Commit Graph

412 Commits

Author SHA1 Message Date
Andrew Martinez 17b82de1fd remove debug output 2021-09-03 09:55:39 -04:00
Andrew Martinez a7be333879 adds migration to fill identityId for existing sessions 2021-09-03 09:48:21 -04:00
Andrew cfebf66ca9 Merge pull request #765 from openziti/rest.session.model.no.err
rest api session modeling will no longer kill lists
2021-09-02 13:34:43 -04:00
Paul Lorenz 05fb2e155a Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
Andrew Martinez 66a438fb02 rest api session modeling will no longer kill lists 2021-09-02 11:04:28 -04:00
Andrew Martinez 57b6b70945 add unit tests for timeout logic 2021-09-02 11:00:09 -04:00
Andrew Martinez 76e839cfaa adds constants for posture check types 2021-09-02 10:15:31 -04:00
Andrew Martinez f095abe8df fix go test failures 2021-09-02 09:11:14 -04:00
Andrew Martinez 4cac5518e9 ensure that lastAccessedAt is set on create, emit logs if not found 2021-09-02 08:57:14 -04:00
Paul Lorenz 782f43cb26 Fix time check on list tunnel. Add policy enforcer test. Add update session test 2021-09-01 16:20:43 -04:00
Andrew Martinez cf7c63ffa9 translate valeus less than 0 to -1 2021-08-30 09:12:39 -04:00
Andrew Martinez 7e2b97c425 fixes posture check timeouts, tests, service updates
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
2021-08-30 09:05:46 -04:00
Paul Lorenz fa902f385d Add entity count events. Fixes GH-757 2021-08-19 14:18:30 -04:00
Andrew 6ef863711b Merge pull request #747 from openziti/add.timeout.api.tests
adds posture check timout tests using MFA PC
2021-08-10 19:46:16 -04:00
Andrew bd96728bdc Merge pull request #749 from openziti/validate.edge.api.address.config
fixes #748 adds validation for host:port combos in edge configuration
2021-08-10 19:45:43 -04:00
Paul Lorenz de54568423 More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set 2021-08-10 13:18:24 -04:00
Andrew Martinez d03626649b fixes #748 adds validation for host:port combos in edge configuration address 2021-08-10 10:23:23 -04:00
Andrew Martinez a58ba04fb3 adds posture check timout tests using MFA PC 2021-08-10 09:26:20 -04:00
Paul Lorenz 23c98c2d5a Add more tracing and allow enabling debug for specific identities for path selection/establishment 2021-08-09 11:20:51 -04:00
Paul Lorenz b82b92684b Rename fabric session to circuit 2021-08-04 14:39:27 -04:00
Paul Lorenz 8a44f37344 Simplify poll logic 2021-08-03 14:32:47 -04:00
Paul Lorenz 4205482e58 If we create a new session but don't have a chance to return it, delete it before sending error 2021-08-03 13:16:34 -04:00
Paul Lorenz 53c9c228dc Fix error message 2021-08-03 12:04:24 -04:00
Paul Lorenz 2a56ce2380 Update test for api changes 2021-08-03 09:16:22 -04:00
Andrew Martinez 3874cb7b4e formatting call 2021-07-30 14:55:58 -04:00
Andrew Martinez c3df0d9878 on invalid pd ptr use new pd 2021-07-30 14:50:59 -04:00
Andrew Martinez e78f308e16 documentation, fix ignored isPassing bool, log message on invalid pd ptr 2021-07-30 14:49:03 -04:00
Andrew Martinez a7e7b90d0f fix posture data locking panics 2021-07-30 13:47:48 -04:00
Paul Lorenz 7cb0b12d5c Update for JWT lib changes 2021-07-30 10:04:45 -04:00
Paul Lorenz f2670e66a0 Make policy semantic required for POST/PUT. Fix evaluation on policy PUT if semantic not provided 2021-07-30 09:44:21 -04:00
Paul Lorenz bcca93e0db Merge pull request #728 from openziti/example-fix
Fix init example and add log on successful terminator create
2021-07-29 09:50:25 -04:00
Paul Lorenz 8a1b118ed2 Fix init example and add log on successful terminator create 2021-07-29 09:27:02 -04:00
Andrew Martinez f28061de4f fixes missing 400s from list endpoints
- update some CA fields that were not marked required/nullable
- some list endpoints were missing 400 response definitions
- foundation dep update
2021-07-27 14:53:35 -04:00
Andrew Martinez cef4653c2f add missing 401s to list operations, missing required
- adds missing 401s to list operations that were missing them
- adds required status to identityNameFormat for CAs
2021-07-26 16:19:16 -04:00
Andrew Martinez 329a18af87 assume legacy unless c-sdk 2021-07-23 09:57:49 -04:00
Andrew 20017f5a08 Merge pull request #721 from openziti/fix.pd.concurrent.map.usage
respect posture data concurrent lock
2021-07-23 09:27:03 -04:00
Andrew Martinez 4112c6d241 respect posture data concurrent lock 2021-07-23 08:49:00 -04:00
Andrew Martinez c6f37bef67 adds wake/unlock timeout unit tests 2021-07-22 14:52:12 -04:00
Andrew Martinez 6a522893fc adds timeoutRemainingSeconds for posture queries 2021-07-21 14:20:26 -04:00
Paul Lorenz f34d540765 Update pfxlog to 0.5.1 2021-07-16 15:24:14 -04:00
Andrew Martinez a35e088e8e fixes an issue where posture timeouts would not be enforced for 1st sess 2021-07-16 09:25:53 -04:00
Paul Lorenz d7c1dc038d Allow searching on role sets 2021-07-15 09:35:41 -04:00
Andrew 22d5d46554 Merge pull request #709 from openziti/add.mfa.options
add mfa options
2021-07-10 00:05:12 -04:00
Andrew Martinez bb4dbd90b9 adjust for c-sdk 0.25.0 release 2021-07-09 17:32:36 -04:00
Andrew Martinez 0dbd5e515b adds unit tests for legacy version mfa checks 2021-07-09 15:51:57 -04:00
Andrew Martinez efcb90c033 add all sdk version info to posture data 2021-07-09 15:27:23 -04:00
Andrew Martinez 983fbaacfc fixes #641 enables ?limit=x&offset=x on list association endpoints
Endpoints such as /current-identity/edge-routers would internally use a
ListAssociations(...) that would not respect the original query
parameters of limit/offset. Instead they would only respect the filter
parameter.

Per internal conversations, we agreed to maintain both paths.
2021-07-07 12:25:02 -04:00
Andrew Martinez 47499bc4f1 add mfa options
- allow timeouts for MFA posture checks
- allow wake/unlocked MFA options
- allow legacy toggle for SDKs that don't supply endpoint state
- supply timeouts on posture checks
- posture data now caches session state
2021-07-07 08:39:39 -04:00
Paul Lorenz 3151d31b7f Handle xweb import change (#697)
* Handle xweb import change. Fix tunnel update/delete terminator handling
2021-06-22 14:18:17 -04:00
Andrew 825c0a327a Merge pull request #685 from openziti/fix.process.multi.patch
fixes issues with process multi's patch
2021-06-14 14:18:56 -04:00