CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,096 Commits 7 Branches 2 Tags
46d7613e2ddadb60ce0b3f084e6865207e768830
Commit Graph
186 Commits
Author SHA1 Message Date
Susmitha Girumala bdea6e16b3 docs:desktop: Remove beta notification in getting started guide (#1128) 2021-04-15 10:44:29 -04:00
Jeff Mitchell 59939e768c Re-add information about passing args and templated values in args 2021-04-14 17:35:07 -04:00
Jeff Mitchell 344880dafc Fix indentation in tags example 2021-04-14 16:27:37 -04:00
Jeff Mitchell c54aedcf1a By default, add Boundary Desktop's origin to allowed CORS origins (#1121) 
This also adds support for a flag to disable this behavior.

Fixes #1093
 2021-04-14 16:26:21 -04:00
Pete Pacent 09326fa69e Update roadmap 2021-04-14 12:45:53 -07:00
Pete Pacent 4c370beed5 Fix typos 2021-04-14 12:43:59 -07:00
Pete Pacent 761e2766df Add nav and What's New Section 2021-04-14 12:32:41 -07:00
Pete Pacent 5cef23c9ac Adding preliminary release notes for 0.2.0 2021-04-14 12:18:05 -07:00
Jim 24dd92f3f9 update fmt formatting. (#1113) 2021-04-13 19:48:39 -04:00
Jeff Mitchell 941e74388a Fix curl string building (#1106) 
I'm not sure why it was doing it the other way with assuming the string
being built would always have a space at the end, but, this way is
easier to understand and fixes a bug where there wasn't a space being
left between some fields.
 2021-04-13 16:08:51 -04:00
Todd Knight 14c222709c Make oidc auth callback redirect on most errors (#1105) 2021-04-13 09:21:26 -07:00
Jeff Mitchell e8814e55f8 Copy missing text from TCP listener to Unix listener 2021-04-13 11:40:04 -04:00
Jeff Mitchell 90b30bad25 Use 202 for token polling endpoint instead of 204 (#1103) 2021-04-12 14:57:14 -04:00
JimTodd KnightJeff MitchellMichael Gaffney
 		dd0f34bc35 Add new OIDC auth method. (#1090) 
Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com>
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>
 2021-04-08 20:54:32 -04:00
John Reese c096157cf9 Fix spelling errors found in the documentation (#1073) 2021-04-08 12:14:36 -04:00
Bryce Kalow bd8cc5464e feat(website): migrates nav data format and updates docs pages (#1049) 
* migrates nav data format and updates docs pages

* removes sidebar_title from content files

* updates api docs to work with new format
 2021-04-05 13:04:57 -04:00
Jeff Mitchell 6605b4c9f8 Revamp authenticate (#1025) 2021-03-24 16:07:43 -04:00
Alex Harness 79283d93ac docs: Clarify note on VAULT_TOKEN env variable (#1026) 
A slight update for clarity regarding the wording of the Note regarding the recommendation of using the 'VAULT_TOKEN' environment variable as opposed to using the token parameter in the configuration file.
 2021-03-24 14:17:55 -04:00
Randall Morey e3c30defbe docs: clarify CORS configuration options (#1011) 
* docs: clarify CORS configuration options

* docs: use double quotes
 2021-03-18 08:48:37 -07:00
Jeff Mitchell af47d04002 Clarify that TLS parameters in listeners are valid only for api usage. 2021-03-17 12:22:51 -04:00
grantorchard a95d2ff83c Workers connect to controlles on 9201, not 9202 (#991) 2021-03-16 15:09:09 -07:00
Susmitha Girumala aa2054d684 Update desktop guide to beta release (#993) 2021-03-11 10:50:37 -05:00
Jeff Mitchell 9fbb552031 Update shared-secure-libs to support tls_max_version 2021-03-09 08:33:35 -05:00
Jeff MitchellandLouis Ruch bb4e0f5c01 Update getting started to clarify CLI usage (#975) 
Co-authored-by: Louis Ruch <louisruch@gmail.com>
 2021-03-03 13:29:17 -05:00
Jeff Mitchell 888e0c88a9 Slight website wordsmithing 2021-03-03 11:38:47 -05:00
Jeff Mitchell 519efa6dd1 Add -filter to CLI listing and website docs (#967) 
* Add -filter to CLI listing.

This doesn't include docs/Changelog yet, that will come shortly.

