mirror of
https://github.com/openziti/ziti.git
synced 2026-09-24 19:32:22 +00:00
Andrew Martinez
3e5f08c99f
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend-verify
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend-verify
- add logic that allows a client endpoint to extend the valid period for
their current certificate authenticator
- requires clients to use their existing client cetificate for extension
- requires clients to verify they have received the new public key
- allows clients to use a new private key if desired
- allows only 1st party certificate authenticators to extend
- adds authenticatorId to apiSession for persistence, model, api model
- add session cert to already authenticated session on extend
- removes empty test stub
70 lines
1.7 KiB
YAML
70 lines
1.7 KiB
YAML
---
|
|
|
|
definitions:
|
|
listAPISessionsEnvelope:
|
|
required:
|
|
- meta
|
|
- data
|
|
properties:
|
|
meta:
|
|
$ref: 'standard-responses.yml#/definitions/meta'
|
|
data:
|
|
$ref: '#/definitions/apiSessionList'
|
|
detailApiSessionEnvelope:
|
|
required:
|
|
- meta
|
|
- data
|
|
type: object
|
|
properties:
|
|
meta:
|
|
$ref: 'standard-responses.yml#/definitions/meta'
|
|
data:
|
|
$ref: '#/definitions/apiSessionDetail'
|
|
apiSessionList:
|
|
type: array
|
|
items:
|
|
$ref: '#/definitions/apiSessionDetail'
|
|
apiSessionDetail:
|
|
description: An API Session object
|
|
type: object
|
|
allOf:
|
|
- $ref: 'base-entity.yml#/definitions/baseEntity'
|
|
- type: object
|
|
required:
|
|
- token
|
|
- identity
|
|
- identityId
|
|
- configTypes
|
|
- ipAddress
|
|
- authQueries
|
|
- cachedUpdatedAt
|
|
- isMfaRequired
|
|
- isMfaComplete
|
|
- authenticatorId
|
|
properties:
|
|
token:
|
|
type: string
|
|
identity:
|
|
$ref: 'base-entity.yml#/definitions/entityRef'
|
|
identityId:
|
|
type: string
|
|
ipAddress:
|
|
type: string
|
|
configTypes:
|
|
type: array
|
|
items:
|
|
type: string
|
|
authQueries:
|
|
$ref: 'auth-query.yml#/definitions/authQueryList'
|
|
isMfaRequired:
|
|
type: boolean
|
|
isMfaComplete:
|
|
type: boolean
|
|
lastActivityAt:
|
|
type: string
|
|
format: date-time
|
|
cachedLastActivityAt:
|
|
type: string
|
|
format: date-time
|
|
authenticatorId:
|
|
type: string |