Commit Graph

639 Commits

Author SHA1 Message Date
Andrew b7cd692102 Merge pull request #1377 from openziti/fix.1376.mfa.create.race.condition
merge check and create tx for MFA enrollment
2023-03-27 16:42:25 -04:00
Andrew 6b8aa137e2 Merge pull request #1375 from openziti/fix.1374.mfa.admin.reset
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 16:26:05 -04:00
Andrew Martinez f274fb30f8 merge check and create tx for MFA enrollment 2023-03-27 16:13:57 -04:00
Andrew Martinez 2a290612b0 fixes #1374 admins cannot delete multiple MFA enrollments 2023-03-27 15:31:49 -04:00
Paul Lorenz 0a6043bb42 Fix missing entity type id on transit router. Fixes #1369 2023-03-23 23:47:54 -04:00
Paul Lorenz 4057d55989 Merge pull request #1367 from openziti/fix-error-type
Fix error, should be invalid session, not invalid api session. Fixes #1366
2023-03-23 13:35:04 -04:00
Paul Lorenz fd8d41204a Fix error, should be invalid session, not invalid api session. Fixes #1366 2023-03-23 10:43:52 -04:00
Paul Lorenz d76b9bc272 Cache api sessions for router/tunneler. Fixes #1364 2023-03-23 10:22:46 -04:00
Paul Lorenz 2d55b5cc28 Don't delete sessions on failed terminator create 2023-03-23 09:51:14 -04:00
Paul Lorenz 34cc021b3e Make session creates idempotent. Fixes #1359 2023-03-23 09:50:05 -04:00
Paul Lorenz 431df859b2 Handle duplicate tunnel terminator creation gracefully. Fixes #1355 2023-03-21 23:05:07 -04:00
Andrew Martinez e192f271ba remove old "sessionCert" (not ApiSessionCert) bit rot 2023-03-20 18:04:21 -04:00
Andrew Martinez 2f51b4acd7 reworks broker/sync connect/disconnect logic
- defensive checks for closed control channels
- defensive checks for duplicate/mismatch control channels
2023-03-20 15:28:09 -04:00
Paul Lorenz 64d34d78dd Merge pull request #1343 from openziti/update-fabric-dep
Update edge test for fabric api update
2023-03-20 09:50:54 -04:00
Paul Lorenz b09af68d09 Update edge test for fabric api update. Remove unneeded cgo import. 2023-03-17 11:55:38 -04:00
Andrew Martinez 6f7945a9bf fix test build error 2023-03-17 10:51:43 -04:00
Andrew Martinez fed450d75f update jwks processing 2023-03-13 13:29:41 -04:00
Andrew Martinez 52ed07405c fix lint errors 2023-02-22 19:43:45 -05:00
Andrew Martinez a4caf933f6 fixes #1310 optional KID causes controller crash 2023-02-22 15:12:07 -05:00
Paul Lorenz e5f8d5ab60 Move heartbeat status map update outside bolt tx. Fixed #1303 2023-02-07 13:24:30 -05:00
Paul Lorenz 5c35faafa3 Fix heartbeat deadlock. Fixes #1303
bbolt batch was trying to finish commit, needed all txes to finish
heartbeat update in read tx was waiting for concurrent status map so it could update
heartbeat status map was locked iterating waiting to submit to batch
(now we're back at the beginning)
Was also a view tx within a view tx, which can be problematic
2023-02-06 11:53:15 -05:00
Andrew Martinez a46a10d9eb use new github.com/openziti/edge-api repository
- fixes import statements
2023-01-24 16:03:20 -05:00
Andrew Martinez 69c31fcf3e uses github.com/openziti/edge-api
- removes old api specific scripts, generated files, etc
2023-01-24 14:45:24 -05:00
Paul Lorenz 6b6eed6041 Improve some tunneler log messages 2023-01-06 13:54:49 -05:00
Paul Lorenz 7152476ced Require config types to have a root type of object. Fixes #1279 2022-12-29 11:39:56 -05:00
Paul Lorenz 56c6857590 Mark xgress_edge and xgress_edge_tunnel terminators as system entities. Fixes #1272 2022-12-16 14:04:10 -05:00
Paul Lorenz 4abeaa0c0a xgress_edge_tunnel create terminator perf improvements. Fixes #1270
* Make terminator creation asynchronous
* Make terminator creation idempotent
* Improve logging
* Add some timer logging and metrics.
