fdb2fb35ad
rename routerTx to routerSender
2021-02-15 13:22:07 -05:00
a8f1b8b79a
moves sync strat/state to headers
2021-02-15 13:22:07 -05:00
d07618c9d5
modular edge router sync
...
- edge router sync is now modular and can have different strategies
- plans to make this configurabe in the future with multiple strat
- legacy strategy is called "instant" and is the only option
- instant strat now supports control signaling and resync requests
- edge routers now do not remove connections till after a full sync
- added the ability for the controller to report the er sync status
- added er syn status to GET /edge-routers list and detail
- improved log output in sync logic
2021-02-15 13:22:07 -05:00
ecc404ab8a
Merge pull request #494 from openziti/remove.posture.timer
...
moves posture data to not time out
2021-02-11 14:12:12 -05:00
6a2c82deca
add timeout posture query property, -1 == no timeout
...
Provides a location for future configurable timeouts and allows
SDKs to detect whether no timeout/timeouts are supported.
2021-02-10 17:13:23 -05:00
2360d44b05
moves posture data to not time out
2021-02-10 16:51:40 -05:00
2c1a9dd82b
ignores dupe router startup
...
A second edge router starting up could offline the original according to
the edge. This would cause issues w/ API Session and Session
distribution.
2021-02-10 10:58:50 -05:00
5b5fe97961
fix ptr to string in error message
2021-02-09 14:01:20 -05:00
9fab8e6ed0
fix formatting message
...
Some deps altered after a go test ./... and go mod tidy
2021-02-09 13:57:49 -05:00
35fa25d5af
use ast.BoolNodeTrue
2021-02-09 13:55:03 -05:00
46166db9cc
fixes orphaned ottca enrollments
...
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
c23bf9dbcf
fixes os PATCH for posture checks
...
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
18513f7ee4
Merge pull request #504 from openziti/api.session.performance
...
moves hasApiSession lookup to api model and limit 1
2021-02-04 09:32:01 -05:00
5b1101bb24
Merge pull request #505 from openziti/fix.484.edge.router.list
...
fixes #484 adds current identity edge router lookup
2021-02-04 09:28:10 -05:00
65832b8da5
fix missing formatted log call, spelling
2021-02-04 09:24:00 -05:00
2c6814aaa4
edge router enhancements for browZer support ( #499 )
2021-02-04 06:09:46 -05:00
e34d25b0dd
fixes #484 adds current identity edge router lookup
2021-02-03 15:37:15 -05:00
5c47c31016
moves hasApiSession lookup to api model and limit 1
...
This move isolates the cost of hasApiSession to the identity endpoint
lookups in the REST API. Being in the model caused this cost to be
shared on all identity lookups for internal logic.
Limit 1 is an attempt to reduce the cost of searching over a large set.
API Sessions do not have an index on identity id so there is still some
cost.
2021-02-03 14:01:53 -05:00
5de4d629f3
Merge pull request #498 from openziti/add.server.header
...
fixes #497 send session header
2021-02-01 15:07:24 -05:00
df1f2a1a75
fixes #497 send session header
...
- add server headers during HTTP handler delegation rather than at HTTP
response time
- remove all old header setting locations
- remove unused status writer and other response code
- add manual set on authentication for session headers
2021-02-01 14:28:29 -05:00
cab720ed47
limit public query options to 500 whe "none" is specified
2021-02-01 09:27:55 -05:00
f485d4e8c3
Update service poller to use service update callback
2021-01-29 15:32:51 -05:00
252e105f3c
add typeId to authQuery
2021-01-26 15:12:22 -05:00
ab9e19f485
fix unit tests
2021-01-26 14:33:34 -05:00
a4a872c377
remove test sleeps, use const for window size
2021-01-26 14:08:16 -05:00
4051c47dd5
Merge branch 'main' into mfa
2021-01-26 13:52:59 -05:00
5e5aa87c39
Merge pull request #485 from openziti/bulk.posture.response
...
bulk posture response endpoint
2021-01-26 09:11:27 -05:00
f2431ab9b3
bulk posture response
2021-01-25 13:55:41 -05:00
e1e31c2ecb
Fix edge-router association lists
2021-01-23 14:54:03 -05:00
d6a5f329c5
fixes #477 add configurable http timeouts
2021-01-21 14:09:42 -05:00
8d4397c0d9
Merge pull request #474 from openziti/fix.misspelled.builddate
...
fixes buildDate spelling (missing d)
2021-01-20 10:44:57 -05:00
f5dc8e5799
Fix return status
2021-01-20 10:12:39 -05:00
4882da1970
Add service list timer. Fix tunneler leak
2021-01-20 09:29:33 -05:00
744fa99b8a
Add check integrity guardrails so we can only run a single operation at a time
2021-01-19 16:18:10 -05:00
891d8eb5ce
Add service events when configs are updated/deleted. Add service events test
2021-01-19 14:30:34 -05:00
4fbacdcdc8
fixes buildDate spelling (missing d)
2021-01-19 14:00:50 -05:00
5207dbb931
use UTC time
2021-01-19 08:53:21 -05:00
2d61799c24
add posture check MFA tests
2021-01-19 08:37:29 -05:00
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
49804bd30b
Merge pull request #470 from openziti/add.appid.appversion
...
Add appId and appVersion to sdkInfo
2021-01-18 15:03:29 -05:00
c5d3a4b69b
Improve posture check perf using indexes
2021-01-18 14:15:30 -05:00
65be49c609
Add appId and appVersion to sdkInfo
2021-01-18 10:38:43 -05:00
c370dff45c
Notify clients to refresh after restart
2021-01-15 16:20:13 -05:00
803eb5d5d6
Move service policy enforcer to use service events
2021-01-15 15:28:59 -05:00
2194d8a2e2
Implement service change notifications
2021-01-15 15:28:59 -05:00
807a061a93
adds expiration-seconds and expires-at headers
...
- also adds expiresSeconds to current api session and login
2021-01-14 11:30:44 -05:00
cf66c361f9
adds service updates endpoint stub
2021-01-13 13:49:06 -05:00
014b0f3876
fixes REST API enrollment details
2021-01-12 17:35:45 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
Andrew Martinez