Commit Graph

93 Commits

Author SHA1 Message Date
Paul Lorenz ba97da239f Update for system entity changes 2021-03-03 14:51:28 -05:00
Paul Lorenz 735eb1d80f Move ApiError and FieldError to foundation 2021-03-03 14:44:26 -05:00
Paul Lorenz 8a160d93b1 Fix update terminator. Add test for terminator updates. Remove unused store_events 2021-02-26 09:04:32 -05:00
Andrew Martinez 5ec44c3d3e add migration to remove api sessions/sessions on migration from 18->19 2021-02-19 09:54:55 -05:00
Andrew Martinez 35fa25d5af use ast.BoolNodeTrue 2021-02-09 13:55:03 -05:00
Andrew Martinez 46166db9cc fixes orphaned ottca enrollments
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
Andrew Martinez c23bf9dbcf fixes os PATCH for posture checks
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
Andrew Martinez 4051c47dd5 Merge branch 'main' into mfa 2021-01-26 13:52:59 -05:00
Paul Lorenz 891d8eb5ce Add service events when configs are updated/deleted. Add service events test 2021-01-19 14:30:34 -05:00
Andrew Martinez 308d7f3a10 mfa initial
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
Andrew Martinez 65be49c609 Add appId and appVersion to sdkInfo 2021-01-18 10:38:43 -05:00
Paul Lorenz 803eb5d5d6 Move service policy enforcer to use service events 2021-01-15 15:28:59 -05:00
Paul Lorenz 2194d8a2e2 Implement service change notifications 2021-01-15 15:28:59 -05:00
Paul Lorenz 5efbbf0942 Add health check implementation for tunnelers and add default hosting precedence and cost to identity 2021-01-12 11:00:43 -05:00
Andrew Martinez a3789c063a adds support of API Session Certificates
- adds ability for any authenticated API Session to create ephemeral
 certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
  controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
Andrew Martinez e0cf6a7ea5 fixes #397 and fixes #398
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
Andrew 53f702c212 Merge pull request #369 from openziti/add.online.status
Add.online.status
2020-10-31 08:35:39 -04:00
Andrew Martinez ac187ffa99 posture check implementation
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
Shawn Carey 4bb404e953 Ziti tunnel.cfgtype.v2.0 (#357)
* add client.v2.0 tunneler configuration type.
* renamed cfgtype
* set db version to 14
* added host.v1 configuration type
2020-10-26 12:14:29 -04:00
Andrew Martinez 7cc95e3456 fixes #372 ensures v13 dbs have posture check types
- adds posture check types to init
- on v12/v13 migrations, posture check types are checked and added if
  necessary
2020-10-21 11:40:06 -04:00
Andrew Martinez c726f158d6 fixes #365 adds hasApiSession and hasEdgeRouterConnection 2020-10-20 15:00:22 -04:00
Andrew Martinez 568eb129c7 address PR comments
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
Andrew Martinez 5e834504ec adds Edge API routing
- adds mocked posture data for identities
- refines OS
- adds migrations for posture check types
2020-10-13 08:20:57 -04:00
Andrew Martinez 4fc4aee36c swagger def for posture checks and types
- polymorphic posture checks with copied base entity properties
- go-swagger 0.25 generated api
2020-10-12 07:37:19 -04:00
Paul Lorenz 50bc204dd5 Add edge terminator validator 2020-09-29 09:27:05 -04:00
Paul Lorenz 50c6b3e4b3 Support identity dial/bind 2020-09-29 09:27:03 -04:00
Andrew Martinez 6814db98c1 adds public ip address for #226 2020-09-09 10:42:20 -04:00
Paul Lorenz 734e9a5542 Fix service policy migration. Update for terminator precendence changes. Log panic stacks. Fixes GH-291 2020-09-03 10:22:27 -04:00
Paul Lorenz c179f87538 Improve session create performance. Closes GH-281 2020-08-20 12:35:04 -04:00
Paul Lorenz e2ad712948 Add edge session events API. Closes GH-229 2020-08-11 14:00:57 -04:00
Paul Lorenz a340381c70 Add core events framework 2020-08-11 14:00:40 -04:00
Paul Lorenz 6fc2215d26 Fix service policy types. Add debug util for debugging bbolt datastores. Fixes GH-269 2020-08-04 15:33:30 -04:00
Paul Lorenz b8a88f4d90 Fix transit/edge router store overlap. Add name index cleanup migration (#264)
* Fix transit/edge router store overlap. Add name index cleanup migration
2020-08-03 14:26:12 -04:00
Andrew M ada72b335b Merge branch 'master' into e2e.router.termination 2020-07-31 09:50:09 -04:00
Paul Lorenz 951c80b8d0 Integrate data integrity check/repair framework and add REST API. Fixes GH-258 2020-07-28 10:05:46 -04:00
Paul Lorenz c8b7a8d8c7 Implemented policy model performance improvements. Fixes GH-256 2020-07-28 10:03:36 -04:00
Paul Lorenz 14eb819b30 Model performance test, work in progress 2020-07-28 10:01:34 -04:00
Andrew M e39c21b6a1 e2e support fixes #173
- adds edge level edge_transport xgress
- adds service encyrptionRequired flag (rest API, protobuffs)
- adds edge router encryption checks
2020-07-27 16:18:46 -04:00
Paul Lorenz 6795f7c520 Fix query symbol names. Fix fingerprint formats in migration 2020-06-19 16:52:05 -04:00
Paul Lorenz 81b5a4ef76 Move service and router names to fabric 2020-06-19 14:10:31 -04:00
Andrew M 5ddefc25c2 Merge branch 'master' into use.shortids 2020-06-17 17:24:24 -04:00
Paul Lorenz 64ce3a92df move edge routers under fabric routers. Fixes GH-144 2020-06-17 16:36:14 -04:00
Andrew M 0817b9b6c5 Merge branch 'master' into use.shortids 2020-06-17 13:49:20 -04:00
Andrew M 6571dbd72c use shortids 2020-06-16 17:33:45 -04:00
Andrew M 0923db08d5 Merge branch 'master' into open.api 2020-06-15 13:49:23 -04:00
Paul Lorenz 26850875ee Remove cluster and appwan migration code 2020-06-14 22:57:11 -04:00
Paul Lorenz a3f9e3c978 Remove postgres code. Fixes GH-195 2020-06-10 15:52:45 -04:00
Paul Lorenz f0eb83e7fe Update for API changes and fix close bug. Fixes GH-189 (#190)
* Update for API changes and fix close bug. Fixes GH-189
2020-06-09 20:21:40 -04:00
Andrew M 3087972172 all conversion work
- remove old JSON schema, unsused code
- remove unused variables from base router functions
- rework all API entities
- rework all links
- fix lint issues
- adds error conversion logic
- update tests as needed
- fix up go test
- fix backwards compat w/ non json enroller
2020-06-09 14:11:23 -04:00
Andrew M b6d9efaf8c fixed #183, move to openziti 2020-05-26 17:37:35 -04:00