72729fd731
adds the ability to create identity enrollments
2022-05-12 12:40:49 -04:00
de9cd7298f
Merge pull request #985 from openziti/adds.authenticator.enrollment.reissue
...
Adds authenticato re-enrollment
2022-05-06 10:37:53 -04:00
fa9a72a240
adds nil checks on identity lookups
2022-04-22 12:20:15 -04:00
ab7b2e80fd
use centralized logic to add signers for cache load and live def
2022-04-21 15:06:18 -04:00
fb1bff0083
adds re-enrollment for existing authenticators
...
- REST API Endpoints in Management API
- adds JWT to Management API enrollments endpoint
2022-04-21 15:01:28 -04:00
b2f44c949b
Merge pull request #982 from openziti/adds.enrollment.refresh.logic
...
adds refresh expired enrollment logic and tests
2022-04-21 11:03:35 -04:00
afd39af571
fixes ext jwt startup cache to use kid not fingerprint
2022-04-21 10:15:23 -04:00
642dec4c25
adds refresh expired enrollment logic and tests
2022-04-20 16:13:41 -04:00
c32fa95ca8
Merge pull request #961 from openziti/add.ext.jwt.aud.iss.checks
...
adds optional issuer and audience properties to ext jwt signers
2022-04-12 08:54:53 -04:00
59af07dcd0
fixes is admin not set on updates (put/patch)
2022-04-08 11:20:15 -04:00
ec51635f26
adds optional issuer and audience properties to ext jwt signers
2022-04-06 15:48:17 -04:00
5f62d05a9a
Merge pull request #952 from openziti/update-deps
...
Update to transport and storage libs. Update workflows
2022-03-31 11:14:29 -04:00
be958338b4
add error return on err in cert auth
2022-03-31 10:38:30 -04:00
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
ba84d2fae9
adds settable kid to ext jwt signers, fixes default auth policy
2022-03-30 13:51:23 -04:00
5129f3c8d7
adds partial authentication enforcement
...
- required ext jwt signer requires bearer token on requests
- adds auth query output for ext jwt
- enforces requireTotp auth policy
- allows partial auth to setup MFA but not remove
2022-03-30 10:10:52 -04:00
708dcfe0c9
adds auth policy / disabled identity auth logic
2022-03-29 14:26:04 -04:00
a34ae130b8
adds externalId, plumbs auth url, use external id
...
- adding tests and boundaries to values
- updating foundation
- squash, rebase
2022-03-28 10:54:27 -04:00
99e3b283b6
adds auth policy CRUD, does not affect authentication
2022-03-25 14:40:07 -04:00
9d5ba0ccec
Update test for fabric changes
2022-03-23 15:47:42 -04:00
3380807334
adds ext-jwt authenticator
...
- enables /authenticate?method=ext-jwt
- adds ext-jwt to OpenAPI schema
- rebase to main, squash
2022-03-08 10:01:38 -05:00
4dcd0281ab
added handling for allow traversal flag ( #905 )
...
* added handling for allow traversal flag
* Refactor allowTraversal to be flipped to noTraversal
* updated fabric deps
2022-03-02 14:12:49 -06:00
3e5f08c99f
adds cert authenticator extension endpoint
...
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend-verify
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend-verify
- add logic that allows a client endpoint to extend the valid period for
their current certificate authenticator
- requires clients to use their existing client cetificate for extension
- requires clients to verify they have received the new public key
- allows clients to use a new private key if desired
- allows only 1st party certificate authenticators to extend
- adds authenticatorId to apiSession for persistence, model, api model
- add session cert to already authenticated session on extend
- removes empty test stub
2022-03-02 09:20:08 -05:00
141ef27526
Router cost ( #899 )
...
