c23bf9dbcf
fixes os PATCH for posture checks
...
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
18513f7ee4
Merge pull request #504 from openziti/api.session.performance
...
moves hasApiSession lookup to api model and limit 1
2021-02-04 09:32:01 -05:00
5b1101bb24
Merge pull request #505 from openziti/fix.484.edge.router.list
...
fixes #484 adds current identity edge router lookup
2021-02-04 09:28:10 -05:00
65832b8da5
fix missing formatted log call, spelling
2021-02-04 09:24:00 -05:00
2c6814aaa4
edge router enhancements for browZer support ( #499 )
2021-02-04 06:09:46 -05:00
e34d25b0dd
fixes #484 adds current identity edge router lookup
2021-02-03 15:37:15 -05:00
5c47c31016
moves hasApiSession lookup to api model and limit 1
...
This move isolates the cost of hasApiSession to the identity endpoint
lookups in the REST API. Being in the model caused this cost to be
shared on all identity lookups for internal logic.
Limit 1 is an attempt to reduce the cost of searching over a large set.
API Sessions do not have an index on identity id so there is still some
cost.
2021-02-03 14:01:53 -05:00
5de4d629f3
Merge pull request #498 from openziti/add.server.header
...
fixes #497 send session header
2021-02-01 15:07:24 -05:00
df1f2a1a75
fixes #497 send session header
...
- add server headers during HTTP handler delegation rather than at HTTP
response time
- remove all old header setting locations
- remove unused status writer and other response code
- add manual set on authentication for session headers
2021-02-01 14:28:29 -05:00
cab720ed47
limit public query options to 500 whe "none" is specified
2021-02-01 09:27:55 -05:00
f485d4e8c3
Update service poller to use service update callback
2021-01-29 15:32:51 -05:00
252e105f3c
add typeId to authQuery
2021-01-26 15:12:22 -05:00
ab9e19f485
fix unit tests
2021-01-26 14:33:34 -05:00
a4a872c377
remove test sleeps, use const for window size
2021-01-26 14:08:16 -05:00
4051c47dd5
Merge branch 'main' into mfa
2021-01-26 13:52:59 -05:00
5e5aa87c39
Merge pull request #485 from openziti/bulk.posture.response
...
bulk posture response endpoint
2021-01-26 09:11:27 -05:00
f2431ab9b3
bulk posture response
2021-01-25 13:55:41 -05:00
e1e31c2ecb
Fix edge-router association lists
2021-01-23 14:54:03 -05:00
d6a5f329c5
fixes #477 add configurable http timeouts
2021-01-21 14:09:42 -05:00
8d4397c0d9
Merge pull request #474 from openziti/fix.misspelled.builddate
...
fixes buildDate spelling (missing d)
2021-01-20 10:44:57 -05:00
f5dc8e5799
Fix return status
2021-01-20 10:12:39 -05:00
4882da1970
Add service list timer. Fix tunneler leak
2021-01-20 09:29:33 -05:00
744fa99b8a
Add check integrity guardrails so we can only run a single operation at a time
2021-01-19 16:18:10 -05:00
891d8eb5ce
Add service events when configs are updated/deleted. Add service events test
2021-01-19 14:30:34 -05:00
4fbacdcdc8
fixes buildDate spelling (missing d)
2021-01-19 14:00:50 -05:00
5207dbb931
use UTC time
2021-01-19 08:53:21 -05:00
2d61799c24
add posture check MFA tests
2021-01-19 08:37:29 -05:00
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
49804bd30b
Merge pull request #470 from openziti/add.appid.appversion
...
Add appId and appVersion to sdkInfo
2021-01-18 15:03:29 -05:00
c5d3a4b69b
Improve posture check perf using indexes
2021-01-18 14:15:30 -05:00
65be49c609
Add appId and appVersion to sdkInfo
2021-01-18 10:38:43 -05:00
c370dff45c
Notify clients to refresh after restart
2021-01-15 16:20:13 -05:00
803eb5d5d6
Move service policy enforcer to use service events
2021-01-15 15:28:59 -05:00
2194d8a2e2
Implement service change notifications
2021-01-15 15:28:59 -05:00
807a061a93
adds expiration-seconds and expires-at headers
...
- also adds expiresSeconds to current api session and login
2021-01-14 11:30:44 -05:00
cf66c361f9
adds service updates endpoint stub
2021-01-13 13:49:06 -05:00
014b0f3876
fixes REST API enrollment details
2021-01-12 17:35:45 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
4498318767
Make query parse errors into ApiErrors so they're not 500 errors ( #443 )
2020-12-16 11:30:51 -05:00
7329106691
Use manual start for tunnel hosting
2020-12-16 11:08:06 -05:00
5c70087d98
adds GET /protocols to the Edge Rest API
2020-11-20 17:52:05 -05:00
f5e0e1f25e
fixes #424 allow non-admins to list service terminators
2020-11-20 09:46:44 -05:00
5ba7af91eb
add lower normalization that was removed back
2020-11-11 21:34:44 -05:00
6ad6b3264c
fixes #403
...
Process posture responses now allow an array of digital signer
fingerprints to be submitted and checked.
2020-11-11 21:31:17 -05:00
108b657044
fix missing dangling period in os posture test
2020-11-11 20:51:54 -05:00
48a3f5dc0b
remove unused function
2020-11-11 20:39:35 -05:00
4631fe1452
fixes #401
...
Valid x.y.z versions of OS posture checks can now be specified by
posture check ranges.
2020-11-11 20:32:48 -05:00
a80b27afe6
fix test based on pr
2020-11-11 19:11:05 -05:00
e0cf6a7ea5
fixes #397 and fixes #398
...
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
Andrew Martinez