Commit Graph

19 Commits

Author SHA1 Message Date
Andrew Martinez fa9a72a240 adds nil checks on identity lookups 2022-04-22 12:20:15 -04:00
Andrew Martinez be958338b4 add error return on err in cert auth 2022-03-31 10:38:30 -04:00
Andrew Martinez 708dcfe0c9 adds auth policy / disabled identity auth logic 2022-03-29 14:26:04 -04:00
Andrew Martinez 3e5f08c99f adds cert authenticator extension endpoint
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend-verify
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend-verify
- add logic that allows a client endpoint to extend the valid period for
  their current certificate authenticator
- requires clients to use their existing client cetificate for extension
- requires clients to verify they have received the new public key
- allows clients to use a new private key if desired
- allows only 1st party certificate authenticators to extend
- adds authenticatorId to apiSession for persistence, model, api model
- add session cert to already authenticated session on extend
- removes empty test stub
2022-03-02 09:20:08 -05:00
Andrew Martinez 027f8673ce patch client cert instead of using verify options 2021-11-05 10:47:45 -04:00
Andrew Martinez ece9e8222a formating directive fix 2021-11-05 10:27:00 -04:00
Andrew Martinez 1f9ca6878a changes client cert validation
- adds test for client cert validation expectations
- adds certificat authenticator create
2021-11-05 10:10:17 -04:00
Paul Lorenz 735eb1d80f Move ApiError and FieldError to foundation 2021-03-03 14:44:26 -05:00
Andrew Martinez 6d1f11955b use streaming CAs 2020-09-22 07:52:00 -04:00
Andrew Martinez 0263259403 remove println 2020-09-22 07:40:10 -04:00
Andrew Martinez a3ee258df2 fixes #305 reimplements chain validation
- cert auth module caches static and dynamic (3rd party) CA chains
- all cert auths validated against active chains
- deleted/disabled 3rd party CAs no longer validate
2020-09-22 07:11:55 -04:00
Andrew M 6bb9eeff20 fixed #224 extra log output during invalid cert auth 2020-06-23 23:46:01 -04:00
Andrew M b6d9efaf8c fixed #183, move to openziti 2020-05-26 17:37:35 -04:00
Paul Lorenz 7d60e03b65 Remove copyright date from header 2020-03-19 13:47:42 -04:00
Paul Lorenz f0257f6ccf Support for multiple endpoints 2020-03-19 13:31:31 -04:00
dovholuknf 3db81622cb didn't i do this once already? 2020-02-25 14:29:08 -05:00
Andrew Martinez 0f472f4c6f fixes netfoundry/ziti-edge#29 store full pem
- adds api tests for certiicate authentication
- adds api tests for full cert storage for cretificate authenticators
2020-01-17 14:00:42 -05:00
Paul Lorenz c10c3ad781 Remove Handle prefix from handler methods. Remove breaking changes docs, which are moving to ziti-cmd 2020-01-09 13:14:50 -05:00
Andrew Martinez c8e2729f05 GH-18 removes ziti-edge/edge folder and moves all contents up 1 row
- Updates .gitignore files
- Fixes imports
2019-12-18 10:02:25 -05:00