Paul Lorenz
63c161224a
Add linter and fix issues found by linter
2022-10-10 16:56:51 -04:00
Paul Lorenz
ad8392cef4
Update deps
2022-10-10 16:56:50 -04:00
Andrew Martinez
f802603d9f
fixes openziti/ziti#853
...
- fix nil 0 index x509 definition created
- updates x509-claims to v1.0.3 to fix x509 claim panics
2022-09-29 10:20:46 -04:00
Andrew Martinez
291eb6b509
fixes nil deref on partial jwks info
2022-09-22 09:36:46 -04:00
Andrew Martinez
60fc51253d
fixes #1176 patching externalIdClaim on CA
2022-09-15 11:18:41 -04:00
Paul Lorenz
e4d2a30399
Fix service policy patch when type isn't provided. Fixes #1169
2022-09-06 23:21:40 -04:00
Paul Lorenz
0b8a65207a
Change bootstrap check. Add hooks for isRaftEnabled
2022-08-22 12:14:40 -04:00
Paul Lorenz
0d1dfb9779
Fixes for raft command encoding and decoding
2022-08-18 12:22:30 -04:00
Paul Lorenz
a3b31eb5ed
Convert posture checks to use raft commands. Fixes #1125
2022-08-09 21:54:53 -04:00
Paul Lorenz
2e578ab784
Update identities to use raft commands. Fixes #1131
2022-08-09 14:58:23 -04:00
Paul Lorenz
4ce51b271c
Convert transit routers to use raft commands. Fixes #1132
2022-08-09 09:38:07 -04:00
Paul Lorenz
d3a4c7d0ac
Update edge routers to use raft commands. Fixes #1107
2022-08-04 10:43:21 -04:00
Paul Lorenz
5c27d8308c
Update enrollments to use raft commands. Fixes #1130
2022-08-04 10:14:39 -04:00
Paul Lorenz
fe1b0463d7
Update authenticators to use raft commands. Fixes #1099
2022-08-04 10:14:21 -04:00
Paul Lorenz
f60c06491e
Update MFA to use raft commands. Closes #1128
2022-08-02 14:56:51 -04:00
Paul Lorenz
d068397cd0
Rename controller model handler types to manager. Fixes #1124
2022-08-01 14:00:01 -04:00
Paul Lorenz
cb0a634414
Update edge services to use raft commands. Fixes #1118
2022-07-29 15:56:09 -04:00
Paul Lorenz
748036985d
Convert posture check types handler to manager. Fixes #1120
2022-07-29 15:38:58 -04:00
Paul Lorenz
3b57f19d61
Convert identity type handler to manager Fixes #1117
2022-07-29 15:36:14 -04:00
Paul Lorenz
0e827df0e2
Convert external jwt signers to raft commands. Fixes #1116
2022-07-29 14:56:56 -04:00
Paul Lorenz
9303b24547
Update service policies to use raft commands. Fixes #1111
2022-07-28 18:40:47 -04:00
Paul Lorenz
d0ed5aa00e
Update service edge router policies to use raft commands. Fixes #1110
2022-07-28 18:31:19 -04:00
Paul Lorenz
e198f16c3d
Convert edge router policies to raft commands. Fixes #1108
2022-07-28 18:30:26 -04:00
Paul Lorenz
22d36f5115
Merge pull request #1109 from openziti/raft-cas
...
Convert CAs to use raft style commands. Fixes #1100
2022-07-27 15:48:42 -04:00
Paul Lorenz
f999fae248
Merge pull request #1106 from openziti/raft-config-types
...
Raft config types
2022-07-27 15:48:28 -04:00
Paul Lorenz
8de719e31d
Merge pull request #1105 from openziti/model-refactor
...
Handles changes to UpdatedFields and EntityManager. Consolidate bolt
2022-07-27 15:48:00 -04:00
Paul Lorenz
6b9cfeac4b
Convert CAs to use raft style commands. Fixes #1100
2022-07-27 14:46:03 -04:00
Paul Lorenz
605935c224
Update config types to use raft style commands. Fixes #1101
2022-07-27 14:45:22 -04:00
Paul Lorenz
387d54adb1
Handles changes to UpdatedFields and EntityManager. Consolidate bolt
...
sink/source to edgeEntity. Make patch conversion method optional
2022-07-27 11:33:37 -04:00
Andrew Martinez
9e6cfaa47d
fixes #1103 allow multiple advertise hostnames for listeners
2022-07-26 16:06:47 -04:00
Paul Lorenz
226e87d642
Convert auth policies to use raft commands. Fixes #1097
2022-07-20 16:58:34 -04:00
Paul Lorenz
bae7e40b61
Update for foundation changes
2022-07-01 15:55:30 -04:00
Paul Lorenz
12df770d04
Update copyright
2022-06-30 17:45:08 -04:00
Paul Lorenz
b53fa0cd98
Remove event log and georegions
2022-06-30 10:35:19 -04:00
Paul Lorenz
91ea3816b8
Update for terminator terminology changes
2022-06-22 16:24:01 -04:00
Andrew Martinez
9ae2eb825c
adds jwks support
...
- ext-jwt-signers now support jwks endpoints in addition to static
certificates
- ext-jwt-signers now require either kid+cert or jkwsEndpoint
- ext-jwt-signers now requires issuer and audience fields
- jwksEndpoints are initially cached and will be revalidated on invalid
auth once every 5s at most
- adds more external id tests
2022-06-07 09:57:22 -04:00
Paul Lorenz
0c66342f8d
Update deps and address review comments
2022-06-02 23:15:23 -04:00
Paul Lorenz
2f6a3bc828
Update handler -> manager for base types and config
2022-06-02 00:05:54 -04:00
Paul Lorenz
7cf9dc135d
Initial support for raft and command style architecture
2022-06-01 23:52:07 -04:00
Andrew Martinez
7381423974
use cmap generics, update fabric
2022-05-27 11:02:51 -04:00
Andrew Martinez
c5f156dd9e
adds x509 claims support for external ids to CAs
...
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
Andrew Martinez
35cf029952
fix partial update panic for ext jwt update events
2022-05-20 14:51:09 -04:00
Andrew Martinez
a09104c3ea
remove debug output
2022-05-20 14:35:26 -04:00
Andrew Martinez
2a6ea4944d
adds ext jwt update event listning for jwt auth mod cache
2022-05-20 14:29:13 -04:00
Andrew Martinez
72729fd731
adds the ability to create identity enrollments
2022-05-12 12:40:49 -04:00
Andrew
de9cd7298f
Merge pull request #985 from openziti/adds.authenticator.enrollment.reissue
...
Adds authenticato re-enrollment
2022-05-06 10:37:53 -04:00
Andrew Martinez
fa9a72a240
adds nil checks on identity lookups
2022-04-22 12:20:15 -04:00
Andrew Martinez
ab7b2e80fd
use centralized logic to add signers for cache load and live def
2022-04-21 15:06:18 -04:00
Andrew Martinez
fb1bff0083
adds re-enrollment for existing authenticators
...
- REST API Endpoints in Management API
- adds JWT to Management API enrollments endpoint
2022-04-21 15:01:28 -04:00
Andrew
b2f44c949b
Merge pull request #982 from openziti/adds.enrollment.refresh.logic
...
adds refresh expired enrollment logic and tests
2022-04-21 11:03:35 -04:00