Paul Lorenz
f1af4df5d8
Merge pull request #837 from openziti/fix-panic
...
Fix panic caused by missing return on error
2021-11-17 10:34:23 -05:00
Paul Lorenz
66ed64d749
Fix panic caused by missing return on error
2021-11-17 10:22:56 -05:00
Paul Lorenz
96cdde0227
Enrolment -> Enrollment in spec
2021-11-10 13:19:08 -05:00
Paul Lorenz
de45dc0554
Remove some unused types. Fix version map
2021-11-09 09:18:15 -05:00
Andrew Martinez
027f8673ce
patch client cert instead of using verify options
2021-11-05 10:47:45 -04:00
Andrew Martinez
ece9e8222a
formating directive fix
2021-11-05 10:27:00 -04:00
Andrew Martinez
1f9ca6878a
changes client cert validation
...
- adds test for client cert validation expectations
- adds certificat authenticator create
2021-11-05 10:10:17 -04:00
Paul Lorenz
24ae6dbb19
Fix panic on session view
2021-11-02 16:40:22 -04:00
Andrew
8e53e50fd9
Merge pull request #818 from openziti/identity.enrollment.extension
...
adds identity cert extension endpoint to client/man API
2021-11-02 13:24:29 -04:00
Andrew
62ae85539f
Merge pull request #819 from openziti/gosec.improvements
...
fixes gosec output of a few items
2021-11-02 09:05:22 -04:00
Paul Lorenz
2d4260e76e
Allow using a specific bolt db file for tests
2021-10-26 14:19:24 -04:00
Andrew Martinez
c8de8a8fac
fixes gosec output of a few items
2021-10-21 17:40:52 -04:00
Andrew Martinez
a1f7a48cdc
adds identity cert extension endpoint to client/man API
...
- now supports POST /current-identity/authenticators/{id}/extend for
cert authenticators
- adds test for cert extension endpoint
2021-10-21 15:12:30 -04:00
Paul Lorenz
7d483a822b
Merge pull request #817 from openziti/fix-panic-on-invalid-service
...
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:47:30 -04:00
Paul Lorenz
40389c1f88
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:37:56 -04:00
Andrew Martinez
050d5eb0dc
fix possible formatting error
2021-10-19 11:31:31 -04:00
Andrew Martinez
6612ad9c14
fix startup timing issues
2021-10-19 10:58:59 -04:00
Andrew Martinez
45158ff864
updates to newest foundation/fabric/sdk-golang
2021-10-18 16:07:33 -04:00
Andrew Martinez
49006ab9f6
fixes posture check timeouts that sit at 0 after endpoint states
2021-10-07 10:22:57 -04:00
Andrew Martinez
6b80d444a0
remove old dgrijalva jwt ref
2021-10-01 11:17:00 -04:00
Paul Lorenz
0c8206b8d4
Don't allow hashtags or at symbols on role attributes. Fixes #786
2021-09-22 10:31:01 -04:00
Eugene K
c9e7d2f4c7
update host configs as well to pickup wildcardDomain addition
2021-09-15 15:57:39 -04:00
Eugene K
83f0d5597d
add wildcard domain to intercept addresses configuration
2021-09-15 15:52:53 -04:00
Andrew
0b46233a8b
Merge pull request #780 from openziti/add.fully.authed.api.session.store.event
...
adds EventFullyAuthenticated to the API session store
2021-09-14 10:54:10 -04:00
Andrew Martinez
50752b8b7a
check for nill checker
2021-09-14 09:47:41 -04:00
Andrew Martinez
b0f9f18f72
adds EventFullyAuthenticated to the API session store
...
The previous implementation would send API Sessions to Edge Routers
while partially authenticated. Due to state issues addressed separately
in the c-SDK, these partial API Sessions are maintained if a channel
connected to an edge router was established during reconnect. This would
further cause problems with channel connection using the wrong API
session vs what the rest of the SDK was using.
2021-09-13 15:15:34 -04:00
Paul Lorenz
12117a0ded
Sending service precedences and cost set on identity to ERT
2021-09-10 17:20:46 -04:00
Paul Lorenz
2fd995becb
Fix panic if posture data mfa is nil
2021-09-09 11:18:19 -04:00
Paul Lorenz
5639bd56ef
Merge pull request #769 from openziti/fix-panic
...
Fix panic when service not found
2021-09-09 09:40:33 -04:00
Paul Lorenz
84d36337ad
Fix panic when service not found
2021-09-08 15:59:35 -04:00
Andrew Martinez
c2b83432d1
adds /identity/:id/authenticators Management API endpoint
2021-09-08 14:06:56 -04:00
Paul Lorenz
df73dd15b0
Merge pull request #767 from openziti/fix-host-after-session-expiration
...
Allow ERT to gracefully handle api session/session removal. Can happe…
2021-09-03 13:50:54 -04:00
Paul Lorenz
82f4621393
Allow ERT to gracefully handle api session/session removal. Can happen if router is disconnected, but not down for an extended period
2021-09-03 13:28:43 -04:00
Andrew Martinez
17b82de1fd
remove debug output
2021-09-03 09:55:39 -04:00
Andrew Martinez
a7be333879
adds migration to fill identityId for existing sessions
2021-09-03 09:48:21 -04:00
Andrew
cfebf66ca9
Merge pull request #765 from openziti/rest.session.model.no.err
...
rest api session modeling will no longer kill lists
2021-09-02 13:34:43 -04:00
Paul Lorenz
05fb2e155a
Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
...
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
Andrew Martinez
66a438fb02
rest api session modeling will no longer kill lists
2021-09-02 11:04:28 -04:00
Andrew Martinez
57b6b70945
add unit tests for timeout logic
2021-09-02 11:00:09 -04:00
Andrew Martinez
76e839cfaa
adds constants for posture check types
2021-09-02 10:15:31 -04:00
Andrew Martinez
f095abe8df
fix go test failures
2021-09-02 09:11:14 -04:00
Andrew Martinez
4cac5518e9
ensure that lastAccessedAt is set on create, emit logs if not found
2021-09-02 08:57:14 -04:00
Paul Lorenz
782f43cb26
Fix time check on list tunnel. Add policy enforcer test. Add update session test
2021-09-01 16:20:43 -04:00
Andrew Martinez
cf7c63ffa9
translate valeus less than 0 to -1
2021-08-30 09:12:39 -04:00
Andrew Martinez
7e2b97c425
fixes posture check timeouts, tests, service updates
...
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
2021-08-30 09:05:46 -04:00
Paul Lorenz
fa902f385d
Add entity count events. Fixes GH-757
2021-08-19 14:18:30 -04:00
Andrew
6ef863711b
Merge pull request #747 from openziti/add.timeout.api.tests
...
adds posture check timout tests using MFA PC
2021-08-10 19:46:16 -04:00
Andrew
bd96728bdc
Merge pull request #749 from openziti/validate.edge.api.address.config
...
fixes #748 adds validation for host:port combos in edge configuration
2021-08-10 19:45:43 -04:00
Paul Lorenz
de54568423
More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set
2021-08-10 13:18:24 -04:00
Andrew Martinez
d03626649b
fixes #748 adds validation for host:port combos in edge configuration address
2021-08-10 10:23:23 -04:00