Paul Lorenz f219e6d035 Accept legacy sessions and signal recovery for invalid service tokens. Fixes #4145 ...

- loadFromBolt now accepts a non-JWT (legacy/durable) service session token by
  looking the session up via Session.ReadByToken and verifying it belongs to the
  api session, so a legacy client's existing session keeps working across a
  controller upgrade instead of failing as a malformed JWT
- classifies service-access token validation failures (malformed, expired, bad
  claims, mismatched api session, revoked) as InvalidSession so the client
  re-creates, while revocation-store/datastore read failures remain internalError
  so a transient controller fault does not make clients discard valid sessions
- adds a typed common.InvalidTokenError so ValidateServiceAccessToken can
  distinguish token-level failures from infrastructure failures

2026-07-23 10:53:22 -04:00

..

common_tunnel.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

common.go

Accept legacy sessions and signal recovery for invalid service tokens. Fixes #4145

2026-07-23 10:53:22 -04:00

connect_events.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

create_circuit_v2.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

create_circuit_v3.go

Implement connect-v2. Fixes #3884

2026-06-24 16:40:40 -04:00

create_circuit.go

Migrate to the sdk-golang v2 module path. For #3884

2026-06-23 15:43:39 -04:00

create_terminator_v2.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

create_tunnel_api_session.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

create_tunnel_circuit_V2.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

create_tunnel_circuit.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

create_tunnel_terminator_v2.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

create_tunnel_terminator.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

errors_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

errors.go

Migrate to the sdk-golang v2 module path. For #3884

2026-06-23 15:43:39 -04:00

extend_enrollment_verify.go

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

extend_enrollment.go

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

health_event.go

Own the metrics wire format in ziti. Fixes #4036

2026-06-29 22:37:25 -04:00

heartbeat.go

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

hello.go

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

list_tunnel_services.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

remove_terminator.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

remove_tunnel_terminator.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

resync.go

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

subscribe_to_data_model.go

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

tunnel_health_event.go

Own the metrics wire format in ziti. Fixes #4036

2026-06-29 22:37:25 -04:00

update_terminator.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

update_tunnel_terminator.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

validate_sessions.go

Convert self-describing receive handlers to channel/v5. For #3983

2026-06-18 12:51:02 -04:00