* Added cost to routers and handled in edge
* moved transit router cost to base
* updated fabric dependency
* removed some import changes and made cost required on update
* small whitespace diff
2022-02-25 09:27:26 -06:00
dbac831bee
Add edge router events test
2022-02-17 15:58:25 -05:00
06679b93a9
Remove fabric callback that are no longer needed
2022-02-17 11:13:15 -05:00
d40f53d486
update comments, add patch updatedAt test
2022-02-10 11:06:54 -05:00
52b0c7acab
alters posture query updateAt to also indicate query state changes
...
- formerly posture queries only had an updatedAt time copied from the
source posture check which. For MFA posture checks this is only
correct when not using promptOnWake/Unlock
- prompt timer reductions due to wake/unlock now update postureQuery
updatedAt values
- subsequent reconfigurations to the posture check (i.e. patching a
posture check) is also taken into account - latest time.Time wins
- test for MFA posture check no longer use gabs and instead use the
relevant input/output rest_model.* structures
2022-02-09 16:30:54 -05:00
6d48a962de
adds criteria output to service request failures for MFA posture checks
...
- adds all criteria for mfa evaluation to failure for model/REST API
2022-02-04 15:23:39 -05:00
5aacc4b247
Split scan from evaluate in posture cache to avoid nested view. Fixes #886
2022-02-02 18:02:16 -05:00
1f784d89ce
adds asynchronous eventer to controller
...
- emits events for processing progress/state for metric instrumentation
- emits events for eventual event backlog state for metrics
- alters Trigger() to return a channel that can be waited upon
- adds ability to add eventual events within a specific bbolt
transaction
- splits session lookup and delete into view/update transactions
- add eventual event gauge
- use CascadeCreateUpdate
- adds named functions
- documentation for 500us timeout
- grammar fixes
2022-01-18 14:19:36 -05:00
cf20c2dfa8
adds api tests
2022-01-03 15:54:51 -05:00
770c7bcd06
adds re-enrollment logic for edge-routers
2022-01-03 09:06:33 -05:00
dae084f61c
alters router/controller enrollment extension logic
...
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
bfcb037783
Initial pass at fabric rest api working ( #838 )
...
* Update for fabric rest controller changes
2021-11-30 16:30:17 -05:00
027f8673ce
patch client cert instead of using verify options
2021-11-05 10:47:45 -04:00
ece9e8222a
formating directive fix
2021-11-05 10:27:00 -04:00
1f9ca6878a
changes client cert validation
...
- adds test for client cert validation expectations
- adds certificat authenticator create
2021-11-05 10:10:17 -04:00
8e53e50fd9
Merge pull request #818 from openziti/identity.enrollment.extension
...
adds identity cert extension endpoint to client/man API
2021-11-02 13:24:29 -04:00
2d4260e76e
Allow using a specific bolt db file for tests
2021-10-26 14:19:24 -04:00
a1f7a48cdc
adds identity cert extension endpoint to client/man API
...
- now supports POST /current-identity/authenticators/{id}/extend for
cert authenticators
- adds test for cert extension endpoint
2021-10-21 15:12:30 -04:00
49006ab9f6
fixes posture check timeouts that sit at 0 after endpoint states
2021-10-07 10:22:57 -04:00
2fd995becb
Fix panic if posture data mfa is nil
2021-09-09 11:18:19 -04:00
05fb2e155a
Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
...
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
57b6b70945
add unit tests for timeout logic
2021-09-02 11:00:09 -04:00
4cac5518e9
ensure that lastAccessedAt is set on create, emit logs if not found
2021-09-02 08:57:14 -04:00
782f43cb26
Fix time check on list tunnel. Add policy enforcer test. Add update session test
2021-09-01 16:20:43 -04:00
7e2b97c425
fixes posture check timeouts, tests, service updates
...
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
2021-08-30 09:05:46 -04:00
6ef863711b
Merge pull request #747 from openziti/add.timeout.api.tests
...
adds posture check timout tests using MFA PC
2021-08-10 19:46:16 -04:00
a58ba04fb3
adds posture check timout tests using MFA PC
2021-08-10 09:26:20 -04:00
Andrew Martinez