bfcb037783
Initial pass at fabric rest api working ( #838 )
...
* Update for fabric rest controller changes
2021-11-30 16:30:17 -05:00
f1af4df5d8
Merge pull request #837 from openziti/fix-panic
...
Fix panic caused by missing return on error
2021-11-17 10:34:23 -05:00
66ed64d749
Fix panic caused by missing return on error
2021-11-17 10:22:56 -05:00
de45dc0554
Remove some unused types. Fix version map
2021-11-09 09:18:15 -05:00
1f9ca6878a
changes client cert validation
...
- adds test for client cert validation expectations
- adds certificat authenticator create
2021-11-05 10:10:17 -04:00
24ae6dbb19
Fix panic on session view
2021-11-02 16:40:22 -04:00
a1f7a48cdc
adds identity cert extension endpoint to client/man API
...
- now supports POST /current-identity/authenticators/{id}/extend for
cert authenticators
- adds test for cert extension endpoint
2021-10-21 15:12:30 -04:00
2fd995becb
Fix panic if posture data mfa is nil
2021-09-09 11:18:19 -04:00
c2b83432d1
adds /identity/:id/authenticators Management API endpoint
2021-09-08 14:06:56 -04:00
cfebf66ca9
Merge pull request #765 from openziti/rest.session.model.no.err
...
rest api session modeling will no longer kill lists
2021-09-02 13:34:43 -04:00
05fb2e155a
Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
...
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
66a438fb02
rest api session modeling will no longer kill lists
2021-09-02 11:04:28 -04:00
f095abe8df
fix go test failures
2021-09-02 09:11:14 -04:00
4cac5518e9
ensure that lastAccessedAt is set on create, emit logs if not found
2021-09-02 08:57:14 -04:00
782f43cb26
Fix time check on list tunnel. Add policy enforcer test. Add update session test
2021-09-01 16:20:43 -04:00
7e2b97c425
fixes posture check timeouts, tests, service updates
...
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
2021-08-30 09:05:46 -04:00
fa902f385d
Add entity count events. Fixes GH-757
2021-08-19 14:18:30 -04:00
23c98c2d5a
Add more tracing and allow enabling debug for specific identities for path selection/establishment
2021-08-09 11:20:51 -04:00
b82b92684b
Rename fabric session to circuit
2021-08-04 14:39:27 -04:00
7cb0b12d5c
Update for JWT lib changes
2021-07-30 10:04:45 -04:00
f2670e66a0
Make policy semantic required for POST/PUT. Fix evaluation on policy PUT if semantic not provided
2021-07-30 09:44:21 -04:00
f28061de4f
fixes missing 400s from list endpoints
...
- update some CA fields that were not marked required/nullable
- some list endpoints were missing 400 response definitions
- foundation dep update
2021-07-27 14:53:35 -04:00
cef4653c2f
add missing 401s to list operations, missing required
...
- adds missing 401s to list operations that were missing them
- adds required status to identityNameFormat for CAs
2021-07-26 16:19:16 -04:00
6a522893fc
adds timeoutRemainingSeconds for posture queries
2021-07-21 14:20:26 -04:00
22d5d46554
Merge pull request #709 from openziti/add.mfa.options
...
add mfa options
2021-07-10 00:05:12 -04:00
efcb90c033
add all sdk version info to posture data
2021-07-09 15:27:23 -04:00
983fbaacfc
fixes #641 enables ?limit=x&offset=x on list association endpoints
...
Endpoints such as /current-identity/edge-routers would internally use a
ListAssociations(...) that would not respect the original query
parameters of limit/offset. Instead they would only respect the filter
parameter.
Per internal conversations, we agreed to maintain both paths.
2021-07-07 12:25:02 -04:00
47499bc4f1
add mfa options
...
- allow timeouts for MFA posture checks
- allow wake/unlocked MFA options
- allow legacy toggle for SDKs that don't supply endpoint state
- supply timeouts on posture checks
- posture data now caches session state
2021-07-07 08:39:39 -04:00
3151d31b7f
Handle xweb import change ( #697 )
...
