fcd14e4e99
Allow wildcard domains in intercept.v1 configurations ( #1518 )
...
validate intercept addresses with idn-hostname format
2023-06-08 13:58:15 -04:00
a980106220
use 'idn-hostname' string format in intercept.v1 and host.vX config types. ( #1500 )
2023-05-23 15:30:12 -04:00
7d6901be3d
Add edge code needed for entity change events. Fixes #629
2023-04-25 22:34:02 -04:00
43fc1e96fe
Get tests running and do some cleanups
2023-04-25 13:26:19 -04:00
63f9dad3df
Updated model for storage api changes
2023-04-25 13:26:02 -04:00
83bca6a0ba
Update for storage and fabric api changes
2023-04-25 13:26:02 -04:00
bd9b6a713b
Pull some tweaks over from denorm branch
2023-04-03 11:34:37 -04:00
ad5dc292bb
Improve list performance by using identity indexes rather than service indexes. Fixes #1388
2023-04-03 09:58:21 -04:00
212e4c2df6
Clear sessions, api-session and api-session certs because of indexing changes
2023-03-28 15:18:30 -04:00
1d0e558f90
Add support disabling routers. Fixes #1373
2023-03-28 13:42:25 -04:00
34cc021b3e
Make session creates idempotent. Fixes #1359
2023-03-23 09:50:05 -04:00
e192f271ba
remove old "sessionCert" (not ApiSessionCert) bit rot
2023-03-20 18:04:21 -04:00
c0c7b1907e
Fix eventual eventer processing on restart. Fixes #1268
2022-12-14 17:20:52 -05:00
2509f9b575
update CODEOWNERS to sig-core and update MM notifications
2022-11-30 14:34:10 -05:00
d73c72679d
for #1213 delete api session on authenticator delete/re-enroll
...
- an authenticator removed or re-enrolled would continue to allow old
API Session to operate
- deleted or re-enrolled authenticators now remove associatd API
Sessions
2022-11-09 11:44:49 -05:00
5dc8a66fe9
addresses #1226 api session certificate issues w/ 3rd party cas
...
- events during a multi-step transaction were immediately emitting events
causing out of order and incomplete events to be received,
specifically API Sessions w/o fingerprints
- API Session Certificates created implicitly during 3rd Party CA auth
did not properly set all properties
- adds tests
2022-11-04 14:40:07 -04:00
63c161224a
Add linter and fix issues found by linter
2022-10-10 16:56:51 -04:00
ad8392cef4
Update deps
2022-10-10 16:56:50 -04:00
b7f81ea7cb
Fix issue where lookup is expected to return err, but returns nil, causing nil reference and panic. Fixes #1186
2022-09-27 09:52:53 -04:00
3a265ca32f
Fix patching tags on services and transit routers. Fixes #1174
2022-09-15 09:40:12 -04:00
ece5eae675
Allow searching by configs. Fixes #1154
2022-09-14 23:36:14 -04:00
0b8a65207a
Change bootstrap check. Add hooks for isRaftEnabled
2022-08-22 12:14:40 -04:00
0d1dfb9779
Fixes for raft command encoding and decoding
2022-08-18 12:22:30 -04:00
2e578ab784
Update identities to use raft commands. Fixes #1131
2022-08-09 14:58:23 -04:00
9e6cfaa47d
fixes #1103 allow multiple advertise hostnames for listeners
2022-07-26 16:06:47 -04:00
1fb3339bb1
Update for changes to fabric events model
2022-07-19 11:18:08 -04:00
bae7e40b61
Update for foundation changes
2022-07-01 15:55:30 -04:00
12df770d04
Update copyright
2022-06-30 17:45:08 -04:00
b53fa0cd98
Remove event log and georegions
2022-06-30 10:35:19 -04:00
9ae2eb825c
adds jwks support
...
- ext-jwt-signers now support jwks endpoints in addition to static
certificates
- ext-jwt-signers now require either kid+cert or jkwsEndpoint
- ext-jwt-signers now requires issuer and audience fields
- jwksEndpoints are initially cached and will be revalidated on invalid
auth once every 5s at most
- adds more external id tests
2022-06-07 09:57:22 -04:00
7cf9dc135d
Initial support for raft and command style architecture
2022-06-01 23:52:07 -04:00
7381423974
use cmap generics, update fabric
2022-05-27 11:02:51 -04:00
601f73e7fb
fixes post/update ripple breakage
2022-05-26 17:16:02 -04:00
6fcde2ee3c
fix scenarios where nil or non map is provided in data causes a panic
...
- fixes edge #1020
- adds higher level error
- adds store level error
2022-05-26 17:03:43 -04:00
c5f156dd9e
adds x509 claims support for external ids to CAs
...
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
8423ac5cfa
Make host.v2 stricter. Fixes #991
2022-05-02 17:19:48 -04:00
c32fa95ca8
Merge pull request #961 from openziti/add.ext.jwt.aud.iss.checks
...
adds optional issuer and audience properties to ext jwt signers
2022-04-12 08:54:53 -04:00
59af07dcd0
fixes is admin not set on updates (put/patch)
2022-04-08 11:20:15 -04:00
ec51635f26
adds optional issuer and audience properties to ext jwt signers
2022-04-06 15:48:17 -04:00
5f62d05a9a
Merge pull request #952 from openziti/update-deps
...
Update to transport and storage libs. Update workflows
2022-03-31 11:14:29 -04:00
213f03bd89
fix migration version check
2022-03-31 10:52:50 -04:00
b5605f0738
updates db version
2022-03-31 10:48:31 -04:00
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
ba84d2fae9
adds settable kid to ext jwt signers, fixes default auth policy
2022-03-30 13:51:23 -04:00
708dcfe0c9
adds auth policy / disabled identity auth logic
2022-03-29 14:26:04 -04:00
a34ae130b8
adds externalId, plumbs auth url, use external id
...
- adding tests and boundaries to values
- updating foundation
- squash, rebase
2022-03-28 10:54:27 -04:00
99e3b283b6
adds auth policy CRUD, does not affect authentication
2022-03-25 14:40:07 -04:00
1459cd3b7b
Merge pull request #918 from openziti/add.ext.jwt.authenticator
...
adds ext-jwt authenticator
2022-03-21 15:56:04 -04:00
76e207fe28
Add cost/precedence back to host configs. Fixes #931
2022-03-16 12:04:17 -04:00
7526b0db38
Move integrity checker to fabric
2022-03-10 11:08:20 -05:00
Shawn Carey