Jeff Mitchell
727d1c7085
Add "no-op" action and use it as default for scope permissions ( #1138 )
...
Because of listing visibility, if no actions are assigned to a user for
an individual resource, it's excluded from the list. This is fine and
good. However, when we made a change in 0.2.0 to restrict the
information returned from listing for the anonymous user for scopes and
auth methods, it exposed the fact that because of the way this
visibility works we had to add `read` to scopes by default -- thereby
rather defeating the purpose of restricting what goes back to `u_anon`
requests.
The purpose of "no-op" is to never be used for real actions within the
API, but as something that can be granted to specifically enable
visibility for the targeted user. This makes the controls over list
visibility much more granular.
2021-04-23 10:13:37 -04:00
Jim Lambert
be7fc67842
regenerate migrations
2021-04-22 07:38:58 -04:00
Jim
3ee651deab
fix primary account data returned for users when a passwd auth method is the primary auth method ( #1154 )
2021-04-21 19:10:54 -04:00
Jim
75108cbc8b
Ongoing OIDC: return the primary account info along with the user. ( #1145 )
2021-04-20 20:33:56 -04:00
Jeff Mitchell and Sam Salisbury
a90a64d787
Use Go 1.16 native embedding and remove go-bindata ( #1151 )
...
Co-authored-by: Sam Salisbury <samsalisbury@gmail.com >
2021-04-20 10:45:05 -04:00
Jeff Mitchell
46d7613e2d
Remove extra s in item table output for auth methods and host catalogs
2021-04-20 09:04:07 -04:00
Lars Lehtonen
b02c050304
internal/servers/controller/handlers/users: fix dropped test error ( #1130 )
2021-04-19 16:06:17 -04:00
Jim
358f5a61fb
bump protoc to v3.15.8 ( #1147 )
2021-04-18 21:34:25 -04:00
Michael Gaffney
ea0e2e5df4
Add tests for common.BuildUpdatePaths ( #1143 )
2021-04-18 11:00:38 -04:00
Michael Gaffney
78159eef9c
Fix godoc spelling and white space
2021-04-17 12:36:21 -04:00
s-christoff
0f424f6f7f
Refactor internal/servers/controller/handlers errors v2 ( #1099 )
2021-04-16 12:06:03 -05:00
Jeff Mitchell
be10cc4b42
Update grpc/proto deps ( #1136 )
...
* Update grpc/proto deps
* Make gen
2021-04-15 14:11:23 -04:00
Jeff Mitchell
7062bc70f0
Fix bug causing CORS to accept all origins by default ( #1134 )
2021-04-15 13:33:52 -04:00
Jeff Mitchell
afe828c118
Update returned information in list responses for anon user ( #1127 )
2021-04-14 17:19:02 -04:00
Susmitha Girumala
5ce21e118e
ui: Bump ui version to latest ( #1125 )
2021-04-14 17:01:22 -04:00
Jeff Mitchell
604d642e1e
Restrict auth method listing for u_anon ( #1122 )
...
This keeps only essential information in list output for auth methods
when the user is u_anon. Boundary's default is to allow listing of
auth methods for anonymous users to allow discovery of authentication
points, but there's no need to return more information about internal
configuration than necessary.
2021-04-14 16:49:08 -04:00
Jeff Mitchell
c54aedcf1a
By default, add Boundary Desktop's origin to allowed CORS origins ( #1121 )
...
This also adds support for a flag to disable this behavior.
Fixes #1093
2021-04-14 16:26:21 -04:00
Jim
e0e6e58bb2
better api error codes from OIDC auth method update/change-state operations ( #1116 )
2021-04-14 15:00:20 -04:00
Todd Knight
fad9f6d525
Allow oidc accounts to be add|set|removed to users. ( #1117 )
2021-04-14 11:34:17 -07:00
Jeff Mitchell
c57841fa2e
Update wording for user not found to indicate the auth method isn't primary for the scope
2021-04-14 13:27:03 -04:00
Todd Knight
dc881e65d4
Fix alignment for Is Primary For Scope field and values for listing.
2021-04-14 10:25:25 -07:00
Michael Gaffney
5855930921
Renumber migrations in the '2/' directory to start at 01 ( #1114 )
2021-04-14 11:47:21 -04:00
Jim
6c003c94f7
add "Is Primary" to auth method CLI output ( #1115 )
2021-04-14 11:36:42 -04:00
Jim Lambert
06df7e0240
updated UI_COMMITISH
2021-04-13 20:24:32 -04:00
Todd Knight
072b950540
Filter inactive and private oidc auth methods from unauthenticated list requests ( #1110 )
2021-04-13 16:42:25 -07:00
Jeff Mitchell
ca57e50516
Add more OIDC error output. ( #1108 )
...
