CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
957 Commits 7 Branches 2 Tags
1906a7311becb5f094fac88c2cf1ce4187597bff
Commit Graph
957 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jeff Mitchell 1906a7311b Fix some documentation that was not correct 
TLS listener docs were pulled from Vault but we don't actually have
SIGHUP enabled yet.
 2021-02-22 15:44:40 -05:00
Todd Knight cac1e60e11 Add filters to listing different resources in the go sdk. (#957) 2021-02-22 13:31:17 -07:00
Jeff Mitchell 2ed1643e3a Dep updates (pgx, dktest) (#956) 
* Dep updates:

* pgx
* dktest

* Remove pgx
 2021-02-22 13:36:07 -05:00
Jeff Mitchell 09e57a6624 Dep update: (#955) 
* grpc-gateway and friends
* buf
* go-swagger
* protoc-gen-go-grpc/genproto
 2021-02-22 12:46:00 -05:00
Todd Knight 97b404032b Add ability to filter List*Requests (#952) 2021-02-22 10:09:25 -07:00
Susmitha Girumala 3c33d05c96 docs: Add desktop client videos (#947) 
* Add desktop client videos

* docs: refactor desktop video style

* docs: add wrapper for tabs to load videos correctly

* docs: add desktop video to homepage
 2021-02-18 14:12:51 -05:00
Jeff Mitchell b40fb8bd07 Minor update to TLS doc 2021-02-18 13:48:13 -05:00
Jeff Mitchell 505eed246d Minor update to data encryption bang box 2021-02-18 13:46:44 -05:00
Aiman Ismail b452c1f46f Fix typo Boundary name (#946) 2021-02-18 08:28:52 -08:00
Lars Lehtonen 35eadd6e40 internal/db/schema: fix dropped test error (#948) 2021-02-18 08:27:08 -08:00
Jeff Malnick 2d850ac95c docs: clarify generated resources doc (#945) 2021-02-17 11:44:21 -08:00
Jeff Malnick 54ba53e894 docs: update link to releases page for DT client download (#944) 2021-02-17 10:28:17 -08:00
Zachary Shilton 27ff3f5f8d Bumps components to remove internal md processing (#936) 
* Use revised VTBL without internal marked processing

* Bump to react-hero without internal md processing
 2021-02-17 10:23:31 -05:00
Sam Salisbury 0e20514b2f fix 'make update-ui-version' (#933) 
- When using a branch name rather than a commit, the branch was not being
  updated to the latest version.
 2021-02-17 13:37:39 +00:00
Jim 958dba6d7f support a testing postgres URL (#935) 2021-02-16 20:39:09 -05:00
Jeff Mitchell bc565922fb Prep for release 2021-02-16 14:16:09 -05:00
Jeff Mitchell e426fcf20e Gofumpt 2021-02-16 14:14:53 -05:00
Jeff Mitchell e0099b4b85 Fix migration for Postgres 11 (#940) 2021-02-16 14:03:09 -05:00
Pete Pacent db6b54d260 Update desktop.mdx (#938) 
Add disclaimer for desktop client doc and releases link
 2021-02-16 10:17:36 -08:00
Jeff Malnick b8fe4083c1 Add initial Desktop docs (#930) 
* docs: initial desktop docs
 2021-02-12 15:38:41 -08:00
Jeff Mitchell c45916918a Revert "Update UI version" 
This reverts commit bab647b5e2.
 2021-02-12 14:22:36 -05:00
Jeff Mitchell 9761f1deee Prep for release 2021-02-12 11:53:32 -05:00
Jeff Mitchell d7afd08148 Update API dep 2021-02-12 11:47:16 -05:00
Jeff Mitchell 46f0f55a28 Update SDK in API 2021-02-12 11:46:02 -05:00
Jeff Mitchell 377d837df3 Update gen 2021-02-12 11:44:46 -05:00
s-christoff 5dc821a41e Add testing section for individual/user testing (#927) 2021-02-12 10:43:05 -06:00
Jeff Mitchell bab647b5e2 Update UI version 2021-02-12 11:29:04 -05:00
Jeff Mitchell 1ce09069a5 Move worker selection above session creation (#929) 
This prevents a session being created when no workers are available to
handle it.
 2021-02-12 11:05:33 -05:00
Jeff Mitchell 0993747702 Change server default allowed origin (#931) 2021-02-12 11:04:09 -05:00
Jeff Mitchell e9da3a871d Switch on CORS by default if not specified (#928) 2021-02-11 20:10:48 -05:00
Dane Harrigan 433998494a Use uint for internal types (#926) 2021-02-11 16:49:36 -05:00
s-christoff 6623be8bfb Refactor internal/auth to return domain specific errors (#905) 
* Refactor internal/auth to return domain specific errors
 2021-02-11 13:32:45 -06:00
Jeff Mitchell 22462cdd84 Add read:self and cancel:self to sessions; add dev unpriv user (#923) 
* Sessions support for read:self and cancel:self permissions. This is automatic with fallback; no API change is needed.

