453e6cae2a
Consolidate controller/apierror/helpers and messages
2023-08-30 17:16:10 -04:00
5b59ae13ee
Update for moved packages in fabric
2023-08-23 09:40:05 -04:00
81baa1843b
Add default identity type. Remove user,service,device types. Fixes #1428
2023-08-22 20:40:33 -04:00
6426d55020
Add some warn logging on terminator instance id bind conflict
2023-08-09 10:56:46 -04:00
b061fe9a39
Move internal/certs to common. Remove some incidental files that weren't used.
2023-08-07 10:20:06 -04:00
03b58ebcd3
Move jwtsigner package to controller
2023-08-04 17:04:44 -04:00
dba0fb6f7c
Move protobufs to common
2023-08-04 17:01:15 -04:00
8b3092a3d9
Merge pull request #1566 from openziti/prep-for-ziti-merge-p2
...
Move eid to common
2023-08-04 16:35:26 -04:00
f368b631b0
Merge remote-tracking branch 'origin/main' into prep-for-ziti-merge-p1
2023-08-04 16:26:16 -04:00
1f5eed5956
Move eid to common
2023-08-04 11:46:53 -04:00
7d6f4ef700
Reorganize code in preparation for merging to ziti repo, first pass.
2023-08-04 09:48:06 -04:00
414cff49d7
adds support OIDC authentication, api access, and ER connections
2023-07-20 09:41:12 -04:00
1fed936746
Fix cert expire check logic error
2023-06-27 11:36:33 -06:00
3325f91e76
fixes #1416 allows totp provisioning URL domain to be configured
...
- sets default to openziti.io (previously ziti.dev)
- adds edge.totp configuration section
2023-06-13 09:10:31 -04:00
3116412857
adds missing error message for unmatched iss field
2023-05-10 10:36:33 -04:00
661be7876d
fixes openziti/ziti#1093
...
- heart beat system was never being configured with a control channel
2023-05-01 10:02:48 -04:00
95ae025ce9
updates golang sdk to v0.20.0
2023-04-26 13:55:51 -04:00
7d6901be3d
Add edge code needed for entity change events. Fixes #629
2023-04-25 22:34:02 -04:00
70008bfc8f
Update for fabric api changes. Fixes #1295
2023-04-25 13:26:25 -04:00
43fc1e96fe
Get tests running and do some cleanups
2023-04-25 13:26:19 -04:00
bd1b25f60c
Update presentation layer for api changes
2023-04-25 13:26:03 -04:00
63f9dad3df
Updated model for storage api changes
2023-04-25 13:26:02 -04:00
83bca6a0ba
Update for storage and fabric api changes
2023-04-25 13:26:02 -04:00
3c9e9ccbde
Info -> Debug on xgress_edge_tunnel dial result
2023-04-17 12:02:54 -04:00
d8e50ba43e
Make session edge-router check more efficient. Fixes #1418
2023-04-12 15:54:17 -04:00
ad5dc292bb
Improve list performance by using identity indexes rather than service indexes. Fixes #1388
2023-04-03 09:58:21 -04:00
1d0e558f90
Add support disabling routers. Fixes #1373
2023-03-28 13:42:25 -04:00
b7cd692102
Merge pull request #1377 from openziti/fix.1376.mfa.create.race.condition
...
merge check and create tx for MFA enrollment
2023-03-27 16:42:25 -04:00
6b8aa137e2
Merge pull request #1375 from openziti/fix.1374.mfa.admin.reset
...
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 16:26:05 -04:00
f274fb30f8
merge check and create tx for MFA enrollment
2023-03-27 16:13:57 -04:00
2a290612b0
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 15:31:49 -04:00
0a6043bb42
Fix missing entity type id on transit router. Fixes #1369
2023-03-23 23:47:54 -04:00
d76b9bc272
Cache api sessions for router/tunneler. Fixes #1364
2023-03-23 10:22:46 -04:00
34cc021b3e
Make session creates idempotent. Fixes #1359
2023-03-23 09:50:05 -04:00
e192f271ba
remove old "sessionCert" (not ApiSessionCert) bit rot
2023-03-20 18:04:21 -04:00
6f7945a9bf
fix test build error
2023-03-17 10:51:43 -04:00
fed450d75f
update jwks processing
2023-03-13 13:29:41 -04:00
52ed07405c
fix lint errors
2023-02-22 19:43:45 -05:00
a4caf933f6
fixes #1310 optional KID causes controller crash
2023-02-22 15:12:07 -05:00
e5f8d5ab60
Move heartbeat status map update outside bolt tx. Fixed #1303
2023-02-07 13:24:30 -05:00
5c35faafa3
Fix heartbeat deadlock. Fixes #1303
...
bbolt batch was trying to finish commit, needed all txes to finish
heartbeat update in read tx was waiting for concurrent status map so it could update
heartbeat status map was locked iterating waiting to submit to batch
(now we're back at the beginning)
Was also a view tx within a view tx, which can be problematic
2023-02-06 11:53:15 -05:00
a46a10d9eb
use new github.com/openziti/edge-api repository
...
- fixes import statements
2023-01-24 16:03:20 -05:00
69c31fcf3e
uses github.com/openziti/edge-api
...
- removes old api specific scripts, generated files, etc
2023-01-24 14:45:24 -05:00
7152476ced
Require config types to have a root type of object. Fixes #1279
2022-12-29 11:39:56 -05:00
2509f9b575
update CODEOWNERS to sig-core and update MM notifications
2022-11-30 14:34:10 -05:00
d022405ea8
Merge pull request #1235 from openziti/fill-in-client-cert-chains
...
Fill in client cert chains when enrolling
2022-11-11 16:09:18 -05:00
90e7b0f0a6
Fill in client cert chains when enrolling
2022-11-11 14:30:55 -05:00
d73c72679d
for #1213 delete api session on authenticator delete/re-enroll
...
- an authenticator removed or re-enrolled would continue to allow old
API Session to operate
- deleted or re-enrolled authenticators now remove associatd API
Sessions
2022-11-09 11:44:49 -05:00
3e4f26ee78
updates edge service manager to not allow encryptionRequired to be
...
altered
2022-11-07 11:42:01 -05:00
5dc8a66fe9
addresses #1226 api session certificate issues w/ 3rd party cas
...
- events during a multi-step transaction were immediately emitting events
causing out of order and incomplete events to be received,
specifically API Sessions w/o fingerprints
- API Session Certificates created implicitly during 3rd Party CA auth
did not properly set all properties
- adds tests
2022-11-04 14:40:07 -04:00
Paul Lorenz