Commit Graph

275 Commits

Author SHA1 Message Date
Paul Lorenz d72d20966a Merge pull request #555 from openziti/fix-session-client-id
Fix fabric session client id. should be edge session id not token. Ad…
2021-02-26 09:51:23 -05:00
Paul Lorenz d64d18308d Merge pull request #554 from openziti/fix-update-terminator
Fix update terminator. Add test for terminator updates. Remove unused…
2021-02-26 09:47:04 -05:00
Paul Lorenz 560137fb65 Fix fabric session client id. should be edge session id not token. Add test for events. 2021-02-26 09:38:13 -05:00
Paul Lorenz 8a160d93b1 Fix update terminator. Add test for terminator updates. Remove unused store_events 2021-02-26 09:04:32 -05:00
Andrew Martinez 7e60583043 fix swagger parameter names, allow mfa codes on headers for get/delete
- swagger copy pasta was using the same parameter name for everything,
  "body", which made error messages read "error in body for body"
- parameter rename ripples into parameter property definitions
- allow mfa codes in GET and DELETe as libuv doesn't allow them to have
  bodies (-.-)
2021-02-25 14:23:12 -05:00
Andrew Martinez 75029f8600 centralize edge router properties, add supportedProtocols to edge
session

- centralized edge router properties so adding/altering affects all
  edge router output
- adds supportedProtocols to edge session create response
- mark urls on edge session create response as deprecated
2021-02-23 15:07:43 -05:00
Andrew Martinez b784577f36 add new error state for router sync, move defers to catch router info 2021-02-19 20:58:53 -05:00
Andrew Martinez 69bb67d237 fix exiting workers, panic recovery is unrelate but a good change 2021-02-19 20:14:24 -05:00
Andrew 1eb262c734 Merge pull request #544 from openziti/fix.er.connect.disconnect.panic
ignore duplicate connecting routers, do not dereference er hostnames
2021-02-19 11:31:22 -05:00
Andrew Martinez 4afc0bd0b6 fix dupe connection testing by looking at strat stat not network state 2021-02-19 11:18:09 -05:00
Andrew Martinez a51cf270f2 ignore duplicate connecting routers, do not dereference er hostnames
hostnames may be a nil pointer at times now due to the fact that edge
routers may be waiting to sync and may be "online" but edge hellos
have not been exchanged.
2021-02-19 10:19:26 -05:00
Andrew Martinez 5ec44c3d3e add migration to remove api sessions/sessions on migration from 18->19 2021-02-19 09:54:55 -05:00
Paul Lorenz 155bbd8217 Validate sessions on controller instead of edge router 2021-02-17 20:38:13 -05:00
Andrew Martinez 707a5a7362 Merge branch 'main' into additional.posture.os.unit.tests 2021-02-17 13:11:04 -05:00
Andrew Martinez 4b75b638da use send instead of send w/ tx 2021-02-17 13:02:49 -05:00
Andrew Martinez d2774ae41d fix lint errors 2021-02-17 12:55:58 -05:00
Andrew Martinez 919d7a3d6b add hearbeat invalid api token delete 2021-02-17 12:19:06 -05:00
Andrew Martinez 7eb3699f9b additional os posture checks 2021-02-16 13:24:21 -05:00
Andrew Martinez 74d4187f22 documentation, split shared options for instant sync, renames 2021-02-15 14:56:56 -05:00
Andrew Martinez f55751c77e fix worker count 2021-02-15 13:59:51 -05:00
Andrew Martinez d76fcbc168 merge stops in instant strat, add broker stop to shutdown 2021-02-15 13:39:07 -05:00
Andrew Martinez fdb2fb35ad rename routerTx to routerSender 2021-02-15 13:22:07 -05:00
Andrew Martinez a8f1b8b79a moves sync strat/state to headers 2021-02-15 13:22:07 -05:00
Andrew Martinez d07618c9d5 modular edge router sync
- edge router sync is now modular and can have different strategies
- plans to make this configurabe in the future with multiple strat
- legacy strategy is called "instant" and is the only option
- instant strat now supports control signaling and resync requests
- edge routers now do not remove connections till after a full sync
- added the ability for the controller to report the er sync status
- added er syn status to GET /edge-routers list and detail
- improved log output in sync logic
2021-02-15 13:22:07 -05:00
Andrew ecc404ab8a Merge pull request #494 from openziti/remove.posture.timer
moves posture data to not time out
2021-02-11 14:12:12 -05:00
Andrew Martinez 6a2c82deca add timeout posture query property, -1 == no timeout
Provides a location for future configurable timeouts and allows
SDKs to detect whether no timeout/timeouts are supported.
2021-02-10 17:13:23 -05:00
Andrew Martinez 2360d44b05 moves posture data to not time out 2021-02-10 16:51:40 -05:00
Andrew Martinez 2c1a9dd82b ignores dupe router startup
A second edge router starting up could offline the original according to
the edge. This would cause issues w/ API Session and Session
distribution.
2021-02-10 10:58:50 -05:00
Andrew Martinez 5b5fe97961 fix ptr to string in error message 2021-02-09 14:01:20 -05:00
Andrew Martinez 9fab8e6ed0 fix formatting message
Some deps altered after a go test ./... and go mod tidy
2021-02-09 13:57:49 -05:00
Andrew Martinez 35fa25d5af use ast.BoolNodeTrue 2021-02-09 13:55:03 -05:00
Andrew Martinez 46166db9cc fixes orphaned ottca enrollments
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
Andrew Martinez c23bf9dbcf fixes os PATCH for posture checks
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
Andrew 18513f7ee4 Merge pull request #504 from openziti/api.session.performance
moves hasApiSession lookup to api model and limit 1
2021-02-04 09:32:01 -05:00
Andrew 5b1101bb24 Merge pull request #505 from openziti/fix.484.edge.router.list
fixes #484 adds current identity edge router lookup
2021-02-04 09:28:10 -05:00
Andrew Martinez 65832b8da5 fix missing formatted log call, spelling 2021-02-04 09:24:00 -05:00
Curt Tudor 2c6814aaa4 edge router enhancements for browZer support (#499) 2021-02-04 06:09:46 -05:00
Andrew Martinez e34d25b0dd fixes #484 adds current identity edge router lookup 2021-02-03 15:37:15 -05:00
Andrew Martinez 5c47c31016 moves hasApiSession lookup to api model and limit 1
This move isolates the cost of hasApiSession to the identity endpoint
lookups in the REST API. Being in the model caused this cost to be
shared on all identity lookups for internal logic.