* Strips out values from listing if only self actions are allowed on the resource and the user ID is different. This prevents a default ACL of id=*;type=session;actions=read:self,cancel:self from causing all values to be visible when listing.

* Adds an unprivileged user to development/testing instances. This user has only default permissions plus the ability to authorize sessions in the default target.
 2021-02-11 13:14:18 -05:00
Jeff MitchellandJeff Malnick d279a906ce Allow public_cluster_addr to use an env var or file (#907) 
Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-10 20:22:02 -05:00
Jeff Mitchell 5266eb3269 Don't error worker filters if a key isn't found, treat it as a non-match (#900) 2021-02-10 15:59:31 -05:00
Jeff Mitchell c6fa737e51 Add a duplicate authenticate:login API verb (#912) 2021-02-10 15:43:59 -05:00
Jim ffcda56f40 a small refactor, so we can easily support options when creating new auth tokens. (#920) 2021-02-10 13:52:42 -05:00
Jeff Mitchell b61dd0ef36 Update schema version check text 2021-02-09 13:42:14 -05:00
Bryce Kalow f97ffebaaf chore: upgrade nextjs-scripts & next (#908) 2021-02-09 10:38:08 -05:00
Louis Ruch ff1293b983 Don't leak user ids in error messages (#916) 2021-02-05 13:17:13 -08:00
Todd Knight 9576c46a4b Update changelog with fix for issue #909. 2021-02-05 13:22:18 -07:00
Todd Knight 568594d1b3 Release the shared lock using a non cancelled context (#918) 2021-02-05 12:58:54 -07:00
Jeff Mitchell cb3980cb8c Remove list:self from main (#915) 
* Remove list:self from main

As per futher discussions, we won't be supporting this, in favor of
simply read:self and cancel:self (since listing now already filters out
items on which you have no permissions).

This doesn't remove list:self entirely from the code base as much of
that will simply be converted to read:self and cancel:self -- that will
be in a later PR. However, with this removed if we want to release we
won't expose an API publicly that isn't going to stick around.
 2021-02-05 14:01:03 -05:00
Louis Ruch 6e40d8e483 Update anon listing test (#917) 2021-02-05 14:00:19 -05:00
Louis RuchandJeff Mitchell 628a02ad15 Scope role grants (#913) 
* Add scope read grant to default roles

* Update CHANGELOG.md

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2021-02-05 09:41:48 -08:00
Jeff Mitchell 1afa3a4b6c Disallow an invalid grant format (#914) 2021-02-05 12:39:55 -05:00
Jeff Mitchell 942fa7bc9c Update to Go 1.15.8 2021-02-05 11:11:56 -05:00
Jeff Mitchell b8a953ba53 Add anon listing test 2021-02-04 16:02:20 -05:00
Jeff Mitchell 08686ef6f5 Update Jeff libs :-) 2021-02-04 14:41:56 -05:00
Jeff Malnick be90a23fdb update docker config for boundary to remove the controllers setting (#906) 2021-02-03 17:49:00 -08:00