CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
386 Commits 7 Branches 2 Tags
33e7b4538e56df2cb4bf608fa015d3ff0116f332
Commit Graph
386 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Todd Knight 33e7b4538e WorkerCoordination and GetSession API refactoring (#354) 
* Possible api changes.

* Worker API update.

* Updating import alias name.

* Moving session down a level as a member of the GetSessionResponse.

* Marshal the auth flag into the GetSessionResponse proto instead of the session.
 2020-09-12 21:54:18 -07:00
Jeff Mitchell 2914b4c14c Use base58 for a few more user-facing values (#356) 2020-09-12 21:43:08 -04:00
Jeff Mitchell 1f80edbffc Add missing default-port flag to targets command (#355) 2020-09-12 14:06:28 -04:00
Jeff Mitchell 41ed95bdec Remove old-style pathing (#353) 2020-09-11 17:41:03 -04:00
Jeff Mitchell c1171e0cc6 Update API templates using list params (#352) 2020-09-11 16:49:31 -04:00
Jeff Mitchell b7524f8cfb Decode to both the struct and a map and add access (#349) 
This will allow for better TF integration.
 2020-09-11 00:51:55 -04:00
Jeff Mitchell c689af4306 Implement a TOFU mechanism on auth to worker (#348) 
This sets us up to better support multiple connections per session at
some future point.
 2020-09-10 23:25:40 -04:00
Jeff Mitchell 8445d4bbbc Add WithRecoveryKms option to test controller 2020-09-10 21:57:19 -04:00
Jim e119466233 stop oplogging tokens and allow for a time skew (#343) 2020-09-10 16:37:45 -04:00
Patrick Bernal fe1c0b7dcf get rid of some extra fields 2020-09-10 14:10:52 -04:00
Patrick Bernal a2dfeb938b update some references 2020-09-10 13:37:47 -04:00
Patrick Bernal 8ae1ae1596 Update and rename jira_test.yml to jira.yml 2020-09-10 13:28:33 -04:00
Jeff Mitchell 60396e4384 Properly populate ScopeInfo from group member actions (#340) 2020-09-09 11:37:23 -04:00
Jeff Mitchell 535bca5a7a Make Authenticate less misleading 
Because clients clone in the API now, setting the token on the
authtokens client may mislead the user into thinking it's setting it on
the base client. Remove that set call.
 2020-09-09 10:33:23 -04:00
Jeff Mitchell ff0d49b6e4 Use previous method of getting recovery wrapper 2020-09-09 01:29:35 -04:00
Jeff Mitchell f8237fb945 Move some packages into SDK, out of internal 2020-09-09 01:24:25 -04:00
Jeff Mitchell 36f975a952 Add some recovery KMS functions needed for external clients (#339) 2020-09-09 01:15:29 -04:00
Jeff Mitchell f94f21fd97 Update API codes (#336) 2020-09-08 23:57:26 -04:00
Todd Knight 99d5456d7a Scopes type field and types in updates allowed (#335) 2020-09-08 16:04:19 -07:00
Todd Knight c3ecea172d Generate new version of SDK resources and Add Tests (#331) 2020-09-08 16:27:51 -04:00
Jim 96e4b1cdba add option db.WithSkipVetForWrite(true) so the db tests don't get intercepted by app validation (#332) 2020-09-07 13:20:49 -04:00
Todd Knight 1c2c078e0a Adding Authz checks that support new pathing (#328) 2020-09-04 14:48:11 -07:00
Jim 3d944a616f fix name typo (#330) 2020-09-04 17:11:51 -04:00
Jeff Mitchell 26ac00e67b Fix asset generation. 
Apparently now it's not recursive?
 2020-09-04 16:27:51 -04:00
Jeff Mitchell 23156afa11 Add in most of the proxy flow (#326) 2020-09-03 13:24:34 -04:00
Jeff Mitchell 1822c47ef5 Migrate KMS code to the new database DEKs (#324) 2020-09-03 13:23:46 -04:00
Todd Knight c55153ff3d Fix allowed scope checks and added tests for creating in global scope. (#327) 2020-09-03 08:02:30 -07:00
Michael Gaffney 4ae3a52056 Define session database schema (#322) 
* Define session database schema

