c2b83432d1
adds /identity/:id/authenticators Management API endpoint
2021-09-08 14:06:56 -04:00
47499bc4f1
add mfa options
...
- allow timeouts for MFA posture checks
- allow wake/unlocked MFA options
- allow legacy toggle for SDKs that don't supply endpoint state
- supply timeouts on posture checks
- posture data now caches session state
2021-07-07 08:39:39 -04:00
d920dbbd93
Fix sync early exit bug. Track new session during sync. Simplify thre… ( #686 )
...
* Fix sync early exit bug. Track new session during sync. Simplify threading and tighten up locking. Add dump api-sessions debug operation
* Address review comments. Remove spurious error message. Fix defaultHostingCost/Precedence field names
2021-06-11 14:01:20 -04:00
a3dd639981
Fix setting identity service costs/precedences when patching
2021-06-08 12:54:11 -04:00
b562fb5c07
splits API specs into composible modules
...
- splits Open API 2.0 (swagger) into client/management APIs
- uses go-swaggers flatten capabilities
- uses newer version of go-swagger (v0.27.0)
- introduces /edge/client/v1, /edge/management/v1
- non-prefixed URLs default to /edge/client/v1
- splits some shared management/client API handlers
- renames some REST models to "client" instead of "limited"
- passes all apitests, fails dataflow upd test (main fails this as well)
- updates generate rest script for powershell
- todo: test generate rest script for bash
- todo: use xweb (different branch)
2021-05-04 11:30:32 -04:00
b493cce490
Add app data to identity and edge router. Add isSystem to ERP
2021-04-06 10:07:57 -04:00
8f6234842e
Add per-service identity hosting precedence/costs
2021-04-06 09:51:22 -04:00
5449b655b8
moves posture-data/failed-service-requests
...
- GET /identities/{id}/posture-data/failed-service-requests is now under
/identities/{id}/failed-service-requests
2021-03-19 10:30:26 -04:00
5b5fe97961
fix ptr to string in error message
2021-02-09 14:01:20 -05:00
9fab8e6ed0
fix formatting message
...
Some deps altered after a go test ./... and go mod tidy
2021-02-09 13:57:49 -05:00
46166db9cc
fixes orphaned ottca enrollments
...
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
65832b8da5
fix missing formatted log call, spelling
2021-02-04 09:24:00 -05:00
5c47c31016
moves hasApiSession lookup to api model and limit 1
...
This move isolates the cost of hasApiSession to the identity endpoint
lookups in the REST API. Being in the model caused this cost to be
shared on all identity lookups for internal logic.
Limit 1 is an attempt to reduce the cost of searching over a large set.
API Sessions do not have an index on identity id so there is still some
cost.
2021-02-03 14:01:53 -05:00
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
65be49c609
Add appId and appVersion to sdkInfo
2021-01-18 10:38:43 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
53f702c212
Merge pull request #369 from openziti/add.online.status
...
Add.online.status
2020-10-31 08:35:39 -04:00
ac187ffa99
posture check implementation
...
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
c726f158d6
fixes #365 adds hasApiSession and hasEdgeRouterConnection
2020-10-20 15:00:22 -04:00
24e7375a58
fix formatting lint error
2020-10-02 16:09:14 -04:00
b23bf3efd8
fix #321 add policy display fields for reads
...
- adds *Display fields for policy list and detail
- adds *Display fields for both set of policy attributes
- adds API tests
2020-10-01 08:09:46 -04:00
943ff0e231
Merge pull request #232 from openziti/fix.expiresAt.231
...
fixxes #231 - adds expiresAt properties
2020-07-07 14:05:51 -04:00
fe7031ee2f
Ensure IsOnline is present in common routers. Fixes GH-237
2020-07-07 10:08:21 -04:00
ef82289db9
add expiresAt to ottca
2020-07-01 10:23:15 -04:00
b6a7843a5a
fixxes #231 - adds expiresAt properties
2020-07-01 09:15:04 -04:00
84e1436679
Add snapshot db API. Fixes GH-206. Update openapi to 0.24
2020-06-19 14:48:46 -04:00
3087972172
all conversion work
...
- remove old JSON schema, unsused code
- remove unused variables from base router functions
- rework all API entities
- rework all links
- fix lint issues
- adds error conversion logic
- update tests as needed
- fix up go test
- fix backwards compat w/ non json enroller
2020-06-09 14:11:23 -04:00
b6d9efaf8c
fixed #183 , move to openziti
2020-05-26 17:37:35 -04:00
b8bf0be2c7
adds env info on auth fixes #126
2020-05-08 09:01:51 -04:00
1895415ea7
Move FieldError to foundation. Adapt to fabric API changes. Several terminator/transit router fixes
2020-04-24 10:04:36 -04:00
6cc4b6f7fb
Initial policy advisor API. Fixes GH-99 ( #120 )
...
* Initial policy advisor API. Fixes GH-99
* Add swagger doc for listing role attributes
* Add swagger for cross policy entity lists
* Add swagger for role based filtering
* Add policy advisor API to swagger
* Remove format: uuid where appropriate
* Bump versions to 0.13. Fix router entity ref
2020-04-02 13:45:57 -04:00
7d60e03b65
Remove copyright date from header
2020-03-19 13:47:42 -04:00
f0257f6ccf
Support for multiple endpoints
2020-03-19 13:31:31 -04:00
3db81622cb
didn't i do this once already?
2020-02-25 14:29:08 -05:00
046128194a
fixes #86
...
- restores /current-identity
- restores /authenticators
- adds tests for both endpoints
2020-02-21 08:29:46 -05:00
d0f18a3a5b
Allow overriding service configurations per identity ( #68 )
...
Allow overriding service configurations per identity. Fixes GH-31
2020-02-03 12:10:08 -05:00
0f472f4c6f
fixes netfoundry/ziti-edge#29 store full pem
...
- adds api tests for certiicate authentication
- adds api tests for full cert storage for cretificate authenticators
2020-01-17 14:00:42 -05:00
fb8be70394
Implement config store. Fixes GH-17 ( #37 )
...
* Implement config store. Fixes GH-17
* Fix PATCH. Allow null tags on patch and add config patch test
2020-01-13 10:55:07 -05:00
c10c3ad781
Remove Handle prefix from handler methods. Remove breaking changes docs, which are moving to ziti-cmd
2020-01-09 13:14:50 -05:00
55eaa157b9
GH-16 Enable service policies replacing appwans ( #28 )
...
* GH-16 Enable service policies replacing appwans
2020-01-08 15:08:58 -05:00
c8e2729f05
GH-18 removes ziti-edge/edge folder and moves all contents up 1 row
...
- Updates .gitignore files
- Fixes imports
2019-12-18 10:02:25 -05:00
Andrew Martinez