CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,945 Commits 7 Branches 2 Tags
40688295093cf32bdaec5ebd9f4b7387da778e8e
Commit Graph
2395 Commits
Author SHA1 Message Date
Jeff Mitchell 4068829509 Merge pull request #4401 from hashicorp/jefferai-linter-fixes 
Fix linter warnings, parts 1 and 2
 2024-02-14 17:55:41 -05:00
Jeff Mitchell 49803e653c Linter fixes numero 2 (#4408) 2024-02-14 17:14:31 -05:00
Damian Debkowski 29c09f5bc2 fix(bsr): resolve race condition errors in signature file (#4393) 
* fix(bsr): resolve race condition errors in signature file

* chore(bsr): add comment to define purpose of mutex lock
 2024-02-14 10:33:20 -08:00
Jeff Mitchell 25bce9e8ff Fix linter warnings 2024-02-13 15:50:11 -05:00
Jim 3af259ff69 chore: update deps (#4394) 
* chore: update deps

* tests: update sqlmock tests for breaking chg

* tests (handlers): sort grants in checkEqualGrants(...)

sort the expected and got grants in
checkEqualGrants(...) to make the test more
deterministic.

* tests (asciicast): update backspace enc in TestEventMarshal(...)
 2024-02-13 10:50:06 -05:00
Louis Ruch d59f089819 feat(policies): Update SDK/API to support setting/clearing attributes (#4385) 2024-02-09 09:37:34 -08:00
Damian Debkowski d0b10b020e fix(bsr): acquire mutex lock on all methods of Sha256SumWriter (#4383) 2024-02-08 15:57:59 -08:00
Irena Rindos da30653486 commands: fix plurals (#4369) 
* commands: fix plurals
 2024-02-07 12:45:28 -05:00
Jeff Mitchell c4effc078b Remove some no-longer-needed x/crypto refs (#4371) 2024-02-06 16:17:32 -05:00
Jeff Mitchell 483f13226e Adjust tofu token check 2024-02-06 15:04:02 -05:00
ToddandJim eb6d0dbd6a Use the intercepted token always. If the keyring matches, use it from there (#4355) 
* Use the intercepted token if present, use it through the keyring if keyring contains it

* fixup! Use the intercepted token if present, use it through the keyring if keyring contains it

* Apply suggestions from code review

Co-authored-by: Jim <jlambert@hashicorp.com>

---------

Co-authored-by: Jim <jlambert@hashicorp.com>
 2024-02-06 11:46:28 -08:00
Yong Zhang e34d3bb415 Fix example scope id for role grants (#4348) 
* Rename example scope id

* revert newline at eof
 2024-02-02 17:35:05 -08:00
Todd acabfd7f2c boundary daemon add-token to return returns 403 Forbidden when Boundary returns the same (#4345) 2024-02-02 12:24:14 -08:00
Johan Brandhorst-Satzkorn d9c6de4e8b deps: update runc dependency (#4349) 
Fixes GHSA-xr7r-f8xq-vfvv
 2024-02-01 13:19:24 -08:00
Todd d500f24014 fix: boundary authenticate returns an API error code when auth fails (#4342) 2024-01-31 15:11:28 -08:00
ToddandJohan Brandhorst-Satzkorn d6c9db968a Fix calculating uptime after system sleep (#4332) 
* Fix calculating uptime after system sleep

* Update internal/clientcache/internal/daemon/status_handler.go

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-01-31 12:31:43 -08:00
Jeff Mitchell 18f863514e Finish sqltests for multi grant scopes (#4320) 2024-01-30 11:04:05 -05:00
Devon Anderson dbf19593ac Update Boundary to latest UI (#4322) 2024-01-30 07:49:12 -08:00
Todd 7e7e6369ae pass on the max search refresh timeout to server (#4321) 2024-01-29 15:38:45 -08:00
Jeff Mitchell 025fce6f95 Change error message and add beginnings of sql tests (#4319) 2024-01-29 16:02:16 -05:00
Devon Anderson 36c57cb918 Update Boundary to latest UI (#4318) 2024-01-29 12:26:42 -08:00
Todd 0705ed4e68 Do not try to autodiscover tokens when doing token lookups using provided tokens. (#4316) 2024-01-29 10:23:23 -08:00
Michael Li 25dff3322a test: Randomize docker network name (#4306) 
We were observing TestAuthorizeSession_Errors failing in CI due to it complaining that a docker network with name TestAuthorizeSession_Errors already exists. Looking deeper, it turns out that internal/daemon/controller/handlers/targets/tcp and internal/daemon/controller/handlers/targets/ssh both have a test with that same name, and for some reason, they often run on top of each other, causing one of the tests to fail to create a docker network.

To prevent any conflicts with tests that have the same name, this commit randomizes the network name that is created.
 2024-01-29 09:49:57 -05:00
ToddJeff MitchellJohan Brandhorst-Satzkorn
 		dde833e8cf Decrease number of flags shown for daemon/search (#4312) 
* Decrease number of flags shown for daemon/search
* Update changelog
---------

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-01-26 15:56:41 -08:00
Devon Anderson e85331448d Update Boundary to latest UI (#4313) 2024-01-26 18:53:55 -05:00
Jeff Mitchell 8e71caa2e3 Address some review feedback 2024-01-26 18:24:27 -05:00
Jeff Mitchell 296639e484 Add new GrantsForUser test (#4289) 
* Add new GrantsForUser test

This exercises a wide array of granting possibilities and ensures that
we see all of the desired grants and none that we don't expect.

