Paul Lorenz
7d483a822b
Merge pull request #817 from openziti/fix-panic-on-invalid-service
...
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:47:30 -04:00
Paul Lorenz
40389c1f88
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:37:56 -04:00
Andrew Martinez
050d5eb0dc
fix possible formatting error
2021-10-19 11:31:31 -04:00
Andrew Martinez
6612ad9c14
fix startup timing issues
2021-10-19 10:58:59 -04:00
Andrew Martinez
45158ff864
updates to newest foundation/fabric/sdk-golang
2021-10-18 16:07:33 -04:00
Andrew Martinez
49006ab9f6
fixes posture check timeouts that sit at 0 after endpoint states
2021-10-07 10:22:57 -04:00
Andrew Martinez
6b80d444a0
remove old dgrijalva jwt ref
2021-10-01 11:17:00 -04:00
Paul Lorenz
0c8206b8d4
Don't allow hashtags or at symbols on role attributes. Fixes #786
2021-09-22 10:31:01 -04:00
Eugene K
c9e7d2f4c7
update host configs as well to pickup wildcardDomain addition
2021-09-15 15:57:39 -04:00
Eugene K
83f0d5597d
add wildcard domain to intercept addresses configuration
2021-09-15 15:52:53 -04:00
Andrew
0b46233a8b
Merge pull request #780 from openziti/add.fully.authed.api.session.store.event
...
adds EventFullyAuthenticated to the API session store
2021-09-14 10:54:10 -04:00
Andrew Martinez
50752b8b7a
check for nill checker
2021-09-14 09:47:41 -04:00
Andrew Martinez
b0f9f18f72
adds EventFullyAuthenticated to the API session store
...
The previous implementation would send API Sessions to Edge Routers
while partially authenticated. Due to state issues addressed separately
in the c-SDK, these partial API Sessions are maintained if a channel
connected to an edge router was established during reconnect. This would
further cause problems with channel connection using the wrong API
session vs what the rest of the SDK was using.
2021-09-13 15:15:34 -04:00
Paul Lorenz
12117a0ded
Sending service precedences and cost set on identity to ERT
2021-09-10 17:20:46 -04:00
Paul Lorenz
2fd995becb
Fix panic if posture data mfa is nil
2021-09-09 11:18:19 -04:00
Paul Lorenz
5639bd56ef
Merge pull request #769 from openziti/fix-panic
...
Fix panic when service not found
2021-09-09 09:40:33 -04:00
Paul Lorenz
84d36337ad
Fix panic when service not found
2021-09-08 15:59:35 -04:00
Andrew Martinez
c2b83432d1
adds /identity/:id/authenticators Management API endpoint
2021-09-08 14:06:56 -04:00
Paul Lorenz
df73dd15b0
Merge pull request #767 from openziti/fix-host-after-session-expiration
...
Allow ERT to gracefully handle api session/session removal. Can happe…
2021-09-03 13:50:54 -04:00
Paul Lorenz
82f4621393
Allow ERT to gracefully handle api session/session removal. Can happen if router is disconnected, but not down for an extended period
2021-09-03 13:28:43 -04:00
Andrew Martinez
17b82de1fd
remove debug output
2021-09-03 09:55:39 -04:00
Andrew Martinez
a7be333879
adds migration to fill identityId for existing sessions
2021-09-03 09:48:21 -04:00
Andrew
cfebf66ca9
Merge pull request #765 from openziti/rest.session.model.no.err
...
rest api session modeling will no longer kill lists
2021-09-02 13:34:43 -04:00
Paul Lorenz
05fb2e155a
Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
...
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
Andrew Martinez
66a438fb02
rest api session modeling will no longer kill lists
2021-09-02 11:04:28 -04:00
Andrew Martinez
57b6b70945
add unit tests for timeout logic
2021-09-02 11:00:09 -04:00
Andrew Martinez
76e839cfaa
adds constants for posture check types
2021-09-02 10:15:31 -04:00
Andrew Martinez
f095abe8df
fix go test failures
2021-09-02 09:11:14 -04:00
Andrew Martinez
4cac5518e9
ensure that lastAccessedAt is set on create, emit logs if not found
2021-09-02 08:57:14 -04:00
Paul Lorenz
782f43cb26
Fix time check on list tunnel. Add policy enforcer test. Add update session test
2021-09-01 16:20:43 -04:00
Andrew Martinez
cf7c63ffa9
translate valeus less than 0 to -1
2021-08-30 09:12:39 -04:00
Andrew Martinez
7e2b97c425
fixes posture check timeouts, tests, service updates
...
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
2021-08-30 09:05:46 -04:00
Paul Lorenz
fa902f385d
Add entity count events. Fixes GH-757
2021-08-19 14:18:30 -04:00
Andrew
6ef863711b
Merge pull request #747 from openziti/add.timeout.api.tests
...
adds posture check timout tests using MFA PC
2021-08-10 19:46:16 -04:00
Andrew
bd96728bdc
Merge pull request #749 from openziti/validate.edge.api.address.config
...
fixes #748 adds validation for host:port combos in edge configuration
2021-08-10 19:45:43 -04:00
Paul Lorenz
de54568423
More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set
2021-08-10 13:18:24 -04:00
Andrew Martinez
d03626649b
fixes #748 adds validation for host:port combos in edge configuration address
2021-08-10 10:23:23 -04:00
Andrew Martinez
a58ba04fb3
adds posture check timout tests using MFA PC
2021-08-10 09:26:20 -04:00
Paul Lorenz
23c98c2d5a
Add more tracing and allow enabling debug for specific identities for path selection/establishment
2021-08-09 11:20:51 -04:00
Paul Lorenz
b82b92684b
Rename fabric session to circuit
2021-08-04 14:39:27 -04:00
Paul Lorenz
8a44f37344
Simplify poll logic
2021-08-03 14:32:47 -04:00
Paul Lorenz
4205482e58
If we create a new session but don't have a chance to return it, delete it before sending error
2021-08-03 13:16:34 -04:00
Paul Lorenz
53c9c228dc
Fix error message
2021-08-03 12:04:24 -04:00
Paul Lorenz
2a56ce2380
Update test for api changes
2021-08-03 09:16:22 -04:00
Andrew Martinez
3874cb7b4e
formatting call
2021-07-30 14:55:58 -04:00
Andrew Martinez
c3df0d9878
on invalid pd ptr use new pd
2021-07-30 14:50:59 -04:00
Andrew Martinez
e78f308e16
documentation, fix ignored isPassing bool, log message on invalid pd ptr
2021-07-30 14:49:03 -04:00
Andrew Martinez
a7e7b90d0f
fix posture data locking panics
2021-07-30 13:47:48 -04:00
Paul Lorenz
7cb0b12d5c
Update for JWT lib changes
2021-07-30 10:04:45 -04:00
Paul Lorenz
f2670e66a0
Make policy semantic required for POST/PUT. Fix evaluation on policy PUT if semantic not provided
2021-07-30 09:44:21 -04:00