gsadmin/ziti
1
0
Fork 0
mirror of https://github.com/openziti/ziti.git synced 2026-10-13 23:59:53 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,790 Commits 135 Branches 313 Tags
596f67b718d2cfcdc510a6ff249596d94d3ee809
Commit Graph

33 Commits

Author SHA1 Message Date
Paul Lorenz 2f6a3bc828 Update handler -> manager for base types and config 2022-06-02 00:05:54 -04:00
Andrew Martinez c5f156dd9e adds x509 claims support for external ids to CAs 
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
 2022-05-23 13:08:16 -04:00
Paul Lorenz 01bea19e1f Update to use transport and storage libs. Use fabric config instead of foundation/config 2022-03-30 22:49:46 -04:00
Andrew Martinez 708dcfe0c9 adds auth policy / disabled identity auth logic 2022-03-29 14:26:04 -04:00
Andrew Martinez 4cac5518e9 ensure that lastAccessedAt is set on create, emit logs if not found 2021-09-02 08:57:14 -04:00
Paul Lorenz ef8847b34e Delete expired api sessions in batches. Remove some unused methods 2021-06-09 15:40:42 -04:00
Paul Lorenz 038e9bdd91 Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events. 2021-03-25 15:43:07 -04:00
Andrew Martinez 993f51f7ab set mfa posture on enroll 
- update api session session state on mfa enroll
- update posture data state on mfa enroll
- centralize setting mfa posture data
- pass isMfaRequired and isMfaComplete in apiSession/currentApiSession
 2021-03-23 09:54:46 -04:00
Andrew Martinez 623681db87 add lastActivityAt 
- as updates to API Sessions can now happen later than the last time
  they were active, updatedAt is no longer the correct representation of
  the last activity an API Session had
- move all logic that used updatedAt to lastActivityAt
- add migration to set lastActivityAt
 2021-03-17 13:49:12 -04:00
Paul Lorenz 71a3a1643e Pass FieldChecker to toBoltEntityForPatch. Add some ReadByName methods. Move some code to allow re-use 2021-03-17 10:41:21 -04:00
Andrew Martinez fb9e4569f8 use mock api session 2021-03-15 11:25:07 -04:00
Andrew Martinez 5841f6fa70 use batch for api access last updates 2021-03-15 11:14:45 -04:00
Andrew 9612637454 Merge pull request #573 from openziti/thread.safe.router.state 
adds thread safe router state
 2021-03-08 16:19:54 -05:00
Andrew Martinez 90ca54adb8 adds thread safe router state 
Router state used to be stored and accessed in a thread unsafe way.
State is now locks on a mutex for setting values and values are copied
out for referencing.
 2021-03-08 14:55:36 -05:00
Paul Lorenz 0066137733 If api session not found, skip rest of loop 2021-03-08 10:27:10 -05:00
Paul Lorenz 155bbd8217 Validate sessions on controller instead of edge router 2021-02-17 20:38:13 -05:00
Andrew Martinez 919d7a3d6b add hearbeat invalid api token delete 2021-02-17 12:19:06 -05:00
Andrew Martinez d07618c9d5 modular edge router sync 
- edge router sync is now modular and can have different strategies
- plans to make this configurabe in the future with multiple strat
- legacy strategy is called "instant" and is the only option
- instant strat now supports control signaling and resync requests
- edge routers now do not remove connections till after a full sync
- added the ability for the controller to report the er sync status
- added er syn status to GET /edge-routers list and detail
- improved log output in sync logic
 2021-02-15 13:22:07 -05:00
Andrew Martinez 2d61799c24 add posture check MFA tests 2021-01-19 08:37:29 -05:00
Andrew Martinez 308d7f3a10 mfa initial 
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
 2021-01-19 08:36:27 -05:00
Andrew Martinez c726f158d6 fixes #365 adds hasApiSession and hasEdgeRouterConnection 2020-10-20 15:00:22 -04:00
Andrew Martinez 03277fa1f6 add heartbeat interval configuration 2020-08-25 17:35:51 -04:00
Andrew Martinez f92b88e395 Merge branch 'master' into stream.sessions.276 2020-08-24 08:40:29 -04:00
Andrew M faec4b95ba various fixes for API streaming and data net support 
- http requests should hard timeout w/ a reasonable response
- edge routers should close when an API session token is not provided or
  does not match
- stream both types of sessions on edge router connect
- stream sessions for time out processing/deletion
- add id to session messages (edge control pb update, breaks backwards
  compat)
 2020-08-24 08:31:45 -04:00
Paul Lorenz c179f87538 Improve session create performance. Closes GH-281 2020-08-20 12:35:04 -04:00
Andrew M b6d9efaf8c fixed #183, move to openziti 2020-05-26 17:37:35 -04:00
Paul Lorenz 7d60e03b65 Remove copyright date from header 2020-03-19 13:47:42 -04:00
Paul Lorenz f0257f6ccf Support for multiple endpoints 2020-03-19 13:31:31 -04:00
dovholuknf 3db81622cb didn't i do this once already? 2020-02-25 14:29:08 -05:00
Paul Lorenz d0f18a3a5b Allow overriding service configurations per identity (#68) 
Allow overriding service configurations per identity. Fixes GH-31
 2020-02-03 12:10:08 -05:00
Paul Lorenz d0b4b9047f Allow linking configurations to services. Fixes GH-30 2020-01-22 14:01:09 -05:00
Paul Lorenz c10c3ad781 Remove Handle prefix from handler methods. Remove breaking changes docs, which are moving to ziti-cmd 2020-01-09 13:14:50 -05:00
Andrew Martinez c8e2729f05 GH-18 removes ziti-edge/edge folder and moves all contents up 1 row 
- Updates .gitignore files
- Fixes imports
 2019-12-18 10:02:25 -05:00