Paul Lorenz
ba97da239f
Update for system entity changes
2021-03-03 14:51:28 -05:00
Paul Lorenz
735eb1d80f
Move ApiError and FieldError to foundation
2021-03-03 14:44:26 -05:00
Paul Lorenz
8a160d93b1
Fix update terminator. Add test for terminator updates. Remove unused store_events
2021-02-26 09:04:32 -05:00
Andrew Martinez
5ec44c3d3e
add migration to remove api sessions/sessions on migration from 18->19
2021-02-19 09:54:55 -05:00
Andrew Martinez
35fa25d5af
use ast.BoolNodeTrue
2021-02-09 13:55:03 -05:00
Andrew Martinez
46166db9cc
fixes orphaned ottca enrollments
...
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
Andrew Martinez
c23bf9dbcf
fixes os PATCH for posture checks
...
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
Andrew Martinez
4051c47dd5
Merge branch 'main' into mfa
2021-01-26 13:52:59 -05:00
Paul Lorenz
891d8eb5ce
Add service events when configs are updated/deleted. Add service events test
2021-01-19 14:30:34 -05:00
Andrew Martinez
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
Andrew Martinez
65be49c609
Add appId and appVersion to sdkInfo
2021-01-18 10:38:43 -05:00
Paul Lorenz
803eb5d5d6
Move service policy enforcer to use service events
2021-01-15 15:28:59 -05:00
Paul Lorenz
2194d8a2e2
Implement service change notifications
2021-01-15 15:28:59 -05:00
Paul Lorenz
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
Andrew Martinez
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
Andrew Martinez
e0cf6a7ea5
fixes #397 and fixes #398
...
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
Andrew
53f702c212
Merge pull request #369 from openziti/add.online.status
...
Add.online.status
2020-10-31 08:35:39 -04:00
Andrew Martinez
ac187ffa99
posture check implementation
...
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
Shawn Carey
4bb404e953
Ziti tunnel.cfgtype.v2.0 ( #357 )
...
* add client.v2.0 tunneler configuration type.
* renamed cfgtype
* set db version to 14
* added host.v1 configuration type
2020-10-26 12:14:29 -04:00
Andrew Martinez
7cc95e3456
fixes #372 ensures v13 dbs have posture check types
...
- adds posture check types to init
- on v12/v13 migrations, posture check types are checked and added if
necessary
2020-10-21 11:40:06 -04:00
Andrew Martinez
c726f158d6
fixes #365 adds hasApiSession and hasEdgeRouterConnection
2020-10-20 15:00:22 -04:00
Andrew Martinez
568eb129c7
address PR comments
...
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
Andrew Martinez
5e834504ec
adds Edge API routing
...
- adds mocked posture data for identities
- refines OS
- adds migrations for posture check types
2020-10-13 08:20:57 -04:00
Andrew Martinez
4fc4aee36c
swagger def for posture checks and types
...
- polymorphic posture checks with copied base entity properties
- go-swagger 0.25 generated api
2020-10-12 07:37:19 -04:00
Paul Lorenz
50bc204dd5
Add edge terminator validator
2020-09-29 09:27:05 -04:00
Paul Lorenz
50c6b3e4b3
Support identity dial/bind
2020-09-29 09:27:03 -04:00
Andrew Martinez
6814db98c1
adds public ip address for #226
2020-09-09 10:42:20 -04:00
Paul Lorenz
734e9a5542
Fix service policy migration. Update for terminator precendence changes. Log panic stacks. Fixes GH-291
2020-09-03 10:22:27 -04:00
Paul Lorenz
c179f87538
Improve session create performance. Closes GH-281
2020-08-20 12:35:04 -04:00
Paul Lorenz
e2ad712948
Add edge session events API. Closes GH-229
2020-08-11 14:00:57 -04:00
Paul Lorenz
a340381c70
Add core events framework
2020-08-11 14:00:40 -04:00
Paul Lorenz
6fc2215d26
Fix service policy types. Add debug util for debugging bbolt datastores. Fixes GH-269
2020-08-04 15:33:30 -04:00
Paul Lorenz
b8a88f4d90
Fix transit/edge router store overlap. Add name index cleanup migration ( #264 )
...
* Fix transit/edge router store overlap. Add name index cleanup migration
2020-08-03 14:26:12 -04:00
Andrew M
ada72b335b
Merge branch 'master' into e2e.router.termination
2020-07-31 09:50:09 -04:00
Paul Lorenz
951c80b8d0
Integrate data integrity check/repair framework and add REST API. Fixes GH-258
2020-07-28 10:05:46 -04:00
Paul Lorenz
c8b7a8d8c7
Implemented policy model performance improvements. Fixes GH-256
2020-07-28 10:03:36 -04:00
Paul Lorenz
14eb819b30
Model performance test, work in progress
2020-07-28 10:01:34 -04:00
Andrew M
e39c21b6a1
e2e support fixes #173
...
- adds edge level edge_transport xgress
- adds service encyrptionRequired flag (rest API, protobuffs)
- adds edge router encryption checks
2020-07-27 16:18:46 -04:00
Paul Lorenz
6795f7c520
Fix query symbol names. Fix fingerprint formats in migration
2020-06-19 16:52:05 -04:00
Paul Lorenz
81b5a4ef76
Move service and router names to fabric
2020-06-19 14:10:31 -04:00
Andrew M
5ddefc25c2
Merge branch 'master' into use.shortids
2020-06-17 17:24:24 -04:00
Paul Lorenz
64ce3a92df
move edge routers under fabric routers. Fixes GH-144
2020-06-17 16:36:14 -04:00
Andrew M
0817b9b6c5
Merge branch 'master' into use.shortids
2020-06-17 13:49:20 -04:00
Andrew M
6571dbd72c
use shortids
2020-06-16 17:33:45 -04:00
Andrew M
0923db08d5
Merge branch 'master' into open.api
2020-06-15 13:49:23 -04:00
Paul Lorenz
26850875ee
Remove cluster and appwan migration code
2020-06-14 22:57:11 -04:00
Paul Lorenz
a3f9e3c978
Remove postgres code. Fixes GH-195
2020-06-10 15:52:45 -04:00
Paul Lorenz
f0eb83e7fe
Update for API changes and fix close bug. Fixes GH-189 ( #190 )
...
* Update for API changes and fix close bug. Fixes GH-189
2020-06-09 20:21:40 -04:00
Andrew M
3087972172
all conversion work
...
- remove old JSON schema, unsused code
- remove unused variables from base router functions
- rework all API entities
- rework all links
- fix lint issues
- adds error conversion logic
- update tests as needed
- fix up go test
- fix backwards compat w/ non json enroller
2020-06-09 14:11:23 -04:00
Andrew M
b6d9efaf8c
fixed #183 , move to openziti
2020-05-26 17:37:35 -04:00