05fb2e155a
Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
...
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
76e839cfaa
adds constants for posture check types
2021-09-02 10:15:31 -04:00
782f43cb26
Fix time check on list tunnel. Add policy enforcer test. Add update session test
2021-09-01 16:20:43 -04:00
cf7c63ffa9
translate valeus less than 0 to -1
2021-08-30 09:12:39 -04:00
7e2b97c425
fixes posture check timeouts, tests, service updates
...
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
2021-08-30 09:05:46 -04:00
fa902f385d
Add entity count events. Fixes GH-757
2021-08-19 14:18:30 -04:00
de54568423
More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set
2021-08-10 13:18:24 -04:00
f2670e66a0
Make policy semantic required for POST/PUT. Fix evaluation on policy PUT if semantic not provided
2021-07-30 09:44:21 -04:00
d7c1dc038d
Allow searching on role sets
2021-07-15 09:35:41 -04:00
47499bc4f1
add mfa options
...
- allow timeouts for MFA posture checks
- allow wake/unlocked MFA options
- allow legacy toggle for SDKs that don't supply endpoint state
- supply timeouts on posture checks
- posture data now caches session state
2021-07-07 08:39:39 -04:00
825c0a327a
Merge pull request #685 from openziti/fix.process.multi.patch
...
fixes issues with process multi's patch
2021-06-14 14:18:56 -04:00
d920dbbd93
Fix sync early exit bug. Track new session during sync. Simplify thre… ( #686 )
...
* Fix sync early exit bug. Track new session during sync. Simplify threading and tighten up locking. Add dump api-sessions debug operation
* Address review comments. Remove spurious error message. Fix defaultHostingCost/Precedence field names
2021-06-11 14:01:20 -04:00
271bf051e0
fixes issues with process multi's patch
...
- NULL output for empty arrays will now be empty array "[]"
- patching no longer clears osType
- patching with the same path between two different OS types no longer
collides resulting in 1 process being saved
2021-06-10 16:31:26 -04:00
1919b6b5a4
Merge branch 'main' into posture.multi.process
2021-04-28 11:08:28 -04:00
41ff14688d
add PROCESS_MULTI to posture check types
2021-04-28 11:02:55 -04:00
d313d39a80
When empty router name specified, return 4xx error instead of 5xx error
2021-04-23 14:18:40 -04:00
deef2bba6a
Fix issues with host.v1 config type schema ( #640 )
...
- require "low", "high" properties in portRange
- fixed allowedAddresses item type in json schema docs
2021-04-23 09:39:29 -04:00
54af8801e7
adds posture check type PROCESS_MULTI
...
- adds a new posture check for dealing with multiple processes
- supports anyOf and allOf semantics
- does not require new posture responses, current process responses
suffice
- tests
2021-04-20 08:52:23 -04:00
503e320b58
Fix file name
2021-04-14 16:10:22 -04:00
fa56d0f487
Add test for cursor on-delete issue
2021-04-14 16:10:21 -04:00
0c281d998b
corrected definitions in host.v1
2021-04-13 08:01:12 -04:00
2110aba5c1
host.v1 configuration type schema changes ( #631 )
...
- Rename host.v1 dialIntercepted* properties to forward*
- Add allowed* properties to whitelist destinations that are dialed via forward*
- Add allowedSourceAddresses, which serves as a whitelist for source IPs/CIDRs and informs the hosting tunneler of the local routes to establish when hosting a service
2021-04-13 07:48:47 -04:00
34c91e480c
Propagate router renames to fabric. Lookup identity by id, not name
2021-04-08 12:52:21 -04:00
b493cce490
Add app data to identity and edge router. Add isSystem to ERP
2021-04-06 10:07:57 -04:00
8f6234842e
Add per-service identity hosting precedence/costs
2021-04-06 09:51:22 -04:00
038e9bdd91
Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events.
2021-03-25 15:43:07 -04:00
27a361f776
check nil cursors for policy iteration
2021-03-24 14:06:09 -04:00
680852f80e
Allow tunnel to run over xgress directly
2021-03-22 14:33:54 -04:00
8f02a817af
Merge pull request #595 from openziti/remove-old-db-migrations
...
Remove migration data for versions prior to 0.17.1
2021-03-19 10:51:53 -04:00
ec91503b7c
Remove migration data for versions prior to 0.17.1
2021-03-18 15:52:10 -04:00
623681db87
add lastActivityAt
...
- as updates to API Sessions can now happen later than the last time
they were active, updatedAt is no longer the correct representation of
the last activity an API Session had
- move all logic that used updatedAt to lastActivityAt
- add migration to set lastActivityAt
2021-03-17 13:49:12 -04:00
3cfbe17c5b
Support for bbolt tracing.
2021-03-17 10:50:46 -04:00
9df72e9627
Update deps and update for foundation api change
2021-03-08 13:18:52 -05:00
ba97da239f
Update for system entity changes
2021-03-03 14:51:28 -05:00
735eb1d80f
Move ApiError and FieldError to foundation
2021-03-03 14:44:26 -05:00
8a160d93b1
Fix update terminator. Add test for terminator updates. Remove unused store_events
2021-02-26 09:04:32 -05:00
5ec44c3d3e
add migration to remove api sessions/sessions on migration from 18->19
2021-02-19 09:54:55 -05:00
35fa25d5af
use ast.BoolNodeTrue
2021-02-09 13:55:03 -05:00
46166db9cc
fixes orphaned ottca enrollments
...
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
c23bf9dbcf
fixes os PATCH for posture checks
...
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
4051c47dd5
Merge branch 'main' into mfa
2021-01-26 13:52:59 -05:00
891d8eb5ce
Add service events when configs are updated/deleted. Add service events test
2021-01-19 14:30:34 -05:00
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
65be49c609
Add appId and appVersion to sdkInfo
2021-01-18 10:38:43 -05:00
803eb5d5d6
Move service policy enforcer to use service events
2021-01-15 15:28:59 -05:00
2194d8a2e2
Implement service change notifications
2021-01-15 15:28:59 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
e0cf6a7ea5
fixes #397 and fixes #398
...
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
53f702c212
Merge pull request #369 from openziti/add.online.status
...
Add.online.status
2020-10-31 08:35:39 -04:00
Paul Lorenz