CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,937 Commits 7 Branches 2 Tags
3af259ff69d40baef018ca46cb51d531194cb474
Commit Graph
337 Commits
Author SHA1 Message Date
Jim 3af259ff69 chore: update deps (#4394) 
* chore: update deps

* tests: update sqlmock tests for breaking chg

* tests (handlers): sort grants in checkEqualGrants(...)

sort the expected and got grants in
checkEqualGrants(...) to make the test more
deterministic.

* tests (asciicast): update backspace enc in TestEventMarshal(...)
 2024-02-13 10:50:06 -05:00
Jim a61993abd7 fix (auth): event verify error (#4302) 2024-01-26 13:02:15 -05:00
Jeff Mitchell e91c4cbfe2 Remove support for 'id' field in grants (#4290) 2024-01-25 15:58:55 -05:00
Louis Ruch 7921ce22fd test(grant): Use ID to validate version check (#4274) 
* test(grant): Use ID to validate version check

* Update docs from id to ids

* Remove 'id' in 0.16.0
 2024-01-25 13:27:22 -05:00
Jeff MitchellTimothy MessierTodd
 		f5dd457b34 Multiple grant scope IDs (#4251) 
Co-authored-by: Timothy Messier <tim.messier@gmail.com>
Co-authored-by: Todd <github@quaddi.com>
 2024-01-23 14:33:09 -05:00
Jeff Mitchell 3414e09cbb Remove announced deprecated code allowing ports in target addrs (#4265) 
We made it an error in the API to do this a while back; this cleans up
the logic to disallow it for existing targets too.
 2024-01-22 13:49:17 -05:00
Louis Ruch 22fcf8a2ba Projects do not have perm to attach/detach policy 2024-01-19 09:39:13 -08:00
Jeff Mitchell 253d79116c Swap id field in grants to ids since that's now standardized (#4250) 
* Swap id field in grants to ids since that's now standardized

* Fix some tests I missed

* Update generated resource table
 2024-01-17 23:54:49 -08:00
Jeff Mitchell e07503add4 Remove some long-standing commented code (#4242) 
This actually was implemented elsewhere for eventing but the commented
code wasn't removed. We can finally be free.
 2024-01-17 09:29:31 -08:00
Danielle Miu e903947bef Create delete_session_recording job and associated infra 2024-01-16 15:47:09 -08:00
Damian Debkowski 2dda19aafe fix: reapply-storage-policy 2024-01-16 13:53:44 -08:00
Louis Ruch f26243e9af feat(recording): Delete Session Recording 2024-01-16 13:53:44 -08:00
Damian Debkowski 0a853c2262 feat(handler): reapply storage policy unimplemented 2024-01-16 13:53:44 -08:00
Johan Brandhorst-Satzkorn 07be75b7be internal/handlers: add pagination to storage policies 2024-01-16 13:53:44 -08:00
Johan Brandhorst-Satzkorn b454b28912 internal/handlers: add policy list resource type 2024-01-16 13:53:44 -08:00
Louis Ruch 360dd616ff fix(rate-limiting): Add support for Scope-StoragePolicy actions 2024-01-16 13:53:44 -08:00
Louis Ruch 45de26bfe9 feat(scope): Add API for Attach/Detach StoragePolicy to scope 2024-01-16 13:53:44 -08:00
Damian Debkowski 6ca1bc3c3f feat(handlers): utilize service func for scope service 2024-01-16 13:53:44 -08:00
Hugo edbb33de5b feat(handlers): Implement Policy Service 
This also includes adding new grant and type primitives, as well as
package domain names.
 2024-01-16 13:53:43 -08:00
Jeff Mitchell 9332179a01 Remove the deprecated old KMS worker auth mechanism (#3935) 
This has been superceded by the nodeenrollment-based KMS worker auth
mechanism. This commit only removes the ability to connect with this
mechanism; some upgrade logic will remain intact for a bit and
can be removed later.
 2024-01-12 11:58:12 -05:00
Timothy Messier b3bc367534 feat(controller): Expose rate limiting headers via CORS (#4159) 
This adds a Access-Control-Expose-Headers response header to an Options
request to allow the rate limiting related headers to be accessible via
requests that are subject to CORS.
 2024-01-08 10:02:36 -05:00
Johan Brandhorst-Satzkorn 3daa55b913 internal/handlers: add scope list pagination 2024-01-05 07:43:21 -08:00
Michael Milton 52b1c1b4c7 Managed group list pagination (#4208) 
* wip

* managed groups pagination

* address PR comments

* missed one change
 2024-01-05 07:43:21 -08:00
Johan Brandhorst-Satzkorn b7e474d277 internal/handlers: add accounts pagination 2024-01-05 07:43:21 -08:00
Johan Brandhorst-Satzkorn f38c79a5ce internal/handlers: add host catalog pagination 2024-01-05 07:43:21 -08:00
Todd 40d9c3fd1d Paginate iam groups (#4194) 2024-01-05 07:43:21 -08:00
Michael MiltonandMichael Gaffney 8d50a0913f Auth Method list pagination (#4165) 
* wip

