Paul Lorenz bd1f486958 Skip wildcard DNS SANs when building OIDC issuers. Fixes #3696 ...

- skips certificate DNS names starting with "*." in getPossibleIssuers,
  since they produce unusable OIDC URLs (e.g. https://*.example.com/oidc/authorize)
- updates test to verify wildcard DNS SANs are excluded while IP SANs
  from the same cert remain valid issuers

2026-03-23 11:02:10 -04:00

..

api

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

apierror

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

change

Support multi-underlay control channels. Fixes #3550

2026-02-11 14:20:29 -05:00

command

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

config

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

db

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

entities

Update copyright

2022-06-30 17:45:08 -04:00

env

fixes openziti/ziti#3673 purge expired revocations, fix revocation bugs (#3679)

2026-03-11 20:33:38 -04:00

event

Add preferredLeader flag to raft configuration. Fixes #3600

2026-03-05 17:24:43 -05:00

events

Support multi-underlay control channels. Fixes #3550

2026-02-11 14:20:29 -05:00

fields

Fix PATCH of tags with empty map. Fixes #3348

2025-12-15 21:06:03 -05:00

handler_ctrl

Fixes for SDK terminator management. Add support for ziti sdk inspection. Fixes #3609

2026-03-11 13:10:28 -04:00

handler_edge_ctrl

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

handler_mgmt

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

handler_peer_ctrl

Optimize imports

2026-01-28 15:01:35 -05:00

idgen

Optimize imports

2026-01-28 15:01:35 -05:00

internal

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

ioc

Refactor xgress_edge_tunnel_v2 to make it more pluggable

2025-09-03 16:03:15 -04:00

jwtsigner

fix #3231 use root controller server certs for OIDC signing (#3236)

2025-08-26 09:29:50 -04:00

middleware

Optimize imports

2026-01-28 15:01:35 -05:00

model

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

models

Cleanup type check error messages

2026-01-28 15:23:51 -05:00

network

Fixes for SDK terminator management. Add support for ziti sdk inspection. Fixes #3609

2026-03-11 13:10:28 -04:00

oidc_auth

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

peermsg

Add more raft configuration options. Fixes openziti/fabric#597

2023-02-15 23:47:57 -05:00

permissions

Add permissions list to identity. Fixes #3430. Add read-only permission. Fixes #2109. Add CRUD permissions by entity type. Fixes #3435

2025-12-18 10:54:08 -05:00

raft

Address review comments

2026-03-11 15:48:30 -04:00

response

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

rest_client

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

rest_model

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

rest_server

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

rest_util

Optimize imports

2026-01-28 15:01:35 -05:00

scripts

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

server

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

specs

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

subcmd

Optimize imports

2026-01-28 15:01:35 -05:00

sync_strats

fixes openziti/ziti#3673 purge expired revocations, fix revocation bugs (#3679)

2026-03-11 20:33:38 -04:00

webapis

Skip wildcard DNS SANs when building OIDC issuers. Fixes #3696

2026-03-23 11:02:10 -04:00

xctrl

Fix the control channel header conflicts with channel headers. Use single strategy for sharing capabilities with bit mask.

2026-02-24 15:50:05 -05:00

xctrl_example

Optimize imports

2026-01-28 15:01:35 -05:00

xmgmt

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

xt

Expand routing costs to use full uint32 space. Each precedence can now cover about 1B. Fixes #3074

2026-02-20 15:54:41 -05:00

xt_common

Expand routing costs to use full uint32 space. Each precedence can now cover about 1B. Fixes #3074

2026-02-20 15:54:41 -05:00

xt_random

global circuit costs not cleared when terminator is deleted. Fixes #3556

2026-02-20 15:54:06 -05:00

xt_smartrouting

Optimize imports

2026-01-28 15:01:35 -05:00

xt_sticky

Optimize imports

2026-01-28 15:01:35 -05:00

xt_weighted

costing calculation for the weighted terminator selection strategy is incorrect. Fixes #3557

2026-02-20 15:54:06 -05:00

agent.go

Fixes for SDK terminator management. Add support for ziti sdk inspection. Fixes #3609

2026-03-11 13:10:28 -04:00

controller.go

fixes openziti/ziti#3626 omit overlay bind points from /versions apiB… (#3663)

2026-03-10 09:57:50 -04:00

health.go

Optimize imports

2026-01-28 15:01:35 -05:00

settings.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00