Jim
2437cdcc8d
OIDC: add support for account claim maps ( #1186 )
2021-05-04 08:41:04 -04:00
Jim
25e657fa51
Ongoing OIDC: support to request additional OIDC scopes from the IdP ( #1175 )
2021-04-28 06:53:13 -04:00
Jeff Mitchell
4690225c1e
Update delete action behavior and JSON format output ( #1155 )
...
This PR changes delete behavior:
* On success, a 204 is returned rather than a 200 with an empty JSON object
* The CLI now passes through the 404 error if encountered instead of swallowing it
It also updates formatting for JSON to use the response body, which means that the item (or items) in the JSON format are actually the format across the wire, instead of being reinterpreted by unmarshaling into the Go SDK and then remarshaling.
2021-04-26 20:38:55 -04:00
Jeff Mitchell
77a85636c2
If we're going to use replace directives, use SDK too
2021-04-21 12:05:37 -04:00
Jim
75108cbc8b
Ongoing OIDC: return the primary account info along with the user. ( #1145 )
2021-04-20 20:33:56 -04:00
Jeff Mitchell
941e74388a
Fix curl string building ( #1106 )
...
I'm not sure why it was doing it the other way with assuming the string
being built would always have a space at the end, but, this way is
easier to understand and fixes a bug where there wasn't a space being
left between some fields.
2021-04-13 16:08:51 -04:00
Todd Knight
14c222709c
Make oidc auth callback redirect on most errors ( #1105 )
2021-04-13 09:21:26 -07:00
Todd Knight
71673ea161
Pass disable_discovered_config_validation in the API change-state call ( #1100 )
2021-04-12 08:49:22 -07:00
Jeff Mitchell
f05f37d0fa
Fix panic in non-generated API calls when printing as JSON ( #1095 )
...
Fixes #992
2021-04-09 13:09:51 -04:00
dd0f34bc35
Add new OIDC auth method. ( #1090 )
...
Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com >
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com >
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com >
2021-04-08 20:54:32 -04:00
Jeff Mitchell
6605b4c9f8
Revamp authenticate ( #1025 )
2021-03-24 16:07:43 -04:00
Jeff Mitchell
845f582213
Update api's sdk
2021-03-09 13:52:44 -05:00
Jeff Mitchell
519efa6dd1
Add -filter to CLI listing and website docs ( #967 )
...
* Add -filter to CLI listing.
This doesn't include docs/Changelog yet, that will come shortly.
* Add changelog
* Add website docs and fix a curl output bug
2021-03-01 09:23:17 -08:00
Jeff Mitchell
f5490e95a6
Sync API deps to main in preparation for tag
2021-02-25 12:41:18 -05:00
Jeff Mitchell
ea23737258
Port over API bits from #962 ( #965 )
2021-02-25 12:39:51 -05:00
Todd Knight
cac1e60e11
Add filters to listing different resources in the go sdk. ( #957 )
2021-02-22 13:31:17 -07:00
Jeff Mitchell
46f0f55a28
Update SDK in API
2021-02-12 11:46:02 -05:00
Kevin Maris
8a8b2fb8e1
Fix nil TLSClientConfig ( #901 )
2021-02-02 20:50:30 -05:00
Jeff Mitchell
9879841e00
Update SDK in API
2021-01-29 18:28:52 -05:00
Jeff Mitchell
6cd97a4a6e
Add support for recursive listing ( #885 )
2021-01-25 19:37:40 -05:00
Jeff Mitchell
6b58a3317d
Add recursive listing to roles ( #881 )
...
This also lays the framework for adding recursive listing to the rest of the resources.
2021-01-23 13:39:04 -05:00
Jeff Mitchell
717a3b52ee
Add worker tagging ( #862 )
...
This allows workers to have tags assigned to them, which can then be filtered to control which targets they are allowed to serve.
2021-01-21 16:27:20 -05:00
Jeff Mitchell
dcb15cffbd
Add authorized actions output on resources ( #870 )
2021-01-20 10:53:01 -05:00
Jeff Mitchell
27919ab11b
Groundwork for returning authorized actions ( #860 )
...
This returns authorized actions on targets to users when they perform an operation on a target, including listing. It also prevents users from seeing values in listing targets on which they have no permissions.
2021-01-13 14:42:37 -05:00
Jeff Mitchell
9de928318d
Skip curl output when using automatic versioning and reading ( #858 )
...
This makes it so that the actual output is the update/delete.
Fixes #856
2021-01-08 17:30:41 -05:00
Michael Gaffney and Jeff Mitchell
94cb79bbdd
See how Boundary would look with gofumpt applied ( #853 )
...
