Commit Graph

232 Commits

Author SHA1 Message Date
Andrew Martinez 252e105f3c add typeId to authQuery 2021-01-26 15:12:22 -05:00
Andrew Martinez ab9e19f485 fix unit tests 2021-01-26 14:33:34 -05:00
Andrew Martinez a4a872c377 remove test sleeps, use const for window size 2021-01-26 14:08:16 -05:00
Andrew Martinez 4051c47dd5 Merge branch 'main' into mfa 2021-01-26 13:52:59 -05:00
Andrew 5e5aa87c39 Merge pull request #485 from openziti/bulk.posture.response
bulk posture response endpoint
2021-01-26 09:11:27 -05:00
Andrew Martinez f2431ab9b3 bulk posture response 2021-01-25 13:55:41 -05:00
Paul Lorenz e1e31c2ecb Fix edge-router association lists 2021-01-23 14:54:03 -05:00
Andrew Martinez d6a5f329c5 fixes #477 add configurable http timeouts 2021-01-21 14:09:42 -05:00
Andrew 8d4397c0d9 Merge pull request #474 from openziti/fix.misspelled.builddate
fixes buildDate spelling (missing d)
2021-01-20 10:44:57 -05:00
Paul Lorenz f5dc8e5799 Fix return status 2021-01-20 10:12:39 -05:00
Paul Lorenz 4882da1970 Add service list timer. Fix tunneler leak 2021-01-20 09:29:33 -05:00
Paul Lorenz 744fa99b8a Add check integrity guardrails so we can only run a single operation at a time 2021-01-19 16:18:10 -05:00
Paul Lorenz 891d8eb5ce Add service events when configs are updated/deleted. Add service events test 2021-01-19 14:30:34 -05:00
Andrew Martinez 4fbacdcdc8 fixes buildDate spelling (missing d) 2021-01-19 14:00:50 -05:00
Andrew Martinez 5207dbb931 use UTC time 2021-01-19 08:53:21 -05:00
Andrew Martinez 2d61799c24 add posture check MFA tests 2021-01-19 08:37:29 -05:00
Andrew Martinez 308d7f3a10 mfa initial
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
Andrew 49804bd30b Merge pull request #470 from openziti/add.appid.appversion
Add appId and appVersion to sdkInfo
2021-01-18 15:03:29 -05:00
Paul Lorenz c5d3a4b69b Improve posture check perf using indexes 2021-01-18 14:15:30 -05:00
Andrew Martinez 65be49c609 Add appId and appVersion to sdkInfo 2021-01-18 10:38:43 -05:00
Paul Lorenz c370dff45c Notify clients to refresh after restart 2021-01-15 16:20:13 -05:00
Paul Lorenz 803eb5d5d6 Move service policy enforcer to use service events 2021-01-15 15:28:59 -05:00
Paul Lorenz 2194d8a2e2 Implement service change notifications 2021-01-15 15:28:59 -05:00
Andrew Martinez 807a061a93 adds expiration-seconds and expires-at headers
- also adds expiresSeconds to current api session and login
2021-01-14 11:30:44 -05:00
Andrew Martinez cf66c361f9 adds service updates endpoint stub 2021-01-13 13:49:06 -05:00
Andrew Martinez 014b0f3876 fixes REST API enrollment details 2021-01-12 17:35:45 -05:00
Paul Lorenz 5efbbf0942 Add health check implementation for tunnelers and add default hosting precedence and cost to identity 2021-01-12 11:00:43 -05:00
Andrew Martinez a3789c063a adds support of API Session Certificates
- adds ability for any authenticated API Session to create ephemeral
 certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
  controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
Paul Lorenz 4498318767 Make query parse errors into ApiErrors so they're not 500 errors (#443) 2020-12-16 11:30:51 -05:00
Paul Lorenz 7329106691 Use manual start for tunnel hosting 2020-12-16 11:08:06 -05:00
Andrew Martinez 5c70087d98 adds GET /protocols to the Edge Rest API 2020-11-20 17:52:05 -05:00
Andrew Martinez f5e0e1f25e fixes #424 allow non-admins to list service terminators 2020-11-20 09:46:44 -05:00
Andrew Martinez 5ba7af91eb add lower normalization that was removed back 2020-11-11 21:34:44 -05:00
Andrew Martinez 6ad6b3264c fixes #403
Process posture responses now allow an array of digital signer
fingerprints to be submitted and checked.
2020-11-11 21:31:17 -05:00
Andrew Martinez 108b657044 fix missing dangling period in os posture test 2020-11-11 20:51:54 -05:00
Andrew Martinez 48a3f5dc0b remove unused function 2020-11-11 20:39:35 -05:00
Andrew Martinez 4631fe1452 fixes #401
Valid x.y.z versions of OS posture checks can now be specified by
posture check ranges.
2020-11-11 20:32:48 -05:00
Andrew Martinez a80b27afe6 fix test based on pr 2020-11-11 19:11:05 -05:00
Andrew Martinez e0cf6a7ea5 fixes #397 and fixes #398
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
Andrew Martinez 2ecdb921a9 fix process checks 2020-11-10 16:03:56 -05:00
Andrew Martinez 84225d2796 fixes #394
In scenarios where a service has no policies with any checks after
initialization, the posture checks would fail incorrectly.
2020-11-10 14:50:23 -05:00
Andrew Martinez 428135c4ad fix empty session type 2020-11-05 21:23:49 -05:00
Andrew Martinez e859ce6a67 filter posture check sets by bind type 2020-11-05 19:40:27 -05:00
Andrew 53f702c212 Merge pull request #369 from openziti/add.online.status
Add.online.status
2020-10-31 08:35:39 -04:00
Andrew Martinez 394a844878 fixes for mop/sdks
- case insensitive checks for domain/os
- no minimum mac addresses on posture responses
2020-10-30 14:13:43 -04:00
Andrew Martinez ac187ffa99 posture check implementation
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
Shawn Carey 4bb404e953 Ziti tunnel.cfgtype.v2.0 (#357)
* add client.v2.0 tunneler configuration type.
* renamed cfgtype
* set db version to 14
* added host.v1 configuration type
2020-10-26 12:14:29 -04:00
Andrew Martinez 7cc95e3456 fixes #372 ensures v13 dbs have posture check types
- adds posture check types to init
- on v12/v13 migrations, posture check types are checked and added if
  necessary
2020-10-21 11:40:06 -04:00
Andrew Martinez c726f158d6 fixes #365 adds hasApiSession and hasEdgeRouterConnection 2020-10-20 15:00:22 -04:00
Andrew 129bff6d8f Merge pull request #348 from openziti/terminator.binding.required
make binding required on terminators
2020-10-14 14:43:42 -04:00