Andrew Martinez 6515e3615c fixes #3680 add revocation management API, CLI, and enforcement (#3789) ...

* fixes #3680 add revocation management API, CLI, and enforcement

- adds Management API endpoints for revocations (POST, GET, LIST) with
  type-aware validation (JTI/API_SESSION require UUID, IDENTITY requires
  existing identity)
- adds CLI commands: ziti edge create revocation identity|api-session|jti
- adds revocation checks to resolveOidcSession in security_ctx.go so the
  REST API returns 401 for revoked OIDC tokens. Previously only
  ValidateAccessToken (router ctrl channel path) checked revocations,
  so revoked tokens still received 200 OK from the management and client
  HTTP APIs
- adds api-session revocation check to ValidateAccessToken, which only
  checked JTI and identity revocations
- adds Type field to Revocation model, store, and protobuf message
- adds integration tests covering CRUD, input validation, and token
  enforcement for all three revocation types
- use release edge-api@v0.28.1

2026-04-14 15:53:03 -04:00

..

api_session_certificate_manager.go

Optimize imports

2026-01-28 15:01:35 -05:00

api_session_certificate_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

api_session_heartbeats.go

Add missing shutdown logic

2025-09-18 15:33:45 -04:00

api_session_manager.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

api_session_model.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

auth_policy_manager.go

Optimize imports

2026-01-28 15:01:35 -05:00

auth_policy_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

authenticator_manager.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

authenticator_mod_cert.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

authenticator_mod_ext_jwt_test.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

authenticator_mod_ext_jwt.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

authenticator_mod_updb.go

fixes two issues

2026-02-25 09:34:59 -05:00

authenticator_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

authenticator.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

base_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

base_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

ca_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

ca_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

ca_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

circuit_manager.go

Add CreateCircuitV3 for RDM-authorized circuit creation. Fixes #3721

2026-03-27 14:41:28 -04:00

command_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

command.go

Enforce policy on the router for oidc sessions, by closing open circuits and terminators when service access is lost. Fixes #3509

2026-02-04 12:19:56 -05:00

config_manager.go

Optimize imports

2026-01-28 15:01:35 -05:00

config_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

config_type_manager.go

Optimize imports

2026-01-28 15:01:35 -05:00

config_type_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

controller_manager.go

Add preferredLeader flag to raft configuration. Fixes #3600

2026-03-05 17:24:43 -05:00

controller_model.go

Add preferredLeader flag to raft configuration. Fixes #3600

2026-03-05 17:24:43 -05:00

create_terminator_cmd.go

Provide more error context to SDKs for terminator errors. Fixes #3524

2026-02-04 14:36:21 -05:00

edge_router_manager_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

edge_router_manager.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

edge_router_model.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

edge_router_policy_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

edge_router_policy_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

edge_service_manager.go

Add CreateCircuitV3 for RDM-authorized circuit creation. Fixes #3721

2026-03-27 14:41:28 -04:00

edge_service_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

enrollment_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

enrollment_mod_ca.go

Optimize imports

2026-01-28 15:01:35 -05:00

enrollment_mod_erott.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

enrollment_mod_ott.go

Optimize imports

2026-01-28 15:01:35 -05:00

enrollment_mod_ottca.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

enrollment_mod_token.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

enrollment_mod_trott.go

Optimize imports

2026-01-28 15:01:35 -05:00

enrollment_mod_updb.go

Optimize imports

2026-01-28 15:01:35 -05:00

enrollment_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

enrollment.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

env.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

external_jwt_signer_manager.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

external_jwt_signer_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

hash.go

Optimize imports

2026-01-28 15:01:35 -05:00

identity_manager_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

identity_manager.go

Support multi-underlay control channels. Fixes #3550

2026-02-11 14:20:29 -05:00

identity_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

identity_type_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

identity_type_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

interface_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

link_manager_test.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

link_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

link_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

managers.go

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

mfa_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

mfa_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

path.go

Set empty path when reserving circuit, to avoid panics. Fixes #3777

2026-04-07 09:25:55 -04:00

pbutils.go

Optimize imports

2026-01-28 15:01:35 -05:00

policy_advisor.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_manager.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_model_mac.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_mfa_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_model_mfa.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_os_test.go

codespell: Add spelling check and fix all issues

2023-12-19 10:52:42 +01:00

posture_check_model_os.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_process_multi_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_model_process_multi.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_process_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_model_process.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_windows_domain.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_type_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_type_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_response_manager_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_response_manager.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_response_model_domain.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_endpoint_state.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_response_model_mac.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_mfa.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_os.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_process.go

Add linter and fix issues found by linter

2022-10-10 16:56:51 -04:00

posture_response_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

revocation_manager.go

fixes #3680 add revocation management API, CLI, and enforcement (#3789)

2026-04-14 15:53:03 -04:00

revocation_model.go

fixes #3680 add revocation management API, CLI, and enforcement (#3789)

2026-04-14 15:53:03 -04:00

router_manager.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

router_model.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

service_edge_router_policy_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

service_edge_router_policy_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

service_manager.go

Remove created/updated/deleted terminator events which are obsoleted by entity change events. Fixes #3531

2026-02-04 11:16:59 -05:00

service_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

service_policy_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

service_policy_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

session_manager_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

session_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

session_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

terminator_manager.go

Fixes for SDK terminator management. Add support for ziti sdk inspection. Fixes #3609

2026-03-11 13:10:28 -04:00

terminator_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

testing.go

Support multi-underlay control channels. Fixes #3550

2026-02-11 14:20:29 -05:00

token_provider_cache.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

transit_router_manager.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

transit_router_model.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00