    * controller and router will both log their respective views of how long the terminator create took
    * the router has a new xgress_edge_tunnel.terminator.create_time timer metric
2022-12-15 17:29:29 -05:00
Paul Lorenz c0c7b1907e Fix eventual eventer processing on restart. Fixes #1268 2022-12-14 17:20:52 -05:00
Paul Lorenz 2509f9b575 update CODEOWNERS to sig-core and update MM notifications 2022-11-30 14:34:10 -05:00
Paul Lorenz fe93c5fac6 Fix panic when improperly parsing protocol ports from ER hello. Fixes #1253 2022-11-22 11:46:27 -05:00
Paul Lorenz 8563490cd8 Fix identity links. Fixes #1233. Fixes #1234 2022-11-16 16:15:12 -05:00
Paul Lorenz 185a767842 Fix links factory on identity type. Fixes #1232 2022-11-16 16:13:31 -05:00
Paul Lorenz d022405ea8 Merge pull request #1235 from openziti/fill-in-client-cert-chains
Fill in client cert chains when enrolling
2022-11-11 16:09:18 -05:00
Paul Lorenz 90e7b0f0a6 Fill in client cert chains when enrolling 2022-11-11 14:30:55 -05:00
Andrew Martinez d73c72679d for #1213 delete api session on authenticator delete/re-enroll
- an authenticator removed or re-enrolled would continue to allow old
  API Session to operate
- deleted or re-enrolled authenticators now remove associatd API
  Sessions
2022-11-09 11:44:49 -05:00
Andrew Martinez 3e4f26ee78 updates edge service manager to not allow encryptionRequired to be
altered
2022-11-07 11:42:01 -05:00
Andrew Martinez 5dc8a66fe9 addresses #1226 api session certificate issues w/ 3rd party cas
- events during a multi-step transaction were immediately emitting events
  causing out of order and incomplete events to be received,
  specifically API Sessions w/o fingerprints
- API Session Certificates created implicitly during 3rd Party CA auth
  did not properly set all properties
- adds tests
2022-11-04 14:40:07 -04:00
Paul Lorenz 30c051889a Make error messages clearer 2022-10-25 19:02:33 -04:00
Paul Lorenz f2a2520317 Ensure disconnect handling applies to right router instance. Fixes #1217 2022-10-24 15:51:39 -04:00
Paul Lorenz 63c161224a Add linter and fix issues found by linter 2022-10-10 16:56:51 -04:00
Paul Lorenz ad8392cef4 Update deps 2022-10-10 16:56:50 -04:00
Paul Lorenz 38746d39cf Merge pull request #1188 from openziti/router-multi-ctrls
Support multiple routers in router edge extensions
2022-09-30 09:49:24 -04:00
Paul Lorenz 63e0d9663e Support multiple routers in router edge extensions 2022-09-30 09:34:04 -04:00
Paul Lorenz c117984c9b Merge pull request #1190 from openziti/fix-api-session-create-race
Fix race condition creating api sessions from embedded tunneler. Fixe…
2022-09-29 12:29:50 -04:00
Andrew Martinez f802603d9f fixes openziti/ziti#853
- fix nil 0 index x509 definition created
- updates x509-claims to v1.0.3 to fix x509 claim panics
2022-09-29 10:20:46 -04:00
Paul Lorenz d205944051 Fix race condition creating api sessions from embedded tunneler. Fixes #1189 2022-09-29 10:01:47 -04:00
Paul Lorenz b7f81ea7cb Fix issue where lookup is expected to return err, but returns nil, causing nil reference and panic. Fixes #1186 2022-09-27 09:52:53 -04:00
Paul Lorenz 32c197e5e1 Update to channel v2 2022-09-26 18:20:00 -04:00
Andrew Martinez 291eb6b509 fixes nil deref on partial jwks info 2022-09-22 09:36:46 -04:00
Paul Lorenz db5c73b33b Refactor edge events to follow model established in fabric 2022-09-16 12:47:46 -04:00