79bc10b690
fix jwt auth response
2023-07-24 16:14:28 -04:00
8c8709ea72
Merge branch 'main' into jwt.auth
2023-07-24 15:42:46 -04:00
ef1cffee30
fix tests
2023-07-24 15:39:45 -04:00
240b654f51
fix small issues w/ ER code from split
2023-07-20 09:48:04 -04:00
414cff49d7
adds support OIDC authentication, api access, and ER connections
2023-07-20 09:41:12 -04:00
62b73c231c
Fix panic in router disconnect when fingerprint is nil. Fixes #1548
2023-07-13 12:03:38 -04:00
8372559f37
If CA is invalid pem, exit out of loop. Fixes #1543
2023-07-06 13:46:35 -04:00
1fed936746
Fix cert expire check logic error
2023-06-27 11:36:33 -06:00
1098dfd928
Restores old /edge/client/v1 coverage of the root URL
...
- restores /version for the c-sdk
- fixes existing Go SDK enrolled configurations which will use the wrong
API URL (non-prefixed) due to an old enrollment bug.
2023-06-22 14:16:59 -04:00
eeb9221fe4
adds .well-known/est/cacerts support to the management API
2023-06-14 09:56:23 -04:00
3325f91e76
fixes #1416 allows totp provisioning URL domain to be configured
...
- sets default to openziti.io (previously ziti.dev)
- adds edge.totp configuration section
2023-06-13 09:10:31 -04:00
fcd14e4e99
Allow wildcard domains in intercept.v1 configurations ( #1518 )
...
validate intercept addresses with idn-hostname format
2023-06-08 13:58:15 -04:00
f31f849344
Fix panic removing terminator with invalid session. Fixes #1512
2023-06-02 10:52:41 -04:00
a980106220
use 'idn-hostname' string format in intercept.v1 and host.vX config types. ( #1500 )
2023-05-23 15:30:12 -04:00
d3a2009582
fix lint issues
2023-05-12 15:44:10 -04:00
bf2684ac4e
fixes edge#1225 broken CA de-dupe logic, adds tests
2023-05-12 15:32:16 -04:00
3116412857
adds missing error message for unmatched iss field
2023-05-10 10:36:33 -04:00
97daffe69d
Merge pull request #1449 from openziti/annotate-circuit-events
...
annotate circuit events
2023-05-04 11:03:04 -04:00
661be7876d
fixes openziti/ziti#1093
...
- heart beat system was never being configured with a control channel
2023-05-01 10:02:48 -04:00
f28722cfa6
Handle nil terminator when getting circuit tags
2023-04-27 12:16:09 -04:00
95ae025ce9
updates golang sdk to v0.20.0
2023-04-26 13:55:51 -04:00
7d6901be3d
Add edge code needed for entity change events. Fixes #629
2023-04-25 22:34:02 -04:00
82cbbefceb
Fix event type
2023-04-25 14:04:14 -04:00
70008bfc8f
Update for fabric api changes. Fixes #1295
2023-04-25 13:26:25 -04:00
43fc1e96fe
Get tests running and do some cleanups
2023-04-25 13:26:19 -04:00
bd1b25f60c
Update presentation layer for api changes
2023-04-25 13:26:03 -04:00
63f9dad3df
Updated model for storage api changes
2023-04-25 13:26:02 -04:00
83bca6a0ba
Update for storage and fabric api changes
2023-04-25 13:26:02 -04:00
3c9e9ccbde
Info -> Debug on xgress_edge_tunnel dial result
2023-04-17 12:02:54 -04:00
d8e50ba43e
Make session edge-router check more efficient. Fixes #1418
2023-04-12 15:54:17 -04:00
0f08bfa7d0
fixes #1391 adding auth policy ref to identity, updates edge-api dep
2023-04-05 15:00:52 -04:00
bd9b6a713b
Pull some tweaks over from denorm branch
2023-04-03 11:34:37 -04:00
ad5dc292bb
Improve list performance by using identity indexes rather than service indexes. Fixes #1388
2023-04-03 09:58:21 -04:00
ffcfb619e4
fixes #1386 by safely dereferencing auth policy ids on PUT
2023-03-30 09:42:16 -04:00
212e4c2df6
Clear sessions, api-session and api-session certs because of indexing changes
2023-03-28 15:18:30 -04:00
1d0e558f90
Add support disabling routers. Fixes #1373
2023-03-28 13:42:25 -04:00
b7cd692102
Merge pull request #1377 from openziti/fix.1376.mfa.create.race.condition
...
merge check and create tx for MFA enrollment
2023-03-27 16:42:25 -04:00
6b8aa137e2
Merge pull request #1375 from openziti/fix.1374.mfa.admin.reset
...
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 16:26:05 -04:00
f274fb30f8
merge check and create tx for MFA enrollment
2023-03-27 16:13:57 -04:00
2a290612b0
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 15:31:49 -04:00
0a6043bb42
Fix missing entity type id on transit router. Fixes #1369
2023-03-23 23:47:54 -04:00
4057d55989
Merge pull request #1367 from openziti/fix-error-type
...
Fix error, should be invalid session, not invalid api session. Fixes #1366
2023-03-23 13:35:04 -04:00
fd8d41204a
Fix error, should be invalid session, not invalid api session. Fixes #1366
2023-03-23 10:43:52 -04:00
d76b9bc272
Cache api sessions for router/tunneler. Fixes #1364
2023-03-23 10:22:46 -04:00
2d55b5cc28
Don't delete sessions on failed terminator create
2023-03-23 09:51:14 -04:00
34cc021b3e
Make session creates idempotent. Fixes #1359
2023-03-23 09:50:05 -04:00
431df859b2
Handle duplicate tunnel terminator creation gracefully. Fixes #1355
2023-03-21 23:05:07 -04:00
e192f271ba
remove old "sessionCert" (not ApiSessionCert) bit rot
2023-03-20 18:04:21 -04:00
2f51b4acd7
reworks broker/sync connect/disconnect logic
...
- defensive checks for closed control channels
- defensive checks for duplicate/mismatch control channels
2023-03-20 15:28:09 -04:00
64d34d78dd
Merge pull request #1343 from openziti/update-fabric-dep
...
Update edge test for fabric api update
2023-03-20 09:50:54 -04:00
Andrew Martinez