de54568423
More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set
2021-08-10 13:18:24 -04:00
23c98c2d5a
Add more tracing and allow enabling debug for specific identities for path selection/establishment
2021-08-09 11:20:51 -04:00
b82b92684b
Rename fabric session to circuit
2021-08-04 14:39:27 -04:00
8a44f37344
Simplify poll logic
2021-08-03 14:32:47 -04:00
4205482e58
If we create a new session but don't have a chance to return it, delete it before sending error
2021-08-03 13:16:34 -04:00
53c9c228dc
Fix error message
2021-08-03 12:04:24 -04:00
2a56ce2380
Update test for api changes
2021-08-03 09:16:22 -04:00
3874cb7b4e
formatting call
2021-07-30 14:55:58 -04:00
c3df0d9878
on invalid pd ptr use new pd
2021-07-30 14:50:59 -04:00
e78f308e16
documentation, fix ignored isPassing bool, log message on invalid pd ptr
2021-07-30 14:49:03 -04:00
a7e7b90d0f
fix posture data locking panics
2021-07-30 13:47:48 -04:00
7cb0b12d5c
Update for JWT lib changes
2021-07-30 10:04:45 -04:00
f2670e66a0
Make policy semantic required for POST/PUT. Fix evaluation on policy PUT if semantic not provided
2021-07-30 09:44:21 -04:00
bcca93e0db
Merge pull request #728 from openziti/example-fix
...
Fix init example and add log on successful terminator create
2021-07-29 09:50:25 -04:00
8a1b118ed2
Fix init example and add log on successful terminator create
2021-07-29 09:27:02 -04:00
f28061de4f
fixes missing 400s from list endpoints
...
- update some CA fields that were not marked required/nullable
- some list endpoints were missing 400 response definitions
- foundation dep update
2021-07-27 14:53:35 -04:00
cef4653c2f
add missing 401s to list operations, missing required
...
- adds missing 401s to list operations that were missing them
- adds required status to identityNameFormat for CAs
2021-07-26 16:19:16 -04:00
329a18af87
assume legacy unless c-sdk
2021-07-23 09:57:49 -04:00
20017f5a08
Merge pull request #721 from openziti/fix.pd.concurrent.map.usage
...
respect posture data concurrent lock
2021-07-23 09:27:03 -04:00
4112c6d241
respect posture data concurrent lock
2021-07-23 08:49:00 -04:00
c6f37bef67
adds wake/unlock timeout unit tests
2021-07-22 14:52:12 -04:00
6a522893fc
adds timeoutRemainingSeconds for posture queries
2021-07-21 14:20:26 -04:00
f34d540765
Update pfxlog to 0.5.1
2021-07-16 15:24:14 -04:00
a35e088e8e
fixes an issue where posture timeouts would not be enforced for 1st sess
2021-07-16 09:25:53 -04:00
d7c1dc038d
Allow searching on role sets
2021-07-15 09:35:41 -04:00
22d5d46554
Merge pull request #709 from openziti/add.mfa.options
...
add mfa options
2021-07-10 00:05:12 -04:00
bb4dbd90b9
adjust for c-sdk 0.25.0 release
2021-07-09 17:32:36 -04:00
0dbd5e515b
adds unit tests for legacy version mfa checks
2021-07-09 15:51:57 -04:00
efcb90c033
add all sdk version info to posture data
2021-07-09 15:27:23 -04:00
983fbaacfc
fixes #641 enables ?limit=x&offset=x on list association endpoints
...
Endpoints such as /current-identity/edge-routers would internally use a
ListAssociations(...) that would not respect the original query
parameters of limit/offset. Instead they would only respect the filter
parameter.
Per internal conversations, we agreed to maintain both paths.
2021-07-07 12:25:02 -04:00
47499bc4f1
add mfa options
...
- allow timeouts for MFA posture checks
- allow wake/unlocked MFA options
- allow legacy toggle for SDKs that don't supply endpoint state
- supply timeouts on posture checks
- posture data now caches session state
2021-07-07 08:39:39 -04:00
3151d31b7f
Handle xweb import change ( #697 )
...
* Handle xweb import change. Fix tunnel update/delete terminator handling
2021-06-22 14:18:17 -04:00
825c0a327a
Merge pull request #685 from openziti/fix.process.multi.patch
...
fixes issues with process multi's patch
2021-06-14 14:18:56 -04:00
572e606a0b
adds posture check patch tests
2021-06-14 11:12:32 -04:00
d920dbbd93
Fix sync early exit bug. Track new session during sync. Simplify thre… ( #686 )
...
* Fix sync early exit bug. Track new session during sync. Simplify threading and tighten up locking. Add dump api-sessions debug operation
* Address review comments. Remove spurious error message. Fix defaultHostingCost/Precedence field names
2021-06-11 14:01:20 -04:00
271bf051e0
fixes issues with process multi's patch
...
- NULL output for empty arrays will now be empty array "[]"
- patching no longer clears osType
- patching with the same path between two different OS types no longer
collides resulting in 1 process being saved
2021-06-10 16:31:26 -04:00
ef8847b34e
Delete expired api sessions in batches. Remove some unused methods
2021-06-09 15:40:42 -04:00
a3dd639981
Fix setting identity service costs/precedences when patching
2021-06-08 12:54:11 -04:00
01ed7b8a1c
Add policy engine start back in
2021-06-08 12:42:08 -04:00
afa651dd40
Fix Range bug where we only sent to one ER
2021-06-08 12:36:30 -04:00
df87ccc9f5
Merge pull request #680 from openziti/fix-router-tunneler-app-data
...
Make sure identity host data makes it to the tunneler
2021-06-07 09:26:48 -04:00
ad9f0f2d72
Make sure identity host data makes it to the tunneler
2021-06-04 16:41:23 -04:00
09b60f3ed8
Debugf to Infof
2021-06-04 12:30:27 -04:00
a6e0f4e807
revert defensive logic
2021-06-04 12:24:57 -04:00
0d9f609bab
Merge pull request #677 from openziti/fix.controller.config.enrollment.defaults
...
fix durations w/ no units
2021-06-03 11:06:17 -04:00
127de19ce1
remove re-Start() and re-Stop() capabilities
2021-06-03 10:36:49 -04:00
177379aa8e
fix durations w/ no units
2021-06-03 08:52:24 -04:00
087c51dd74
fixes rtx double stop panic
...
- stopping status was being reset causing subsequent stops to panic
- remove stopping atomic bool
- change router disconnect logging from debug to info
2021-06-01 14:00:22 -04:00
93bfce03c2
remove go routine and simply close
2021-05-25 18:19:19 -04:00
5a5fefa092
fixes deadlocks when a router disconnects mid sync or update
...
- range() of rtx'ers no longer locks, snapshots then loops
- rtx.Send() now checks for stopped/disconnected
- rtx.Send() now respects closeNotify
2021-05-25 16:23:20 -04:00
Paul Lorenz