7d6901be3d
Add edge code needed for entity change events. Fixes #629
2023-04-25 22:34:02 -04:00
43fc1e96fe
Get tests running and do some cleanups
2023-04-25 13:26:19 -04:00
bd9b6a713b
Pull some tweaks over from denorm branch
2023-04-03 11:34:37 -04:00
ad5dc292bb
Improve list performance by using identity indexes rather than service indexes. Fixes #1388
2023-04-03 09:58:21 -04:00
6b8aa137e2
Merge pull request #1375 from openziti/fix.1374.mfa.admin.reset
...
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 16:26:05 -04:00
871ed677f1
update tests to no longer check for 404s
...
Admin MFA removals can no longer trigger 404s and they simply remove
"anything" there.
2023-03-27 16:11:33 -04:00
f0b434d518
Rate limit terminator creation for router/tunneler. Fixes #1362
2023-03-23 10:04:54 -04:00
b09af68d09
Update edge test for fabric api update. Remove unneeded cgo import.
2023-03-17 11:55:38 -04:00
cce22ebb36
Remove adaptive buffer sizing
2023-03-15 09:27:54 -04:00
a4caf933f6
fixes #1310 optional KID causes controller crash
2023-02-22 15:12:07 -05:00
5e40b9f878
removes errant "endpoints" file
2023-01-25 09:43:52 -05:00
a46a10d9eb
use new github.com/openziti/edge-api repository
...
- fixes import statements
2023-01-24 16:03:20 -05:00
69c31fcf3e
uses github.com/openziti/edge-api
...
- removes old api specific scripts, generated files, etc
2023-01-24 14:45:24 -05:00
4abeaa0c0a
xgress_edge_tunnel create terminator perf improvements. Fixes #1270
...
* Make terminator creation asynchronous
* Make terminator creation idempotent
* Improve logging
* Add some timer logging and metrics.
* controller and router will both log their respective views of how long the terminator create took
* the router has a new xgress_edge_tunnel.terminator.create_time timer metric
2022-12-15 17:29:29 -05:00
d022405ea8
Merge pull request #1235 from openziti/fill-in-client-cert-chains
...
Fill in client cert chains when enrolling
2022-11-11 16:09:18 -05:00
90e7b0f0a6
Fill in client cert chains when enrolling
2022-11-11 14:30:55 -05:00
d73c72679d
for #1213 delete api session on authenticator delete/re-enroll
...
- an authenticator removed or re-enrolled would continue to allow old
API Session to operate
- deleted or re-enrolled authenticators now remove associatd API
Sessions
2022-11-09 11:44:49 -05:00
3e4f26ee78
updates edge service manager to not allow encryptionRequired to be
...
altered
2022-11-07 11:42:01 -05:00
4fbe0c62bf
lint fixes
2022-11-04 15:31:02 -04:00
5dc8a66fe9
addresses #1226 api session certificate issues w/ 3rd party cas
...
- events during a multi-step transaction were immediately emitting events
causing out of order and incomplete events to be received,
specifically API Sessions w/o fingerprints
- API Session Certificates created implicitly during 3rd Party CA auth
did not properly set all properties
- adds tests
2022-11-04 14:40:07 -04:00
63c161224a
Add linter and fix issues found by linter
2022-10-10 16:56:51 -04:00
63e0d9663e
Support multiple routers in router edge extensions
2022-09-30 09:34:04 -04:00
32c197e5e1
Update to channel v2
2022-09-26 18:20:00 -04:00
db5c73b33b
Refactor edge events to follow model established in fabric
2022-09-16 12:47:46 -04:00
1f71f952d7
Update to usage v3
2022-09-16 12:41:36 -04:00
60fc51253d
fixes #1176 patching externalIdClaim on CA
2022-09-15 11:18:41 -04:00
0d1dfb9779
Fixes for raft command encoding and decoding
2022-08-18 12:22:30 -04:00
2e578ab784
Update identities to use raft commands. Fixes #1131
2022-08-09 14:58:23 -04:00
fc2ac0dee4
Add missing lock in events test
2022-08-04 10:14:39 -04:00
fe1b0463d7
Update authenticators to use raft commands. Fixes #1099
2022-08-04 10:14:21 -04:00
1fb3339bb1
Update for changes to fabric events model
2022-07-19 11:18:08 -04:00
bae7e40b61
Update for foundation changes
2022-07-01 15:55:30 -04:00
12df770d04
Update copyright
2022-06-30 17:45:08 -04:00
39460988df
adds identity enrollments endpoint
...
- removes unused details field
- adds tests, adds validation formats
2022-06-08 13:53:23 -04:00
9ae2eb825c
adds jwks support
...
- ext-jwt-signers now support jwks endpoints in addition to static
certificates
- ext-jwt-signers now require either kid+cert or jkwsEndpoint
- ext-jwt-signers now requires issuer and audience fields
- jwksEndpoints are initially cached and will be revalidated on invalid
auth once every 5s at most
- adds more external id tests
2022-06-07 09:57:22 -04:00
0014b39f7e
update xweb to v2
2022-06-06 14:33:42 -04:00
2f6a3bc828
Update handler -> manager for base types and config
2022-06-02 00:05:54 -04:00
7cf9dc135d
Initial support for raft and command style architecture
2022-06-01 23:52:07 -04:00
6fcde2ee3c
fix scenarios where nil or non map is provided in data causes a panic
...
- fixes edge #1020
- adds higher level error
- adds store level error
2022-05-26 17:03:43 -04:00
c5f156dd9e
adds x509 claims support for external ids to CAs
...
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
a1d9aec518
Merge pull request #1010 from openziti/add.enrollment.create
...
adds the ability to create identity enrollments
2022-05-16 09:02:01 -04:00
5a7e1a8cab
Add goroutine pool metrics
2022-05-13 14:29:12 -04:00
72729fd731
adds the ability to create identity enrollments
2022-05-12 12:40:49 -04:00
2b2726ca32
Update to go 1.18 and transport/v2
2022-05-10 13:11:12 -04:00
de9cd7298f
Merge pull request #985 from openziti/adds.authenticator.enrollment.reissue
...
Adds authenticato re-enrollment
2022-05-06 10:37:53 -04:00
0243212f83
Use ZitiSession const from golang sdk instead of foundation (so we can remove it from foundation)
2022-05-02 17:20:03 -04:00
3b9aeba68c
move cert test out of updb test
2022-04-21 15:03:04 -04:00
fb1bff0083
adds re-enrollment for existing authenticators
...
- REST API Endpoints in Management API
- adds JWT to Management API enrollments endpoint
2022-04-21 15:01:28 -04:00
642dec4c25
adds refresh expired enrollment logic and tests
2022-04-20 16:13:41 -04:00
01bba9a4d1
fix test, shutdown lost transit router
2022-04-14 09:45:31 -04:00
Paul Lorenz