Andrew Martinez 6515e3615c fixes #3680 add revocation management API, CLI, and enforcement (#3789) ...

* fixes #3680 add revocation management API, CLI, and enforcement

- adds Management API endpoints for revocations (POST, GET, LIST) with
  type-aware validation (JTI/API_SESSION require UUID, IDENTITY requires
  existing identity)
- adds CLI commands: ziti edge create revocation identity|api-session|jti
- adds revocation checks to resolveOidcSession in security_ctx.go so the
  REST API returns 401 for revoked OIDC tokens. Previously only
  ValidateAccessToken (router ctrl channel path) checked revocations,
  so revoked tokens still received 200 OK from the management and client
  HTTP APIs
- adds api-session revocation check to ValidateAccessToken, which only
  checked JTI and identity revocations
- adds Type field to Revocation model, store, and protobuf message
- adds integration tests covering CRUD, input validation, and token
  enforcement for all three revocation types
- use release edge-api@v0.28.1

2026-04-14 15:53:03 -04:00

..

cmd_pb

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

ctrl_pb

Fixes for SDK terminator management. Add support for ziti sdk inspection. Fixes #3609

2026-03-11 13:10:28 -04:00

edge_cmd_pb

fixes #3680 add revocation management API, CLI, and enforcement (#3789)

2026-04-14 15:53:03 -04:00

edge_ctrl_pb

Add CreateCircuitV3 for RDM-authorized circuit creation. Fixes #3721

2026-03-27 14:41:28 -04:00

mgmt_pb

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00