f368b631b0
Merge remote-tracking branch 'origin/main' into prep-for-ziti-merge-p1
2023-08-04 16:26:16 -04:00
7d6f4ef700
Reorganize code in preparation for merging to ziti repo, first pass.
2023-08-04 09:48:06 -04:00
7ee4539e6a
fix lint
2023-07-24 16:41:58 -04:00
5c30981c8b
fix lint
2023-07-24 16:28:17 -04:00
79bc10b690
fix jwt auth response
2023-07-24 16:14:28 -04:00
ef1cffee30
fix tests
2023-07-24 15:39:45 -04:00
414cff49d7
adds support OIDC authentication, api access, and ER connections
2023-07-20 09:41:12 -04:00
661be7876d
fixes openziti/ziti#1093
...
- heart beat system was never being configured with a control channel
2023-05-01 10:02:48 -04:00
95ae025ce9
updates golang sdk to v0.20.0
2023-04-26 13:55:51 -04:00
82cbbefceb
Fix event type
2023-04-25 14:04:14 -04:00
bd1b25f60c
Update presentation layer for api changes
2023-04-25 13:26:03 -04:00
63f9dad3df
Updated model for storage api changes
2023-04-25 13:26:02 -04:00
2f51b4acd7
reworks broker/sync connect/disconnect logic
...
- defensive checks for closed control channels
- defensive checks for duplicate/mismatch control channels
2023-03-20 15:28:09 -04:00
a46a10d9eb
use new github.com/openziti/edge-api repository
...
- fixes import statements
2023-01-24 16:03:20 -05:00
69c31fcf3e
uses github.com/openziti/edge-api
...
- removes old api specific scripts, generated files, etc
2023-01-24 14:45:24 -05:00
2509f9b575
update CODEOWNERS to sig-core and update MM notifications
2022-11-30 14:34:10 -05:00
63c161224a
Add linter and fix issues found by linter
2022-10-10 16:56:51 -04:00
32c197e5e1
Update to channel v2
2022-09-26 18:20:00 -04:00
db5c73b33b
Refactor edge events to follow model established in fabric
2022-09-16 12:47:46 -04:00
0b8a65207a
Change bootstrap check. Add hooks for isRaftEnabled
2022-08-22 12:14:40 -04:00
1fb3339bb1
Update for changes to fabric events model
2022-07-19 11:18:08 -04:00
bae7e40b61
Update for foundation changes
2022-07-01 15:55:30 -04:00
12df770d04
Update copyright
2022-06-30 17:45:08 -04:00
b53fa0cd98
Remove event log and georegions
2022-06-30 10:35:19 -04:00
0014b39f7e
update xweb to v2
2022-06-06 14:33:42 -04:00
2f6a3bc828
Update handler -> manager for base types and config
2022-06-02 00:05:54 -04:00
7cf9dc135d
Initial support for raft and command style architecture
2022-06-01 23:52:07 -04:00
7381423974
use cmap generics, update fabric
2022-05-27 11:02:51 -04:00
47b210c67b
updates fabric w/ xweb moved out
2022-05-26 11:27:09 -04:00
c5f156dd9e
adds x509 claims support for external ids to CAs
...
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
0243212f83
Use ZitiSession const from golang sdk instead of foundation (so we can remove it from foundation)
2022-05-02 17:20:03 -04:00
5b17be58c8
fixes admin permission not also checking default admin
2022-04-08 10:43:24 -04:00
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
5129f3c8d7
adds partial authentication enforcement
...
- required ext jwt signer requires bearer token on requests
- adds auth query output for ext jwt
- enforces requireTotp auth policy
- allows partial auth to setup MFA but not remove
2022-03-30 10:10:52 -04:00
99e3b283b6
adds auth policy CRUD, does not affect authentication
2022-03-25 14:40:07 -04:00
5be9095e60
Update to use channel library
2022-01-28 11:35:15 -05:00
1f784d89ce
adds asynchronous eventer to controller
...
- emits events for processing progress/state for metric instrumentation
- emits events for eventual event backlog state for metrics
- alters Trigger() to return a channel that can be waited upon
- adds ability to add eventual events within a specific bbolt
transaction
- splits session lookup and delete into view/update transactions
- add eventual event gauge
- use CascadeCreateUpdate
- adds named functions
- documentation for 500us timeout
- grammar fixes
2022-01-18 14:19:36 -05:00
9bd955127c
Merge pull request #866 from openziti/broker.async.bbolt.tx
...
move broker event handlers to go routines
2022-01-18 09:27:17 -05:00
9b05d4e49b
move broker event handlers to go routines
2022-01-17 13:59:33 -05:00
4be50ea143
adds zero start time check
2022-01-17 10:24:00 -05:00
050b0b086e
moves metric endpoint logging lower in the stack
...
- endpoint url/path -> name remains the same
- start timing on request context before we start processing
- log metrics in IsAllowed which is called by all endpoint after routing
- logging before routing to a handler would log all probe attacks
2022-01-17 10:12:59 -05:00
7b1ee2893d
Add identity refresh meter
2022-01-06 13:45:18 -05:00
dae084f61c
alters router/controller enrollment extension logic
...
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
bfcb037783
Initial pass at fabric rest api working ( #838 )
...
* Update for fabric rest controller changes
2021-11-30 16:30:17 -05:00
6612ad9c14
fix startup timing issues
2021-10-19 10:58:59 -04:00
6b80d444a0
remove old dgrijalva jwt ref
2021-10-01 11:17:00 -04:00
b0f9f18f72
adds EventFullyAuthenticated to the API session store
...
The previous implementation would send API Sessions to Edge Routers
while partially authenticated. Due to state issues addressed separately
in the c-SDK, these partial API Sessions are maintained if a channel
connected to an edge router was established during reconnect. This would
further cause problems with channel connection using the wrong API
session vs what the rest of the SDK was using.
2021-09-13 15:15:34 -04:00
4cac5518e9
ensure that lastAccessedAt is set on create, emit logs if not found
2021-09-02 08:57:14 -04:00
fa902f385d
Add entity count events. Fixes GH-757
2021-08-19 14:18:30 -04:00
23c98c2d5a
Add more tracing and allow enabling debug for specific identities for path selection/establishment
2021-08-09 11:20:51 -04:00
Paul Lorenz