Commit Graph

664 Commits

Author SHA1 Message Date
Shawn Carey fcd14e4e99 Allow wildcard domains in intercept.v1 configurations (#1518)
validate intercept addresses with idn-hostname format
2023-06-08 13:58:15 -04:00
Paul Lorenz f31f849344 Fix panic removing terminator with invalid session. Fixes #1512 2023-06-02 10:52:41 -04:00
Shawn Carey a980106220 use 'idn-hostname' string format in intercept.v1 and host.vX config types. (#1500) 2023-05-23 15:30:12 -04:00
Andrew Martinez d3a2009582 fix lint issues 2023-05-12 15:44:10 -04:00
Andrew Martinez bf2684ac4e fixes edge#1225 broken CA de-dupe logic, adds tests 2023-05-12 15:32:16 -04:00
Andrew Martinez 3116412857 adds missing error message for unmatched iss field 2023-05-10 10:36:33 -04:00
Paul Lorenz 97daffe69d Merge pull request #1449 from openziti/annotate-circuit-events
annotate circuit events
2023-05-04 11:03:04 -04:00
Andrew Martinez 661be7876d fixes openziti/ziti#1093
- heart beat system was never being configured with a control channel
2023-05-01 10:02:48 -04:00
Paul Lorenz f28722cfa6 Handle nil terminator when getting circuit tags 2023-04-27 12:16:09 -04:00
Andrew Martinez 95ae025ce9 updates golang sdk to v0.20.0 2023-04-26 13:55:51 -04:00
Paul Lorenz 7d6901be3d Add edge code needed for entity change events. Fixes #629 2023-04-25 22:34:02 -04:00
Paul Lorenz 82cbbefceb Fix event type 2023-04-25 14:04:14 -04:00
Paul Lorenz 70008bfc8f Update for fabric api changes. Fixes #1295 2023-04-25 13:26:25 -04:00
Paul Lorenz 43fc1e96fe Get tests running and do some cleanups 2023-04-25 13:26:19 -04:00
Paul Lorenz bd1b25f60c Update presentation layer for api changes 2023-04-25 13:26:03 -04:00
Paul Lorenz 63f9dad3df Updated model for storage api changes 2023-04-25 13:26:02 -04:00
Paul Lorenz 83bca6a0ba Update for storage and fabric api changes 2023-04-25 13:26:02 -04:00
Paul Lorenz 3c9e9ccbde Info -> Debug on xgress_edge_tunnel dial result 2023-04-17 12:02:54 -04:00
Paul Lorenz d8e50ba43e Make session edge-router check more efficient. Fixes #1418 2023-04-12 15:54:17 -04:00
Andrew Martinez 0f08bfa7d0 fixes #1391 adding auth policy ref to identity, updates edge-api dep 2023-04-05 15:00:52 -04:00
Paul Lorenz bd9b6a713b Pull some tweaks over from denorm branch 2023-04-03 11:34:37 -04:00
Paul Lorenz ad5dc292bb Improve list performance by using identity indexes rather than service indexes. Fixes #1388 2023-04-03 09:58:21 -04:00
Andrew Martinez ffcfb619e4 fixes #1386 by safely dereferencing auth policy ids on PUT 2023-03-30 09:42:16 -04:00
Paul Lorenz 212e4c2df6 Clear sessions, api-session and api-session certs because of indexing changes 2023-03-28 15:18:30 -04:00
Paul Lorenz 1d0e558f90 Add support disabling routers. Fixes #1373 2023-03-28 13:42:25 -04:00
Andrew b7cd692102 Merge pull request #1377 from openziti/fix.1376.mfa.create.race.condition
merge check and create tx for MFA enrollment
2023-03-27 16:42:25 -04:00
Andrew 6b8aa137e2 Merge pull request #1375 from openziti/fix.1374.mfa.admin.reset
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 16:26:05 -04:00
Andrew Martinez f274fb30f8 merge check and create tx for MFA enrollment 2023-03-27 16:13:57 -04:00
Andrew Martinez 2a290612b0 fixes #1374 admins cannot delete multiple MFA enrollments 2023-03-27 15:31:49 -04:00
Paul Lorenz 0a6043bb42 Fix missing entity type id on transit router. Fixes #1369 2023-03-23 23:47:54 -04:00
Paul Lorenz 4057d55989 Merge pull request #1367 from openziti/fix-error-type
Fix error, should be invalid session, not invalid api session. Fixes #1366
2023-03-23 13:35:04 -04:00
Paul Lorenz fd8d41204a Fix error, should be invalid session, not invalid api session. Fixes #1366 2023-03-23 10:43:52 -04:00
Paul Lorenz d76b9bc272 Cache api sessions for router/tunneler. Fixes #1364 2023-03-23 10:22:46 -04:00
Paul Lorenz 2d55b5cc28 Don't delete sessions on failed terminator create 2023-03-23 09:51:14 -04:00
Paul Lorenz 34cc021b3e Make session creates idempotent. Fixes #1359 2023-03-23 09:50:05 -04:00
Paul Lorenz 431df859b2 Handle duplicate tunnel terminator creation gracefully. Fixes #1355 2023-03-21 23:05:07 -04:00
Andrew Martinez e192f271ba remove old "sessionCert" (not ApiSessionCert) bit rot 2023-03-20 18:04:21 -04:00
Andrew Martinez 2f51b4acd7 reworks broker/sync connect/disconnect logic
- defensive checks for closed control channels
- defensive checks for duplicate/mismatch control channels
2023-03-20 15:28:09 -04:00
Paul Lorenz 64d34d78dd Merge pull request #1343 from openziti/update-fabric-dep
Update edge test for fabric api update
2023-03-20 09:50:54 -04:00
Paul Lorenz b09af68d09 Update edge test for fabric api update. Remove unneeded cgo import. 2023-03-17 11:55:38 -04:00
Andrew Martinez 6f7945a9bf fix test build error 2023-03-17 10:51:43 -04:00
Andrew Martinez fed450d75f update jwks processing 2023-03-13 13:29:41 -04:00
Andrew Martinez 52ed07405c fix lint errors 2023-02-22 19:43:45 -05:00
Andrew Martinez a4caf933f6 fixes #1310 optional KID causes controller crash 2023-02-22 15:12:07 -05:00
Paul Lorenz e5f8d5ab60 Move heartbeat status map update outside bolt tx. Fixed #1303 2023-02-07 13:24:30 -05:00
Paul Lorenz 5c35faafa3 Fix heartbeat deadlock. Fixes #1303
bbolt batch was trying to finish commit, needed all txes to finish
heartbeat update in read tx was waiting for concurrent status map so it could update
heartbeat status map was locked iterating waiting to submit to batch
(now we're back at the beginning)
Was also a view tx within a view tx, which can be problematic
2023-02-06 11:53:15 -05:00
Andrew Martinez a46a10d9eb use new github.com/openziti/edge-api repository
- fixes import statements
2023-01-24 16:03:20 -05:00
Andrew Martinez 69c31fcf3e uses github.com/openziti/edge-api
- removes old api specific scripts, generated files, etc
2023-01-24 14:45:24 -05:00
Paul Lorenz 6b6eed6041 Improve some tunneler log messages 2023-01-06 13:54:49 -05:00
Paul Lorenz 7152476ced Require config types to have a root type of object. Fixes #1279 2022-12-29 11:39:56 -05:00