CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
948 Commits 7 Branches 2 Tags
35eadd6e404b86fecfc7e42c15fd11314b3fdbc2
Commit Graph
948 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Lars Lehtonen 35eadd6e40 internal/db/schema: fix dropped test error (#948) 2021-02-18 08:27:08 -08:00
Jeff Malnick 2d850ac95c docs: clarify generated resources doc (#945) 2021-02-17 11:44:21 -08:00
Jeff Malnick 54ba53e894 docs: update link to releases page for DT client download (#944) 2021-02-17 10:28:17 -08:00
Zachary Shilton 27ff3f5f8d Bumps components to remove internal md processing (#936) 
* Use revised VTBL without internal marked processing

* Bump to react-hero without internal md processing
 2021-02-17 10:23:31 -05:00
Sam Salisbury 0e20514b2f fix 'make update-ui-version' (#933) 
- When using a branch name rather than a commit, the branch was not being
  updated to the latest version.
 2021-02-17 13:37:39 +00:00
Jim 958dba6d7f support a testing postgres URL (#935) 2021-02-16 20:39:09 -05:00
Jeff Mitchell bc565922fb Prep for release 2021-02-16 14:16:09 -05:00
Jeff Mitchell e426fcf20e Gofumpt 2021-02-16 14:14:53 -05:00
Jeff Mitchell e0099b4b85 Fix migration for Postgres 11 (#940) 2021-02-16 14:03:09 -05:00
Pete Pacent db6b54d260 Update desktop.mdx (#938) 
Add disclaimer for desktop client doc and releases link
 2021-02-16 10:17:36 -08:00
Jeff Malnick b8fe4083c1 Add initial Desktop docs (#930) 
* docs: initial desktop docs
 2021-02-12 15:38:41 -08:00
Jeff Mitchell c45916918a Revert "Update UI version" 
This reverts commit bab647b5e2.
 2021-02-12 14:22:36 -05:00
Jeff Mitchell 9761f1deee Prep for release 2021-02-12 11:53:32 -05:00
Jeff Mitchell d7afd08148 Update API dep 2021-02-12 11:47:16 -05:00
Jeff Mitchell 46f0f55a28 Update SDK in API 2021-02-12 11:46:02 -05:00
Jeff Mitchell 377d837df3 Update gen 2021-02-12 11:44:46 -05:00
s-christoff 5dc821a41e Add testing section for individual/user testing (#927) 2021-02-12 10:43:05 -06:00
Jeff Mitchell bab647b5e2 Update UI version 2021-02-12 11:29:04 -05:00
Jeff Mitchell 1ce09069a5 Move worker selection above session creation (#929) 
This prevents a session being created when no workers are available to
handle it.
 2021-02-12 11:05:33 -05:00
Jeff Mitchell 0993747702 Change server default allowed origin (#931) 2021-02-12 11:04:09 -05:00
Jeff Mitchell e9da3a871d Switch on CORS by default if not specified (#928) 2021-02-11 20:10:48 -05:00
Dane Harrigan 433998494a Use uint for internal types (#926) 2021-02-11 16:49:36 -05:00
s-christoff 6623be8bfb Refactor internal/auth to return domain specific errors (#905) 
* Refactor internal/auth to return domain specific errors
 2021-02-11 13:32:45 -06:00
Jeff Mitchell 22462cdd84 Add read:self and cancel:self to sessions; add dev unpriv user (#923) 
* Sessions support for read:self and cancel:self permissions. This is automatic with fallback; no API change is needed.

* Strips out values from listing if only self actions are allowed on the resource and the user ID is different. This prevents a default ACL of id=*;type=session;actions=read:self,cancel:self from causing all values to be visible when listing.

