CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,092 Commits 7 Branches 2 Tags
358f5a61fb80f49bdd6db0bdbc928eb0fc34df02
Commit Graph
664 Commits
Author SHA1 Message Date
Jim 358f5a61fb bump protoc to v3.15.8 (#1147) 2021-04-18 21:34:25 -04:00
Michael Gaffney ea0e2e5df4 Add tests for common.BuildUpdatePaths (#1143) 2021-04-18 11:00:38 -04:00
Michael Gaffney 78159eef9c Fix godoc spelling and white space 2021-04-17 12:36:21 -04:00
s-christoff 0f424f6f7f Refactor internal/servers/controller/handlers errors v2 (#1099) 2021-04-16 12:06:03 -05:00
Jeff Mitchell be10cc4b42 Update grpc/proto deps (#1136) 
* Update grpc/proto deps

* Make gen
 2021-04-15 14:11:23 -04:00
Jeff Mitchell 7062bc70f0 Fix bug causing CORS to accept all origins by default (#1134) 2021-04-15 13:33:52 -04:00
Jeff Mitchell afe828c118 Update returned information in list responses for anon user (#1127) 2021-04-14 17:19:02 -04:00
Susmitha Girumala 5ce21e118e ui: Bump ui version to latest (#1125) 2021-04-14 17:01:22 -04:00
Jeff Mitchell 604d642e1e Restrict auth method listing for u_anon (#1122) 
This keeps only essential information in list output for auth methods
when the user is u_anon. Boundary's default is to allow listing of
auth methods for anonymous users to allow discovery of authentication
points, but there's no need to return more information about internal
configuration than necessary.
 2021-04-14 16:49:08 -04:00
Jeff Mitchell c54aedcf1a By default, add Boundary Desktop's origin to allowed CORS origins (#1121) 
This also adds support for a flag to disable this behavior.

Fixes #1093
 2021-04-14 16:26:21 -04:00
Jim e0e6e58bb2 better api error codes from OIDC auth method update/change-state operations (#1116) 2021-04-14 15:00:20 -04:00
Todd Knight fad9f6d525 Allow oidc accounts to be add|set|removed to users. (#1117) 2021-04-14 11:34:17 -07:00
Jeff Mitchell c57841fa2e Update wording for user not found to indicate the auth method isn't primary for the scope 2021-04-14 13:27:03 -04:00
Todd Knight dc881e65d4 Fix alignment for Is Primary For Scope field and values for listing. 2021-04-14 10:25:25 -07:00
Michael Gaffney 5855930921 Renumber migrations in the '2/' directory to start at 01 (#1114) 2021-04-14 11:47:21 -04:00
Jim 6c003c94f7 add "Is Primary" to auth method CLI output (#1115) 2021-04-14 11:36:42 -04:00
Jim Lambert 06df7e0240 updated UI_COMMITISH 2021-04-13 20:24:32 -04:00
Todd Knight 072b950540 Filter inactive and private oidc auth methods from unauthenticated list requests (#1110) 2021-04-13 16:42:25 -07:00
Jeff Mitchell ca57e50516 Add more OIDC error output. (#1108) 
Some of this is in the form of logging, and some via returning error
messages to users.

