Paul Lorenz 62e29169c2 Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681 ...

- adds DeleteRevocationsBatchCommand so expired-revocation cleanup goes
  through raft as a single log entry per batch
- adds CreateRevocationsBatchCommand for batched revocation creation
  through raft
- moves refresh-token revocations from synchronous inline creation to a
  background batcher that flushes on a configurable interval, removing
  the database and raft as a bottleneck on token refreshes
- skips revocation creation for tokens expiring within a configurable
  threshold (revocationMinTokenLifetime), since they become invalid on
  their own
- validates that revocationMinTokenLifetime is less than 50% of the
  configured refresh token lifetime
- makes the revocation enforcer frequency configurable and restricts it
  to run only on the raft leader
- adds tests for multi-batch delete, batched create with router RDM
  propagation, and skip-threshold behavior
- adds new configuration tunables under edge.oidc: revocationBucketInterval,
  revocationMinTokenLifetime, revocationBucketMaxSize, revocationMaxQueued,
  revocationEnforcerFrequency

2026-03-19 08:35:00 -04:00

..

cli_tests

Fix login certificate caching when changing controllers (#3631)

2026-03-04 07:30:43 -05:00

pki

updates test client/certs to expire in 7k days

2020-04-21 15:34:34 -04:00

shaper

Optimize imports

2026-01-28 15:01:35 -05:00

testdata

fix.openziti.ziti.3597.OIDC.by.default (#3605)

2026-03-04 10:03:14 -05:00

testutil

Add fix for flaky link test

2026-02-12 19:30:18 -05:00

.gitignore

Fix failing tests

2025-03-18 16:00:40 -04:00

accept_manual_start_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

addressable_terminators_test.go

Handle UDP difference between proxy and tproxy implementations. Fixes #3540

2026-02-04 14:37:53 -05:00

api_client_client.go

fixes #3496 allow TOTP enroll mid OIDC (#3656)

2026-03-11 16:27:31 -04:00

api_client_management.go

fixes openziti/ziti#3673 purge expired revocations, fix revocation bugs (#3679)

2026-03-11 20:33:38 -04:00

api_error_test.go

Replace circuit fault logs with metrics

2025-11-12 17:13:34 -05:00

api_session_cert_connect_test.go

Update for deprecation of HA flag in Go SDK

2025-08-18 19:28:28 -04:00

api_session_certificates_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

api_session_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

api_session_totp_token_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

auth_cert_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

auth_external_jwt_signer_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

auth_headers_legacy_test.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

auth_headers_oidc_test.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

auth_mid_oidc_mfa_enroll_test.go

fixes #3496 allow TOTP enroll mid OIDC (#3656)

2026-03-11 16:27:31 -04:00

auth_oidc_cert_totp_test.go

fixes #3496 allow TOTP enroll mid OIDC (#3656)

2026-03-11 16:27:31 -04:00

auth_oidc_refresh_test.go

fixes #3496 allow TOTP enroll mid OIDC (#3656)

2026-03-11 16:27:31 -04:00

auth_oidc_test.go

fixes #3496 allow TOTP enroll mid OIDC (#3656)

2026-03-11 16:27:31 -04:00

auth_perf_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

auth_policy_test.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

auth_updb_test.go

fixes two issues

2026-02-25 09:34:59 -05:00

authenticate.go

Fixes for SDK terminator management. Add support for ziti sdk inspection. Fixes #3609

2026-03-11 13:10:28 -04:00

authenticator_test.go

fix test that is no longer impacted

2026-02-26 10:06:56 -05:00

ca_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

ca_traffic_test.go

Provide more error context to SDKs for terminator errors. Fixes #3524

2026-02-04 14:36:21 -05:00

cert_request_extend_legacy_auth_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

cert_request_extend_oidc_auth_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

config_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

config_type_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

configsets.go

fix.openziti.ziti.3597.OIDC.by.default (#3605)

2026-03-04 10:03:14 -05:00

context_json.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

context_manager_helpers.go

fixes openziti/ziti#3333 based on the work from Jan Starkl <jan.starkl@tttech-digital.com>

2026-02-25 09:13:07 -05:00

context.go

fixes openziti/ziti#3673 purge expired revocations, fix revocation bugs (#3679)