* Handle xweb import change. Fix tunnel update/delete terminator handling
2021-06-22 14:18:17 -04:00
825c0a327a
Merge pull request #685 from openziti/fix.process.multi.patch
...
fixes issues with process multi's patch
2021-06-14 14:18:56 -04:00
d920dbbd93
Fix sync early exit bug. Track new session during sync. Simplify thre… ( #686 )
...
* Fix sync early exit bug. Track new session during sync. Simplify threading and tighten up locking. Add dump api-sessions debug operation
* Address review comments. Remove spurious error message. Fix defaultHostingCost/Precedence field names
2021-06-11 14:01:20 -04:00
271bf051e0
fixes issues with process multi's patch
...
- NULL output for empty arrays will now be empty array "[]"
- patching no longer clears osType
- patching with the same path between two different OS types no longer
collides resulting in 1 process being saved
2021-06-10 16:31:26 -04:00
ef8847b34e
Delete expired api sessions in batches. Remove some unused methods
2021-06-09 15:40:42 -04:00
a3dd639981
Fix setting identity service costs/precedences when patching
2021-06-08 12:54:11 -04:00
e180d2fa7b
Fix updating terminators when cost is omitted
2021-05-20 11:11:25 -04:00
3f3c1318c7
Merge pull request #665 from openziti/fix-app-data-updates
...
Add appData to filtered jsonfields. Remove unused identity checker field
2021-05-19 13:37:58 -04:00
9af29b5072
Add appData to filtered jsonfields. Remove unused identity checker field
2021-05-18 21:08:19 -04:00
603fdbd772
set base posture check properties for process multi
2021-05-18 14:39:57 -04:00
cc1574fdc9
update /version endpoint
...
- now reports all versions, api bindings, and api bind points from xweb
- now reports api base urls (http://<bindpoint>/<api path>
- now points 'edge' to 'edge-client' api binding
2021-05-07 10:46:24 -04:00
6625084569
use xweb for Edge Client and Management APIs
...
- use xweb for run
- use xweb for api tests
- use time.ParseDuration for edge configuration
- use CORS defaults in Client/Management API handlers
2021-05-06 16:45:48 -04:00
b562fb5c07
splits API specs into composible modules
...
- splits Open API 2.0 (swagger) into client/management APIs
- uses go-swaggers flatten capabilities
- uses newer version of go-swagger (v0.27.0)
- introduces /edge/client/v1, /edge/management/v1
- non-prefixed URLs default to /edge/client/v1
- splits some shared management/client API handlers
- renames some REST models to "client" instead of "limited"
- passes all apitests, fails dataflow upd test (main fails this as well)
- updates generate rest script for powershell
- todo: test generate rest script for bash
- todo: use xweb (different branch)
2021-05-04 11:30:32 -04:00
54af8801e7
adds posture check type PROCESS_MULTI
...
- adds a new posture check for dealing with multiple processes
- supports anyOf and allOf semantics
- does not require new posture responses, current process responses
suffice
- tests
2021-04-20 08:52:23 -04:00
4a9b226f0e
adds the ability for router to extend their enrollment
...
- routers can now opt to extend their enrollment at any time with a
previous or new key
- adds tests for router enrollment
- adds tests for router enrollment extension
2021-04-14 09:21:59 -04:00
b278f611d0
add policyType to posture query sets
...
- also fixes policy ids being set as the same value due to pointer in
for loop reference
2021-04-13 15:26:17 -04:00
b493cce490
Add app data to identity and edge router. Add isSystem to ERP
2021-04-06 10:07:57 -04:00
8f6234842e
Add per-service identity hosting precedence/costs
2021-04-06 09:51:22 -04:00
a753022e37
unify api session modeling
2021-03-24 13:51:26 -04:00
1100d6f388
update service update on posture data change, tests
2021-03-23 09:54:47 -04:00
993f51f7ab
set mfa posture on enroll
...
- update api session session state on mfa enroll
- update posture data state on mfa enroll
- centralize setting mfa posture data
- pass isMfaRequired and isMfaComplete in apiSession/currentApiSession
2021-03-23 09:54:46 -04:00
680852f80e
Allow tunnel to run over xgress directly
2021-03-22 14:33:54 -04:00
Paul Lorenz