96cdde0227
Enrolment -> Enrollment in spec
2021-11-10 13:19:08 -05:00
c5d2e481ae
Add router ids to link metrics. Fixes openziti/fabric#275 . Fix panic on router shutdown if router is stopped before ctrl channel is established
2021-11-10 12:45:54 -05:00
de45dc0554
Remove some unused types. Fix version map
2021-11-09 09:18:15 -05:00
027f8673ce
patch client cert instead of using verify options
2021-11-05 10:47:45 -04:00
ece9e8222a
formating directive fix
2021-11-05 10:27:00 -04:00
1f9ca6878a
changes client cert validation
...
- adds test for client cert validation expectations
- adds certificat authenticator create
2021-11-05 10:10:17 -04:00
24ae6dbb19
Fix panic on session view
2021-11-02 16:40:22 -04:00
8e53e50fd9
Merge pull request #818 from openziti/identity.enrollment.extension
...
adds identity cert extension endpoint to client/man API
2021-11-02 13:24:29 -04:00
62ae85539f
Merge pull request #819 from openziti/gosec.improvements
...
fixes gosec output of a few items
2021-11-02 09:05:22 -04:00
2d4260e76e
Allow using a specific bolt db file for tests
2021-10-26 14:19:24 -04:00
c8de8a8fac
fixes gosec output of a few items
2021-10-21 17:40:52 -04:00
a1f7a48cdc
adds identity cert extension endpoint to client/man API
...
- now supports POST /current-identity/authenticators/{id}/extend for
cert authenticators
- adds test for cert extension endpoint
2021-10-21 15:12:30 -04:00
7d483a822b
Merge pull request #817 from openziti/fix-panic-on-invalid-service
...
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:47:30 -04:00
40389c1f88
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:37:56 -04:00
050d5eb0dc
fix possible formatting error
2021-10-19 11:31:31 -04:00
6612ad9c14
fix startup timing issues
2021-10-19 10:58:59 -04:00
d305026980
exposes controller.Identity() to avoid re-parses
2021-10-19 09:38:14 -04:00
45158ff864
updates to newest foundation/fabric/sdk-golang
2021-10-18 16:07:33 -04:00
90824085a1
fix refactoring of 'config' in strings
2021-10-18 15:39:36 -04:00
c6b54e8606
updates to new foundation version
...
- updated identity module
- centralizes identity references
- removes old parsing logic
2021-10-18 15:25:07 -04:00
49006ab9f6
fixes posture check timeouts that sit at 0 after endpoint states
2021-10-07 10:22:57 -04:00
79fe8c7ddb
Add terminator to service events
2021-10-06 11:25:51 -04:00
6b80d444a0
remove old dgrijalva jwt ref
2021-10-01 11:17:00 -04:00
0c8206b8d4
Don't allow hashtags or at symbols on role attributes. Fixes #786
2021-09-22 10:31:01 -04:00
c9e7d2f4c7
update host configs as well to pickup wildcardDomain addition
2021-09-15 15:57:39 -04:00
83f0d5597d
add wildcard domain to intercept addresses configuration
2021-09-15 15:52:53 -04:00
0b46233a8b
Merge pull request #780 from openziti/add.fully.authed.api.session.store.event
...
adds EventFullyAuthenticated to the API session store
2021-09-14 10:54:10 -04:00
50752b8b7a
check for nill checker
2021-09-14 09:47:41 -04:00
b0f9f18f72
adds EventFullyAuthenticated to the API session store
...
The previous implementation would send API Sessions to Edge Routers
while partially authenticated. Due to state issues addressed separately
in the c-SDK, these partial API Sessions are maintained if a channel
connected to an edge router was established during reconnect. This would
further cause problems with channel connection using the wrong API
session vs what the rest of the SDK was using.
2021-09-13 15:15:34 -04:00
7233d18463
Remove HA terminator strategy since it's an incomplete solution
2021-09-13 09:51:51 -04:00
12117a0ded
Sending service precedences and cost set on identity to ERT
2021-09-10 17:20:46 -04:00
2fd995becb
Fix panic if posture data mfa is nil
2021-09-09 11:18:19 -04:00
e3fe91a528
Remove unused map. Removed code could panic b/c of race condition
2021-09-09 10:28:20 -04:00
5639bd56ef
Merge pull request #769 from openziti/fix-panic
...
Fix panic when service not found
2021-09-09 09:40:33 -04:00
84d36337ad
Fix panic when service not found
2021-09-08 15:59:35 -04:00
c2b83432d1
adds /identity/:id/authenticators Management API endpoint
2021-09-08 14:06:56 -04:00
58e159236d
Use string id instead of identity where we don't need certs
2021-09-03 14:10:28 -04:00
df73dd15b0
Merge pull request #767 from openziti/fix-host-after-session-expiration
...
Allow ERT to gracefully handle api session/session removal. Can happe…
2021-09-03 13:50:54 -04:00
82f4621393
Allow ERT to gracefully handle api session/session removal. Can happen if router is disconnected, but not down for an extended period
2021-09-03 13:28:43 -04:00
17b82de1fd
remove debug output
2021-09-03 09:55:39 -04:00
a7be333879
adds migration to fill identityId for existing sessions
2021-09-03 09:48:21 -04:00
cfebf66ca9
Merge pull request #765 from openziti/rest.session.model.no.err
...
rest api session modeling will no longer kill lists
2021-09-02 13:34:43 -04:00
05fb2e155a
Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
...
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
66a438fb02
rest api session modeling will no longer kill lists
2021-09-02 11:04:28 -04:00
57b6b70945
add unit tests for timeout logic
2021-09-02 11:00:09 -04:00
76e839cfaa
adds constants for posture check types
2021-09-02 10:15:31 -04:00
f095abe8df
fix go test failures
2021-09-02 09:11:14 -04:00
4cac5518e9
ensure that lastAccessedAt is set on create, emit logs if not found
2021-09-02 08:57:14 -04:00
782f43cb26
Fix time check on list tunnel. Add policy enforcer test. Add update session test
2021-09-01 16:20:43 -04:00
cf7c63ffa9
translate valeus less than 0 to -1
2021-08-30 09:12:39 -04:00
Paul Lorenz