f600b752d7
Add proxy support to host.v1/host.v2. Fixes #1397
2023-10-12 10:33:16 -04:00
73ad4c9c84
Handle fallout from putting and fabric and edge into the same project
2023-09-29 10:51:56 -04:00
f3d67b7f49
Update fabric imports
2023-09-28 23:34:28 -04:00
07da3cd513
Merge remote-tracking branch 'edge/main' into merge-edge
...
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
24c35808aa
Sync host.v1 and host.v2. Add connectTimeout to host.v1. Fixes #1616
2023-09-27 09:41:11 -04:00
02b39f5191
Don't emit session tokens or JWTs. Fixes #1599
2023-09-13 11:42:15 -04:00
a9074719ce
Fix namespace conflicts in controller/events
2023-08-30 17:16:10 -04:00
453e6cae2a
Consolidate controller/apierror/helpers and messages
2023-08-30 17:16:10 -04:00
5b59ae13ee
Update for moved packages in fabric
2023-08-23 09:40:05 -04:00
81baa1843b
Add default identity type. Remove user,service,device types. Fixes #1428
2023-08-22 20:40:33 -04:00
8b3092a3d9
Merge pull request #1566 from openziti/prep-for-ziti-merge-p2
...
Move eid to common
2023-08-04 16:35:26 -04:00
1f5eed5956
Move eid to common
2023-08-04 11:46:53 -04:00
5c30981c8b
fix lint
2023-07-24 16:28:17 -04:00
414cff49d7
adds support OIDC authentication, api access, and ER connections
2023-07-20 09:41:12 -04:00
fcd14e4e99
Allow wildcard domains in intercept.v1 configurations ( #1518 )
...
validate intercept addresses with idn-hostname format
2023-06-08 13:58:15 -04:00
a980106220
use 'idn-hostname' string format in intercept.v1 and host.vX config types. ( #1500 )
2023-05-23 15:30:12 -04:00
7d6901be3d
Add edge code needed for entity change events. Fixes #629
2023-04-25 22:34:02 -04:00
43fc1e96fe
Get tests running and do some cleanups
2023-04-25 13:26:19 -04:00
63f9dad3df
Updated model for storage api changes
2023-04-25 13:26:02 -04:00
83bca6a0ba
Update for storage and fabric api changes
2023-04-25 13:26:02 -04:00
bd9b6a713b
Pull some tweaks over from denorm branch
2023-04-03 11:34:37 -04:00
ad5dc292bb
Improve list performance by using identity indexes rather than service indexes. Fixes #1388
2023-04-03 09:58:21 -04:00
212e4c2df6
Clear sessions, api-session and api-session certs because of indexing changes
2023-03-28 15:18:30 -04:00
1d0e558f90
Add support disabling routers. Fixes #1373
2023-03-28 13:42:25 -04:00
34cc021b3e
Make session creates idempotent. Fixes #1359
2023-03-23 09:50:05 -04:00
e192f271ba
remove old "sessionCert" (not ApiSessionCert) bit rot
2023-03-20 18:04:21 -04:00
c0c7b1907e
Fix eventual eventer processing on restart. Fixes #1268
2022-12-14 17:20:52 -05:00
2509f9b575
update CODEOWNERS to sig-core and update MM notifications
2022-11-30 14:34:10 -05:00
d73c72679d
for #1213 delete api session on authenticator delete/re-enroll
...
- an authenticator removed or re-enrolled would continue to allow old
API Session to operate
- deleted or re-enrolled authenticators now remove associatd API
Sessions
2022-11-09 11:44:49 -05:00
5dc8a66fe9
addresses #1226 api session certificate issues w/ 3rd party cas
...
- events during a multi-step transaction were immediately emitting events
causing out of order and incomplete events to be received,
specifically API Sessions w/o fingerprints
- API Session Certificates created implicitly during 3rd Party CA auth
did not properly set all properties
- adds tests
2022-11-04 14:40:07 -04:00
63c161224a
Add linter and fix issues found by linter
2022-10-10 16:56:51 -04:00
ad8392cef4
Update deps
2022-10-10 16:56:50 -04:00
b7f81ea7cb
Fix issue where lookup is expected to return err, but returns nil, causing nil reference and panic. Fixes #1186
2022-09-27 09:52:53 -04:00
3a265ca32f
Fix patching tags on services and transit routers. Fixes #1174
2022-09-15 09:40:12 -04:00
ece5eae675
Allow searching by configs. Fixes #1154
2022-09-14 23:36:14 -04:00
0b8a65207a
Change bootstrap check. Add hooks for isRaftEnabled
2022-08-22 12:14:40 -04:00
0d1dfb9779
Fixes for raft command encoding and decoding
2022-08-18 12:22:30 -04:00
2e578ab784
Update identities to use raft commands. Fixes #1131
2022-08-09 14:58:23 -04:00
9e6cfaa47d
fixes #1103 allow multiple advertise hostnames for listeners
2022-07-26 16:06:47 -04:00
1fb3339bb1
Update for changes to fabric events model
2022-07-19 11:18:08 -04:00
bae7e40b61
Update for foundation changes
2022-07-01 15:55:30 -04:00
12df770d04
Update copyright
2022-06-30 17:45:08 -04:00
b53fa0cd98
Remove event log and georegions
2022-06-30 10:35:19 -04:00
9ae2eb825c
adds jwks support
...
- ext-jwt-signers now support jwks endpoints in addition to static
certificates
- ext-jwt-signers now require either kid+cert or jkwsEndpoint
- ext-jwt-signers now requires issuer and audience fields
- jwksEndpoints are initially cached and will be revalidated on invalid
auth once every 5s at most
- adds more external id tests
2022-06-07 09:57:22 -04:00
7cf9dc135d
Initial support for raft and command style architecture
2022-06-01 23:52:07 -04:00
7381423974
use cmap generics, update fabric
2022-05-27 11:02:51 -04:00
601f73e7fb
fixes post/update ripple breakage
2022-05-26 17:16:02 -04:00
6fcde2ee3c
fix scenarios where nil or non map is provided in data causes a panic
...
- fixes edge #1020
- adds higher level error
- adds store level error
2022-05-26 17:03:43 -04:00
c5f156dd9e
adds x509 claims support for external ids to CAs
...
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
8423ac5cfa
Make host.v2 stricter. Fixes #991
2022-05-02 17:19:48 -04:00
Paul Lorenz