b562fb5c07
splits API specs into composible modules
...
- splits Open API 2.0 (swagger) into client/management APIs
- uses go-swaggers flatten capabilities
- uses newer version of go-swagger (v0.27.0)
- introduces /edge/client/v1, /edge/management/v1
- non-prefixed URLs default to /edge/client/v1
- splits some shared management/client API handlers
- renames some REST models to "client" instead of "limited"
- passes all apitests, fails dataflow upd test (main fails this as well)
- updates generate rest script for powershell
- todo: test generate rest script for bash
- todo: use xweb (different branch)
2021-05-04 11:30:32 -04:00
98101fa3a2
fix base posture check entity in apitests
...
- wasn't setting id on pointer receiver
2021-04-20 10:34:36 -04:00
54af8801e7
adds posture check type PROCESS_MULTI
...
- adds a new posture check for dealing with multiple processes
- supports anyOf and allOf semantics
- does not require new posture responses, current process responses
suffice
- tests
2021-04-20 08:52:23 -04:00
5a2e7d1f92
Separate dataflow tests into separate build tag
2021-04-14 16:57:24 -04:00
29156c7154
Fix udp protocol type. Fix UDP tunneler code. Add UDP proxy test
2021-04-14 16:10:22 -04:00
4a9b226f0e
adds the ability for router to extend their enrollment
...
- routers can now opt to extend their enrollment at any time with a
previous or new key
- adds tests for router enrollment
- adds tests for router enrollment extension
2021-04-14 09:21:59 -04:00
15e0df8154
Merge pull request #636 from openziti/updb.enroll.tests
...
add updb enrollment api tests
2021-04-14 09:03:41 -04:00
e7733ff6cc
add updb enrollment api tests
2021-04-13 16:36:52 -04:00
b278f611d0
add policyType to posture query sets
...
- also fixes policy ids being set as the same value due to pointer in
for loop reference
2021-04-13 15:26:17 -04:00
221fb80726
add recovery code auth test
2021-04-06 14:10:45 -04:00
8f6234842e
Add per-service identity hosting precedence/costs
2021-04-06 09:51:22 -04:00
ba1427d2d9
add posture check disconnect test
2021-03-26 09:38:14 -04:00
4324529b38
fix test missing second policy w/ no checks
2021-03-24 15:03:40 -04:00
3014bdc405
new tests, don't prune policies w/ no checks
2021-03-24 14:06:09 -04:00
1100d6f388
update service update on posture data change, tests
2021-03-23 09:54:47 -04:00
780754b95c
fix mfa posture check test
2021-03-23 09:54:46 -04:00
993f51f7ab
set mfa posture on enroll
...
- update api session session state on mfa enroll
- update posture data state on mfa enroll
- centralize setting mfa posture data
- pass isMfaRequired and isMfaComplete in apiSession/currentApiSession
2021-03-23 09:54:46 -04:00
680852f80e
Allow tunnel to run over xgress directly
2021-03-22 14:33:54 -04:00
926f65165b
Fix version info for tests and update deps
2021-03-18 14:14:09 -04:00
e81d3c3f5f
add tests for create new mfa codesmd
2021-03-11 13:40:05 -05:00
735eb1d80f
Move ApiError and FieldError to foundation
2021-03-03 14:44:26 -05:00
e8e6969fda
Fix flaky test caused by loss of time resolution
2021-03-02 15:49:20 -05:00
560137fb65
Fix fabric session client id. should be edge session id not token. Add test for events.
2021-02-26 09:38:13 -05:00
8a160d93b1
Fix update terminator. Add test for terminator updates. Remove unused store_events
2021-02-26 09:04:32 -05:00
4afc0bd0b6
fix dupe connection testing by looking at strat stat not network state
2021-02-19 11:18:09 -05:00
155bbd8217
Validate sessions on controller instead of edge router
2021-02-17 20:38:13 -05:00
919d7a3d6b
add hearbeat invalid api token delete
2021-02-17 12:19:06 -05:00
fdf9221f89
add explicit context, listener, dialer Close() calls
2021-02-15 16:13:23 -05:00
46166db9cc
fixes orphaned ottca enrollments
...
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
e645df39af
fix missing apitests build tag
2021-02-09 09:10:42 -05:00
730740552b
Merge pull request #511 from openziti/fix.pc.os.patch
...
fixes os PATCH for posture checks
2021-02-05 15:28:07 -05:00
c23bf9dbcf
fixes os PATCH for posture checks
...
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
28832a3526
add test to check role attrs aren't lost if not provided during a PATCH
2021-02-05 13:20:07 -05:00
18513f7ee4
Merge pull request #504 from openziti/api.session.performance
...
moves hasApiSession lookup to api model and limit 1
2021-02-04 09:32:01 -05:00
5b1101bb24
Merge pull request #505 from openziti/fix.484.edge.router.list
...
fixes #484 adds current identity edge router lookup
2021-02-04 09:28:10 -05:00
2c6814aaa4
edge router enhancements for browZer support ( #499 )
2021-02-04 06:09:46 -05:00
e34d25b0dd
fixes #484 adds current identity edge router lookup
2021-02-03 15:37:15 -05:00
5c47c31016
moves hasApiSession lookup to api model and limit 1
...
This move isolates the cost of hasApiSession to the identity endpoint
lookups in the REST API. Being in the model caused this cost to be
shared on all identity lookups for internal logic.
Limit 1 is an attempt to reduce the cost of searching over a large set.
API Sessions do not have an index on identity id so there is still some
cost.
2021-02-03 14:01:53 -05:00
ed4458a296
fixes mfa random api test failures
...
Codes are 6 digits with leading zero.
2021-02-02 14:56:50 -05:00
a4a872c377
remove test sleeps, use const for window size
2021-01-26 14:08:16 -05:00
4051c47dd5
Merge branch 'main' into mfa
2021-01-26 13:52:59 -05:00
bca8d657fc
Clean up xgress edge abstractions and close logic
2021-01-26 10:43:02 -05:00
f2431ab9b3
bulk posture response
2021-01-25 13:55:41 -05:00
891d8eb5ce
Add service events when configs are updated/deleted. Add service events test
2021-01-19 14:30:34 -05:00
5207dbb931
use UTC time
2021-01-19 08:53:21 -05:00
2d61799c24
add posture check MFA tests
2021-01-19 08:37:29 -05:00
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
c5d3a4b69b
Improve posture check perf using indexes
2021-01-18 14:15:30 -05:00
803eb5d5d6
Move service policy enforcer to use service events
2021-01-15 15:28:59 -05:00
2194d8a2e2
Implement service change notifications
2021-01-15 15:28:59 -05:00
Andrew Martinez