CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
803 Commits 7 Branches 2 Tags
11c7c8dbe864e76201ee942d42054474d42e5b60
Commit Graph
181 Commits
Author SHA1 Message Date
Jeff MalnickandJeff Mitchell 11c7c8dbe8 feat: make auth token staleness and duration configurable (#777) 
* feat: make auth token time to live and staleness configurable

* docs: add configuration docs for auth token TTL and staleness

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-11-16 10:39:18 -08:00
Jeff MalnickandJeff Mitchell a7fca44809 Fix authz flag (#787) 
* Fix authz flag

* add changelog bug fix for authz flag

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-11-13 10:06:37 -05:00
Jim af6ef1b687 Refactor existing sentinel errors (#774) 2020-11-05 16:54:03 -05:00
Jeff Mitchell 6d59ac1eda Update synopsis for Connect command so it doesn't wrap on most terminals 2020-11-02 09:45:33 -05:00
Jeff Mitchell e2e4631929 Add ability to set public cluster address (#761) 2020-10-30 16:54:53 -04:00
Jeff Mitchell f063b8601c Fix IPv4-only check when no port is specified (#752) 
We have behavior that causes "0.0.0.0" to only listen on IPv4, however,
it also assumed there was a port suffixed. This changes it so that it
also works with a port-less address.
 2020-10-27 10:43:50 -04:00
Jeff Mitchell 813d21565f Allow authorize-session to be invoked with target name (#737) 2020-10-22 08:40:00 -04:00
Jeff Mitchell 09b865ab28 Add pass cred storage support (#731) 
* Add `pass` cred storage support

Make it the default on non-Windows/macOS

Document the token storage behavior
 2020-10-21 09:00:17 -04:00
Jim 547ae7c802 Fix database init when locale isn't english (#736) 
* use IsMissingTableError(error)

* update changelog
 2020-10-20 21:13:01 -04:00
Jeff Mitchell 1f48d97327 Support for Unix domain socket listeners (#705) 
The client already supports protocol-agnostic transport so handles
unix:/// schemes.
 2020-10-16 13:45:47 -04:00
Jeff Mitchell 97e8613eb7 Fix hyphenation of resource subcommand output (#689) 
* Fix hyphenation of resource subcommand output

Fixes #686
 2020-10-15 19:29:33 -04:00
Jeff Mitchell f454fa9ef2 Don't return error code 1 if saving the value to the keyring (#668) 2020-10-13 17:13:31 -04:00
Sam Salisbury bcfd9d038f version command: fix version string (#662) 2020-10-13 12:21:45 -07:00
Jeff Mitchell ef16b6177c Update configuration docs (#661) 
* Update configuration docs

* Fix public addr example
 2020-10-13 12:21:09 -07:00
Jeff Mitchell f7bd5e18f9 Fix spacing for scope output in account command 2020-10-13 11:49:50 -04:00
Jeff Mitchell 437f874d44 Fix spacing before Attributes when printing auth method 2020-10-13 11:08:10 -04:00
Jeff Mitchell 868a65ac3d Don't show "Version v" on startup if empty (#653) 
We'll still show the SHA in this case
 2020-10-13 10:47:14 -04:00
Jeff Mitchell 95404b2a56 Separate out protocol-specific functions (#610) 
Placing them into separate files slims down the main connect file and
makes it more obvious where things need to be handled for future
integrations.
 2020-10-10 16:12:04 -04:00
Jeff Mitchell a982fc9437 Remove proxy proto documentation for now (#606) 
We haven't tested it with the new lib yet. We can add this back whenever
we get to testing it.
 2020-10-10 13:42:04 -04:00
Jeff Mitchell 603b0582d7 Fix CLI help output and make more consistent (#605) 2020-10-09 20:26:48 -04:00
Jeff Mitchell bd271b707d Add version command (#604) 2020-10-09 19:35:04 -04:00
Jeff Mitchell 4833fbba23 Simplify worker->controller connection (#601) 
Go's TLS stack doesn't need a separate CA cert and in fact for sessions
we don't use this. So simplify the worker connection to remove an
unnecessary extra key generation.
 2020-10-09 16:49:36 -04:00
Todd Knight abe5e9b950 Add Termination Reason (#573) 2020-10-07 21:37:30 -04:00
Jeff Mitchell ae3a9e32cf Remove proxy command 
You can now use -authz-token in `boundary connect` which also allows
using the connect subcommands when you already have a token.
 2020-10-07 21:30:44 -04:00
Jeff Mitchell 1cb66c69e7 Add workaround to allow autocomplete install/uninstall via a normal command (#576) 2020-10-07 20:42:45 -04:00
Todd Knight 83314b7750 Accounts can update login-name. Fix help text for subtype resource update and creates. (#575) 2020-10-07 16:33:04 -07:00
Jeff Mitchell 0be34df6cd Minor typo fix 2020-10-07 11:32:10 -04:00
Todd Knight 6c6fb7a4d0 Format errors better for CLI (#552) 
* Start making errors easier to read for Table based CLI UI.

