CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,311 Commits 7 Branches 2 Tags
4e8e069c9ce895394c611d0a5d10fd3956eb4dac
Commit Graph
4311 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] 4e8e069c9c Result of tsccr-helper -log-level=info gha update -latest . (#5063) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2024-09-03 15:19:21 -04:00
David Bond 660e2063a4 Return HTTP 400 status for inactive OIDC auth methods (#5048) 
This commit modifies the OIDC authentication start method to return a 400 (Bad Request) error
if a client attempts to start the authentication flow against an OIDC auth method that is set to
inactive. This is something we noticed in our error logs in HCP Boundary that is impacting our
SLOs.

Previously this returned its own error code which is mapped to a 500 response. Tests have been updated
to catch this new scenario.

Signed-off-by: David Bond <davidsbond93@gmail.com>
 2024-08-30 16:33:18 +01:00
Johan Brandhorst-Satzkorn 59fd2d4595 e2e: replace '%s' with %q (#5058) 
%q handles quotes inside the quoted strings better.
 2024-08-29 15:50:19 -07:00
Elim Tsiagbey 306c722750 feat: Add support for capturing URL actions in request info (#5044) 
* feat: Add support for capturing URL actions in request info

- Pass request context to services to validate actions.
- Validate actions for auth methods during authentication. `/v1/auth-methods/{{AUTH_METHOD_ID}}:authenticate:callback` is currently only supported on `OIDC` auth methods. An error is thrown if `:callback` is not supported
 2024-08-29 17:14:42 -04:00
Johan Brandhorst-Satzkorn 4a031d9910 api: remove items deleted during refresh pagination (#5056) 
The API automatically paginates to the end of a pagination,
and would take into account any items updated and subsequently
removed since the last pagination. It now also removes any items
removed during the current pagination.
 2024-08-29 12:43:54 -07:00
Elim Tsiagbey 84707c04cb feat: Disable path length fallback (#5050) 
Add `WithDisablePathLengthFallback()` runtime option to the grpc-gateway mux HTTP server. This prevents the issue where the request method can be overridden with a `X-HTTP-Method-Override` header.
 2024-08-28 09:30:05 -04:00
Johan Brandhorst-Satzkorn 96688b36d5 internal/daemon: simplify time update tests (#5041) 
Using time.After makes the intent clearer
 2024-08-27 11:00:04 -07:00
Elim Tsiagbey 123286cf94 feat: Validate LDAP URL port number (#5046) 
Add validation for the port number in LDAP URLs. If a port number is provided, it is checked to ensure it is a valid integer and within the valid range. This validation helps prevent errors when configuring LDAP authentication.
 2024-08-27 11:27:14 -04:00
Johan Brandhorst-Satzkorn 50ead47427 ci: refuse to backport if migrations changed (#5035) 2024-08-23 12:07:07 -07:00
Dan HeathSorawis Nilparukstellarsquall
 		8ee9057960 docs: Update release notes (#5030) 
* docs: Update release notes

