Commit Graph

293 Commits

Author SHA1 Message Date
Andrew Martinez 3116412857 adds missing error message for unmatched iss field 2023-05-10 10:36:33 -04:00
Andrew Martinez 661be7876d fixes openziti/ziti#1093
- heart beat system was never being configured with a control channel
2023-05-01 10:02:48 -04:00
Andrew Martinez 95ae025ce9 updates golang sdk to v0.20.0 2023-04-26 13:55:51 -04:00
Paul Lorenz 7d6901be3d Add edge code needed for entity change events. Fixes #629 2023-04-25 22:34:02 -04:00
Paul Lorenz 70008bfc8f Update for fabric api changes. Fixes #1295 2023-04-25 13:26:25 -04:00
Paul Lorenz 43fc1e96fe Get tests running and do some cleanups 2023-04-25 13:26:19 -04:00
Paul Lorenz bd1b25f60c Update presentation layer for api changes 2023-04-25 13:26:03 -04:00
Paul Lorenz 63f9dad3df Updated model for storage api changes 2023-04-25 13:26:02 -04:00
Paul Lorenz 83bca6a0ba Update for storage and fabric api changes 2023-04-25 13:26:02 -04:00
Paul Lorenz 3c9e9ccbde Info -> Debug on xgress_edge_tunnel dial result 2023-04-17 12:02:54 -04:00
Paul Lorenz d8e50ba43e Make session edge-router check more efficient. Fixes #1418 2023-04-12 15:54:17 -04:00
Paul Lorenz ad5dc292bb Improve list performance by using identity indexes rather than service indexes. Fixes #1388 2023-04-03 09:58:21 -04:00
Paul Lorenz 1d0e558f90 Add support disabling routers. Fixes #1373 2023-03-28 13:42:25 -04:00
Andrew b7cd692102 Merge pull request #1377 from openziti/fix.1376.mfa.create.race.condition
merge check and create tx for MFA enrollment
2023-03-27 16:42:25 -04:00
Andrew 6b8aa137e2 Merge pull request #1375 from openziti/fix.1374.mfa.admin.reset
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 16:26:05 -04:00
Andrew Martinez f274fb30f8 merge check and create tx for MFA enrollment 2023-03-27 16:13:57 -04:00
Andrew Martinez 2a290612b0 fixes #1374 admins cannot delete multiple MFA enrollments 2023-03-27 15:31:49 -04:00
Paul Lorenz 0a6043bb42 Fix missing entity type id on transit router. Fixes #1369 2023-03-23 23:47:54 -04:00
Paul Lorenz d76b9bc272 Cache api sessions for router/tunneler. Fixes #1364 2023-03-23 10:22:46 -04:00
Paul Lorenz 34cc021b3e Make session creates idempotent. Fixes #1359 2023-03-23 09:50:05 -04:00
Andrew Martinez e192f271ba remove old "sessionCert" (not ApiSessionCert) bit rot 2023-03-20 18:04:21 -04:00
Andrew Martinez 6f7945a9bf fix test build error 2023-03-17 10:51:43 -04:00
Andrew Martinez fed450d75f update jwks processing 2023-03-13 13:29:41 -04:00
Andrew Martinez 52ed07405c fix lint errors 2023-02-22 19:43:45 -05:00
Andrew Martinez a4caf933f6 fixes #1310 optional KID causes controller crash 2023-02-22 15:12:07 -05:00
Paul Lorenz e5f8d5ab60 Move heartbeat status map update outside bolt tx. Fixed #1303 2023-02-07 13:24:30 -05:00
Paul Lorenz 5c35faafa3 Fix heartbeat deadlock. Fixes #1303
bbolt batch was trying to finish commit, needed all txes to finish
heartbeat update in read tx was waiting for concurrent status map so it could update
heartbeat status map was locked iterating waiting to submit to batch
(now we're back at the beginning)
Was also a view tx within a view tx, which can be problematic
2023-02-06 11:53:15 -05:00
Andrew Martinez a46a10d9eb use new github.com/openziti/edge-api repository
- fixes import statements
2023-01-24 16:03:20 -05:00
Andrew Martinez 69c31fcf3e uses github.com/openziti/edge-api
- removes old api specific scripts, generated files, etc
2023-01-24 14:45:24 -05:00
Paul Lorenz 7152476ced Require config types to have a root type of object. Fixes #1279 2022-12-29 11:39:56 -05:00
Paul Lorenz 2509f9b575 update CODEOWNERS to sig-core and update MM notifications 2022-11-30 14:34:10 -05:00
Paul Lorenz d022405ea8 Merge pull request #1235 from openziti/fill-in-client-cert-chains
Fill in client cert chains when enrolling
2022-11-11 16:09:18 -05:00
Paul Lorenz 90e7b0f0a6 Fill in client cert chains when enrolling 2022-11-11 14:30:55 -05:00
Andrew Martinez d73c72679d for #1213 delete api session on authenticator delete/re-enroll
- an authenticator removed or re-enrolled would continue to allow old
  API Session to operate
- deleted or re-enrolled authenticators now remove associatd API
  Sessions
2022-11-09 11:44:49 -05:00
Andrew Martinez 3e4f26ee78 updates edge service manager to not allow encryptionRequired to be
altered
2022-11-07 11:42:01 -05:00
Andrew Martinez 5dc8a66fe9 addresses #1226 api session certificate issues w/ 3rd party cas
- events during a multi-step transaction were immediately emitting events
  causing out of order and incomplete events to be received,
  specifically API Sessions w/o fingerprints
- API Session Certificates created implicitly during 3rd Party CA auth
  did not properly set all properties
- adds tests
2022-11-04 14:40:07 -04:00
Paul Lorenz 63c161224a Add linter and fix issues found by linter 2022-10-10 16:56:51 -04:00
Paul Lorenz ad8392cef4 Update deps 2022-10-10 16:56:50 -04:00
Andrew Martinez f802603d9f fixes openziti/ziti#853
- fix nil 0 index x509 definition created
- updates x509-claims to v1.0.3 to fix x509 claim panics
2022-09-29 10:20:46 -04:00
Andrew Martinez 291eb6b509 fixes nil deref on partial jwks info 2022-09-22 09:36:46 -04:00
Andrew Martinez 60fc51253d fixes #1176 patching externalIdClaim on CA 2022-09-15 11:18:41 -04:00
Paul Lorenz e4d2a30399 Fix service policy patch when type isn't provided. Fixes #1169 2022-09-06 23:21:40 -04:00
Paul Lorenz 0b8a65207a Change bootstrap check. Add hooks for isRaftEnabled 2022-08-22 12:14:40 -04:00
Paul Lorenz 0d1dfb9779 Fixes for raft command encoding and decoding 2022-08-18 12:22:30 -04:00
Paul Lorenz a3b31eb5ed Convert posture checks to use raft commands. Fixes #1125 2022-08-09 21:54:53 -04:00
Paul Lorenz 2e578ab784 Update identities to use raft commands. Fixes #1131 2022-08-09 14:58:23 -04:00
Paul Lorenz 4ce51b271c Convert transit routers to use raft commands. Fixes #1132 2022-08-09 09:38:07 -04:00
Paul Lorenz d3a4c7d0ac Update edge routers to use raft commands. Fixes #1107 2022-08-04 10:43:21 -04:00
Paul Lorenz 5c27d8308c Update enrollments to use raft commands. Fixes #1130 2022-08-04 10:14:39 -04:00
Paul Lorenz fe1b0463d7 Update authenticators to use raft commands. Fixes #1099 2022-08-04 10:14:21 -04:00