Commit Graph

432 Commits

Author SHA1 Message Date
Paul Lorenz 7d483a822b Merge pull request #817 from openziti/fix-panic-on-invalid-service
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:47:30 -04:00
Paul Lorenz 40389c1f88 Fix panic on invalid service. Error wasn't getting saved 2021-10-20 13:37:56 -04:00
Andrew Martinez 050d5eb0dc fix possible formatting error 2021-10-19 11:31:31 -04:00
Andrew Martinez 6612ad9c14 fix startup timing issues 2021-10-19 10:58:59 -04:00
Andrew Martinez 45158ff864 updates to newest foundation/fabric/sdk-golang 2021-10-18 16:07:33 -04:00
Andrew Martinez 49006ab9f6 fixes posture check timeouts that sit at 0 after endpoint states 2021-10-07 10:22:57 -04:00
Andrew Martinez 6b80d444a0 remove old dgrijalva jwt ref 2021-10-01 11:17:00 -04:00
Paul Lorenz 0c8206b8d4 Don't allow hashtags or at symbols on role attributes. Fixes #786 2021-09-22 10:31:01 -04:00
Eugene K c9e7d2f4c7 update host configs as well to pickup wildcardDomain addition 2021-09-15 15:57:39 -04:00
Eugene K 83f0d5597d add wildcard domain to intercept addresses configuration 2021-09-15 15:52:53 -04:00
Andrew 0b46233a8b Merge pull request #780 from openziti/add.fully.authed.api.session.store.event
adds EventFullyAuthenticated to the API session store
2021-09-14 10:54:10 -04:00
Andrew Martinez 50752b8b7a check for nill checker 2021-09-14 09:47:41 -04:00
Andrew Martinez b0f9f18f72 adds EventFullyAuthenticated to the API session store
The previous implementation would send API Sessions to Edge Routers
while partially authenticated. Due to state issues addressed separately
in the c-SDK, these partial API Sessions are maintained if a channel
connected to an edge router was established during reconnect. This would
further cause problems with channel connection using the wrong API
session vs what the rest of the SDK was using.
2021-09-13 15:15:34 -04:00
Paul Lorenz 12117a0ded Sending service precedences and cost set on identity to ERT 2021-09-10 17:20:46 -04:00
Paul Lorenz 2fd995becb Fix panic if posture data mfa is nil 2021-09-09 11:18:19 -04:00
Paul Lorenz 5639bd56ef Merge pull request #769 from openziti/fix-panic
Fix panic when service not found
2021-09-09 09:40:33 -04:00
Paul Lorenz 84d36337ad Fix panic when service not found 2021-09-08 15:59:35 -04:00
Andrew Martinez c2b83432d1 adds /identity/:id/authenticators Management API endpoint 2021-09-08 14:06:56 -04:00
Paul Lorenz df73dd15b0 Merge pull request #767 from openziti/fix-host-after-session-expiration
Allow ERT to gracefully handle api session/session removal. Can happe…
2021-09-03 13:50:54 -04:00
Paul Lorenz 82f4621393 Allow ERT to gracefully handle api session/session removal. Can happen if router is disconnected, but not down for an extended period 2021-09-03 13:28:43 -04:00
Andrew Martinez 17b82de1fd remove debug output 2021-09-03 09:55:39 -04:00
Andrew Martinez a7be333879 adds migration to fill identityId for existing sessions 2021-09-03 09:48:21 -04:00
Andrew cfebf66ca9 Merge pull request #765 from openziti/rest.session.model.no.err
rest api session modeling will no longer kill lists
2021-09-02 13:34:43 -04:00
Paul Lorenz 05fb2e155a Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
Andrew Martinez 66a438fb02 rest api session modeling will no longer kill lists 2021-09-02 11:04:28 -04:00
Andrew Martinez 57b6b70945 add unit tests for timeout logic 2021-09-02 11:00:09 -04:00
Andrew Martinez 76e839cfaa adds constants for posture check types 2021-09-02 10:15:31 -04:00
Andrew Martinez f095abe8df fix go test failures 2021-09-02 09:11:14 -04:00
Andrew Martinez 4cac5518e9 ensure that lastAccessedAt is set on create, emit logs if not found 2021-09-02 08:57:14 -04:00
Paul Lorenz 782f43cb26 Fix time check on list tunnel. Add policy enforcer test. Add update session test 2021-09-01 16:20:43 -04:00
Andrew Martinez cf7c63ffa9 translate valeus less than 0 to -1 2021-08-30 09:12:39 -04:00
Andrew Martinez 7e2b97c425 fixes posture check timeouts, tests, service updates
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
2021-08-30 09:05:46 -04:00
Paul Lorenz fa902f385d Add entity count events. Fixes GH-757 2021-08-19 14:18:30 -04:00
Andrew 6ef863711b Merge pull request #747 from openziti/add.timeout.api.tests
adds posture check timout tests using MFA PC
2021-08-10 19:46:16 -04:00
Andrew bd96728bdc Merge pull request #749 from openziti/validate.edge.api.address.config
fixes #748 adds validation for host:port combos in edge configuration
2021-08-10 19:45:43 -04:00
Paul Lorenz de54568423 More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set 2021-08-10 13:18:24 -04:00
Andrew Martinez d03626649b fixes #748 adds validation for host:port combos in edge configuration address 2021-08-10 10:23:23 -04:00
Andrew Martinez a58ba04fb3 adds posture check timout tests using MFA PC 2021-08-10 09:26:20 -04:00
Paul Lorenz 23c98c2d5a Add more tracing and allow enabling debug for specific identities for path selection/establishment 2021-08-09 11:20:51 -04:00
Paul Lorenz b82b92684b Rename fabric session to circuit 2021-08-04 14:39:27 -04:00
Paul Lorenz 8a44f37344 Simplify poll logic 2021-08-03 14:32:47 -04:00
Paul Lorenz 4205482e58 If we create a new session but don't have a chance to return it, delete it before sending error 2021-08-03 13:16:34 -04:00
Paul Lorenz 53c9c228dc Fix error message 2021-08-03 12:04:24 -04:00
Paul Lorenz 2a56ce2380 Update test for api changes 2021-08-03 09:16:22 -04:00
Andrew Martinez 3874cb7b4e formatting call 2021-07-30 14:55:58 -04:00
Andrew Martinez c3df0d9878 on invalid pd ptr use new pd 2021-07-30 14:50:59 -04:00
Andrew Martinez e78f308e16 documentation, fix ignored isPassing bool, log message on invalid pd ptr 2021-07-30 14:49:03 -04:00
Andrew Martinez a7e7b90d0f fix posture data locking panics 2021-07-30 13:47:48 -04:00
Paul Lorenz 7cb0b12d5c Update for JWT lib changes 2021-07-30 10:04:45 -04:00
Paul Lorenz f2670e66a0 Make policy semantic required for POST/PUT. Fix evaluation on policy PUT if semantic not provided 2021-07-30 09:44:21 -04:00