16f0a858e6
Add controller connect events. Fixes #1835 . Fixes #2234
2024-11-01 15:21:01 -04:00
5133cd75d1
fixes #2478 legacy auth queries missing values
...
- adds OIDC property checks on auth queries
- adds legacy property checks on auth queries
2024-10-15 09:36:37 -04:00
a3ef5be25a
fixes #2474 adds generic network JWT for trust boot strapping
2024-10-09 13:06:36 -04:00
0ef6f03570
updates authenticator/api session logic for isCertExtendable
...
- updates legacy and oidc authentication for isCertExtendable
- updates authenticators REST responses to include isIsssuedByNetwork
2024-08-29 10:13:47 -04:00
d01cef1aad
Merge branch 'main' into fix.2091.add.scope.clientid.ext.jwt
2024-08-21 16:07:56 -04:00
66e7284c84
fixes #2091 adds scope and client id configuration to ext jwt signers
2024-08-21 09:31:52 -04:00
7e7e2aa269
Fix patch appData on edge routers. Fixes #2318
2024-08-12 14:43:10 -04:00
b8f944326f
Ensure controller is initialized before raft. Fixes #2279
2024-08-01 14:14:55 -04:00
353cf93905
fixes #2154 500 error on mfa enrollment in HA, fixes #2159 HA certs
...
- fixes 500 internal error on MFA enrllment in HA deployments
- fixes HA API Session Certs not working in HA
- adds spiffehlp module to common
- adds tests api session certs w/ spiffe id
- adds tests for SPIFFE IDs in API Session Certs
- adds tests for ext jwt + cert auth
2024-07-30 08:53:54 -04:00
07f9ab18e7
Add support for listing services referencing a given config. Fixes #2245
2024-07-26 14:14:48 -04:00
ffa304ebbf
Add posture check role attributes list API. Fixes #2089
2024-07-26 14:14:48 -04:00
2d2eb41f27
fixes #2209 anon access to list ext jwt signers on client API
2024-07-22 10:00:14 -04:00
77d27ca781
Enhance the router data model with config information, fixes #2010 Add subscription model to router data model, fixes #1990
2024-07-17 14:31:39 -04:00
1388ec2d01
Sort connected routers first for session ers. Increase er limit to 25. Fixes #2046
2024-07-12 15:33:17 -04:00
c3b43133d1
Merge fabric and controller model code. Fixes #2205
2024-07-09 16:11:01 -04:00
68f0167126
Merge pull request #1927 from openziti/fix.1926.enroll.certs.with.chains
...
fixes #1926 adds chains to enrollment responses
2024-04-23 09:33:22 -04:00
3e9567b412
Use config types from edge-apis instead of manually parsing
2024-04-17 14:25:32 -04:00
ac7c4848c5
Don't use EdgeSessionRemoved tracking for HA sessions. Fixes #1936
2024-04-12 13:48:34 -04:00
0e21934b75
fixes #1926 adds chains to enrollment responses
...
- all server and client certs issued attempt to build a chain less root
from the CA bundle during enrollment
- this change still requires all intermediates to be in the ca bundle,
untill they are moved somewhere else or provided in some other fashion
- updated tests to expect chains in enrollment responses
2024-04-10 10:57:57 -04:00
8f4f9944f5
Add TLS handshake rate limiter. Fixes #1904
2024-04-09 17:25:35 -04:00
8c7b3b2e84
reduces prerms from admin to authenticated on list controllers
...
- updated public key sync to use controller list data instead of mesh peer
- fixes perms on controller list to not be admin only
2024-03-26 10:55:50 -04:00
b5e96dbeea
Merge pull request #1851 from openziti/posture-check-optimization
...
Return dummy values in service list for posture checks if no posture checks are defined. Fixes #1576
2024-03-25 10:37:30 -04:00
881ec14b63
Fix validation perf. Fixes #1428 . Remove duplicate LoadOneById method.
2024-03-21 10:10:07 -04:00
a089ca7c36
Return dummy values in service list for posture checks if no posture checks are defined. Fixes #1576
2024-03-20 14:23:15 -04:00
36ced919ae
Merge branch 'main' into ha-staging
2024-03-14 08:38:57 -04:00
fab81e4cd4
Add terminator chaos testing and fix issues found. Fixes #1794 Fixes #1369
2024-03-12 10:31:36 -04:00
09542c7728
consolidated ha changes
2024-02-29 09:27:56 -05:00
1f94fd5ebe
fix refactor gone awry
2024-02-27 18:31:33 -05:00
261e12043c
Changing xweb to SPA for clarification
...
Signed-off-by: gberl002 <geoff.berl@netfoundry.io >
2024-02-27 14:34:02 -05:00
935c89bb7d
fixes 1354 adds hostname/domain to env info
2024-02-22 14:32:00 -05:00
38617b244e
Merge pull request #1658 from openziti/auth-rate-limiter
...
Add auth rate limiter. Fixes #1657 . Also add links fablab stress test.
2023-12-21 10:53:04 -05:00
04873a250d
Add auth rate limiter. Fixes #1657 . Also add links fablab stress test.
2023-12-21 09:48:04 -05:00
126ee5d79c
codespell: Add spelling check and fix all issues
...
Signed-off-by: Mario Trangoni <mjtrangoni@gmail.com >
2023-12-19 10:52:42 +01:00
9ddd1b941d
Add service max idle time. Fixes #1496 . Add decomission router support. Fixes #1402
2023-12-08 12:48:56 -05:00
a84369a6e9
Consolidate fabric and edge persistence code. Fixes #1555
2023-12-06 17:36:37 -05:00
ad861ad682
adds capabilities in version and enumerated list version
2023-10-18 09:58:59 -04:00
73ad4c9c84
Handle fallout from putting and fabric and edge into the same project
2023-09-29 10:51:56 -04:00
f3d67b7f49
Update fabric imports
2023-09-28 23:34:28 -04:00
07da3cd513
Merge remote-tracking branch 'edge/main' into merge-edge
...
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
74006eeb9d
Don't update identity if it hasn't changed. Fix change attribution for edge client updates. Fixes #1610 . Fixes #1611
2023-09-13 11:42:35 -04:00
453e6cae2a
Consolidate controller/apierror/helpers and messages
2023-08-30 17:16:10 -04:00
5b59ae13ee
Update for moved packages in fabric
2023-08-23 09:40:05 -04:00
81baa1843b
Add default identity type. Remove user,service,device types. Fixes #1428
2023-08-22 20:40:33 -04:00
99ebbbf75c
fix nil list on auth policy rest model, fixes #1584
2023-08-16 09:56:53 -04:00
b061fe9a39
Move internal/certs to common. Remove some incidental files that weren't used.
2023-08-07 10:20:06 -04:00
8b3092a3d9
Merge pull request #1566 from openziti/prep-for-ziti-merge-p2
...
Move eid to common
2023-08-04 16:35:26 -04:00
f368b631b0
Merge remote-tracking branch 'origin/main' into prep-for-ziti-merge-p1
2023-08-04 16:26:16 -04:00
1f5eed5956
Move eid to common
2023-08-04 11:46:53 -04:00
7d6f4ef700
Reorganize code in preparation for merging to ziti repo, first pass.
2023-08-04 09:48:06 -04:00
414cff49d7
adds support OIDC authentication, api access, and ER connections
2023-07-20 09:41:12 -04:00
Paul Lorenz