* docs: Rephrase item

* docs: Add Important changes table to 0.17.1

* docs: Add info about wget and health checks

* docs: Fix typos

* docs: Minor rewrite

* code block fixes, style guide enhancements, metadata description refresh

* docs: Update location of wget binary

* docs: Fix bulleted list

* Update website/content/docs/operations/health.mdx

Co-authored-by: Sorawis Nilparuk (Bo) <sorawis.nilparuk@hashicorp.com>

* docs: Updates based on feedback

---------

Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>
Co-authored-by: Sorawis Nilparuk (Bo) <sorawis.nilparuk@hashicorp.com>
 2024-08-22 17:14:39 -04:00
Dan Heath c025e44ccb docs: Document recorded session max size (#5025) 2024-08-22 17:12:46 -04:00
Elim Tsiagbey 8885ce8528 Update changelog for 0.16.3 & 0.17.1 (#5032) 
* Update changelog for `0.16.3` & `0.17.1`
 2024-08-22 16:57:07 -04:00
Elim Tsiagbey e6d355b65a fix: constant-time comparison of grpc-gateway tickets (#5031) 
Update GRPC Gateway tickets to compare tickets in constant-time
 2024-08-21 12:26:22 -04:00
Hugo 1c62470ba6 chore(cmd): Move FlagClientAgentPort and flagTargetDefaultPort to uint16 2024-08-21 13:55:58 +01:00
Hugo 3e3f2153c0 feat(cmd): New Uint16 flag type 2024-08-21 13:55:58 +01:00
Hugo bf9dbd818e chore(cmd): Remove IntVar and move to Int64Var 2024-08-21 13:55:58 +01:00
Hugo 3195dcba4e chore(cmd): Remove UintVar and move to Uint64Var 2024-08-21 13:55:58 +01:00
Hugo abb2d50494 fix(worker): Use 16-bit int parsing for TCP port 2024-08-21 13:55:58 +01:00
Hugo 6f370c1189 fix(api): Check MaxRetries integer bounds 2024-08-21 13:55:58 +01:00
Johan Brandhorst-Satzkorn 8e95a7eb86 Merge pull request #5026 from hashicorp/jbrandhorst-upgrade-go 
all: upgrade Go to 1.23.0
 2024-08-16 10:27:16 -07:00
Johan Brandhorst-Satzkorn 9f6fc8b26c ci: don't fail on cache miss 
Other parts of CI do not fail on cache miss, and it might
be necessary to allow it to fail to successfully restore it later.
 2024-08-15 15:46:09 -07:00
Johan Brandhorst-Satzkorn 6c4db8b6c0 all: upgrade Go to 1.23.0 2024-08-15 12:23:12 -07:00
Louis Ruch a3788ab978 fix(policy): Cascade delete policy when scope is deleted (#5014) 2024-08-14 09:03:17 -07:00
Michael Li 05f281673e test(e2e): Add test for worker api tags (#5005) 
* test(e2e): Add test for worker api tags

* CR: Add additional check for an API tag that's the same as a config tag
 2024-08-14 11:58:27 -04:00
Sorawis Nilparuk (Bo) 350ac90a57 implement configurable getDownstreamWorker timeout (#5007) 
* implement configurable getDownstreamWorker timeout

* add parsing test

* typos

* fix tests

* fix worker tests

* 0 is a valid value
 2024-08-13 14:27:39 -07:00
dani 1a8e954513 fix: failing to upload large session recordings using minio plugin (#5013) 2024-08-13 17:14:58 -04:00
Hugo 903039e885 fix(daemon): Return 404 if alias interceptor ResolveRequestIds fails (#5006) 2024-08-13 14:24:01 +01:00
daniDanielle MiuElim TsiagbeyLisbet Alvarez
 		bad65ac0e1 0.17.0 Changelog (#4945) 
* add changelog sections

* doc: add changelog for storage bucket credential

* add ui changes to changelog

* fix indenting & parentheses

---------

Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
Co-authored-by: Elim Tsiagbey <elim.tsiagbey@hashicorp.com>
Co-authored-by: Lisbet Alvarez <lisbet.alvarez@hashicorp.com>
 2024-08-06 16:56:56 -07:00
Dan Heath 3dfe4ac111 docs: Fix broken anchor link in Credential management (#4998) 
* docs: Fix broken anchor link in Credential management

* docs: Update link titles
 2024-08-06 15:12:33 -04:00
Johan Brandhorst-Satzkorn a77769fdb6 internal/server: only use non-nil tags (#4996) 2024-08-06 09:17:40 -07:00
Damian Debkowski 5707a64b20 fix(db): remove storage_plugin_storage_bucket_secret-rewrapping-job table (#4993) 2024-08-02 09:08:16 -07:00
Jim 28b465e4b8 refact: to use go-dbw CreateItems, DeleteItems (#4974) 
* refact: to use go-dbw CreateItems, DeleteItems

Latest version of go-dbw updated the signature of
CreateItems(...) and DeleteItems(...) on a happy
note this latest version of go-dbw actually does
batch inserts and updates for this functions.

