6e1983991d
Fixes from testing
2024-11-01 15:21:01 -04:00
16f0a858e6
Add controller connect events. Fixes #1835 . Fixes #2234
2024-11-01 15:21:01 -04:00
c79f404eca
search for SANs in the cert closest to the http listener
2024-10-17 09:05:05 -04:00
a3ef5be25a
fixes #2474 adds generic network JWT for trust boot strapping
2024-10-09 13:06:36 -04:00
e1b7f1e974
add searching xweb configs
2024-10-04 21:31:52 -04:00
e961da9ebe
fix lint error
2024-10-04 15:30:44 -04:00
6c85940931
fixes #2468 locates the correct server certificate for enrollments
...
- determines certificate for signing based on all identity server certs
- does not cache as certificates may reload
2024-10-04 15:24:07 -04:00
c2a62c9a8e
Merge branch 'main' into fix.2354.auth.query.support.oidc
2024-10-04 11:22:16 -04:00
d0e0c6008a
use new edge-api constants
2024-10-04 11:14:39 -04:00
694b9dc18d
Add events for JWT session for create/refresh/exchange. Fixes #2119
2024-09-30 15:32:48 -04:00
f8346be9cd
fixes #2354 adds oidc AuthhQuery support
2024-09-23 10:14:31 -04:00
cccf0c06af
Update to channel/v3. Fixes #2390
2024-09-09 12:23:25 -04:00
643cc2c855
add protections to app env when starting fabric only controllers
2024-09-04 09:31:13 -04:00
e6b4dc33f9
add migration for network certs
2024-08-30 15:31:33 -04:00
0ef6f03570
updates authenticator/api session logic for isCertExtendable
...
- updates legacy and oidc authentication for isCertExtendable
- updates authenticators REST responses to include isIsssuedByNetwork
2024-08-29 10:13:47 -04:00
15f5ecc75d
update refresh token logic to set scopes/aud on refresh
...
- adds tests for scope and refresh
2024-08-07 17:33:12 -04:00
3015e2ca3a
switch from native to openziti as a client id
2024-08-07 09:29:42 -04:00
dfda33fb01
Merge pull request #2068 from openziti/enhance-rdm-with-configs
...
enhance rdm with configs
2024-07-18 17:49:49 -04:00
77d27ca781
Enhance the router data model with config information, fixes #2010 Add subscription model to router data model, fixes #1990
2024-07-17 14:31:39 -04:00
54c9f8211f
fixed #2240 secondary ext-jwt processing would fail...
...
...if ext-jwt primary wasn't enabled.
- fixes extra JWT processing on authentication endpoints (that would
never pass)
- updates error message for missing NamedIndexStore implementations
- fixes ext-jwt store error stating that a named index is not present
2024-07-16 13:51:40 -04:00
c3b43133d1
Merge fabric and controller model code. Fixes #2205
2024-07-09 16:11:01 -04:00
6ecca65c85
fixes #2165 adds network id configuration/spiffe id look up
...
- adds support for trust domain lookup on x509 chain
- adds support for non-ha trustDomain configuration
- adds default generated trust domain for non-ha controllers
- non-HA controllers will generate a trust domain from the root CA if
possible
- additionalTrustDomains has been added for transitioning between trust
domains
update changelog.md
2024-07-03 10:23:50 -04:00
10a79a0189
fixes #2087 sets provider to "URL" a generic type
2024-06-24 08:36:09 -04:00
898e41ae2a
Implement router data model changesets. Fixes #1966
2024-04-23 11:56:10 -04:00
ac7c4848c5
Don't use EdgeSessionRemoved tracking for HA sessions. Fixes #1936
2024-04-12 13:48:34 -04:00
59894d61bc
fixes #1931 random invalid kids
...
- caused by usage of mesh peers instead of controller list
- peers from the mesh can be unreliable depending on startup time and
connection time
2024-04-11 11:32:24 -04:00
8f4f9944f5
Add TLS handshake rate limiter. Fixes #1904
2024-04-09 17:25:35 -04:00
8c7b3b2e84
reduces prerms from admin to authenticated on list controllers
...
- updated public key sync to use controller list data instead of mesh peer
- fixes perms on controller list to not be admin only
2024-03-26 10:55:50 -04:00
881ec14b63
Fix validation perf. Fixes #1428 . Remove duplicate LoadOneById method.
2024-03-21 10:10:07 -04:00
a3c3da870f
pr changes, fixes revocation events
2024-03-05 09:48:13 -05:00
401de61bbc
spelling errors
2024-02-29 10:06:22 -05:00
09542c7728
consolidated ha changes
2024-02-29 09:27:56 -05:00
04873a250d
Add auth rate limiter. Fixes #1657 . Also add links fablab stress test.
2023-12-21 09:48:04 -05:00
a84369a6e9
Consolidate fabric and edge persistence code. Fixes #1555
2023-12-06 17:36:37 -05:00
73ad4c9c84
Handle fallout from putting and fabric and edge into the same project
2023-09-29 10:51:56 -04:00
f3d67b7f49
Update fabric imports
2023-09-28 23:34:28 -04:00
07da3cd513
Merge remote-tracking branch 'edge/main' into merge-edge
...
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
a9074719ce
Fix namespace conflicts in controller/events
2023-08-30 17:16:10 -04:00
453e6cae2a
Consolidate controller/apierror/helpers and messages
2023-08-30 17:16:10 -04:00
5b59ae13ee
Update for moved packages in fabric
2023-08-23 09:40:05 -04:00
b061fe9a39
Move internal/certs to common. Remove some incidental files that weren't used.
2023-08-07 10:20:06 -04:00
03b58ebcd3
Move jwtsigner package to controller
2023-08-04 17:04:44 -04:00
dba0fb6f7c
Move protobufs to common
2023-08-04 17:01:15 -04:00
8b3092a3d9
Merge pull request #1566 from openziti/prep-for-ziti-merge-p2
...
Move eid to common
2023-08-04 16:35:26 -04:00
f368b631b0
Merge remote-tracking branch 'origin/main' into prep-for-ziti-merge-p1
2023-08-04 16:26:16 -04:00
1f5eed5956
Move eid to common
2023-08-04 11:46:53 -04:00
7d6f4ef700
Reorganize code in preparation for merging to ziti repo, first pass.
2023-08-04 09:48:06 -04:00
7ee4539e6a
fix lint
2023-07-24 16:41:58 -04:00
5c30981c8b
fix lint
2023-07-24 16:28:17 -04:00
79bc10b690
fix jwt auth response
2023-07-24 16:14:28 -04:00
Paul Lorenz