c5f156dd9e
adds x509 claims support for external ids to CAs
...
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
35cf029952
fix partial update panic for ext jwt update events
2022-05-20 14:51:09 -04:00
a09104c3ea
remove debug output
2022-05-20 14:35:26 -04:00
2a6ea4944d
adds ext jwt update event listning for jwt auth mod cache
2022-05-20 14:29:13 -04:00
a1d9aec518
Merge pull request #1010 from openziti/add.enrollment.create
...
adds the ability to create identity enrollments
2022-05-16 09:02:01 -04:00
e5d1982785
threaded timeout from fabric ( #974 )
...
* threaded timeout from fabric
* pr comments
* fix timing
* removed utc on deadline check
* small updates
* updated fabric version and add zero check to timeoutdeadline
* fix wrong fabric version
* Update deps
Co-authored-by: Cam Otts <cam@Cams-MacBook-Pro.local >
Co-authored-by: Paul Lorenz <paul.lorenz@netfoundry.io >
2022-05-13 11:11:25 -05:00
72729fd731
adds the ability to create identity enrollments
2022-05-12 12:40:49 -04:00
b690993263
Update to latest protobuf library
2022-05-10 14:55:54 -04:00
de9cd7298f
Merge pull request #985 from openziti/adds.authenticator.enrollment.reissue
...
Adds authenticato re-enrollment
2022-05-06 10:37:53 -04:00
0243212f83
Use ZitiSession const from golang sdk instead of foundation (so we can remove it from foundation)
2022-05-02 17:20:03 -04:00
8423ac5cfa
Make host.v2 stricter. Fixes #991
2022-05-02 17:19:48 -04:00
fa9a72a240
adds nil checks on identity lookups
2022-04-22 12:20:15 -04:00
ab7b2e80fd
use centralized logic to add signers for cache load and live def
2022-04-21 15:06:18 -04:00
fb1bff0083
adds re-enrollment for existing authenticators
...
- REST API Endpoints in Management API
- adds JWT to Management API enrollments endpoint
2022-04-21 15:01:28 -04:00
b2f44c949b
Merge pull request #982 from openziti/adds.enrollment.refresh.logic
...
adds refresh expired enrollment logic and tests
2022-04-21 11:03:35 -04:00
afd39af571
fixes ext jwt startup cache to use kid not fingerprint
2022-04-21 10:15:23 -04:00
642dec4c25
adds refresh expired enrollment logic and tests
2022-04-20 16:13:41 -04:00
6a25a1f5b8
Add websocket api support
2022-04-19 13:04:54 -04:00
59de4af681
adds ids to identity authenticator detail
2022-04-13 14:20:10 -04:00
d80fafef96
fixes #968 management api doc not available
...
Root cause is a bug and/or lack of features in the go-open-api runtime.
2022-04-13 13:39:38 -04:00
8d8a2503e4
fixes issues where external ids were not handled on display/update
2022-04-12 09:46:41 -04:00
c32fa95ca8
Merge pull request #961 from openziti/add.ext.jwt.aud.iss.checks
...
adds optional issuer and audience properties to ext jwt signers
2022-04-12 08:54:53 -04:00
59af07dcd0
fixes is admin not set on updates (put/patch)
2022-04-08 11:20:15 -04:00
5b17be58c8
fixes admin permission not also checking default admin
2022-04-08 10:43:24 -04:00
ec51635f26
adds optional issuer and audience properties to ext jwt signers
2022-04-06 15:48:17 -04:00
5f62d05a9a
Merge pull request #952 from openziti/update-deps
...
Update to transport and storage libs. Update workflows
2022-03-31 11:14:29 -04:00
213f03bd89
fix migration version check
2022-03-31 10:52:50 -04:00
b5605f0738
updates db version
2022-03-31 10:48:31 -04:00
be958338b4
add error return on err in cert auth
2022-03-31 10:38:30 -04:00
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
ba84d2fae9
adds settable kid to ext jwt signers, fixes default auth policy
2022-03-30 13:51:23 -04:00
5129f3c8d7
adds partial authentication enforcement
...
- required ext jwt signer requires bearer token on requests
- adds auth query output for ext jwt
- enforces requireTotp auth policy
- allows partial auth to setup MFA but not remove
2022-03-30 10:10:52 -04:00
708dcfe0c9
adds auth policy / disabled identity auth logic
2022-03-29 14:26:04 -04:00
329d1eb4d1
Update deps and fix test
2022-03-28 18:19:14 -04:00
a34ae130b8
adds externalId, plumbs auth url, use external id
...
- adding tests and boundaries to values
- updating foundation
- squash, rebase
2022-03-28 10:54:27 -04:00
99e3b283b6
adds auth policy CRUD, does not affect authentication
2022-03-25 14:40:07 -04:00
9d5ba0ccec
Update test for fabric changes
2022-03-23 15:47:42 -04:00
1459cd3b7b
Merge pull request #918 from openziti/add.ext.jwt.authenticator
...
adds ext-jwt authenticator
2022-03-21 15:56:04 -04:00
76e207fe28
Add cost/precedence back to host configs. Fixes #931
2022-03-16 12:04:17 -04:00
7526b0db38
Move integrity checker to fabric
2022-03-10 11:08:20 -05:00
3380807334
adds ext-jwt authenticator
...
- enables /authenticate?method=ext-jwt
- adds ext-jwt to OpenAPI schema
- rebase to main, squash
2022-03-08 10:01:38 -05:00
cbb0ad6f9e
Merge pull request #906 from openziti/add-global-constants
...
Added global constants for use in this and other projects
2022-03-02 16:07:11 -05:00
698806db0a
Moving constants to the natively used file
2022-03-02 15:52:03 -05:00
4dcd0281ab
added handling for allow traversal flag ( #905 )
...
* added handling for allow traversal flag
* Refactor allowTraversal to be flipped to noTraversal
* updated fabric deps
2022-03-02 14:12:49 -06:00
3e5f08c99f
adds cert authenticator extension endpoint
...
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend-verify
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend-verify
- add logic that allows a client endpoint to extend the valid period for
their current certificate authenticator
- requires clients to use their existing client cetificate for extension
- requires clients to verify they have received the new public key
- allows clients to use a new private key if desired
- allows only 1st party certificate authenticators to extend
- adds authenticatorId to apiSession for persistence, model, api model
- add session cert to already authenticated session on extend
- removes empty test stub
2022-03-02 09:20:08 -05:00
0ed9828bd4
Added global constants files for use in this and other projects
2022-02-28 14:16:15 -05:00
141ef27526
Router cost ( #899 )
...
* Added cost to routers and handled in edge
* moved transit router cost to base
* updated fabric dependency
* removed some import changes and made cost required on update
* small whitespace diff
2022-02-25 09:27:26 -06:00
0f782ce144
Address review comment
2022-02-24 11:56:39 -05:00
3fd000a1bd
Separate fabric and edge entity counts for parent/child stores
2022-02-24 11:26:44 -05:00
e18e4a16fb
Add back in commented out test code
2022-02-17 19:33:16 -05:00
Andrew Martinez