Commit Graph

445 Commits

Author SHA1 Message Date
Paul Lorenz f1af4df5d8 Merge pull request #837 from openziti/fix-panic
Fix panic caused by missing return on error
2021-11-17 10:34:23 -05:00
Paul Lorenz 66ed64d749 Fix panic caused by missing return on error 2021-11-17 10:22:56 -05:00
Paul Lorenz 96cdde0227 Enrolment -> Enrollment in spec 2021-11-10 13:19:08 -05:00
Paul Lorenz de45dc0554 Remove some unused types. Fix version map 2021-11-09 09:18:15 -05:00
Andrew Martinez 027f8673ce patch client cert instead of using verify options 2021-11-05 10:47:45 -04:00
Andrew Martinez ece9e8222a formating directive fix 2021-11-05 10:27:00 -04:00
Andrew Martinez 1f9ca6878a changes client cert validation
- adds test for client cert validation expectations
- adds certificat authenticator create
2021-11-05 10:10:17 -04:00
Paul Lorenz 24ae6dbb19 Fix panic on session view 2021-11-02 16:40:22 -04:00
Andrew 8e53e50fd9 Merge pull request #818 from openziti/identity.enrollment.extension
adds identity cert extension endpoint to client/man API
2021-11-02 13:24:29 -04:00
Andrew 62ae85539f Merge pull request #819 from openziti/gosec.improvements
fixes gosec output of a few items
2021-11-02 09:05:22 -04:00
Paul Lorenz 2d4260e76e Allow using a specific bolt db file for tests 2021-10-26 14:19:24 -04:00
Andrew Martinez c8de8a8fac fixes gosec output of a few items 2021-10-21 17:40:52 -04:00
Andrew Martinez a1f7a48cdc adds identity cert extension endpoint to client/man API
- now supports POST /current-identity/authenticators/{id}/extend for
  cert authenticators
- adds test for cert extension endpoint
2021-10-21 15:12:30 -04:00
Paul Lorenz 7d483a822b Merge pull request #817 from openziti/fix-panic-on-invalid-service
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:47:30 -04:00
Paul Lorenz 40389c1f88 Fix panic on invalid service. Error wasn't getting saved 2021-10-20 13:37:56 -04:00
Andrew Martinez 050d5eb0dc fix possible formatting error 2021-10-19 11:31:31 -04:00
Andrew Martinez 6612ad9c14 fix startup timing issues 2021-10-19 10:58:59 -04:00
Andrew Martinez 45158ff864 updates to newest foundation/fabric/sdk-golang 2021-10-18 16:07:33 -04:00
Andrew Martinez 49006ab9f6 fixes posture check timeouts that sit at 0 after endpoint states 2021-10-07 10:22:57 -04:00
Andrew Martinez 6b80d444a0 remove old dgrijalva jwt ref 2021-10-01 11:17:00 -04:00
Paul Lorenz 0c8206b8d4 Don't allow hashtags or at symbols on role attributes. Fixes #786 2021-09-22 10:31:01 -04:00
Eugene K c9e7d2f4c7 update host configs as well to pickup wildcardDomain addition 2021-09-15 15:57:39 -04:00
Eugene K 83f0d5597d add wildcard domain to intercept addresses configuration 2021-09-15 15:52:53 -04:00
Andrew 0b46233a8b Merge pull request #780 from openziti/add.fully.authed.api.session.store.event
adds EventFullyAuthenticated to the API session store
2021-09-14 10:54:10 -04:00
Andrew Martinez 50752b8b7a check for nill checker 2021-09-14 09:47:41 -04:00
Andrew Martinez b0f9f18f72 adds EventFullyAuthenticated to the API session store
The previous implementation would send API Sessions to Edge Routers
while partially authenticated. Due to state issues addressed separately
in the c-SDK, these partial API Sessions are maintained if a channel
connected to an edge router was established during reconnect. This would
further cause problems with channel connection using the wrong API
session vs what the rest of the SDK was using.
2021-09-13 15:15:34 -04:00
Paul Lorenz 12117a0ded Sending service precedences and cost set on identity to ERT 2021-09-10 17:20:46 -04:00
Paul Lorenz 2fd995becb Fix panic if posture data mfa is nil 2021-09-09 11:18:19 -04:00
Paul Lorenz 5639bd56ef Merge pull request #769 from openziti/fix-panic
Fix panic when service not found
2021-09-09 09:40:33 -04:00
Paul Lorenz 84d36337ad Fix panic when service not found 2021-09-08 15:59:35 -04:00
Andrew Martinez c2b83432d1 adds /identity/:id/authenticators Management API endpoint 2021-09-08 14:06:56 -04:00
Paul Lorenz df73dd15b0 Merge pull request #767 from openziti/fix-host-after-session-expiration
Allow ERT to gracefully handle api session/session removal. Can happe…
2021-09-03 13:50:54 -04:00
Paul Lorenz 82f4621393 Allow ERT to gracefully handle api session/session removal. Can happen if router is disconnected, but not down for an extended period 2021-09-03 13:28:43 -04:00
Andrew Martinez 17b82de1fd remove debug output 2021-09-03 09:55:39 -04:00
Andrew Martinez a7be333879 adds migration to fill identityId for existing sessions 2021-09-03 09:48:21 -04:00
Andrew cfebf66ca9 Merge pull request #765 from openziti/rest.session.model.no.err
rest api session modeling will no longer kill lists
2021-09-02 13:34:43 -04:00
Paul Lorenz 05fb2e155a Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
Andrew Martinez 66a438fb02 rest api session modeling will no longer kill lists 2021-09-02 11:04:28 -04:00
Andrew Martinez 57b6b70945 add unit tests for timeout logic 2021-09-02 11:00:09 -04:00
Andrew Martinez 76e839cfaa adds constants for posture check types 2021-09-02 10:15:31 -04:00
Andrew Martinez f095abe8df fix go test failures 2021-09-02 09:11:14 -04:00
Andrew Martinez 4cac5518e9 ensure that lastAccessedAt is set on create, emit logs if not found 2021-09-02 08:57:14 -04:00
Paul Lorenz 782f43cb26 Fix time check on list tunnel. Add policy enforcer test. Add update session test 2021-09-01 16:20:43 -04:00
Andrew Martinez cf7c63ffa9 translate valeus less than 0 to -1 2021-08-30 09:12:39 -04:00
Andrew Martinez 7e2b97c425 fixes posture check timeouts, tests, service updates
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
2021-08-30 09:05:46 -04:00
Paul Lorenz fa902f385d Add entity count events. Fixes GH-757 2021-08-19 14:18:30 -04:00
Andrew 6ef863711b Merge pull request #747 from openziti/add.timeout.api.tests
adds posture check timout tests using MFA PC
2021-08-10 19:46:16 -04:00
Andrew bd96728bdc Merge pull request #749 from openziti/validate.edge.api.address.config
fixes #748 adds validation for host:port combos in edge configuration
2021-08-10 19:45:43 -04:00
Paul Lorenz de54568423 More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set 2021-08-10 13:18:24 -04:00
Andrew Martinez d03626649b fixes #748 adds validation for host:port combos in edge configuration address 2021-08-10 10:23:23 -04:00