Commit Graph

257 Commits

Author SHA1 Message Date
Paul Lorenz 63c161224a Add linter and fix issues found by linter 2022-10-10 16:56:51 -04:00
Paul Lorenz ad8392cef4 Update deps 2022-10-10 16:56:50 -04:00
Andrew Martinez f802603d9f fixes openziti/ziti#853
- fix nil 0 index x509 definition created
- updates x509-claims to v1.0.3 to fix x509 claim panics
2022-09-29 10:20:46 -04:00
Andrew Martinez 291eb6b509 fixes nil deref on partial jwks info 2022-09-22 09:36:46 -04:00
Andrew Martinez 60fc51253d fixes #1176 patching externalIdClaim on CA 2022-09-15 11:18:41 -04:00
Paul Lorenz e4d2a30399 Fix service policy patch when type isn't provided. Fixes #1169 2022-09-06 23:21:40 -04:00
Paul Lorenz 0b8a65207a Change bootstrap check. Add hooks for isRaftEnabled 2022-08-22 12:14:40 -04:00
Paul Lorenz 0d1dfb9779 Fixes for raft command encoding and decoding 2022-08-18 12:22:30 -04:00
Paul Lorenz a3b31eb5ed Convert posture checks to use raft commands. Fixes #1125 2022-08-09 21:54:53 -04:00
Paul Lorenz 2e578ab784 Update identities to use raft commands. Fixes #1131 2022-08-09 14:58:23 -04:00
Paul Lorenz 4ce51b271c Convert transit routers to use raft commands. Fixes #1132 2022-08-09 09:38:07 -04:00
Paul Lorenz d3a4c7d0ac Update edge routers to use raft commands. Fixes #1107 2022-08-04 10:43:21 -04:00
Paul Lorenz 5c27d8308c Update enrollments to use raft commands. Fixes #1130 2022-08-04 10:14:39 -04:00
Paul Lorenz fe1b0463d7 Update authenticators to use raft commands. Fixes #1099 2022-08-04 10:14:21 -04:00
Paul Lorenz f60c06491e Update MFA to use raft commands. Closes #1128 2022-08-02 14:56:51 -04:00
Paul Lorenz d068397cd0 Rename controller model handler types to manager. Fixes #1124 2022-08-01 14:00:01 -04:00
Paul Lorenz cb0a634414 Update edge services to use raft commands. Fixes #1118 2022-07-29 15:56:09 -04:00
Paul Lorenz 748036985d Convert posture check types handler to manager. Fixes #1120 2022-07-29 15:38:58 -04:00
Paul Lorenz 3b57f19d61 Convert identity type handler to manager Fixes #1117 2022-07-29 15:36:14 -04:00
Paul Lorenz 0e827df0e2 Convert external jwt signers to raft commands. Fixes #1116 2022-07-29 14:56:56 -04:00
Paul Lorenz 9303b24547 Update service policies to use raft commands. Fixes #1111 2022-07-28 18:40:47 -04:00
Paul Lorenz d0ed5aa00e Update service edge router policies to use raft commands. Fixes #1110 2022-07-28 18:31:19 -04:00
Paul Lorenz e198f16c3d Convert edge router policies to raft commands. Fixes #1108 2022-07-28 18:30:26 -04:00
Paul Lorenz 22d36f5115 Merge pull request #1109 from openziti/raft-cas
Convert CAs to use raft style commands. Fixes #1100
2022-07-27 15:48:42 -04:00
Paul Lorenz f999fae248 Merge pull request #1106 from openziti/raft-config-types
Raft config types
2022-07-27 15:48:28 -04:00
Paul Lorenz 8de719e31d Merge pull request #1105 from openziti/model-refactor
Handles changes to UpdatedFields and EntityManager. Consolidate bolt
2022-07-27 15:48:00 -04:00
Paul Lorenz 6b9cfeac4b Convert CAs to use raft style commands. Fixes #1100 2022-07-27 14:46:03 -04:00
Paul Lorenz 605935c224 Update config types to use raft style commands. Fixes #1101 2022-07-27 14:45:22 -04:00
Paul Lorenz 387d54adb1 Handles changes to UpdatedFields and EntityManager. Consolidate bolt
sink/source to edgeEntity. Make patch conversion method optional
2022-07-27 11:33:37 -04:00
Andrew Martinez 9e6cfaa47d fixes #1103 allow multiple advertise hostnames for listeners 2022-07-26 16:06:47 -04:00
Paul Lorenz 226e87d642 Convert auth policies to use raft commands. Fixes #1097 2022-07-20 16:58:34 -04:00
Paul Lorenz bae7e40b61 Update for foundation changes 2022-07-01 15:55:30 -04:00
Paul Lorenz 12df770d04 Update copyright 2022-06-30 17:45:08 -04:00
Paul Lorenz b53fa0cd98 Remove event log and georegions 2022-06-30 10:35:19 -04:00
Paul Lorenz 91ea3816b8 Update for terminator terminology changes 2022-06-22 16:24:01 -04:00
Andrew Martinez 9ae2eb825c adds jwks support
- ext-jwt-signers now support jwks endpoints in addition to static
  certificates
- ext-jwt-signers now require either kid+cert or jkwsEndpoint
- ext-jwt-signers now requires issuer and audience fields
- jwksEndpoints are initially cached and will be revalidated on invalid
  auth once every 5s at most
- adds more external id tests
2022-06-07 09:57:22 -04:00
Paul Lorenz 0c66342f8d Update deps and address review comments 2022-06-02 23:15:23 -04:00
Paul Lorenz 2f6a3bc828 Update handler -> manager for base types and config 2022-06-02 00:05:54 -04:00
Paul Lorenz 7cf9dc135d Initial support for raft and command style architecture 2022-06-01 23:52:07 -04:00
Andrew Martinez 7381423974 use cmap generics, update fabric 2022-05-27 11:02:51 -04:00
Andrew Martinez c5f156dd9e adds x509 claims support for external ids to CAs
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
Andrew Martinez 35cf029952 fix partial update panic for ext jwt update events 2022-05-20 14:51:09 -04:00
Andrew Martinez a09104c3ea remove debug output 2022-05-20 14:35:26 -04:00
Andrew Martinez 2a6ea4944d adds ext jwt update event listning for jwt auth mod cache 2022-05-20 14:29:13 -04:00
Andrew Martinez 72729fd731 adds the ability to create identity enrollments 2022-05-12 12:40:49 -04:00
Andrew de9cd7298f Merge pull request #985 from openziti/adds.authenticator.enrollment.reissue
Adds authenticato re-enrollment
2022-05-06 10:37:53 -04:00
Andrew Martinez fa9a72a240 adds nil checks on identity lookups 2022-04-22 12:20:15 -04:00
Andrew Martinez ab7b2e80fd use centralized logic to add signers for cache load and live def 2022-04-21 15:06:18 -04:00
Andrew Martinez fb1bff0083 adds re-enrollment for existing authenticators
- REST API Endpoints in Management API
- adds JWT to Management API enrollments endpoint
2022-04-21 15:01:28 -04:00
Andrew b2f44c949b Merge pull request #982 from openziti/adds.enrollment.refresh.logic
adds refresh expired enrollment logic and tests
2022-04-21 11:03:35 -04:00