2026-03-11 20:33:38 -04:00

control.go

fix.openziti.ziti.3597.OIDC.by.default (#3605)

2026-03-04 10:03:14 -05:00

controller_helper.go

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

current_identity_test.go

Replace circuit fault logs with metrics

2025-11-12 17:13:34 -05:00

custom_assertions.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

data_flow_close_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

data_flow_hs_rotating_test.go

Provide more error context to SDKs for terminator errors. Fixes #3524

2026-02-04 14:36:21 -05:00

data_flow_hs_test.go

Update deps and rebase on main

2026-02-04 15:48:42 -05:00

data_flow_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

dialer_identity_test.go

Add support for sending the dialing identity id and name to the hosting sdk. Fixes #3547

2026-02-09 09:18:25 -05:00

edge_router_helper.go

fixes openziti/ziti#3673 purge expired revocations, fix revocation bugs (#3679)

2026-03-11 20:33:38 -04:00

edge_router_policy_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

edge_router_test.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

endpoint_test.go

Fix.3321.health.check.api.path (#3322)

2025-10-15 13:04:56 -04:00

endpoints

Endpoint management updates

2025-02-03 18:52:57 -05:00

enrollment_ca_auto_specific_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

enrollment_ca_auto_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

enrollment_identity_extend_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

enrollment_network_test.go

Replace circuit fault logs with metrics

2025-11-12 17:13:34 -05:00

enrollment_ott_specific_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

enrollment_ott_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

enrollment_refresh_test.go

Add permissions list to identity. Fixes #3430. Add read-only permission. Fixes #2109. Add CRUD permissions by entity type. Fixes #3435

2025-12-18 10:54:08 -05:00

enrollment_router_test.go

fixes #3239 router enrollment used identity expiration duration (#3240)

2025-08-26 09:28:54 -04:00

enrollment_token_to_cert_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

enrollment_token_to_token_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

enrollment_updb_specific_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

enrollment_updb_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

entities.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

events_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

external_jwt_signer_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

fabric_router_test.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

identity_api_session_activity_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

identity_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

link_test.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

list_services_perf_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

main_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

mfa_ziti_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

model_sdk_performance_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

network_jwt_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

oidc_auto_enable_test.go

fix.openziti.ziti.3597.OIDC.by.default (#3605)

2026-03-04 10:03:14 -05:00

permission_loss_test.go

Fixes for SDK terminator management. Add support for ziti sdk inspection. Fixes #3609

2026-03-11 13:10:28 -04:00

permissions_api_session_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_auth_policy_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_authenticator_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_ca_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_config_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_config_type_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_edge_router_policy_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_edge_router_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_enrollment_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_external_jwt_signer_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_identity_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_posture_check_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_service_edge_router_policy_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_service_policy_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_service_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_terminator_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_test_helper.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

permissions_transit_router_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_domain_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_mfa_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_os_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_process_multi_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_sdk_domain_legacy_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_sdk_domain_oidc_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_sdk_mac_oidc_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_sdk_os_oidc_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_sdk_process_multi_oidc_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_sdk_process_oidc_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

rest_auth_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

revocation_test.go

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

root_endpoint_test.go

fixes #2026 root version handlers 404

2024-05-08 10:33:50 -04:00

router_data_model_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

router_identities_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

router_reenroll_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

sdk_api_session_token_update_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

sdk_auth_test.go

Add permissions list to identity. Fixes #3430. Add read-only permission. Fixes #2109. Add CRUD permissions by entity type. Fixes #3435

2025-12-18 10:54:08 -05:00

sdk_event_test.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

sdk_oidc_totp_enroll_test.go

fixes #3496 allow TOTP enroll mid OIDC (#3656)

2026-03-11 16:27:31 -04:00

service_edge_router_policy_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

service_list_refresh_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

service_policy_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

service_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

specs_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

standard_error_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

standard.go

Optimize imports

2026-01-28 15:01:35 -05:00

sticky_terminator_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

terminator_test.go

Replace circuit fault logs with metrics

2025-11-12 17:13:34 -05:00

terminator_update_test.go

Update deps and rebase on main

2026-02-04 15:48:42 -05:00

transit_router_test.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

tunneler_data_flow_test.go

Handle UDP difference between proxy and tproxy implementations. Fixes #3540

2026-02-04 14:37:53 -05:00