Limit 1 is an attempt to reduce the cost of searching over a large set.
API Sessions do not have an index on identity id so there is still some
cost.
2021-02-03 14:01:53 -05:00
Andrew 5de4d629f3 Merge pull request #498 from openziti/add.server.header
fixes #497 send session header
2021-02-01 15:07:24 -05:00
Andrew Martinez df1f2a1a75 fixes #497 send session header
- add server headers during HTTP handler delegation rather than at HTTP
  response time
- remove all old header setting locations
- remove unused status writer and other response code
- add manual set on authentication for session headers
2021-02-01 14:28:29 -05:00
Andrew Martinez cab720ed47 limit public query options to 500 whe "none" is specified 2021-02-01 09:27:55 -05:00
Paul Lorenz f485d4e8c3 Update service poller to use service update callback 2021-01-29 15:32:51 -05:00
Andrew Martinez 252e105f3c add typeId to authQuery 2021-01-26 15:12:22 -05:00
Andrew Martinez ab9e19f485 fix unit tests 2021-01-26 14:33:34 -05:00
Andrew Martinez a4a872c377 remove test sleeps, use const for window size 2021-01-26 14:08:16 -05:00
Andrew Martinez 4051c47dd5 Merge branch 'main' into mfa 2021-01-26 13:52:59 -05:00
Andrew 5e5aa87c39 Merge pull request #485 from openziti/bulk.posture.response
bulk posture response endpoint
2021-01-26 09:11:27 -05:00
Andrew Martinez f2431ab9b3 bulk posture response 2021-01-25 13:55:41 -05:00
Paul Lorenz e1e31c2ecb Fix edge-router association lists 2021-01-23 14:54:03 -05:00