* Add changelog

* Add website docs and fix a curl output bug
 2021-03-01 09:23:17 -08:00
Jeff Mitchell 4738ceee5d Add TLS certificate and worker tag reloading on SIGHUP (ICU-1142) (ICU-1143) (#959) 2021-02-25 17:57:10 -05:00
Jeff Mitchell 72aa110f72 CLI JSON updates (#962) 
See Changelog for details.
 2021-02-25 12:43:17 -05:00
Jeff Malnick 02fabe21c5 docs: add brew install instructions (#951) 2021-02-24 11:02:47 -08:00
Jeff Mitchell 341e7aff0d CLI Generation (#953) 2021-02-23 19:06:39 -05:00
Jeff Mitchell 1906a7311b Fix some documentation that was not correct 
TLS listener docs were pulled from Vault but we don't actually have
SIGHUP enabled yet.
 2021-02-22 15:44:40 -05:00
Susmitha Girumala 3c33d05c96 docs: Add desktop client videos (#947) 
* Add desktop client videos

* docs: refactor desktop video style

* docs: add wrapper for tabs to load videos correctly

* docs: add desktop video to homepage
 2021-02-18 14:12:51 -05:00
Jeff Mitchell b40fb8bd07 Minor update to TLS doc 2021-02-18 13:48:13 -05:00
Jeff Mitchell 505eed246d Minor update to data encryption bang box 2021-02-18 13:46:44 -05:00
Aiman Ismail b452c1f46f Fix typo Boundary name (#946) 2021-02-18 08:28:52 -08:00
Jeff Malnick 2d850ac95c docs: clarify generated resources doc (#945) 2021-02-17 11:44:21 -08:00
Jeff Malnick 54ba53e894 docs: update link to releases page for DT client download (#944) 2021-02-17 10:28:17 -08:00
Jeff Mitchell e426fcf20e Gofumpt 2021-02-16 14:14:53 -05:00
Pete Pacent db6b54d260 Update desktop.mdx (#938) 
Add disclaimer for desktop client doc and releases link
 2021-02-16 10:17:36 -08:00
Jeff Malnick b8fe4083c1 Add initial Desktop docs (#930) 
* docs: initial desktop docs
 2021-02-12 15:38:41 -08:00
Jeff Mitchell 22462cdd84 Add read:self and cancel:self to sessions; add dev unpriv user (#923) 
* Sessions support for read:self and cancel:self permissions. This is automatic with fallback; no API change is needed.

* Strips out values from listing if only self actions are allowed on the resource and the user ID is different. This prevents a default ACL of id=*;type=session;actions=read:self,cancel:self from causing all values to be visible when listing.

* Adds an unprivileged user to development/testing instances. This user has only default permissions plus the ability to authorize sessions in the default target.
 2021-02-11 13:14:18 -05:00
Jeff MitchellandJeff Malnick d279a906ce Allow public_cluster_addr to use an env var or file (#907) 
Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-10 20:22:02 -05:00
Jeff Mitchell 5266eb3269 Don't error worker filters if a key isn't found, treat it as a non-match (#900) 2021-02-10 15:59:31 -05:00
Jeff Mitchell cb3980cb8c Remove list:self from main (#915) 
* Remove list:self from main

As per futher discussions, we won't be supporting this, in favor of
simply read:self and cancel:self (since listing now already filters out
items on which you have no permissions).

This doesn't remove list:self entirely from the code base as much of
that will simply be converted to read:self and cancel:self -- that will
be in a later PR. However, with this removed if we want to release we
won't expose an API publicly that isn't going to stick around.
 2021-02-05 14:01:03 -05:00
Jeff Mitchell 1afa3a4b6c Disallow an invalid grant format (#914) 2021-02-05 12:39:55 -05:00
Jeff MitchellandJeff Malnick 6d2ab34087 Add initial filtering docs (#898) 
* Add initial filtering docs

Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-01 16:03:46 -08:00
Louis Ruch d65d4dbf6f Fix examples in website (#891) 2021-01-28 20:42:35 -08:00
Jeff Mitchell 0629526319 Add read/list/cancel:self actions and support for ACL subactions. (#882) 
Update perms table in anticipation of session support for these.
 2021-01-22 16:38:19 -07:00
Pete Pacent 93394156bf Adding roadmap and release notes updates (#859) 
* Adding roadmap and release notes updates

* fixing typo
 2021-01-21 16:18:39 -08:00
Michael Gaffney c141a050e5 Document Postgres permission requirements (#871) 
* Add semantic line feeds

* Document Postgres permission requirements

Closes #823
 2021-01-15 17:32:28 -05:00