ab7b2e80fd
use centralized logic to add signers for cache load and live def
2022-04-21 15:06:18 -04:00
fb1bff0083
adds re-enrollment for existing authenticators
...
- REST API Endpoints in Management API
- adds JWT to Management API enrollments endpoint
2022-04-21 15:01:28 -04:00
b2f44c949b
Merge pull request #982 from openziti/adds.enrollment.refresh.logic
...
adds refresh expired enrollment logic and tests
2022-04-21 11:03:35 -04:00
afd39af571
fixes ext jwt startup cache to use kid not fingerprint
2022-04-21 10:15:23 -04:00
642dec4c25
adds refresh expired enrollment logic and tests
2022-04-20 16:13:41 -04:00
b48b1d6fc5
Add another path test. Address review comments
2022-04-19 21:50:21 -04:00
6a25a1f5b8
Add websocket api support
2022-04-19 13:04:54 -04:00
e2d29d3f07
Rework model for circuit inspections. Add inspect support back to mgmt channel
2022-04-19 10:38:23 -04:00
a21fb393bb
Add websocket API for mgmt channel
2022-04-19 10:34:57 -04:00
59de4af681
adds ids to identity authenticator detail
2022-04-13 14:20:10 -04:00
d80fafef96
fixes #968 management api doc not available
...
Root cause is a bug and/or lack of features in the go-open-api runtime.
2022-04-13 13:39:38 -04:00
23cd6fe6e6
A couple more places where linkType -> linkProtocol refactor was missed ( #352 )
...
Co-authored-by: Tod Burtchell <tod.burtchell@netfoundry.io >
2022-04-12 11:26:01 -04:00
8d8a2503e4
fixes issues where external ids were not handled on display/update
2022-04-12 09:46:41 -04:00
c32fa95ca8
Merge pull request #961 from openziti/add.ext.jwt.aud.iss.checks
...
adds optional issuer and audience properties to ext jwt signers
2022-04-12 08:54:53 -04:00
86d1913763
make network exit an info instead of an error
2022-04-11 14:06:30 -04:00
59af07dcd0
fixes is admin not set on updates (put/patch)
2022-04-08 11:20:15 -04:00
5b17be58c8
fixes admin permission not also checking default admin
2022-04-08 10:43:24 -04:00
ec51635f26
adds optional issuer and audience properties to ext jwt signers
2022-04-06 15:48:17 -04:00
4b7a4d1081
added circuit creation timespan ( #349 )
...
* added circuit creation timespan
* added creation timespan to event message
2022-04-06 11:14:43 -05:00
113c37024e
Added heartbeat logging/metrics to control channel ( #341 )
...
* Added heartbeat logging/metrics to control channel
* pr comments
* misunderstood last pr comment
* moved channel closing to happen in either case
2022-04-06 11:10:58 -05:00
8150358d6b
Add service id to log message
2022-04-05 22:34:30 -04:00
b264f89294
Fix issue where peerdata could be set to nil if non-terminator router return from route last
2022-04-04 15:37:12 -04:00
5f62d05a9a
Merge pull request #952 from openziti/update-deps
...
Update to transport and storage libs. Update workflows
2022-03-31 11:14:29 -04:00
213f03bd89
fix migration version check
2022-03-31 10:52:50 -04:00
b5605f0738
updates db version
2022-03-31 10:48:31 -04:00
be958338b4
add error return on err in cert auth
2022-03-31 10:38:30 -04:00
7bd0f84832
Move profiler code to fabric since this is the only place it's used
2022-03-31 10:36:30 -04:00
9a344da855
Update to use transport library
2022-03-31 10:36:28 -04:00
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
b35b532d25
Update to use storage library
2022-03-30 16:22:32 -04:00
88a28e7454
Merge pull request openziti/fabric#345 from openziti/move-config-to-fabric
...
Move foundation/config to fabric
2022-03-30 16:20:32 -04:00
ba84d2fae9
adds settable kid to ext jwt signers, fixes default auth policy
2022-03-30 13:51:23 -04:00
21c6866f42
Move foundation/config to fabric
2022-03-30 13:48:14 -04:00
1ee1c644c5
Don't send egress on re-route, since it will always be ignored
2022-03-30 13:44:58 -04:00
648d89fb93
lower circuit retries ( #342 )
2022-03-30 09:24:45 -05:00
5129f3c8d7
adds partial authentication enforcement
...
- required ext jwt signer requires bearer token on requests
- adds auth query output for ext jwt
- enforces requireTotp auth policy
- allows partial auth to setup MFA but not remove
2022-03-30 10:10:52 -04:00
708dcfe0c9
adds auth policy / disabled identity auth logic
2022-03-29 14:26:04 -04:00
329d1eb4d1
Update deps and fix test
2022-03-28 18:19:14 -04:00
a34ae130b8
adds externalId, plumbs auth url, use external id
...
- adding tests and boundaries to values
- updating foundation
- squash, rebase
2022-03-28 10:54:27 -04:00
99e3b283b6
adds auth policy CRUD, does not affect authentication
2022-03-25 14:40:07 -04:00
84cfedf482
Add circuit inspection. Move ctrl handler pools to use goroutines.Pool
2022-03-24 13:32:56 -04:00
9d5ba0ccec
Update test for fabric changes
2022-03-23 15:47:42 -04:00
405492ce92
Route error codes ( #335 )
...
* Initial work on adding route error codes to route responses
* updated messaging
* Split out terminator incrementors
Added handling for Service Errors
Added initial steps at deleting misbehaving terminators
* Added test for destroying and settin gprecedence on terminators
Added handling for terminator errors in routing
* inverted error switch
* cleanup for pr
* PR comments
* refactored conditional printing to account for single node paths that don't have links
* added error log when route status
* added another misconfigured error
Co-authored-by: Paul Lorenz <paul.lorenz@netfoundry.io >
2022-03-23 12:51:49 -05:00
2f8a608c4c
Replacing link 'type' with 'protocol' and 'costTags' ( #336 )
...
* Replacing link 'type' with 'protocol' and 'costTags'
2022-03-22 09:06:02 -04:00
1459cd3b7b
Merge pull request #918 from openziti/add.ext.jwt.authenticator
...
adds ext-jwt authenticator
2022-03-21 15:56:04 -04:00
f12594602c
adds a default panic 500 HTTP status code
2022-03-21 09:50:53 -04:00
76e207fe28
Add cost/precedence back to host configs. Fixes #931
2022-03-16 12:04:17 -04:00
7526b0db38
Move integrity checker to fabric
2022-03-10 11:08:20 -05:00
ef7c69558b
Copy db ops from edge to fabric (for eventual removal from edge). Add snapshot db agent op
2022-03-10 10:07:41 -05:00
3380807334
adds ext-jwt authenticator
...
- enables /authenticate?method=ext-jwt
- adds ext-jwt to OpenAPI schema
- rebase to main, squash
2022-03-08 10:01:38 -05:00
Andrew Martinez