4afc0bd0b6
fix dupe connection testing by looking at strat stat not network state
2021-02-19 11:18:09 -05:00
155bbd8217
Validate sessions on controller instead of edge router
2021-02-17 20:38:13 -05:00
919d7a3d6b
add hearbeat invalid api token delete
2021-02-17 12:19:06 -05:00
fdf9221f89
add explicit context, listener, dialer Close() calls
2021-02-15 16:13:23 -05:00
46166db9cc
fixes orphaned ottca enrollments
...
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
e645df39af
fix missing apitests build tag
2021-02-09 09:10:42 -05:00
730740552b
Merge pull request #511 from openziti/fix.pc.os.patch
...
fixes os PATCH for posture checks
2021-02-05 15:28:07 -05:00
c23bf9dbcf
fixes os PATCH for posture checks
...
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
28832a3526
add test to check role attrs aren't lost if not provided during a PATCH
2021-02-05 13:20:07 -05:00
18513f7ee4
Merge pull request #504 from openziti/api.session.performance
...
moves hasApiSession lookup to api model and limit 1
2021-02-04 09:32:01 -05:00
5b1101bb24
Merge pull request #505 from openziti/fix.484.edge.router.list
...
fixes #484 adds current identity edge router lookup
2021-02-04 09:28:10 -05:00
2c6814aaa4
edge router enhancements for browZer support ( #499 )
2021-02-04 06:09:46 -05:00
e34d25b0dd
fixes #484 adds current identity edge router lookup
2021-02-03 15:37:15 -05:00
5c47c31016
moves hasApiSession lookup to api model and limit 1
...
This move isolates the cost of hasApiSession to the identity endpoint
lookups in the REST API. Being in the model caused this cost to be
shared on all identity lookups for internal logic.
Limit 1 is an attempt to reduce the cost of searching over a large set.
API Sessions do not have an index on identity id so there is still some
cost.
2021-02-03 14:01:53 -05:00
ed4458a296
fixes mfa random api test failures
...
Codes are 6 digits with leading zero.
2021-02-02 14:56:50 -05:00
a4a872c377
remove test sleeps, use const for window size
2021-01-26 14:08:16 -05:00
4051c47dd5
Merge branch 'main' into mfa
2021-01-26 13:52:59 -05:00
bca8d657fc
Clean up xgress edge abstractions and close logic
2021-01-26 10:43:02 -05:00
f2431ab9b3
bulk posture response
2021-01-25 13:55:41 -05:00
891d8eb5ce
Add service events when configs are updated/deleted. Add service events test
2021-01-19 14:30:34 -05:00
5207dbb931
use UTC time
2021-01-19 08:53:21 -05:00
2d61799c24
add posture check MFA tests
2021-01-19 08:37:29 -05:00
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
c5d3a4b69b
Improve posture check perf using indexes
2021-01-18 14:15:30 -05:00
803eb5d5d6
Move service policy enforcer to use service events
2021-01-15 15:28:59 -05:00
2194d8a2e2
Implement service change notifications
2021-01-15 15:28:59 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
7329106691
Use manual start for tunnel hosting
2020-12-16 11:08:06 -05:00
4f5dfd93cc
Support router provided connection ids
2020-12-15 17:35:43 -05:00
73383f0992
Update for fabric API changes ( #442 )
2020-12-07 15:02:00 -05:00
ced4df53c3
Use copy-on-write muxer. Use no-op sequencer. Fix AT bug related to dots in generated ids. ( #438 )
...
* Fix intermittent AT failure. Use noop sequencer
* Use copy-on-write msg mux impl
* Try with non-zero queue depth
2020-11-30 19:08:01 -05:00
ac187ffa99
posture check implementation
...
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
6126f179ad
fix tests
2020-10-21 22:28:50 -04:00
d3bb89a5b0
pass select edge headers through fabric
...
implement passing edge flags
add test for edge.Conn.CloseWrite()
use CloseWrite() on proxied connections
2020-10-20 11:33:11 -04:00
568eb129c7
address PR comments
...
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
c53843c08d
Update go-events to latest version ( #332 )
2020-10-09 12:37:20 -04:00
41da009787
remove the last of the things named gateway
2020-10-08 07:53:17 -04:00
94bb1b25b6
edge api version support
2020-10-07 07:25:14 -04:00
3bbff3a01a
support version info from fabric
2020-10-07 07:25:14 -04:00
76823ff435
add ZITI_TEST_LOG_LEVEL, set to fatal for travis, remove prints
2020-10-02 15:43:49 -04:00
f4ee38772d
set log level for API tests to error
...
- testing to see if this help traviceci get through the tests
2020-10-02 14:35:09 -04:00
b23bf3efd8
fix #321 add policy display fields for reads
...
- adds *Display fields for policy list and detail
- adds *Display fields for both set of policy attributes
- adds API tests
2020-10-01 08:09:46 -04:00
50bc204dd5
Add edge terminator validator
2020-09-29 09:27:05 -04:00
50c6b3e4b3
Support identity dial/bind
2020-09-29 09:27:03 -04:00
a3ee258df2
fixes #305 reimplements chain validation
...
- cert auth module caches static and dynamic (3rd party) CA chains
- all cert auths validated against active chains
- deleted/disabled 3rd party CAs no longer validate
2020-09-22 07:11:55 -04:00
c179f87538
Improve session create performance. Closes GH-281
2020-08-20 12:35:04 -04:00
e2ad712948
Add edge session events API. Closes GH-229
2020-08-11 14:00:57 -04:00
c8b7a8d8c7
Implemented policy model performance improvements. Fixes GH-256
2020-07-28 10:03:36 -04:00
14eb819b30
Model performance test, work in progress
2020-07-28 10:01:34 -04:00
Andrew Martinez