Andrew Martinez 6515e3615c fixes #3680 add revocation management API, CLI, and enforcement (#3789) ...

* fixes #3680 add revocation management API, CLI, and enforcement

- adds Management API endpoints for revocations (POST, GET, LIST) with
  type-aware validation (JTI/API_SESSION require UUID, IDENTITY requires
  existing identity)
- adds CLI commands: ziti edge create revocation identity|api-session|jti
- adds revocation checks to resolveOidcSession in security_ctx.go so the
  REST API returns 401 for revoked OIDC tokens. Previously only
  ValidateAccessToken (router ctrl channel path) checked revocations,
  so revoked tokens still received 200 OK from the management and client
  HTTP APIs
- adds api-session revocation check to ValidateAccessToken, which only
  checked JTI and identity revocations
- adds Type field to Revocation model, store, and protobuf message
- adds integration tests covering CRUD, input validation, and token
  enforcement for all three revocation types
- use release edge-api@v0.28.1

2026-04-14 15:53:03 -04:00

..

appenv.go

fixes #3680 add revocation management API, CLI, and enforcement (#3789)

2026-04-14 15:53:03 -04:00

broker.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

context.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

helpers.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

producers.go

Optimize imports

2026-01-28 15:01:35 -05:00

routers.go

fix.openziti.ziti.3597.OIDC.by.default (#3605)

2026-03-04 10:03:14 -05:00

security_ctx.go

fixes #3680 add revocation management API, CLI, and enforcement (#3789)

2026-04-14 15:53:03 -04:00

sync.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

trace.go

Optimize imports

2026-01-28 15:01:35 -05:00