5be9095e60
Update to use channel library
2022-01-28 11:35:15 -05:00
3f69bfdd43
Update for control channel API changes
2022-01-19 08:37:40 -05:00
236babd62c
adds start/end times for events
2022-01-18 14:19:52 -05:00
1f784d89ce
adds asynchronous eventer to controller
...
- emits events for processing progress/state for metric instrumentation
- emits events for eventual event backlog state for metrics
- alters Trigger() to return a channel that can be waited upon
- adds ability to add eventual events within a specific bbolt
transaction
- splits session lookup and delete into view/update transactions
- add eventual event gauge
- use CascadeCreateUpdate
- adds named functions
- documentation for 500us timeout
- grammar fixes
2022-01-18 14:19:36 -05:00
9bd955127c
Merge pull request #866 from openziti/broker.async.bbolt.tx
...
move broker event handlers to go routines
2022-01-18 09:27:17 -05:00
f1709586a2
Merge pull request #864 from openziti/cache-tunnel-sessions
...
Cache tunnel sessions in LRU cache to avoid creating extraneous sessions
2022-01-18 09:15:05 -05:00
9b05d4e49b
move broker event handlers to go routines
2022-01-17 13:59:33 -05:00
4be50ea143
adds zero start time check
2022-01-17 10:24:00 -05:00
050b0b086e
moves metric endpoint logging lower in the stack
...
- endpoint url/path -> name remains the same
- start timing on request context before we start processing
- log metrics in IsAllowed which is called by all endpoint after routing
- logging before routing to a handler would log all probe attacks
2022-01-17 10:12:59 -05:00
fd866e7f3d
Cache tunnel sessions in LRU cache to avoid creating extraneous sessions
2022-01-13 12:38:54 -05:00
9a42304511
Merge pull request #858 from openziti/add.router.re-enroll.logic
...
Add.router.reenroll.logic
2022-01-07 08:53:03 -05:00
c8facce38f
Merge pull request #861 from openziti/add.metrics.for.all.endpoints
...
adds metrics for endpoints with keys of path[method]
2022-01-06 14:46:29 -05:00
8b20f0278a
normalize URL ids for metric names
2022-01-06 14:42:31 -05:00
65702f502a
swap from brackets to period seperators
2022-01-06 14:11:01 -05:00
dfa0f7c6ab
adds metrics for endpoints with keys of path[method]
2022-01-06 14:02:36 -05:00
7b1ee2893d
Add identity refresh meter
2022-01-06 13:45:18 -05:00
cf20c2dfa8
adds api tests
2022-01-03 15:54:51 -05:00
770c7bcd06
adds re-enrollment logic for edge-routers
2022-01-03 09:06:33 -05:00
97773f5917
update log messages w/ router context
2021-12-20 09:20:10 -05:00
37f5f88944
remove unused REST API
2021-12-20 09:19:14 -05:00
dae084f61c
alters router/controller enrollment extension logic
...
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
0d66f75eb8
Add additional fields and make field names more consistent
2021-12-14 09:58:24 -05:00
31107eb4d4
Update for removing custom bbolt version with trace support
2021-12-11 00:34:40 -05:00
bfcb037783
Initial pass at fabric rest api working ( #838 )
...
* Update for fabric rest controller changes
2021-11-30 16:30:17 -05:00
f1af4df5d8
Merge pull request #837 from openziti/fix-panic
...
Fix panic caused by missing return on error
2021-11-17 10:34:23 -05:00
66ed64d749
Fix panic caused by missing return on error
2021-11-17 10:22:56 -05:00
96cdde0227
Enrolment -> Enrollment in spec
2021-11-10 13:19:08 -05:00
de45dc0554
Remove some unused types. Fix version map
2021-11-09 09:18:15 -05:00
027f8673ce
patch client cert instead of using verify options
2021-11-05 10:47:45 -04:00
ece9e8222a
formating directive fix
2021-11-05 10:27:00 -04:00
1f9ca6878a
changes client cert validation
...
- adds test for client cert validation expectations
- adds certificat authenticator create
2021-11-05 10:10:17 -04:00
24ae6dbb19
Fix panic on session view
2021-11-02 16:40:22 -04:00
8e53e50fd9
Merge pull request #818 from openziti/identity.enrollment.extension
...
adds identity cert extension endpoint to client/man API
2021-11-02 13:24:29 -04:00
62ae85539f
Merge pull request #819 from openziti/gosec.improvements
...
fixes gosec output of a few items
2021-11-02 09:05:22 -04:00
2d4260e76e
Allow using a specific bolt db file for tests
2021-10-26 14:19:24 -04:00
c8de8a8fac
fixes gosec output of a few items
2021-10-21 17:40:52 -04:00
a1f7a48cdc
adds identity cert extension endpoint to client/man API
...
- now supports POST /current-identity/authenticators/{id}/extend for
cert authenticators
- adds test for cert extension endpoint
2021-10-21 15:12:30 -04:00
7d483a822b
Merge pull request #817 from openziti/fix-panic-on-invalid-service
...
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:47:30 -04:00
40389c1f88
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:37:56 -04:00
050d5eb0dc
fix possible formatting error
2021-10-19 11:31:31 -04:00
6612ad9c14
fix startup timing issues
2021-10-19 10:58:59 -04:00
45158ff864
updates to newest foundation/fabric/sdk-golang
2021-10-18 16:07:33 -04:00
49006ab9f6
fixes posture check timeouts that sit at 0 after endpoint states
2021-10-07 10:22:57 -04:00
6b80d444a0
remove old dgrijalva jwt ref
2021-10-01 11:17:00 -04:00
0c8206b8d4
Don't allow hashtags or at symbols on role attributes. Fixes #786
2021-09-22 10:31:01 -04:00
c9e7d2f4c7
update host configs as well to pickup wildcardDomain addition
2021-09-15 15:57:39 -04:00
83f0d5597d
add wildcard domain to intercept addresses configuration
2021-09-15 15:52:53 -04:00
0b46233a8b
Merge pull request #780 from openziti/add.fully.authed.api.session.store.event
...
adds EventFullyAuthenticated to the API session store
2021-09-14 10:54:10 -04:00
50752b8b7a
check for nill checker
2021-09-14 09:47:41 -04:00
b0f9f18f72
adds EventFullyAuthenticated to the API session store
...
The previous implementation would send API Sessions to Edge Routers
while partially authenticated. Due to state issues addressed separately
in the c-SDK, these partial API Sessions are maintained if a channel
connected to an edge router was established during reconnect. This would
further cause problems with channel connection using the wrong API
session vs what the rest of the SDK was using.
2021-09-13 15:15:34 -04:00
Paul Lorenz