* Adds an unprivileged user to development/testing instances. This user has only default permissions plus the ability to authorize sessions in the default target.
 2021-02-11 13:14:18 -05:00
Jeff MitchellandJeff Malnick d279a906ce Allow public_cluster_addr to use an env var or file (#907) 
Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-10 20:22:02 -05:00
Jeff Mitchell 5266eb3269 Don't error worker filters if a key isn't found, treat it as a non-match (#900) 2021-02-10 15:59:31 -05:00
Jeff Mitchell c6fa737e51 Add a duplicate authenticate:login API verb (#912) 2021-02-10 15:43:59 -05:00
Jim ffcda56f40 a small refactor, so we can easily support options when creating new auth tokens. (#920) 2021-02-10 13:52:42 -05:00
Jeff Mitchell b61dd0ef36 Update schema version check text 2021-02-09 13:42:14 -05:00
Bryce Kalow f97ffebaaf chore: upgrade nextjs-scripts & next (#908) 2021-02-09 10:38:08 -05:00
Louis Ruch ff1293b983 Don't leak user ids in error messages (#916) 2021-02-05 13:17:13 -08:00
Todd Knight 9576c46a4b Update changelog with fix for issue #909. 2021-02-05 13:22:18 -07:00
Todd Knight 568594d1b3 Release the shared lock using a non cancelled context (#918) 2021-02-05 12:58:54 -07:00
Jeff Mitchell cb3980cb8c Remove list:self from main (#915) 
* Remove list:self from main

As per futher discussions, we won't be supporting this, in favor of
simply read:self and cancel:self (since listing now already filters out
items on which you have no permissions).

This doesn't remove list:self entirely from the code base as much of
that will simply be converted to read:self and cancel:self -- that will
be in a later PR. However, with this removed if we want to release we
won't expose an API publicly that isn't going to stick around.
 2021-02-05 14:01:03 -05:00
Louis Ruch 6e40d8e483 Update anon listing test (#917) 2021-02-05 14:00:19 -05:00
Louis RuchandJeff Mitchell 628a02ad15 Scope role grants (#913) 
* Add scope read grant to default roles

* Update CHANGELOG.md

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2021-02-05 09:41:48 -08:00
Jeff Mitchell 1afa3a4b6c Disallow an invalid grant format (#914) 2021-02-05 12:39:55 -05:00
Jeff Mitchell 942fa7bc9c Update to Go 1.15.8 2021-02-05 11:11:56 -05:00
Jeff Mitchell b8a953ba53 Add anon listing test 2021-02-04 16:02:20 -05:00
Jeff Mitchell 08686ef6f5 Update Jeff libs :-) 2021-02-04 14:41:56 -05:00
Jeff Malnick be90a23fdb update docker config for boundary to remove the controllers setting (#906) 2021-02-03 17:49:00 -08:00
Louis Ruch 178d4efa64 ICU-745/Refactor internal/session to new domain errors (#877) 
* Refactor internal/sessions to use domain errors
 2021-02-03 16:25:56 -08:00
s-christoff 81785e139f [enhancement] Refactor authtoken repo to return domain specific errors (#876) 2021-02-03 17:34:46 -06:00
Jeff Mitchell bd7322dfb8 Fix changelog whitespacing 2021-02-03 09:03:12 -05:00
Jeff Mitchell 61ec5b47e4 When running single-server mode, use public_cluster_addr if given (#904) 
When running single-server mode, use public_cluster_addr if given

Right now you don't need to specify a controller address and we use the
cluster listener address; this allows overriding it to the
public_cluster_addr if one is given.

If `controllers` is specified we allow it to be either the cluster
listener or the public cluster address if one is specified before trying
to parse and use it.
 2021-02-03 08:58:42 -05:00
Jeff Mitchell 3a3b664efb Changelog #901/902 2021-02-02 20:51:44 -05:00
Kevin Maris 8a8b2fb8e1 Fix nil TLSClientConfig (#901) 2021-02-02 20:50:30 -05:00
Jeff Mitchell 7cf74596bf Update info output key name 2021-02-02 18:42:52 -05:00
Todd Knight 02cd972043 Create Sessions List Self Action (#888) 2021-02-02 13:37:32 -07:00
Louis Ruch 06c59e19bd Add worker filter to create target tests (#899) 2021-02-02 11:03:47 -08:00