* all: regenerate protos with new protoc-gen-go version
 2024-08-01 11:18:53 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] b24f6dcee8 Result of tsccr-helper -log-level=info gha update -latest . (#4989) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2024-08-01 10:58:46 -04:00
Dan Heath 9805a7357c docs: Update link in 0.17.0 release notes (#4985) 2024-07-31 19:03:13 -04:00
Dan Heath 7ebc851f56 docs: Release notes 07-31 (#4978) 
* docs: Release notes 07-31

* docs: Updates based on feedback
 2024-07-30 17:21:25 -04:00
Dan HeathMichael LiRobin BeckRobin Beck
 		bbbe971ed1 docs: Move permissions to config for usage docs (#4962) 
* docs: Move permissions to config for usage docs

* docs: Update permissions concepts (#4970)

* docs: Update permissions concepts

* docs: Delete comments

* docs: Structural edits and adding workflow

* docs: Fix wording

* docs: Change guide name, add resource table

* Rab manage roles refactor (#4980)

* refreshes the manage-roles docs

* adds href for common-workflows/manage-roles to configuration/identity-access-management

* docs: Fix a couple typos

* docs: Style updates

* docs: Fix image links, update alt text

* docs: Add more info/next steps sections

* docs: Remove number for single instruction

* fixes screenshot

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* updates path to resource-table.mdx

* sets aliases scope to Global

* updates aliases scope in resource table

* clarifies assigned scope id

* Update website/redirects.js

Co-authored-by: Michael Li <michael.li@hashicorp.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Michael Li <michael.li@hashicorp.com>
 2024-07-30 17:21:09 -04:00
dani af0e89c328 update github.com/docker/docker to v27.1.1+incompatible (#4984) 2024-07-30 15:39:49 -04:00
Dan Heath 490e23cfa6 docs: Add Desktop fix to known issues 0.15.x and 0.16.x (#4976) 2024-07-30 15:26:20 -04:00
Dan HeathRobin BeckHugoElim Tsiagbey
 		c4a01eb398 docs: Add S3 compliant storage (#4954) 
* docs: Add S3 compliant storage

* docs: remote storage state (#4949)

* docs: remote storage state

document new remote storage state on the worker

* docs: Add link on worker storage page

* docs: Address feedback

* docs: Call out example

* docs: Fix a typo

* Update website/content/docs/configuration/session-recording/create-storage-bucket.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Apply batch of suggestions from code review

Co-authored-by: Hugo <10965479+hugoghx@users.noreply.github.com>

* docs: Clarify support statement

* docs: Revise support statement

---------

Co-authored-by: Elim Tsiagbey <elim.tsiagbey@hashicorp.com>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Hugo <10965479+hugoghx@users.noreply.github.com>
 2024-07-30 14:40:28 -04:00
Damian Debkowski 85b9adea81 feat(loopback): support dynamic credentials (#4982) 2024-07-30 10:15:57 -07:00
Irena Rindos 48038c3c33 chore: update grpc to 1.61.1 (#4983) 2024-07-30 12:59:15 -04:00
Robin BeckandDan Heath efc6f54e98 Worker tags tabbed workflows (#4952) 
* adds UI and CLI tags workflow in tabbed format

* adds /ui folder to improve organization, adds worker tags images

* adds tip for terraform workflows

* docs: Style updates

* docs: Fix broken image

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-07-29 15:45:09 -06:00
Elim Tsiagbey b0662dbf09 feat: add SBC state to feature manager (#4971) 2024-07-26 16:08:17 -04:00
Lisbet Alvarez 126c4f55a0 chore: update ui commit to 219eba6 (#4969) 2024-07-26 10:51:15 -07:00
dani cc2f78e8a5 bump alpine image version to 3.20 (#4968) 2024-07-24 16:03:50 -04:00
Dan Heath 06141b4f72 docs: Clarify aliases and scopes (#4966) 
* docs: Clarify aliases and scopes

* docs: trigger a new build
 2024-07-24 14:47:49 -04:00
Elim Tsiagbey f9c5d66dc4 bump aws plugin to fix SBC state error (#4963) 2024-07-24 12:35:21 -04:00
Dan Heath d4e9bc02ae docs: Update roles in permissions concept (#4958) 
* docs: Update roles in permissions concept

* docs: Revise intro paragraph
 2024-07-24 11:05:22 -04:00
Irena Rindos 2191aa1d03 refact(session connection): remove session connection state table (#4617) 
* refact(session connection): remove session connection state table
 2024-07-23 14:19:21 -04:00
Lisbet Alvarez eb6e1b558d chore: bump ui commit to 25a99a4 (#4957) 2024-07-23 10:03:50 -07:00