* Address review feedback
 2024-01-26 11:59:40 -08:00
Jeff Mitchell 84c0e94097 Add a bit more useful worker auth output (#4308) 2024-01-26 14:54:00 -05:00
Michael Li 95ad3eab48 docs: Update resource table format (#3432) 2024-01-26 14:32:01 -05:00
Devon Anderson 6f1a7c1e41 Update Boundary to latest UI (#4307) 2024-01-26 13:52:36 -05:00
Todd b734c43cda return error when creating table fails (#4305) 2024-01-26 10:46:29 -08:00
Jim a61993abd7 fix (auth): event verify error (#4302) 2024-01-26 13:02:15 -05:00
Johan Brandhorst-Satzkorn 72c87e81cf internal/authtoken: use view for listing (#4284) 
Use the existing auth token account view for listing
instead of a custom query. Testing shows that the
performance difference is negligible, and this is simpler.
 2024-01-25 13:48:43 -08:00
Jeff Mitchell e91c4cbfe2 Remove support for 'id' field in grants (#4290) 2024-01-25 15:58:55 -05:00
Louis Ruch 7921ce22fd test(grant): Use ID to validate version check (#4274) 
* test(grant): Use ID to validate version check

* Update docs from id to ids

* Remove 'id' in 0.16.0
 2024-01-25 13:27:22 -05:00
Louis Ruch fe6126438e chore: Fix typos (#4285) 2024-01-25 09:43:40 -08:00
dani 6a55245394 fix(cli): StoragePolicyId indent on list scopes (#4279) 2024-01-25 12:27:36 -05:00
Johan Brandhorst-Satzkorn 133e928c6d internal/db/schema: update recording indexes (#4278) 
The new index includes the new delete_time and
delete_after columns, which are used in the list query.
 2024-01-25 08:56:15 -08:00
Todd e32a25f2a4 No longer enforce version matching between daemon and cli (#4271) 
* No longer check version matching between daemon and cli

* Add Log Service Handler and report if the daemon is running in background mode
 2024-01-24 16:26:15 -08:00
Jeff Mitchell 03825a5b8f Address some extra review feedback on multi scope grants (#4272) 2024-01-24 15:43:49 -05:00
Devon Anderson 7707524ebf Update Boundary to latest UI (#4270) 2024-01-23 12:56:14 -08:00
Jeff MitchellTimothy MessierTodd
 		f5dd457b34 Multiple grant scope IDs (#4251) 
Co-authored-by: Timothy Messier <tim.messier@gmail.com>
Co-authored-by: Todd <github@quaddi.com>
 2024-01-23 14:33:09 -05:00
Todd d0eb670dcf s/Full Fetch/Recheck Support/ in logs and expose filter query param to search command (#4269) 
* s/Full Fetch/Recheck Support/  and expose filter query param to command
 2024-01-22 17:39:52 -08:00
Todd 0dac9005c1 Boundary auth without a keyring configured behaves like -keyring-type none (#4268) 2024-01-22 16:40:23 -08:00
Louis Ruch fa69ddcb8a fix(db): Set max storage policy days (#4267) 2024-01-22 16:00:17 -08:00
Jim 6a37c93d77 fix: properly handle rows.Err() (#4261) 
* fix (auth): properly handle rows.Err()

* fix (auth/ldap): properly handle rows.Err()

* fix (auth/oidc): properly handle rows.Err()

* fix (auth/password): properly handle rows.Err()

* fix (authtoken): properly handle rows.Err()

* fix (credential): properly handle rows.Err()

* fix (credential/static): properly handle rows.Err()

* fix (credential/vault): properly handle rows.Err()

* fix (db): properly handle rows.Err()

* fix (db/schema): properly handle rows.Err()

* fix (db/migrations): properly handle rows.Err()

* fix (host): properly handle rows.Err()

* fix (host/plugin): properly handle rows.Err()

* fix (host/static): properly handle rows.Err()

* fix (iam): properly handle rows.Err()

* fix (kms): properly handle rows.Err()

* fix (oplog): properly handle rows.Err()

* fix (pagination/purge): properly handle rows.Err()

* fix (plugin): properly handle rows.Err()

* fix (job/scheduler): properly handle rows.Err()

* fix (server): properly handle rows.Err()

* fix (session): properly handle rows.Err()

* fix (target): properly handle rows.Err()
 2024-01-22 14:03:40 -05:00
Jim c6714c1302 refact: remove used limit parameter in query funcs (#4263) 2024-01-22 14:02:50 -05:00
Jim 81c217c1b0 refact (authmethods): remove used list auth methods (#4264) 2024-01-22 14:02:24 -05:00
Jeff Mitchell 3414e09cbb Remove announced deprecated code allowing ports in target addrs (#4265) 
We made it an error in the API to do this a while back; this cleans up
the logic to disallow it for existing targets too.
 2024-01-22 13:49:17 -05:00
Todd 30066c06f5 Add log location to the status output (#4260) 2024-01-22 08:42:19 -08:00