Some of this is in the form of logging, and some via returning error
messages to users.
Also cleans a couple of linter complaints.
2021-04-13 19:07:50 -04:00
Jeff Mitchell
412018fbb4
Update misleading Authenticated bool with new name and explanation. ( #1111 )
2021-04-13 17:55:40 -04:00
Jim
f8f66abcf4
regen proto ( #1109 )
2021-04-13 17:10:14 -04:00
Todd Knight
53ec3c44bc
Auth Method Listing matches other resources, remove repeated "Version" field. ( #1107 )
2021-04-13 10:34:13 -07:00
Todd Knight
14c222709c
Make oidc auth callback redirect on most errors ( #1105 )
2021-04-13 09:21:26 -07:00
Jim
d0f36f6a74
ensure that inbound auth method id matches request wrapper auth metho… ( #1104 )
2021-04-12 17:17:28 -04:00
Jeff Mitchell
90b30bad25
Use 202 for token polling endpoint instead of 204 ( #1103 )
2021-04-12 14:57:14 -04:00
Todd Knight
71673ea161
Pass disable_discovered_config_validation in the API change-state call ( #1100 )
2021-04-12 08:49:22 -07:00
Michael Gaffney
3130bd615e
Fix go doc: remove sentence fragment
2021-04-12 11:32:27 -04:00
Jim
8f9c287233
properly handle ClientSecret updates ( #1097 )
2021-04-09 15:33:21 -04:00
Randall Morey
5500566fca
chore: bump UI commitish to latest ( #1096 )
2021-04-09 13:30:00 -04:00
Jeff Mitchell
f05f37d0fa
Fix panic in non-generated API calls when printing as JSON ( #1095 )
...
Fixes #992
2021-04-09 13:09:51 -04:00
Jim
26c0c4479d
send MaxAge when set for auth method ( #1094 )
2021-04-09 10:41:54 -04:00
dd0f34bc35
Add new OIDC auth method. ( #1090 )
...
Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com >
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com >
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com >
2021-04-08 20:54:32 -04:00
s-christoff
5c5b07c04a
Revert "Refactor internal/servers/controller/handlers errors ( #1070 )" ( #1092 )
...
This reverts commit 21ac3cdddd
2021-04-08 19:20:36 -05:00
s-christoff
21ac3cdddd
Refactor internal/servers/controller/handlers errors ( #1070 )
2021-04-08 17:48:57 -05:00
Michael Gaffney
d3146992f1
Errors: add Code and Kind for external system errors ( #1080 )
2021-04-07 14:50:00 -04:00
Lars Lehtonen
d3b72899f1
fix scopes double import ( #1066 )
2021-04-05 12:16:38 -04:00
Jeff Mitchell
6c48f6ea77
Use pointers for any Uber atomic values ( #1044 )
...
BK clued me into the fact that for some types, similar alignment
problems exist as with the normal atomic package (e.g. 64-bit types on
32-bit architectures) if they are not pointer values. So change the few
places they weren't pointers to pointers.
None of these are 64-bit, but it feels like best practice for using the
library and should just standardize on it.
2021-04-05 09:37:34 -04:00
Michael Gaffney
aafbada3ae
Remove calls to t.Helper() from test methods (not helpers) ( #1063 )
2021-04-02 19:40:51 -04:00
Jim
c281e808d6
refactor to use WithOrderByCreateTime(...) ( #1058 )
2021-04-02 19:13:48 -04:00
Jim
f21996d8ad
refactor to use WithOrderByVersion(...) ( #1059 )
2021-04-02 18:19:48 -04:00
Louis Ruch
93bad3cb83
400 if account already assocaited ( #1048 )
2021-03-30 13:00:48 -07:00
Jeff Mitchell
17ad2410cd
Add extra tags config test
2021-03-29 16:00:40 -04:00
Jeff Mitchell
b05ed0bf65
If the database is already initialized, use 0 as the return value ( #1033 )
...
This matches the migrations code, which treats the operation as
idempotent.
2021-03-25 17:53:11 -04:00
Jeff Mitchell
Jim Lambert
Lars Lehtonen
Michael Gaffney
Michael Gaffney
s-christoff
Susmitha Girumala
Todd Knight
Randall Morey
Louis Ruch