Paul Lorenz 158e52b60e Merge pull request #4013 from openziti/issue-4010-enrollment-priv-escalation ...

Prevent enrollment-based privilege escalation to admin identities. Fixes #4010

2026-06-26 13:13:18 -04:00

..

api

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

apierror

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

change

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

command

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

config

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

db

Add router.link.v1 config type. Fixes #3974 (#3975)

2026-06-16 16:38:13 -04:00

entities

Update copyright

2022-06-30 17:45:08 -04:00

env

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

event

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

events

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

fields

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

handler_ctrl

Make listener ctrl channels multi-underlay-capable. For #3983

2026-06-22 14:53:47 -04:00

handler_edge_ctrl

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

handler_mgmt

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

handler_peer_ctrl

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

idgen

Optimize imports

2026-01-28 15:01:35 -05:00

internal

Deny enrollment access on identity read error. For #4010

2026-06-26 12:07:31 -04:00

ioc

Refactor xgress_edge_tunnel_v2 to make it more pluggable

2025-09-03 16:03:15 -04:00

jwtsigner

fix #3231 use root controller server certs for OIDC signing (#3236)

2025-08-26 09:29:50 -04:00

middleware

Optimize imports

2026-01-28 15:01:35 -05:00

model

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

models

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

network

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

oidc_auth

Enforce api-session and identity revocations on the router. Fixes #3927

2026-06-13 01:36:12 -04:00

peermsg

Add more raft configuration options. Fixes openziti/fabric#597

2023-02-15 23:47:57 -05:00

permissions

Tidy duplicate permission types. Remove vestigial info message. Update changelog

2026-05-08 11:34:20 -04:00

raft

Rename single-underlay channel constructors for channel/v5. For #3983

2026-06-18 12:51:02 -04:00

response

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

rest_client

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

rest_model

Add configs field to routers. Fixes #3780

2026-06-11 13:45:58 -04:00

rest_server

Add configs field to routers. Fixes #3780

2026-06-11 13:45:58 -04:00

rest_util

Optimize imports

2026-01-28 15:01:35 -05:00

scripts

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

server

Decompose multi-underlay channels onto the channel/v5 API. Fixes #3983

2026-06-18 12:51:02 -04:00

specs

Add configs field to routers. Fixes #3780

2026-06-11 13:45:58 -04:00

storage

Enforce api-session and identity revocations on the router. Fixes #3927

2026-06-13 01:36:12 -04:00

subcmd

Optimize imports

2026-01-28 15:01:35 -05:00

sync_strats

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

webapis

Rename single-underlay channel constructors for channel/v5. For #3983

2026-06-18 12:51:02 -04:00

xctrl

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

xctrl_example

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

xmgmt

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

xt

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

xt_common

Expand routing costs to use full uint32 space. Each precedence can now cover about 1B. Fixes #3074

2026-02-20 15:54:41 -05:00

xt_random

global circuit costs not cleared when terminator is deleted. Fixes #3556

2026-02-20 15:54:06 -05:00

xt_smartrouting

Optimize imports

2026-01-28 15:01:35 -05:00

xt_sticky

Optimize imports

2026-01-28 15:01:35 -05:00

xt_weighted

costing calculation for the weighted terminator selection strategy is incorrect. Fixes #3557

2026-02-20 15:54:06 -05:00

agent.go

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

controller.go

Migrate to channel/v5 deferred-ack accept API. For #3983

2026-06-18 12:51:02 -04:00

health.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

settings.go

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00