fa9a72a240
adds nil checks on identity lookups
2022-04-22 12:20:15 -04:00
ab7b2e80fd
use centralized logic to add signers for cache load and live def
2022-04-21 15:06:18 -04:00
b2f44c949b
Merge pull request #982 from openziti/adds.enrollment.refresh.logic
...
adds refresh expired enrollment logic and tests
2022-04-21 11:03:35 -04:00
afd39af571
fixes ext jwt startup cache to use kid not fingerprint
2022-04-21 10:15:23 -04:00
642dec4c25
adds refresh expired enrollment logic and tests
2022-04-20 16:13:41 -04:00
6a25a1f5b8
Add websocket api support
2022-04-19 13:04:54 -04:00
59de4af681
adds ids to identity authenticator detail
2022-04-13 14:20:10 -04:00
d80fafef96
fixes #968 management api doc not available
...
Root cause is a bug and/or lack of features in the go-open-api runtime.
2022-04-13 13:39:38 -04:00
8d8a2503e4
fixes issues where external ids were not handled on display/update
2022-04-12 09:46:41 -04:00
c32fa95ca8
Merge pull request #961 from openziti/add.ext.jwt.aud.iss.checks
...
adds optional issuer and audience properties to ext jwt signers
2022-04-12 08:54:53 -04:00
59af07dcd0
fixes is admin not set on updates (put/patch)
2022-04-08 11:20:15 -04:00
5b17be58c8
fixes admin permission not also checking default admin
2022-04-08 10:43:24 -04:00
ec51635f26
adds optional issuer and audience properties to ext jwt signers
2022-04-06 15:48:17 -04:00
5f62d05a9a
Merge pull request #952 from openziti/update-deps
...
Update to transport and storage libs. Update workflows
2022-03-31 11:14:29 -04:00
213f03bd89
fix migration version check
2022-03-31 10:52:50 -04:00
b5605f0738
updates db version
2022-03-31 10:48:31 -04:00
be958338b4
add error return on err in cert auth
2022-03-31 10:38:30 -04:00
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
ba84d2fae9
adds settable kid to ext jwt signers, fixes default auth policy
2022-03-30 13:51:23 -04:00
5129f3c8d7
adds partial authentication enforcement
...
- required ext jwt signer requires bearer token on requests
- adds auth query output for ext jwt
- enforces requireTotp auth policy
- allows partial auth to setup MFA but not remove
2022-03-30 10:10:52 -04:00
708dcfe0c9
adds auth policy / disabled identity auth logic
2022-03-29 14:26:04 -04:00
329d1eb4d1
Update deps and fix test
2022-03-28 18:19:14 -04:00
a34ae130b8
adds externalId, plumbs auth url, use external id
...
- adding tests and boundaries to values
- updating foundation
- squash, rebase
2022-03-28 10:54:27 -04:00
99e3b283b6
adds auth policy CRUD, does not affect authentication
2022-03-25 14:40:07 -04:00
9d5ba0ccec
Update test for fabric changes
2022-03-23 15:47:42 -04:00
1459cd3b7b
Merge pull request #918 from openziti/add.ext.jwt.authenticator
...
adds ext-jwt authenticator
2022-03-21 15:56:04 -04:00
76e207fe28
Add cost/precedence back to host configs. Fixes #931
2022-03-16 12:04:17 -04:00
7526b0db38
Move integrity checker to fabric
2022-03-10 11:08:20 -05:00
3380807334
adds ext-jwt authenticator
...
- enables /authenticate?method=ext-jwt
- adds ext-jwt to OpenAPI schema
- rebase to main, squash
2022-03-08 10:01:38 -05:00
cbb0ad6f9e
Merge pull request #906 from openziti/add-global-constants
...
Added global constants for use in this and other projects
2022-03-02 16:07:11 -05:00
698806db0a
Moving constants to the natively used file
2022-03-02 15:52:03 -05:00
4dcd0281ab
added handling for allow traversal flag ( #905 )
...
* added handling for allow traversal flag
* Refactor allowTraversal to be flipped to noTraversal
* updated fabric deps
2022-03-02 14:12:49 -06:00
3e5f08c99f
adds cert authenticator extension endpoint
...
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend-verify
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend-verify
- add logic that allows a client endpoint to extend the valid period for
their current certificate authenticator
- requires clients to use their existing client cetificate for extension
- requires clients to verify they have received the new public key
- allows clients to use a new private key if desired
- allows only 1st party certificate authenticators to extend
- adds authenticatorId to apiSession for persistence, model, api model
- add session cert to already authenticated session on extend
- removes empty test stub
2022-03-02 09:20:08 -05:00
0ed9828bd4
Added global constants files for use in this and other projects
2022-02-28 14:16:15 -05:00
141ef27526
Router cost ( #899 )
...
* Added cost to routers and handled in edge
* moved transit router cost to base
* updated fabric dependency
* removed some import changes and made cost required on update
* small whitespace diff
2022-02-25 09:27:26 -06:00
0f782ce144
Address review comment
2022-02-24 11:56:39 -05:00
3fd000a1bd
Separate fabric and edge entity counts for parent/child stores
2022-02-24 11:26:44 -05:00
e18e4a16fb
Add back in commented out test code
2022-02-17 19:33:16 -05:00
dbac831bee
Add edge router events test
2022-02-17 15:58:25 -05:00
06679b93a9
Remove fabric callback that are no longer needed
2022-02-17 11:13:15 -05:00
d40f53d486
update comments, add patch updatedAt test
2022-02-10 11:06:54 -05:00
52b0c7acab
alters posture query updateAt to also indicate query state changes
...
- formerly posture queries only had an updatedAt time copied from the
source posture check which. For MFA posture checks this is only
correct when not using promptOnWake/Unlock
- prompt timer reductions due to wake/unlock now update postureQuery
updatedAt values
- subsequent reconfigurations to the posture check (i.e. patching a
posture check) is also taken into account - latest time.Time wins
- test for MFA posture check no longer use gabs and instead use the
relevant input/output rest_model.* structures
2022-02-09 16:30:54 -05:00
6d48a962de
adds criteria output to service request failures for MFA posture checks
...
- adds all criteria for mfa evaluation to failure for model/REST API
2022-02-04 15:23:39 -05:00
5aacc4b247
Split scan from evaluate in posture cache to avoid nested view. Fixes #886
2022-02-02 18:02:16 -05:00
f14ff5e0ed
Update xgress edge to updated channel library/api
2022-01-31 22:24:38 -05:00
ddd383ef23
Merge pull request #874 from openziti/add.enforcer.metrics
...
adds metrics for api session and service policy enforcers
2022-01-31 10:04:07 -05:00
5be9095e60
Update to use channel library
2022-01-28 11:35:15 -05:00
1680a7d898
switch to meter for deletes
2022-01-24 13:16:43 -05:00
b36c890c42
fix gauges
2022-01-24 11:24:15 -05:00
2fba1293af
adds metrics for api session and service policy enforcers
2022-01-24 11:22:05 -05:00
Andrew Martinez