* See how Boundary would look with https://github.com/mvdan/gofumpt applied
Results of running `gofumpt -w -s .`
* Update tools file and Makefile for gofumpt
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com >
2021-01-07 10:02:32 -05:00
Jeff Mitchell
d4a6efb363
Pass endpoint to the client ( #811 )
...
This allows us to automatically set TLS parameters, useful for `boundary
connect http` and some other features to come.
2020-12-09 14:45:53 -05:00
Todd Knight
aa4157639c
Change Format of API Error ( #784 )
...
This is a wire breaking change for json errors since we have removed and renamed a few fields, and changed part of the structure of the returned json error.
* Remove redundant fields in Status, details.error_id, details.TraceId and details.request_id from API errors.
* Added wrapped errors and "ops" field to indicate the internal operation of the errors returned by the API.
* Added error cli error reporting of Op and wrapped errors.
2020-12-07 14:25:16 -07:00
Jeff Mitchell
813d21565f
Allow authorize-session to be invoked with target name ( #737 )
2020-10-22 08:40:00 -04:00
Jeff Mitchell
09b865ab28
Add pass cred storage support ( #731 )
...
* Add `pass` cred storage support
Make it the default on non-Windows/macOS
Document the token storage behavior
2020-10-21 09:00:17 -04:00
Jim
b8c527c6cd
handle v1 as a prefix/suffix, not just a cut set to be trimmed ( #723 )
2020-10-17 19:01:24 -04:00
Todd Knight
abe5e9b950
Add Termination Reason ( #573 )
2020-10-07 21:37:30 -04:00
Jeff Mitchell
5bc8c8d921
Fix API test
2020-10-07 21:35:43 -04:00
Jeff Mitchell
26e86ef56a
Update API deps
2020-10-07 14:16:48 -04:00
Jeff Mitchell
fc09e2c21b
Remove api mod dep for now
2020-10-07 14:11:06 -04:00
Jeff Mitchell
6993d10118
Update main's api/sdk mods
2020-10-07 14:05:50 -04:00
Jeff Mitchell
5cbfcf8eb6
Shuffle things around out of new modules
2020-10-07 14:03:42 -04:00
Jeff Mitchell
23f7306b62
Add api module
2020-10-07 13:55:55 -04:00
Todd Knight
6c6fb7a4d0
Format errors better for CLI ( #552 )
...
* Start making errors easier to read for Table based CLI UI.
* Add TODO about reporting "update_mask" related errors.
2020-10-06 14:08:49 -07:00
Jeff Mitchell
9237d6f787
Rename authorize to authorize-session ( #531 )
...
As pointed out by Rob, this makes it clearer what the action actually
is. We were sort of torn on it before, but I've definitely come around
to it.
2020-10-05 11:02:23 -04:00
Jeff Mitchell
6ddfe407a3
Update allowed formats of ACL strings ( #508 )
2020-10-01 01:49:20 -04:00
Jeff Mitchell
cefea936c3
Update ACLs to allow type=*. ( #504 )
2020-09-29 22:55:22 -04:00
Jeff Mitchell
a38f40606e
Create default roles in scopes to allow authentication and listing scopes/auth methods ( #502 )
2020-09-29 20:38:16 -04:00
Jeff Mitchell
b1fc9fd547
Sanitize protos ( #471 )
2020-09-26 08:30:27 -04:00
Todd Knight
0e5a849402
Adding Add|Set|Remove Accounts on the user resource ( #461 )
2020-09-25 20:44:55 -07:00
Jeff Mitchell
ba216f894b
Update docs and default address
2020-09-25 19:38:53 -04:00
Jeff Mitchell
220ca253be
Add boundary config get-token ( #455 )
2020-09-25 17:06:53 -04:00
Todd Knight
fd0da998e8
SDK error revamp ( #432 )
...
SDK methods now return 1 error. To differentiate between Client errors and Server errors I've also implemented the AsServerError function which returns an *api.Error if it is an error originating from the remote server or nil otherwise.
2020-09-24 14:34:58 -07:00
Kent 'picat' Gruber
9e06d7eec2
Fix unused error in *api/client.Client.Do during redirect ( #430 )
...
Previously the error declared during the *retryablehttp.Client.Do was being "overshadowed" by the error declared when a redirect was missing the result location.
By declaring the loc outside the call assignment, we can properly "reuse" the error and resulting check after a redirect.
2020-09-24 14:13:25 -04:00
Jeff Mitchell
e86c11db62
Add session lifecycle info to controller's INFO log. ( #431 )
...
This required some plumbing, but nothing major.
2020-09-24 14:12:34 -04:00
Jim
Jeff Mitchell
Todd Knight
Kevin Maris
Kent 'picat' Gruber