gsadmin/ziti
1
0
Fork 0
mirror of https://github.com/openziti/ziti.git synced 2026-10-14 08:10:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,514 Commits 135 Branches 313 Tags
2dbae5da0a4853cfed8ff8f76900df8dcc7a8d08
Commit Graph

23 Commits

Author SHA1 Message Date
Andrew Martinez 52b0c7acab alters posture query updateAt to also indicate query state changes 
- formerly posture queries only had an updatedAt time copied from the
  source posture check which. For MFA posture checks this is only
  correct when not using promptOnWake/Unlock
- prompt timer reductions due to wake/unlock now update postureQuery
  updatedAt values
- subsequent reconfigurations to the posture check (i.e. patching a
  posture check) is also taken into account - latest time.Time wins
- test for MFA posture check no longer use gabs and instead use the
  relevant input/output rest_model.* structures
 2022-02-09 16:30:54 -05:00
Andrew Martinez 6d48a962de adds criteria output to service request failures for MFA posture checks 
- adds all criteria for mfa evaluation to failure for model/REST API
 2022-02-04 15:23:39 -05:00
Andrew 7f71c75706 Merge pull request #851 from openziti/add.router.re-enroll.rest.api 
adds re-enroll REST API endpoints for edge routers
 2021-12-20 09:32:38 -05:00
Andrew Martinez 37f5f88944 remove unused REST API 2021-12-20 09:19:14 -05:00
Andrew Martinez dae084f61c alters router/controller enrollment extension logic 
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
 2021-12-20 09:19:10 -05:00
Andrew Martinez e507d4b5ae edge/#852 adds re-enroll REST API endpoints for edge routers 2021-12-16 09:54:47 -05:00
Paul Lorenz 96cdde0227 Enrolment -> Enrollment in spec 2021-11-10 13:19:08 -05:00
Andrew Martinez 1f9ca6878a changes client cert validation 
- adds test for client cert validation expectations
- adds certificat authenticator create
 2021-11-05 10:10:17 -04:00
Andrew Martinez a1f7a48cdc adds identity cert extension endpoint to client/man API 
- now supports POST /current-identity/authenticators/{id}/extend for
  cert authenticators
- adds test for cert extension endpoint
 2021-10-21 15:12:30 -04:00
Andrew Martinez c2b83432d1 adds /identity/:id/authenticators Management API endpoint 2021-09-08 14:06:56 -04:00
Andrew Martinez 4cac5518e9 ensure that lastAccessedAt is set on create, emit logs if not found 2021-09-02 08:57:14 -04:00
Andrew Martinez 7e2b97c425 fixes posture check timeouts, tests, service updates 
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
 2021-08-30 09:05:46 -04:00
Paul Lorenz 23c98c2d5a Add more tracing and allow enabling debug for specific identities for path selection/establishment 2021-08-09 11:20:51 -04:00
Paul Lorenz f2670e66a0 Make policy semantic required for POST/PUT. Fix evaluation on policy PUT if semantic not provided 2021-07-30 09:44:21 -04:00
Andrew Martinez f28061de4f fixes missing 400s from list endpoints 
- update some CA fields that were not marked required/nullable
- some list endpoints were missing 400 response definitions
- foundation dep update
 2021-07-27 14:53:35 -04:00
Andrew Martinez cef4653c2f add missing 401s to list operations, missing required 
- adds missing 401s to list operations that were missing them
- adds required status to identityNameFormat for CAs
 2021-07-26 16:19:16 -04:00
Andrew Martinez 6a522893fc adds timeoutRemainingSeconds for posture queries 2021-07-21 14:20:26 -04:00
Andrew Martinez efcb90c033 add all sdk version info to posture data 2021-07-09 15:27:23 -04:00
Andrew Martinez 47499bc4f1 add mfa options 
- allow timeouts for MFA posture checks
- allow wake/unlocked MFA options
- allow legacy toggle for SDKs that don't supply endpoint state
- supply timeouts on posture checks
- posture data now caches session state
 2021-07-07 08:39:39 -04:00
Andrew Martinez 396536c312 add list parameters to authenticators 2021-06-23 11:07:05 -04:00
Andrew Martinez 572e606a0b adds posture check patch tests 2021-06-14 11:12:32 -04:00
Andrew Martinez cc1574fdc9 update /version endpoint 
- now reports all versions, api bindings, and api bind points from xweb
- now reports api base urls (http://<bindpoint>/<api path>
- now points 'edge' to 'edge-client' api binding
 2021-05-07 10:46:24 -04:00
Andrew Martinez b562fb5c07 splits API specs into composible modules 
- splits Open API 2.0 (swagger) into client/management APIs
- uses go-swaggers flatten capabilities
- uses newer version of go-swagger (v0.27.0)
- introduces /edge/client/v1, /edge/management/v1
- non-prefixed URLs default to /edge/client/v1
- splits some shared management/client API handlers
- renames some REST models to "client" instead of "limited"
- passes all apitests, fails dataflow upd test (main fails this as well)
- updates generate rest script for powershell
- todo: test generate rest script for bash
- todo: use xweb (different branch)
 2021-05-04 11:30:32 -04:00