* Update comments

* Add insert trigger for session state

* Add canceling state and update foreign keys to 'set null' on delete
 2020-09-03 10:49:27 -04:00
Todd Knight 37e56ab46b Pathing updated to support new and old styles (#323) 2020-09-02 19:43:41 -07:00
Jeff Mitchell 2a98432143 Fix test build 2020-09-02 21:40:34 -04:00
Jeff Mitchell cad7bb3ead Don't use 2 suffix when only new style is enabled (#325) 2020-09-02 21:23:43 -04:00
Todd Knight 5553fd989f Host Set and Target SDK Generation using new Pathing (#320) 
* Adding new style template starts.

* Host-set crud changes generated and tested.

* Add templates for every resource with the new pathing.  Only host-sets has testing or the backed pathing.

* Only generate new style API if requested in the input.  Have disabling old be opt in.
 2020-09-02 12:31:30 -07:00
Jim f29869b715 support for additional deks: oplog, session and token and new CreateKeysTx() (#321) 2020-09-02 14:37:19 -04:00
Jeff Mitchell ee35a92f7f Fix space issue in protobuf that apparently doesn't matter? Also apparently postgres migrations weren't run. 2020-09-02 13:38:07 -04:00
Jim f3dd62d5d8 database DEKs (#317) 2020-09-02 07:42:03 -04:00
Todd Knight 544e78b593 Target Handler and SDK CRUDL & add|set|remove-host-sets methods. (#310) 2020-09-01 15:05:46 -07:00
Todd Knight 24ec9620ca fix: Correct missed name updates to OutgoingInterceptor. 2020-09-01 10:08:18 -07:00
Jeff Mitchell c4522aa813 Update host sets and auth system to new paradigm (#319) 2020-09-01 12:31:54 -04:00
Todd Knight 0aba6db720 Enable Split Cookies (#318) 2020-09-01 09:23:41 -07:00
Jeff Mitchell a4c20164f3 Add add/remove/set hosts functions to host-sets command (#316) 2020-08-31 10:06:21 -04:00
Jim 09112d1e96 refactor and remove kms/common pkg (#315) 2020-08-29 19:06:21 -04:00
Jeff Mitchell 514856c020 Fix broken CLI output 2020-08-28 15:58:15 -04:00
Jeff Mitchell b8c8d29008 Switch ordering of CLI create/update vs static commands (#314) 2020-08-28 13:31:20 -04:00
Jeff Mitchell 1f065316ee Initial (#313) 2020-08-28 01:28:26 -04:00
Jeff Mitchell 20aef738c4 Add host-catalogs CLI command. (#312) 2020-08-28 00:17:09 -04:00
Jeff Mitchell 17ecb6f2ce Separate accounts/host catalogs/host sets into their own packages (#311) 2020-08-27 20:43:33 -04:00
Jeff Mitchell 936c970635 Remove unneeded and breaking test 2020-08-27 18:41:52 -04:00
Jeff Mitchell 28df6eb7b0 Update config encrypt/decrypt CLI command (#309) 
This updates the command to our emergent standards. It also enables
using a separate config file for a config kms, which allows non-string
values to be encrypted.

This allowed some nice cleanup as well.
 2020-08-27 16:38:44 -04:00
Jeff Mitchell 274afa6b02 Shave off an IAM lookup if the user is the anonymous user (#305) 
* Shave off an IAM lookup if the user is the anonymous user

* Fix build

* If authz failures are turned off, make the token type unknown instead of invalid

* Change returned token format when authz failures are disabled

* Change logic back

* Fix logic
 2020-08-26 23:28:38 -04:00
Jeff Mitchell b53812a5c1 Add ability to skip automatic auth method creation (#306) 
This is useful if you, for instance, want Terraform to be 100%
responsible for creation of resources (outside of the static ones that
cannot be removed or modified, like u_anon). This will mean using the
recovery mechanism for initial setup, but that isn't an issue once TF
supports that :-)
 2020-08-26 23:27:46 -04:00