49006ab9f6
fixes posture check timeouts that sit at 0 after endpoint states
2021-10-07 10:22:57 -04:00
2fd995becb
Fix panic if posture data mfa is nil
2021-09-09 11:18:19 -04:00
05fb2e155a
Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
...
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
57b6b70945
add unit tests for timeout logic
2021-09-02 11:00:09 -04:00
4cac5518e9
ensure that lastAccessedAt is set on create, emit logs if not found
2021-09-02 08:57:14 -04:00
782f43cb26
Fix time check on list tunnel. Add policy enforcer test. Add update session test
2021-09-01 16:20:43 -04:00
7e2b97c425
fixes posture check timeouts, tests, service updates
...
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
2021-08-30 09:05:46 -04:00
6ef863711b
Merge pull request #747 from openziti/add.timeout.api.tests
...
adds posture check timout tests using MFA PC
2021-08-10 19:46:16 -04:00
a58ba04fb3
adds posture check timout tests using MFA PC
2021-08-10 09:26:20 -04:00
3874cb7b4e
formatting call
2021-07-30 14:55:58 -04:00
c3df0d9878
on invalid pd ptr use new pd
2021-07-30 14:50:59 -04:00
e78f308e16
documentation, fix ignored isPassing bool, log message on invalid pd ptr
2021-07-30 14:49:03 -04:00
a7e7b90d0f
fix posture data locking panics
2021-07-30 13:47:48 -04:00
7cb0b12d5c
Update for JWT lib changes
2021-07-30 10:04:45 -04:00
f2670e66a0
Make policy semantic required for POST/PUT. Fix evaluation on policy PUT if semantic not provided
2021-07-30 09:44:21 -04:00
329a18af87
assume legacy unless c-sdk
2021-07-23 09:57:49 -04:00
20017f5a08
Merge pull request #721 from openziti/fix.pd.concurrent.map.usage
...
respect posture data concurrent lock
2021-07-23 09:27:03 -04:00
4112c6d241
respect posture data concurrent lock
2021-07-23 08:49:00 -04:00
c6f37bef67
adds wake/unlock timeout unit tests
2021-07-22 14:52:12 -04:00
6a522893fc
adds timeoutRemainingSeconds for posture queries
2021-07-21 14:20:26 -04:00
f34d540765
Update pfxlog to 0.5.1
2021-07-16 15:24:14 -04:00
a35e088e8e
fixes an issue where posture timeouts would not be enforced for 1st sess
2021-07-16 09:25:53 -04:00
bb4dbd90b9
adjust for c-sdk 0.25.0 release
2021-07-09 17:32:36 -04:00
0dbd5e515b
adds unit tests for legacy version mfa checks
2021-07-09 15:51:57 -04:00
efcb90c033
add all sdk version info to posture data
2021-07-09 15:27:23 -04:00
47499bc4f1
add mfa options
...
- allow timeouts for MFA posture checks
- allow wake/unlocked MFA options
- allow legacy toggle for SDKs that don't supply endpoint state
- supply timeouts on posture checks
- posture data now caches session state
2021-07-07 08:39:39 -04:00
825c0a327a
Merge pull request #685 from openziti/fix.process.multi.patch
...
fixes issues with process multi's patch
2021-06-14 14:18:56 -04:00
572e606a0b
adds posture check patch tests
2021-06-14 11:12:32 -04:00
ef8847b34e
Delete expired api sessions in batches. Remove some unused methods
2021-06-09 15:40:42 -04:00
177379aa8e
fix durations w/ no units
2021-06-03 08:52:24 -04:00
9af29b5072
Add appData to filtered jsonfields. Remove unused identity checker field
2021-05-18 21:08:19 -04:00
6625084569
use xweb for Edge Client and Management APIs
...
- use xweb for run
- use xweb for api tests
- use time.ParseDuration for edge configuration
- use CORS defaults in Client/Management API handlers
2021-05-06 16:45:48 -04:00
1919b6b5a4
Merge branch 'main' into posture.multi.process
2021-04-28 11:08:28 -04:00
d313d39a80
When empty router name specified, return 4xx error instead of 5xx error
2021-04-23 14:18:40 -04:00
54af8801e7
adds posture check type PROCESS_MULTI
...
- adds a new posture check for dealing with multiple processes
- supports anyOf and allOf semantics
- does not require new posture responses, current process responses
suffice
- tests
2021-04-20 08:52:23 -04:00
4a9b226f0e
adds the ability for router to extend their enrollment
...
- routers can now opt to extend their enrollment at any time with a
previous or new key
- adds tests for router enrollment
- adds tests for router enrollment extension
2021-04-14 09:21:59 -04:00
b278f611d0
add policyType to posture query sets
...
- also fixes policy ids being set as the same value due to pointer in
for loop reference
2021-04-13 15:26:17 -04:00
b493cce490
Add app data to identity and edge router. Add isSystem to ERP
2021-04-06 10:07:57 -04:00
8f6234842e
Add per-service identity hosting precedence/costs
2021-04-06 09:51:22 -04:00
038e9bdd91
Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events.
2021-03-25 15:43:07 -04:00
3014bdc405
new tests, don't prune policies w/ no checks
2021-03-24 14:06:09 -04:00
1100d6f388
update service update on posture data change, tests
2021-03-23 09:54:47 -04:00
993f51f7ab
set mfa posture on enroll
...
- update api session session state on mfa enroll
- update posture data state on mfa enroll
- centralize setting mfa posture data
- pass isMfaRequired and isMfaComplete in apiSession/currentApiSession
2021-03-23 09:54:46 -04:00
680852f80e
Allow tunnel to run over xgress directly
2021-03-22 14:33:54 -04:00
c54a007202
formalize posture data API output, add service request errors
...
- GET /identity/{id}/posture-data is now formalized in the swagger.yml
- posture data output now includes the last 100 failed service requests
with temporal posture data state
- added ziti controller instance id header to detect restarts
- add GET /identity/{id}/failed-service-requests
2021-03-19 09:49:44 -04:00
623681db87
add lastActivityAt
...
- as updates to API Sessions can now happen later than the last time
they were active, updatedAt is no longer the correct representation of
the last activity an API Session had
- move all logic that used updatedAt to lastActivityAt
- add migration to set lastActivityAt
2021-03-17 13:49:12 -04:00
71a3a1643e
Pass FieldChecker to toBoltEntityForPatch. Add some ReadByName methods. Move some code to allow re-use
2021-03-17 10:41:21 -04:00
2b9388b7ea
Merge pull request #585 from openziti/make.api.session.batch
...
use batch for api access last updates
2021-03-15 13:27:41 -04:00
fb9e4569f8
use mock api session
2021-03-15 11:25:07 -04:00
5841f6fa70
use batch for api access last updates
2021-03-15 11:14:45 -04:00
Andrew Martinez