Commit Graph

459 Commits

Author SHA1 Message Date
Andrew 9a42304511 Merge pull request #858 from openziti/add.router.re-enroll.logic
Add.router.reenroll.logic
2022-01-07 08:53:03 -05:00
Andrew c8facce38f Merge pull request #861 from openziti/add.metrics.for.all.endpoints
adds metrics for endpoints with keys of path[method]
2022-01-06 14:46:29 -05:00
Andrew Martinez 8b20f0278a normalize URL ids for metric names 2022-01-06 14:42:31 -05:00
Andrew Martinez 65702f502a swap from brackets to period seperators 2022-01-06 14:11:01 -05:00
Andrew Martinez dfa0f7c6ab adds metrics for endpoints with keys of path[method] 2022-01-06 14:02:36 -05:00
Paul Lorenz 7b1ee2893d Add identity refresh meter 2022-01-06 13:45:18 -05:00
Andrew Martinez cf20c2dfa8 adds api tests 2022-01-03 15:54:51 -05:00
Andrew Martinez 770c7bcd06 adds re-enrollment logic for edge-routers 2022-01-03 09:06:33 -05:00
Andrew Martinez 97773f5917 update log messages w/ router context 2021-12-20 09:20:10 -05:00
Andrew Martinez 37f5f88944 remove unused REST API 2021-12-20 09:19:14 -05:00
Andrew Martinez dae084f61c alters router/controller enrollment extension logic
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
Paul Lorenz 0d66f75eb8 Add additional fields and make field names more consistent 2021-12-14 09:58:24 -05:00
Paul Lorenz 31107eb4d4 Update for removing custom bbolt version with trace support 2021-12-11 00:34:40 -05:00
Paul Lorenz bfcb037783 Initial pass at fabric rest api working (#838)
* Update for fabric rest controller changes
2021-11-30 16:30:17 -05:00
Paul Lorenz f1af4df5d8 Merge pull request #837 from openziti/fix-panic
Fix panic caused by missing return on error
2021-11-17 10:34:23 -05:00
Paul Lorenz 66ed64d749 Fix panic caused by missing return on error 2021-11-17 10:22:56 -05:00
Paul Lorenz 96cdde0227 Enrolment -> Enrollment in spec 2021-11-10 13:19:08 -05:00
Paul Lorenz de45dc0554 Remove some unused types. Fix version map 2021-11-09 09:18:15 -05:00
Andrew Martinez 027f8673ce patch client cert instead of using verify options 2021-11-05 10:47:45 -04:00
Andrew Martinez ece9e8222a formating directive fix 2021-11-05 10:27:00 -04:00
Andrew Martinez 1f9ca6878a changes client cert validation
- adds test for client cert validation expectations
- adds certificat authenticator create
2021-11-05 10:10:17 -04:00
Paul Lorenz 24ae6dbb19 Fix panic on session view 2021-11-02 16:40:22 -04:00
Andrew 8e53e50fd9 Merge pull request #818 from openziti/identity.enrollment.extension
adds identity cert extension endpoint to client/man API
2021-11-02 13:24:29 -04:00
Andrew 62ae85539f Merge pull request #819 from openziti/gosec.improvements
fixes gosec output of a few items
2021-11-02 09:05:22 -04:00
Paul Lorenz 2d4260e76e Allow using a specific bolt db file for tests 2021-10-26 14:19:24 -04:00
Andrew Martinez c8de8a8fac fixes gosec output of a few items 2021-10-21 17:40:52 -04:00
Andrew Martinez a1f7a48cdc adds identity cert extension endpoint to client/man API
- now supports POST /current-identity/authenticators/{id}/extend for
  cert authenticators
- adds test for cert extension endpoint
2021-10-21 15:12:30 -04:00
Paul Lorenz 7d483a822b Merge pull request #817 from openziti/fix-panic-on-invalid-service
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:47:30 -04:00
Paul Lorenz 40389c1f88 Fix panic on invalid service. Error wasn't getting saved 2021-10-20 13:37:56 -04:00
Andrew Martinez 050d5eb0dc fix possible formatting error 2021-10-19 11:31:31 -04:00
Andrew Martinez 6612ad9c14 fix startup timing issues 2021-10-19 10:58:59 -04:00
Andrew Martinez 45158ff864 updates to newest foundation/fabric/sdk-golang 2021-10-18 16:07:33 -04:00
Andrew Martinez 49006ab9f6 fixes posture check timeouts that sit at 0 after endpoint states 2021-10-07 10:22:57 -04:00
Andrew Martinez 6b80d444a0 remove old dgrijalva jwt ref 2021-10-01 11:17:00 -04:00
Paul Lorenz 0c8206b8d4 Don't allow hashtags or at symbols on role attributes. Fixes #786 2021-09-22 10:31:01 -04:00
Eugene K c9e7d2f4c7 update host configs as well to pickup wildcardDomain addition 2021-09-15 15:57:39 -04:00
Eugene K 83f0d5597d add wildcard domain to intercept addresses configuration 2021-09-15 15:52:53 -04:00
Andrew 0b46233a8b Merge pull request #780 from openziti/add.fully.authed.api.session.store.event
adds EventFullyAuthenticated to the API session store
2021-09-14 10:54:10 -04:00
Andrew Martinez 50752b8b7a check for nill checker 2021-09-14 09:47:41 -04:00
Andrew Martinez b0f9f18f72 adds EventFullyAuthenticated to the API session store
The previous implementation would send API Sessions to Edge Routers
while partially authenticated. Due to state issues addressed separately
in the c-SDK, these partial API Sessions are maintained if a channel
connected to an edge router was established during reconnect. This would
further cause problems with channel connection using the wrong API
session vs what the rest of the SDK was using.
2021-09-13 15:15:34 -04:00
Paul Lorenz 12117a0ded Sending service precedences and cost set on identity to ERT 2021-09-10 17:20:46 -04:00
Paul Lorenz 2fd995becb Fix panic if posture data mfa is nil 2021-09-09 11:18:19 -04:00
Paul Lorenz 5639bd56ef Merge pull request #769 from openziti/fix-panic
Fix panic when service not found
2021-09-09 09:40:33 -04:00
Paul Lorenz 84d36337ad Fix panic when service not found 2021-09-08 15:59:35 -04:00
Andrew Martinez c2b83432d1 adds /identity/:id/authenticators Management API endpoint 2021-09-08 14:06:56 -04:00
Paul Lorenz df73dd15b0 Merge pull request #767 from openziti/fix-host-after-session-expiration
Allow ERT to gracefully handle api session/session removal. Can happe…
2021-09-03 13:50:54 -04:00
Paul Lorenz 82f4621393 Allow ERT to gracefully handle api session/session removal. Can happen if router is disconnected, but not down for an extended period 2021-09-03 13:28:43 -04:00
Andrew Martinez 17b82de1fd remove debug output 2021-09-03 09:55:39 -04:00
Andrew Martinez a7be333879 adds migration to fill identityId for existing sessions 2021-09-03 09:48:21 -04:00
Andrew cfebf66ca9 Merge pull request #765 from openziti/rest.session.model.no.err
rest api session modeling will no longer kill lists
2021-09-02 13:34:43 -04:00