Also cleans a couple of linter complaints.
 2021-04-13 19:07:50 -04:00
Jeff Mitchell 412018fbb4 Update misleading Authenticated bool with new name and explanation. (#1111) 2021-04-13 17:55:40 -04:00
Jim f8f66abcf4 regen proto (#1109) 2021-04-13 17:10:14 -04:00
Todd Knight 53ec3c44bc Auth Method Listing matches other resources, remove repeated "Version" field. (#1107) 2021-04-13 10:34:13 -07:00
Todd Knight 14c222709c Make oidc auth callback redirect on most errors (#1105) 2021-04-13 09:21:26 -07:00
Jim d0f36f6a74 ensure that inbound auth method id matches request wrapper auth metho… (#1104) 2021-04-12 17:17:28 -04:00
Jeff Mitchell 90b30bad25 Use 202 for token polling endpoint instead of 204 (#1103) 2021-04-12 14:57:14 -04:00
Todd Knight 71673ea161 Pass disable_discovered_config_validation in the API change-state call (#1100) 2021-04-12 08:49:22 -07:00
Michael Gaffney 3130bd615e Fix go doc: remove sentence fragment 2021-04-12 11:32:27 -04:00
Jim 8f9c287233 properly handle ClientSecret updates (#1097) 2021-04-09 15:33:21 -04:00
Randall Morey 5500566fca chore: bump UI commitish to latest (#1096) 2021-04-09 13:30:00 -04:00
Jeff Mitchell f05f37d0fa Fix panic in non-generated API calls when printing as JSON (#1095) 
Fixes #992
 2021-04-09 13:09:51 -04:00
Jim 26c0c4479d send MaxAge when set for auth method (#1094) 2021-04-09 10:41:54 -04:00
JimTodd KnightJeff MitchellMichael Gaffney
 		dd0f34bc35 Add new OIDC auth method. (#1090) 
Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com>
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>
 2021-04-08 20:54:32 -04:00
s-christoff 5c5b07c04a Revert "Refactor internal/servers/controller/handlers errors (#1070)" (#1092) 
This reverts commit 21ac3cdddd.
 2021-04-08 19:20:36 -05:00
s-christoff 21ac3cdddd Refactor internal/servers/controller/handlers errors (#1070) 2021-04-08 17:48:57 -05:00
Michael Gaffney d3146992f1 Errors: add Code and Kind for external system errors (#1080) 2021-04-07 14:50:00 -04:00
Lars Lehtonen d3b72899f1 fix scopes double import (#1066) 2021-04-05 12:16:38 -04:00
Jeff Mitchell 6c48f6ea77 Use pointers for any Uber atomic values (#1044) 
BK clued me into the fact that for some types, similar alignment
problems exist as with the normal atomic package (e.g. 64-bit types on
32-bit architectures) if they are not pointer values. So change the few
places they weren't pointers to pointers.

None of these are 64-bit, but it feels like best practice for using the
library and should just standardize on it.
 2021-04-05 09:37:34 -04:00
Michael Gaffney aafbada3ae Remove calls to t.Helper() from test methods (not helpers) (#1063) 2021-04-02 19:40:51 -04:00
Jim c281e808d6 refactor to use WithOrderByCreateTime(...) (#1058) 2021-04-02 19:13:48 -04:00
Jim f21996d8ad refactor to use WithOrderByVersion(...) (#1059) 2021-04-02 18:19:48 -04:00
Louis Ruch 93bad3cb83 400 if account already assocaited (#1048) 2021-03-30 13:00:48 -07:00
Jeff Mitchell 17ad2410cd Add extra tags config test 2021-03-29 16:00:40 -04:00
Jeff Mitchell b05ed0bf65 If the database is already initialized, use 0 as the return value (#1033) 
This matches the migrations code, which treats the operation as
idempotent.
 2021-03-25 17:53:11 -04:00
Jeff Mitchell 3c430678ae Fix test scope errors (#1029) 
When using a disabled verifier context we were faking scope information. Due to other recent changes, this was now causing test errors. This adjusts that flow to actually query the DB, fixing tests and making them more like real code.
 2021-03-25 03:15:43 -04:00
Jeff Mitchell 6605b4c9f8 Revamp authenticate (#1025) 2021-03-24 16:07:43 -04:00
Jeff Mitchell aa570f4e48 Honor child scope list permissions when recursing (#1016) 
Current behavior is that you need list grant on the parent scope when
recursively listing, and this is sufficient. This is good for
administrative workflows but can be unintuitive for resources that only
exist at a project level. This change allows permissions on the child
scope to also be taken into account, so that you can start a recursive
list from a parent scope without direct list support on that scope but
still get back child scopes for which list access is granted.

This also fixes a bug where visibility of a scope for recursive listing
would be based on whether the user had list resources for roles within
that scope instead of for the resource type in question.
 2021-03-24 15:33:04 -04:00
Jeff Mitchell fcbf372881 Bump proto/grpc deps (#1017) 
* Bump proto/grpc deps

* Back out buf change

* Run make gen
 2021-03-20 16:12:01 -04:00
JimandLouis Ruch b39dff8140 New error codes. (#1019) 
* new error codes

* Add general system errors to API interceptor

Co-authored-by: Louis Ruch <louisruch@gmail.com>
 2021-03-20 06:52:47 -04:00
Louis Ruch ebdc08e5ff Skip hidden directories when generating version numbers (#1008) 2021-03-17 14:45:13 -07:00
Todd Knight 48ef25433f Fix creation of initial Scope roles (#996) 
* Fix the creation of initial roles and users so the admin has permission to list/read resources.

* Adding known permission issue to CHANGELOG.md.
 2021-03-16 08:42:08 -07:00