6f5c6f2397
Merge branch 'main' into transwarp_2
2021-01-26 10:52:01 -05:00
5e5aa87c39
Merge pull request #485 from openziti/bulk.posture.response
...
bulk posture response endpoint
2021-01-26 09:11:27 -05:00
f2431ab9b3
bulk posture response
2021-01-25 13:55:41 -05:00
e1e31c2ecb
Fix edge-router association lists
2021-01-23 14:54:03 -05:00
bab832f5a1
Merge pull request openziti/fabric#157 from openziti/xgress-fixes
...
Xgress fixes
2021-01-21 15:14:00 -05:00
d6a5f329c5
fixes #477 add configurable http timeouts
2021-01-21 14:09:42 -05:00
f1dee6213c
Display configured timeout. ( #151 )
2021-01-21 13:40:09 -05:00
0e739a2183
drop some logging to trace
2021-01-21 13:37:54 -05:00
aceb021a77
Add options for 'termination timeout' and 'route timeout' to 'network' section of controller configuration. Implement. ( #151 )
2021-01-21 13:20:08 -05:00
8d4397c0d9
Merge pull request #474 from openziti/fix.misspelled.builddate
...
fixes buildDate spelling (missing d)
2021-01-20 10:44:57 -05:00
f5dc8e5799
Fix return status
2021-01-20 10:12:39 -05:00
4882da1970
Add service list timer. Fix tunneler leak
2021-01-20 09:29:33 -05:00
744fa99b8a
Add check integrity guardrails so we can only run a single operation at a time
2021-01-19 16:18:10 -05:00
891d8eb5ce
Add service events when configs are updated/deleted. Add service events test
2021-01-19 14:30:34 -05:00
4fbacdcdc8
fixes buildDate spelling (missing d)
2021-01-19 14:00:50 -05:00
5207dbb931
use UTC time
2021-01-19 08:53:21 -05:00
2d61799c24
add posture check MFA tests
2021-01-19 08:37:29 -05:00
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
49804bd30b
Merge pull request #470 from openziti/add.appid.appversion
...
Add appId and appVersion to sdkInfo
2021-01-18 15:03:29 -05:00
c5d3a4b69b
Improve posture check perf using indexes
2021-01-18 14:15:30 -05:00
65be49c609
Add appId and appVersion to sdkInfo
2021-01-18 10:38:43 -05:00
7466d413e2
Merge branch 'master' into transwarp_2
2021-01-15 17:08:32 -05:00
c370dff45c
Notify clients to refresh after restart
2021-01-15 16:20:13 -05:00
803eb5d5d6
Move service policy enforcer to use service events
2021-01-15 15:28:59 -05:00
2194d8a2e2
Implement service change notifications
2021-01-15 15:28:59 -05:00
fdd93d8d62
Default cycle time to 120 seconds (from 15). ( #152 )
2021-01-15 12:46:04 -05:00
807a061a93
adds expiration-seconds and expires-at headers
...
- also adds expiresSeconds to current api session and login
2021-01-14 11:30:44 -05:00
cf66c361f9
adds service updates endpoint stub
2021-01-13 13:49:06 -05:00
014b0f3876
fixes REST API enrollment details
2021-01-12 17:35:45 -05:00
60f7439a33
Implement terminator events so external tools can better monitor service health ( #148 )
2021-01-12 11:39:03 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
4498318767
Make query parse errors into ApiErrors so they're not 500 errors ( #443 )
2020-12-16 11:30:51 -05:00
7329106691
Use manual start for tunnel hosting
2020-12-16 11:08:06 -05:00
ea6909717a
Move log level from info to debug ( #145 )
...
* Move log level from info to debug
* Info -> Debug on reroute message
2020-12-11 16:29:38 -05:00
fb1d2ab7e9
Tidy up other strategies
2020-12-09 16:41:38 -05:00
92733a6148
Tidy
2020-12-09 14:07:37 -05:00
ef0f270bd3
switch self references to pointers so that fail count updates work
2020-12-08 17:11:40 -05:00
95b081e066
Address review comments
2020-12-04 17:11:35 -05:00
5e33aa22fa
Make buffer naming more consistent
2020-12-01 13:33:00 -05:00
b2c0b92693
Allow dropping payloads
2020-12-01 13:32:44 -05:00
5c70087d98
adds GET /protocols to the Edge Rest API
2020-11-20 17:52:05 -05:00
f5e0e1f25e
fixes #424 allow non-admins to list service terminators
2020-11-20 09:46:44 -05:00
5ba7af91eb
add lower normalization that was removed back
2020-11-11 21:34:44 -05:00
6ad6b3264c
fixes #403
...
Process posture responses now allow an array of digital signer
fingerprints to be submitted and checked.
2020-11-11 21:31:17 -05:00
108b657044
fix missing dangling period in os posture test
2020-11-11 20:51:54 -05:00
48a3f5dc0b
remove unused function
2020-11-11 20:39:35 -05:00
4631fe1452
fixes #401
...
Valid x.y.z versions of OS posture checks can now be specified by
posture check ranges.
2020-11-11 20:32:48 -05:00
a80b27afe6
fix test based on pr
2020-11-11 19:11:05 -05:00
e0cf6a7ea5
fixes #397 and fixes #398
...
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
Michael Quigley