0c8206b8d4
Don't allow hashtags or at symbols on role attributes. Fixes #786
2021-09-22 10:31:01 -04:00
c9e7d2f4c7
update host configs as well to pickup wildcardDomain addition
2021-09-15 15:57:39 -04:00
83f0d5597d
add wildcard domain to intercept addresses configuration
2021-09-15 15:52:53 -04:00
50752b8b7a
check for nill checker
2021-09-14 09:47:41 -04:00
b0f9f18f72
adds EventFullyAuthenticated to the API session store
...
The previous implementation would send API Sessions to Edge Routers
while partially authenticated. Due to state issues addressed separately
in the c-SDK, these partial API Sessions are maintained if a channel
connected to an edge router was established during reconnect. This would
further cause problems with channel connection using the wrong API
session vs what the rest of the SDK was using.
2021-09-13 15:15:34 -04:00
17b82de1fd
remove debug output
2021-09-03 09:55:39 -04:00
a7be333879
adds migration to fill identityId for existing sessions
2021-09-03 09:48:21 -04:00
05fb2e155a
Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
...
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
76e839cfaa
adds constants for posture check types
2021-09-02 10:15:31 -04:00
782f43cb26
Fix time check on list tunnel. Add policy enforcer test. Add update session test
2021-09-01 16:20:43 -04:00
cf7c63ffa9
translate valeus less than 0 to -1
2021-08-30 09:12:39 -04:00
7e2b97c425
fixes posture check timeouts, tests, service updates
...
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
2021-08-30 09:05:46 -04:00
fa902f385d
Add entity count events. Fixes GH-757
2021-08-19 14:18:30 -04:00
de54568423
More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set
2021-08-10 13:18:24 -04:00
f2670e66a0
Make policy semantic required for POST/PUT. Fix evaluation on policy PUT if semantic not provided
2021-07-30 09:44:21 -04:00
d7c1dc038d
Allow searching on role sets
2021-07-15 09:35:41 -04:00
47499bc4f1
add mfa options
...
- allow timeouts for MFA posture checks
- allow wake/unlocked MFA options
- allow legacy toggle for SDKs that don't supply endpoint state
- supply timeouts on posture checks
- posture data now caches session state
2021-07-07 08:39:39 -04:00
825c0a327a
Merge pull request #685 from openziti/fix.process.multi.patch
...
fixes issues with process multi's patch
2021-06-14 14:18:56 -04:00
d920dbbd93
Fix sync early exit bug. Track new session during sync. Simplify thre… ( #686 )
...
* Fix sync early exit bug. Track new session during sync. Simplify threading and tighten up locking. Add dump api-sessions debug operation
* Address review comments. Remove spurious error message. Fix defaultHostingCost/Precedence field names
2021-06-11 14:01:20 -04:00
271bf051e0
fixes issues with process multi's patch
...
- NULL output for empty arrays will now be empty array "[]"
- patching no longer clears osType
- patching with the same path between two different OS types no longer
collides resulting in 1 process being saved
2021-06-10 16:31:26 -04:00
1919b6b5a4
Merge branch 'main' into posture.multi.process
2021-04-28 11:08:28 -04:00
41ff14688d
add PROCESS_MULTI to posture check types
2021-04-28 11:02:55 -04:00
d313d39a80
When empty router name specified, return 4xx error instead of 5xx error
2021-04-23 14:18:40 -04:00
deef2bba6a
Fix issues with host.v1 config type schema ( #640 )
...
- require "low", "high" properties in portRange
- fixed allowedAddresses item type in json schema docs
2021-04-23 09:39:29 -04:00
54af8801e7
adds posture check type PROCESS_MULTI
...
- adds a new posture check for dealing with multiple processes
- supports anyOf and allOf semantics
- does not require new posture responses, current process responses
suffice
- tests
2021-04-20 08:52:23 -04:00
503e320b58
Fix file name
2021-04-14 16:10:22 -04:00
fa56d0f487
Add test for cursor on-delete issue
2021-04-14 16:10:21 -04:00
0c281d998b
corrected definitions in host.v1
2021-04-13 08:01:12 -04:00
2110aba5c1
host.v1 configuration type schema changes ( #631 )
...
- Rename host.v1 dialIntercepted* properties to forward*
- Add allowed* properties to whitelist destinations that are dialed via forward*
- Add allowedSourceAddresses, which serves as a whitelist for source IPs/CIDRs and informs the hosting tunneler of the local routes to establish when hosting a service
2021-04-13 07:48:47 -04:00
34c91e480c
Propagate router renames to fabric. Lookup identity by id, not name
2021-04-08 12:52:21 -04:00
b493cce490
Add app data to identity and edge router. Add isSystem to ERP
2021-04-06 10:07:57 -04:00
8f6234842e
Add per-service identity hosting precedence/costs
2021-04-06 09:51:22 -04:00
038e9bdd91
Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events.
2021-03-25 15:43:07 -04:00
27a361f776
check nil cursors for policy iteration
2021-03-24 14:06:09 -04:00
680852f80e
Allow tunnel to run over xgress directly
2021-03-22 14:33:54 -04:00
8f02a817af
Merge pull request #595 from openziti/remove-old-db-migrations
...
Remove migration data for versions prior to 0.17.1
2021-03-19 10:51:53 -04:00
ec91503b7c
Remove migration data for versions prior to 0.17.1
2021-03-18 15:52:10 -04:00
623681db87
add lastActivityAt
...
- as updates to API Sessions can now happen later than the last time
they were active, updatedAt is no longer the correct representation of
the last activity an API Session had
- move all logic that used updatedAt to lastActivityAt
- add migration to set lastActivityAt
2021-03-17 13:49:12 -04:00
3cfbe17c5b
Support for bbolt tracing.
2021-03-17 10:50:46 -04:00
9df72e9627
Update deps and update for foundation api change
2021-03-08 13:18:52 -05:00
ba97da239f
Update for system entity changes
2021-03-03 14:51:28 -05:00
735eb1d80f
Move ApiError and FieldError to foundation
2021-03-03 14:44:26 -05:00
8a160d93b1
Fix update terminator. Add test for terminator updates. Remove unused store_events
2021-02-26 09:04:32 -05:00
5ec44c3d3e
add migration to remove api sessions/sessions on migration from 18->19
2021-02-19 09:54:55 -05:00
35fa25d5af
use ast.BoolNodeTrue
2021-02-09 13:55:03 -05:00
46166db9cc
fixes orphaned ottca enrollments
...
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
c23bf9dbcf
fixes os PATCH for posture checks
...
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
4051c47dd5
Merge branch 'main' into mfa
2021-01-26 13:52:59 -05:00
891d8eb5ce
Add service events when configs are updated/deleted. Add service events test
2021-01-19 14:30:34 -05:00
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
Paul Lorenz