* implement list pagination for auth methods

* remove unused code

* update tests to fix sorting

* address PR comments

* simplify query, add token tests

* change test name

* wip sql testing

* add boolean column to indicate whether auth methods should be returned to unauthenticated users, remove secrets from api response

* is_active_public not null

* remove secrets and unwrapping

* move not null to immediately after data migration

* order public_id descending

* fix(db): Fix auth method migrations (#4193)

* wip

* fix db tests

* fix failing api tests

* reverse order of create time and update time in test

---------

Co-authored-by: Michael Gaffney <mike@gaffney.cc>
 2024-01-05 07:43:21 -08:00
Todd 0fad770d8a Paginate iam user (#4185) 
* paginate iam user
 2024-01-05 07:43:21 -08:00
Johan Brandhorst-Satzkorn 050bcdfec9 handlers/host_sets: implement pagination for host sets 
Adds protobuf types and handler logic to support pagination of host sets.
 2024-01-05 07:43:21 -08:00
Johan Brandhorst-Satzkorn f29d559d60 handlers/session_recordings: add pagination support 2024-01-05 07:43:21 -08:00
Johan Brandhorst-Satzkorn 24130c4313 handlers/storage_buckets: add pagination fields 2024-01-05 07:43:21 -08:00
Johan Brandhorst-Satzkorn 597ac645b2 internal/handlers: fix some comments 2024-01-05 07:43:21 -08:00
Johan Brandhorst-Satzkorn f89e53d5f0 internal/handlers: tidy up test times 2024-01-05 07:43:21 -08:00
Johan Brandhorst-Satzkorn 17b6ad5c5c handlers/hosts: implement pagination for hosts 
Adds protobuf types and handler logic to support pagination of hosts.
 2024-01-05 07:43:21 -08:00
Todd 5aa560387c Add pagination for iam Roles (#4161) 
* Add pagination for iam Roles
 2024-01-05 07:43:21 -08:00
Johan Brandhorst-Satzkorn df93313b9a all: fix test failures after rebase 
The stability of the authorized_actions have been removed in main,
so we need to add these sorts to all our new tests.
 2024-01-05 07:43:21 -08:00
Johan Brandhorst-Satzkorn 0259f2f26b internal/handlers: add credential store pagination 2024-01-05 07:43:20 -08:00
Todd 3558589c90 Return and consume InvalidListToken error code (#4141) 
* Return and consume InvalidListToken error code
 2024-01-05 07:43:20 -08:00
Todd 2d18f82c9f Rename refresh token errors to list error (#4138) 2024-01-05 07:43:20 -08:00
Todd b2fec2e4f0 Store and use refresh tokens in the client cache (#3857) 
* Refresh resources using refresh tokens
 2024-01-05 07:43:20 -08:00
Michael Milton 6ba3676c37 Auth token pagination (#4113) 
* Add pagination support for auth tokens

* change analyze count estimate comment

* adjust queries for efficiency and security

* even more efficient queries
 2024-01-05 07:43:20 -08:00
Johan Brandhorst-Satzkorn 6b03363eb8 internal/handlers: add credential library pagination 2024-01-05 07:43:20 -08:00
Johan Brandhorst-Satzkorn 9f6ac602ee internal/handlers: add credential pagination support 2024-01-05 07:43:20 -08:00
Michael Milton 9c3eb16046 Sessions list pagination (#4079) 
* Session list pagination refactor

* address pr comments, add explanatory comments, clean up sql queries, move tests into proper files

* fix build error

* fix test error
 2024-01-05 07:43:20 -08:00
Johan Brandhorst-Satzkorn 575e9641f8 Some pagination tweaks (#4074) 
* internal/target: fix some target tests

We had dupes and missing test cases, this fixes them.

* internal/handlers: move listtoken parsing into helper

This significantly simplifies the parsing logic needed in each handler.
 2024-01-05 07:43:20 -08:00
Johan Brandhorst-Satzkorn 00c4f825c7 handlers/targets: refactor for new pagination design 
Refactor the application layer to use the new domain layer
pagination functionality.
 2024-01-05 07:43:20 -08:00
Johan Brandhorst-Satzkorn f062a8cd75 internal/handlers: add list token helpers 
Mostly a rename from refresh token, but also a new helper
for assembling the final list token.
 2024-01-05 07:43:20 -08:00
Johan Brandhorst-Satzkorn 5984f5bba6 handlers/targets: add pagination support 2024-01-05 07:43:20 -08:00
Johan Brandhorst-Satzkorn a5b24e79b9 handlers: add refresh token helpers 
Helpers for parsing, marshalling and converting types
to domain types.
 2024-01-05 07:43:19 -08:00
Johan Brandhorst-Satzkorn 7b5a4be0ab internal/auth: add GrantsHash method to results 
The new GrantsHash method can be used to track changes
to a users grants across requests.
 2024-01-05 07:43:19 -08:00