Andrew Martinez
3116412857
adds missing error message for unmatched iss field
2023-05-10 10:36:33 -04:00
Andrew Martinez
661be7876d
fixes openziti/ziti#1093
...
- heart beat system was never being configured with a control channel
2023-05-01 10:02:48 -04:00
Andrew Martinez
95ae025ce9
updates golang sdk to v0.20.0
2023-04-26 13:55:51 -04:00
Paul Lorenz
7d6901be3d
Add edge code needed for entity change events. Fixes #629
2023-04-25 22:34:02 -04:00
Paul Lorenz
70008bfc8f
Update for fabric api changes. Fixes #1295
2023-04-25 13:26:25 -04:00
Paul Lorenz
43fc1e96fe
Get tests running and do some cleanups
2023-04-25 13:26:19 -04:00
Paul Lorenz
bd1b25f60c
Update presentation layer for api changes
2023-04-25 13:26:03 -04:00
Paul Lorenz
63f9dad3df
Updated model for storage api changes
2023-04-25 13:26:02 -04:00
Paul Lorenz
83bca6a0ba
Update for storage and fabric api changes
2023-04-25 13:26:02 -04:00
Paul Lorenz
3c9e9ccbde
Info -> Debug on xgress_edge_tunnel dial result
2023-04-17 12:02:54 -04:00
Paul Lorenz
d8e50ba43e
Make session edge-router check more efficient. Fixes #1418
2023-04-12 15:54:17 -04:00
Paul Lorenz
ad5dc292bb
Improve list performance by using identity indexes rather than service indexes. Fixes #1388
2023-04-03 09:58:21 -04:00
Paul Lorenz
1d0e558f90
Add support disabling routers. Fixes #1373
2023-03-28 13:42:25 -04:00
Andrew
b7cd692102
Merge pull request #1377 from openziti/fix.1376.mfa.create.race.condition
...
merge check and create tx for MFA enrollment
2023-03-27 16:42:25 -04:00
Andrew
6b8aa137e2
Merge pull request #1375 from openziti/fix.1374.mfa.admin.reset
...
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 16:26:05 -04:00
Andrew Martinez
f274fb30f8
merge check and create tx for MFA enrollment
2023-03-27 16:13:57 -04:00
Andrew Martinez
2a290612b0
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 15:31:49 -04:00
Paul Lorenz
0a6043bb42
Fix missing entity type id on transit router. Fixes #1369
2023-03-23 23:47:54 -04:00
Paul Lorenz
d76b9bc272
Cache api sessions for router/tunneler. Fixes #1364
2023-03-23 10:22:46 -04:00
Paul Lorenz
34cc021b3e
Make session creates idempotent. Fixes #1359
2023-03-23 09:50:05 -04:00
Andrew Martinez
e192f271ba
remove old "sessionCert" (not ApiSessionCert) bit rot
2023-03-20 18:04:21 -04:00
Andrew Martinez
6f7945a9bf
fix test build error
2023-03-17 10:51:43 -04:00
Andrew Martinez
fed450d75f
update jwks processing
2023-03-13 13:29:41 -04:00
Andrew Martinez
52ed07405c
fix lint errors
2023-02-22 19:43:45 -05:00
Andrew Martinez
a4caf933f6
fixes #1310 optional KID causes controller crash
2023-02-22 15:12:07 -05:00
Paul Lorenz
e5f8d5ab60
Move heartbeat status map update outside bolt tx. Fixed #1303
2023-02-07 13:24:30 -05:00
Paul Lorenz
5c35faafa3
Fix heartbeat deadlock. Fixes #1303
...
bbolt batch was trying to finish commit, needed all txes to finish
heartbeat update in read tx was waiting for concurrent status map so it could update
heartbeat status map was locked iterating waiting to submit to batch
(now we're back at the beginning)
Was also a view tx within a view tx, which can be problematic
2023-02-06 11:53:15 -05:00
Andrew Martinez
a46a10d9eb
use new github.com/openziti/edge-api repository
...
- fixes import statements
2023-01-24 16:03:20 -05:00
Andrew Martinez
69c31fcf3e
uses github.com/openziti/edge-api
...
- removes old api specific scripts, generated files, etc
2023-01-24 14:45:24 -05:00
Paul Lorenz
7152476ced
Require config types to have a root type of object. Fixes #1279
2022-12-29 11:39:56 -05:00
Paul Lorenz
2509f9b575
update CODEOWNERS to sig-core and update MM notifications
2022-11-30 14:34:10 -05:00
Paul Lorenz
d022405ea8
Merge pull request #1235 from openziti/fill-in-client-cert-chains
...
Fill in client cert chains when enrolling
2022-11-11 16:09:18 -05:00
Paul Lorenz
90e7b0f0a6
Fill in client cert chains when enrolling
2022-11-11 14:30:55 -05:00
Andrew Martinez
d73c72679d
for #1213 delete api session on authenticator delete/re-enroll
...
- an authenticator removed or re-enrolled would continue to allow old
API Session to operate
- deleted or re-enrolled authenticators now remove associatd API
Sessions
2022-11-09 11:44:49 -05:00
Andrew Martinez
3e4f26ee78
updates edge service manager to not allow encryptionRequired to be
...
altered
2022-11-07 11:42:01 -05:00
Andrew Martinez
5dc8a66fe9
addresses #1226 api session certificate issues w/ 3rd party cas
...
- events during a multi-step transaction were immediately emitting events
causing out of order and incomplete events to be received,
specifically API Sessions w/o fingerprints
- API Session Certificates created implicitly during 3rd Party CA auth
did not properly set all properties
- adds tests
2022-11-04 14:40:07 -04:00
Paul Lorenz
63c161224a
Add linter and fix issues found by linter
2022-10-10 16:56:51 -04:00
Paul Lorenz
ad8392cef4
Update deps
2022-10-10 16:56:50 -04:00
Andrew Martinez
f802603d9f
fixes openziti/ziti#853
...
- fix nil 0 index x509 definition created
- updates x509-claims to v1.0.3 to fix x509 claim panics
2022-09-29 10:20:46 -04:00
Andrew Martinez
291eb6b509
fixes nil deref on partial jwks info
2022-09-22 09:36:46 -04:00
Andrew Martinez
60fc51253d
fixes #1176 patching externalIdClaim on CA
2022-09-15 11:18:41 -04:00
Paul Lorenz
e4d2a30399
Fix service policy patch when type isn't provided. Fixes #1169
2022-09-06 23:21:40 -04:00
Paul Lorenz
0b8a65207a
Change bootstrap check. Add hooks for isRaftEnabled
2022-08-22 12:14:40 -04:00
Paul Lorenz
0d1dfb9779
Fixes for raft command encoding and decoding
2022-08-18 12:22:30 -04:00
Paul Lorenz
a3b31eb5ed
Convert posture checks to use raft commands. Fixes #1125
2022-08-09 21:54:53 -04:00
Paul Lorenz
2e578ab784
Update identities to use raft commands. Fixes #1131
2022-08-09 14:58:23 -04:00
Paul Lorenz
4ce51b271c
Convert transit routers to use raft commands. Fixes #1132
2022-08-09 09:38:07 -04:00
Paul Lorenz
d3a4c7d0ac
Update edge routers to use raft commands. Fixes #1107
2022-08-04 10:43:21 -04:00
Paul Lorenz
5c27d8308c
Update enrollments to use raft commands. Fixes #1130
2022-08-04 10:14:39 -04:00
Paul Lorenz
fe1b0463d7
Update authenticators to use raft commands. Fixes #1099
2022-08-04 10:14:21 -04:00