves hasApiSession lookup to api model and limit 1
2021-02-04 09:32:01 -05:00
5b1101bb24
Merge pull request #505 from openziti/fix.484.edge.router.list
...
fixes #484 adds current identity edge router lookup
2021-02-04 09:28:10 -05:00
65832b8da5
fix missing formatted log call, spelling
2021-02-04 09:24:00 -05:00
2c6814aaa4
edge router enhancements for browZer support ( #499 )
2021-02-04 06:09:46 -05:00
e34d25b0dd
fixes #484 adds current identity edge router lookup
2021-02-03 15:37:15 -05:00
5c47c31016
moves hasApiSession lookup to api model and limit 1
...
This move isolates the cost of hasApiSession to the identity endpoint
lookups in the REST API. Being in the model caused this cost to be
shared on all identity lookups for internal logic.
Limit 1 is an attempt to reduce the cost of searching over a large set.
API Sessions do not have an index on identity id so there is still some
cost.
2021-02-03 14:01:53 -05:00
5de4d629f3
Merge pull request #498 from openziti/add.server.header
...
fixes #497 send session header
2021-02-01 15:07:24 -05:00
df1f2a1a75
fixes #497 send session header
...
- add server headers during HTTP handler delegation rather than at HTTP
response time
- remove all old header setting locations
- remove unused status writer and other response code
- add manual set on authentication for session headers
2021-02-01 14:28:29 -05:00
Andrew Martinez