* Add TODO about reporting "update_mask" related errors.
 2020-10-06 14:08:49 -07:00
Jeff Mitchell 73872c5a7e Switch default RDP client at runtime based on OS, support macOS (#551) 
* Add "open" support for RDP

* Use mstsc.exe on Windows and as default as that also works natively via wsl2

* Add flags to not fork
 2020-10-06 13:18:31 -04:00
Jeff Mitchell 9f11d12f6d Fix a missing authorize rename 2020-10-05 13:32:37 -04:00
Jeff Mitchell 9237d6f787 Rename authorize to authorize-session (#531) 
As pointed out by Rob, this makes it clearer what the action actually
is. We were sort of torn on it before, but I've definitely come around
to it.
 2020-10-05 11:02:23 -04:00
Jeff Mitchell f8a2100603 Add various env vars to CLI (#528) 
* Add auth method ID env var

* Add env var for host catalogs
 2020-10-02 19:20:30 -04:00
Todd Knight e0ad9ffbfa Make all date output be RFC1123. (#525) 2020-10-01 21:10:11 -04:00
Todd Knight d1d94c19c8 List sessions CLI reports correct target id and status (#511) 
* Including some missing session fields and improving reporting of sessions of CLI.
 2020-10-01 15:57:01 -07:00
Jeff Mitchell 9bd6045c46 If the exec'd command executed on its own, don't print a term reason out, just pass through the code 2020-10-01 17:13:47 -04:00
Jeff Mitchell 3400e20fb6 Use the host_id as the HostAlias for SSH (#523) 
This tells SSH to use the (random, autogen'd) host ID when doing host
key checking. That way we avoid having an IP/port mismatch every time we
connect.
 2020-10-01 17:07:34 -04:00
Jeff Mitchell bf30a735dc Clean up slash suffix on -host value 2020-10-01 12:19:06 -04:00
Jeff Mitchell c3b4337b91 Add -path to boundary connect http 2020-10-01 12:16:18 -04:00
Jeff Mitchell fa700dc002 Add account ID templating (#518) 
* Remove default role and create via the same mechanism as other initial resources
 2020-10-01 10:51:54 -04:00
Jeff Mitchell d851ab07d8 Add ability to pull user/account/auth-method ID from stored token (#517) 2020-10-01 01:52:08 -04:00
Jeff Mitchell 6ddfe407a3 Update allowed formats of ACL strings (#508) 2020-10-01 01:49:20 -04:00
Jeff Mitchell 4854f2c35f Add boundary connect http (#516) 2020-10-01 00:27:13 -04:00
Jeff Mitchell d479f307a4 Minor tweak to role output formatting 2020-09-29 20:41:32 -04:00
Jeff Mitchell a38f40606e Create default roles in scopes to allow authentication and listing scopes/auth methods (#502) 2020-09-29 20:38:16 -04:00
Jeff Mitchell c1a1f8bb1b Separate out docker dep into package (#482) 
This also then removes support for docker-based containing starting (for
now) from platforms other than windows/darwin/linux as there are build
issues on several.
 2020-09-28 16:05:15 -04:00
Jim fde96924af refactor user account repo function names (#476) 2020-09-28 15:39:10 -04:00
Jeff Mitchell cf3fa4522d Swap base58 libraries (#472) 
* Swap base58 libraries

This doesn't reduce binary size but it removes a metric ton of
dependencies.
 2020-09-26 14:01:49 -04:00
Jeff Mitchell c30fd5620e Add account add/set/remove to CLI (#473) 2020-09-26 13:58:48 -04:00
Jeff Mitchell 725abffebf Add some more text to dev flags 2020-09-25 17:40:10 -04:00
Jeff Mitchell bec3d702fb Add -database-url to dev mode (#459) 
Create default dev mode login name of "admin" and password of "password"
 2020-09-25 17:36:47 -04:00