Commit Graph

87 Commits

Author SHA1 Message Date
Andrew Martinez c23bf9dbcf fixes os PATCH for posture checks
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
Andrew Martinez 4051c47dd5 Merge branch 'main' into mfa 2021-01-26 13:52:59 -05:00
Paul Lorenz 891d8eb5ce Add service events when configs are updated/deleted. Add service events test 2021-01-19 14:30:34 -05:00
Andrew Martinez 308d7f3a10 mfa initial
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
Andrew Martinez 65be49c609 Add appId and appVersion to sdkInfo 2021-01-18 10:38:43 -05:00
Paul Lorenz 803eb5d5d6 Move service policy enforcer to use service events 2021-01-15 15:28:59 -05:00
Paul Lorenz 2194d8a2e2 Implement service change notifications 2021-01-15 15:28:59 -05:00
Paul Lorenz 5efbbf0942 Add health check implementation for tunnelers and add default hosting precedence and cost to identity 2021-01-12 11:00:43 -05:00
Andrew Martinez a3789c063a adds support of API Session Certificates
- adds ability for any authenticated API Session to create ephemeral
 certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
  controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
Andrew Martinez e0cf6a7ea5 fixes #397 and fixes #398
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
Andrew 53f702c212 Merge pull request #369 from openziti/add.online.status
Add.online.status
2020-10-31 08:35:39 -04:00
Andrew Martinez ac187ffa99 posture check implementation
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
Shawn Carey 4bb404e953 Ziti tunnel.cfgtype.v2.0 (#357)
* add client.v2.0 tunneler configuration type.
* renamed cfgtype
* set db version to 14
* added host.v1 configuration type
2020-10-26 12:14:29 -04:00
Andrew Martinez 7cc95e3456 fixes #372 ensures v13 dbs have posture check types
- adds posture check types to init
- on v12/v13 migrations, posture check types are checked and added if
  necessary
2020-10-21 11:40:06 -04:00
Andrew Martinez c726f158d6 fixes #365 adds hasApiSession and hasEdgeRouterConnection 2020-10-20 15:00:22 -04:00
Andrew Martinez 568eb129c7 address PR comments
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
Andrew Martinez 5e834504ec adds Edge API routing
- adds mocked posture data for identities
- refines OS
- adds migrations for posture check types
2020-10-13 08:20:57 -04:00
Andrew Martinez 4fc4aee36c swagger def for posture checks and types
- polymorphic posture checks with copied base entity properties
- go-swagger 0.25 generated api
2020-10-12 07:37:19 -04:00
Paul Lorenz 50bc204dd5 Add edge terminator validator 2020-09-29 09:27:05 -04:00
Paul Lorenz 50c6b3e4b3 Support identity dial/bind 2020-09-29 09:27:03 -04:00
Andrew Martinez 6814db98c1 adds public ip address for #226 2020-09-09 10:42:20 -04:00
Paul Lorenz 734e9a5542 Fix service policy migration. Update for terminator precendence changes. Log panic stacks. Fixes GH-291 2020-09-03 10:22:27 -04:00
Paul Lorenz c179f87538 Improve session create performance. Closes GH-281 2020-08-20 12:35:04 -04:00
Paul Lorenz e2ad712948 Add edge session events API. Closes GH-229 2020-08-11 14:00:57 -04:00
Paul Lorenz a340381c70 Add core events framework 2020-08-11 14:00:40 -04:00
Paul Lorenz 6fc2215d26 Fix service policy types. Add debug util for debugging bbolt datastores. Fixes GH-269 2020-08-04 15:33:30 -04:00
Paul Lorenz b8a88f4d90 Fix transit/edge router store overlap. Add name index cleanup migration (#264)
* Fix transit/edge router store overlap. Add name index cleanup migration
2020-08-03 14:26:12 -04:00
Andrew M ada72b335b Merge branch 'master' into e2e.router.termination 2020-07-31 09:50:09 -04:00
Paul Lorenz 951c80b8d0 Integrate data integrity check/repair framework and add REST API. Fixes GH-258 2020-07-28 10:05:46 -04:00
Paul Lorenz c8b7a8d8c7 Implemented policy model performance improvements. Fixes GH-256 2020-07-28 10:03:36 -04:00
Paul Lorenz 14eb819b30 Model performance test, work in progress 2020-07-28 10:01:34 -04:00
Andrew M e39c21b6a1 e2e support fixes #173
- adds edge level edge_transport xgress
- adds service encyrptionRequired flag (rest API, protobuffs)
- adds edge router encryption checks
2020-07-27 16:18:46 -04:00
Paul Lorenz 6795f7c520 Fix query symbol names. Fix fingerprint formats in migration 2020-06-19 16:52:05 -04:00
Paul Lorenz 81b5a4ef76 Move service and router names to fabric 2020-06-19 14:10:31 -04:00
Andrew M 5ddefc25c2 Merge branch 'master' into use.shortids 2020-06-17 17:24:24 -04:00
Paul Lorenz 64ce3a92df move edge routers under fabric routers. Fixes GH-144 2020-06-17 16:36:14 -04:00
Andrew M 0817b9b6c5 Merge branch 'master' into use.shortids 2020-06-17 13:49:20 -04:00
Andrew M 6571dbd72c use shortids 2020-06-16 17:33:45 -04:00
Andrew M 0923db08d5 Merge branch 'master' into open.api 2020-06-15 13:49:23 -04:00
Paul Lorenz 26850875ee Remove cluster and appwan migration code 2020-06-14 22:57:11 -04:00
Paul Lorenz a3f9e3c978 Remove postgres code. Fixes GH-195 2020-06-10 15:52:45 -04:00
Paul Lorenz f0eb83e7fe Update for API changes and fix close bug. Fixes GH-189 (#190)
* Update for API changes and fix close bug. Fixes GH-189
2020-06-09 20:21:40 -04:00
Andrew M 3087972172 all conversion work
- remove old JSON schema, unsused code
- remove unused variables from base router functions
- rework all API entities
- rework all links
- fix lint issues
- adds error conversion logic
- update tests as needed
- fix up go test
- fix backwards compat w/ non json enroller
2020-06-09 14:11:23 -04:00
Andrew M b6d9efaf8c fixed #183, move to openziti 2020-05-26 17:37:35 -04:00
Andrew M e8b10600c4 fixes #147, identity naming durin auto enrollment
- allows CAs to specify a naming format for auto ca identities
- name collisions during auto enrollment now adds a six digit
  incrementing number
2020-05-20 13:00:54 -04:00
Andrew M 6732d0abfa fixes #158
- update for identities does not allow enrol/auth/default admin to be
  updated
- adds migrations to fix broken data models between ident/auth/enrol
- fixes migration not to be stuck at version 4
2020-05-18 09:17:31 -04:00
Andrew M b8bf0be2c7 adds env info on auth fixes #126 2020-05-08 09:01:51 -04:00
Paul Lorenz ae6edccbab Update for Xt changes (#142)
* Update for Xt changes
2020-05-01 13:24:20 -04:00
Paul Lorenz 1895415ea7 Move FieldError to foundation. Adapt to fabric API changes. Several terminator/transit router fixes 2020-04-24 10:04:36 -04:00
Paul Lorenz fd231fef0c Update deps and error messages 2020-04-21 14:56:08 -04:00