9ae2eb825c
adds jwks support
...
- ext-jwt-signers now support jwks endpoints in addition to static
certificates
- ext-jwt-signers now require either kid+cert or jkwsEndpoint
- ext-jwt-signers now requires issuer and audience fields
- jwksEndpoints are initially cached and will be revalidated on invalid
auth once every 5s at most
- adds more external id tests
2022-06-07 09:57:22 -04:00
f68321d19c
fixes openziti/edge#1035 defaults from nil to empty slice
2022-06-06 16:17:02 -04:00
0014b39f7e
update xweb to v2
2022-06-06 14:33:42 -04:00
3da86ca9bb
Fixing change of default rather than min session timeout
2022-06-03 13:28:57 -04:00
7d229aa9a9
Extending default enrollment period and session timeout
2022-06-03 11:14:43 -04:00
0c66342f8d
Update deps and address review comments
2022-06-02 23:15:23 -04:00
2f6a3bc828
Update handler -> manager for base types and config
2022-06-02 00:05:54 -04:00
7cf9dc135d
Initial support for raft and command style architecture
2022-06-01 23:52:07 -04:00
7381423974
use cmap generics, update fabric
2022-05-27 11:02:51 -04:00
7c9dda9191
Merge pull request #1019 from openziti/update.fabric.xweb.move
...
updates fabric w/ xweb moved out
2022-05-27 08:59:26 -04:00
601f73e7fb
fixes post/update ripple breakage
2022-05-26 17:16:02 -04:00
6fcde2ee3c
fix scenarios where nil or non map is provided in data causes a panic
...
- fixes edge #1020
- adds higher level error
- adds store level error
2022-05-26 17:03:43 -04:00
47b210c67b
updates fabric w/ xweb moved out
2022-05-26 11:27:09 -04:00
c5f156dd9e
adds x509 claims support for external ids to CAs
...
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
35cf029952
fix partial update panic for ext jwt update events
2022-05-20 14:51:09 -04:00
a09104c3ea
remove debug output
2022-05-20 14:35:26 -04:00
2a6ea4944d
adds ext jwt update event listning for jwt auth mod cache
2022-05-20 14:29:13 -04:00
a1d9aec518
Merge pull request #1010 from openziti/add.enrollment.create
...
adds the ability to create identity enrollments
2022-05-16 09:02:01 -04:00
e5d1982785
threaded timeout from fabric ( #974 )
...
* threaded timeout from fabric
* pr comments
* fix timing
* removed utc on deadline check
* small updates
* updated fabric version and add zero check to timeoutdeadline
* fix wrong fabric version
* Update deps
Co-authored-by: Cam Otts <cam@Cams-MacBook-Pro.local >
Co-authored-by: Paul Lorenz <paul.lorenz@netfoundry.io >
2022-05-13 11:11:25 -05:00
72729fd731
adds the ability to create identity enrollments
2022-05-12 12:40:49 -04:00
b690993263
Update to latest protobuf library
2022-05-10 14:55:54 -04:00
de9cd7298f
Merge pull request #985 from openziti/adds.authenticator.enrollment.reissue
...
Adds authenticato re-enrollment
2022-05-06 10:37:53 -04:00
0243212f83
Use ZitiSession const from golang sdk instead of foundation (so we can remove it from foundation)
2022-05-02 17:20:03 -04:00
8423ac5cfa
Make host.v2 stricter. Fixes #991
2022-05-02 17:19:48 -04:00
fa9a72a240
adds nil checks on identity lookups
2022-04-22 12:20:15 -04:00
ab7b2e80fd
use centralized logic to add signers for cache load and live def
2022-04-21 15:06:18 -04:00
fb1bff0083
adds re-enrollment for existing authenticators
...
- REST API Endpoints in Management API
- adds JWT to Management API enrollments endpoint
2022-04-21 15:01:28 -04:00
b2f44c949b
Merge pull request #982 from openziti/adds.enrollment.refresh.logic
...
adds refresh expired enrollment logic and tests
2022-04-21 11:03:35 -04:00
afd39af571
fixes ext jwt startup cache to use kid not fingerprint
2022-04-21 10:15:23 -04:00
642dec4c25
adds refresh expired enrollment logic and tests
2022-04-20 16:13:41 -04:00
6a25a1f5b8
Add websocket api support
2022-04-19 13:04:54 -04:00
59de4af681
adds ids to identity authenticator detail
2022-04-13 14:20:10 -04:00
d80fafef96
fixes #968 management api doc not available
...
Root cause is a bug and/or lack of features in the go-open-api runtime.
2022-04-13 13:39:38 -04:00
8d8a2503e4
fixes issues where external ids were not handled on display/update
2022-04-12 09:46:41 -04:00
c32fa95ca8
Merge pull request #961 from openziti/add.ext.jwt.aud.iss.checks
...
adds optional issuer and audience properties to ext jwt signers
2022-04-12 08:54:53 -04:00
59af07dcd0
fixes is admin not set on updates (put/patch)
2022-04-08 11:20:15 -04:00
5b17be58c8
fixes admin permission not also checking default admin
2022-04-08 10:43:24 -04:00
ec51635f26
adds optional issuer and audience properties to ext jwt signers
2022-04-06 15:48:17 -04:00
5f62d05a9a
Merge pull request #952 from openziti/update-deps
...
Update to transport and storage libs. Update workflows
2022-03-31 11:14:29 -04:00
213f03bd89
fix migration version check
2022-03-31 10:52:50 -04:00
b5605f0738
updates db version
2022-03-31 10:48:31 -04:00
be958338b4
add error return on err in cert auth
2022-03-31 10:38:30 -04:00
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
ba84d2fae9
adds settable kid to ext jwt signers, fixes default auth policy
2022-03-30 13:51:23 -04:00
5129f3c8d7
adds partial authentication enforcement
...
- required ext jwt signer requires bearer token on requests
- adds auth query output for ext jwt
- enforces requireTotp auth policy
- allows partial auth to setup MFA but not remove
2022-03-30 10:10:52 -04:00
708dcfe0c9
adds auth policy / disabled identity auth logic
2022-03-29 14:26:04 -04:00
329d1eb4d1
Update deps and fix test
2022-03-28 18:19:14 -04:00
a34ae130b8
adds externalId, plumbs auth url, use external id
...
- adding tests and boundaries to values
- updating foundation
- squash, rebase
2022-03-28 10:54:27 -04:00
99e3b283b6
adds auth policy CRUD, does not affect authentication
2022-03-25 14:40:07 -04:00
9d5ba0ccec
Update test for fabric changes
2022-03-23 15:47:42 -04:00
Andrew Martinez