Todd Knight
5d17bd9eec
Error on boundary database migrate if the db hasn't been initialized ( #1184 )
2021-05-03 08:55:37 -07:00
Jim
8d317023f8
OIDC: make callback URL paths deterministic. ( #1188 )
2021-05-02 15:25:29 -04:00
Todd Knight
61e236f76d
OIDC Callback Error Redirect ( #1174 )
2021-04-29 14:47:13 -07:00
Jim
25e657fa51
Ongoing OIDC: support to request additional OIDC scopes from the IdP ( #1175 )
2021-04-28 06:53:13 -04:00
Michael Gaffney
a7ba27148b
Fix godoc wording
2021-04-27 08:26:08 -04:00
Jeff Mitchell
4690225c1e
Update delete action behavior and JSON format output ( #1155 )
...
This PR changes delete behavior:
* On success, a 204 is returned rather than a 200 with an empty JSON object
* The CLI now passes through the 404 error if encountered instead of swallowing it
It also updates formatting for JSON to use the response body, which means that the item (or items) in the JSON format are actually the format across the wire, instead of being reinterpreted by unmarshaling into the Go SDK and then remarshaling.
2021-04-26 20:38:55 -04:00
Jeff Mitchell
e6af51943d
Add read:self and delete:self to auth tokens and add logout command ( #1162 )
2021-04-23 13:45:08 -04:00
Michael Gaffney
3fe94335d4
Run make fmt
2021-04-23 13:19:28 -04:00
Jeff Mitchell
727d1c7085
Add "no-op" action and use it as default for scope permissions ( #1138 )
...
Because of listing visibility, if no actions are assigned to a user for
an individual resource, it's excluded from the list. This is fine and
good. However, when we made a change in 0.2.0 to restrict the
information returned from listing for the anonymous user for scopes and
auth methods, it exposed the fact that because of the way this
visibility works we had to add `read` to scopes by default -- thereby
rather defeating the purpose of restricting what goes back to `u_anon`
requests.
The purpose of "no-op" is to never be used for real actions within the
API, but as something that can be granted to specifically enable
visibility for the targeted user. This makes the controls over list
visibility much more granular.
2021-04-23 10:13:37 -04:00
Jim Lambert
be7fc67842
regenerate migrations
2021-04-22 07:38:58 -04:00
Jim
3ee651deab
fix primary account data returned for users when a passwd auth method is the primary auth method ( #1154 )
2021-04-21 19:10:54 -04:00
Jim
75108cbc8b
Ongoing OIDC: return the primary account info along with the user. ( #1145 )
2021-04-20 20:33:56 -04:00
Jeff Mitchell and Sam Salisbury
a90a64d787
Use Go 1.16 native embedding and remove go-bindata ( #1151 )
...
Co-authored-by: Sam Salisbury <samsalisbury@gmail.com >
2021-04-20 10:45:05 -04:00
Jeff Mitchell
46d7613e2d
Remove extra s in item table output for auth methods and host catalogs
2021-04-20 09:04:07 -04:00
Lars Lehtonen
b02c050304
internal/servers/controller/handlers/users: fix dropped test error ( #1130 )
2021-04-19 16:06:17 -04:00
Jim
358f5a61fb
bump protoc to v3.15.8 ( #1147 )
2021-04-18 21:34:25 -04:00
Michael Gaffney
ea0e2e5df4
Add tests for common.BuildUpdatePaths ( #1143 )
2021-04-18 11:00:38 -04:00
Michael Gaffney
78159eef9c
Fix godoc spelling and white space
2021-04-17 12:36:21 -04:00
s-christoff
0f424f6f7f
Refactor internal/servers/controller/handlers errors v2 ( #1099 )
2021-04-16 12:06:03 -05:00
Jeff Mitchell
be10cc4b42
Update grpc/proto deps ( #1136 )
...
* Update grpc/proto deps
* Make gen
2021-04-15 14:11:23 -04:00
Jeff Mitchell
7062bc70f0
Fix bug causing CORS to accept all origins by default ( #1134 )
2021-04-15 13:33:52 -04:00
Jeff Mitchell
afe828c118
Update returned information in list responses for anon user ( #1127 )
2021-04-14 17:19:02 -04:00
Susmitha Girumala
5ce21e118e
ui: Bump ui version to latest ( #1125 )
2021-04-14 17:01:22 -04:00
Jeff Mitchell
604d642e1e
Restrict auth method listing for u_anon ( #1122 )
...
This keeps only essential information in list output for auth methods
when the user is u_anon. Boundary's default is to allow listing of
auth methods for anonymous users to allow discovery of authentication
points, but there's no need to return more information about internal
configuration than necessary.
2021-04-14 16:49:08 -04:00
Jeff Mitchell
c54aedcf1a
By default, add Boundary Desktop's origin to allowed CORS origins ( #1121 )
...
This also adds support for a flag to disable this behavior.
Fixes #1093
2021-04-14 16:26:21 -04:00
Jim
e0e6e58bb2
better api error codes from OIDC auth method update/change-state operations ( #1116 )
2021-04-14 15:00:20 -04:00
Todd Knight
fad9f6d525
Allow oidc accounts to be add|set|removed to users. ( #1117 )
2021-04-14 11:34:17 -07:00
Jeff Mitchell
c57841fa2e
Update wording for user not found to indicate the auth method isn't primary for the scope
2021-04-14 13:27:03 -04:00
Todd Knight
dc881e65d4
Fix alignment for Is Primary For Scope field and values for listing.
2021-04-14 10:25:25 -07:00
Michael Gaffney
5855930921
Renumber migrations in the '2/' directory to start at 01 ( #1114 )
2021-04-14 11:47:21 -04:00
Jim
6c003c94f7
add "Is Primary" to auth method CLI output ( #1115 )
2021-04-14 11:36:42 -04:00
Jim Lambert
06df7e0240
updated UI_COMMITISH
2021-04-13 20:24:32 -04:00
Todd Knight
072b950540
Filter inactive and private oidc auth methods from unauthenticated list requests ( #1110 )
2021-04-13 16:42:25 -07:00
Jeff Mitchell
ca57e50516
Add more OIDC error output. ( #1108 )
...
Some of this is in the form of logging, and some via returning error
messages to users.
Also cleans a couple of linter complaints.
2021-04-13 19:07:50 -04:00
Jeff Mitchell
412018fbb4
Update misleading Authenticated bool with new name and explanation. ( #1111 )
2021-04-13 17:55:40 -04:00
Jim
f8f66abcf4
regen proto ( #1109 )
2021-04-13 17:10:14 -04:00
Todd Knight
53ec3c44bc
Auth Method Listing matches other resources, remove repeated "Version" field. ( #1107 )
2021-04-13 10:34:13 -07:00
Todd Knight
14c222709c
Make oidc auth callback redirect on most errors ( #1105 )
2021-04-13 09:21:26 -07:00
Jim
d0f36f6a74
ensure that inbound auth method id matches request wrapper auth metho… ( #1104 )
2021-04-12 17:17:28 -04:00
Jeff Mitchell
90b30bad25
Use 202 for token polling endpoint instead of 204 ( #1103 )
2021-04-12 14:57:14 -04:00
Todd Knight
71673ea161
Pass disable_discovered_config_validation in the API change-state call ( #1100 )
2021-04-12 08:49:22 -07:00
Michael Gaffney
3130bd615e
Fix go doc: remove sentence fragment
2021-04-12 11:32:27 -04:00
Jim
8f9c287233
properly handle ClientSecret updates ( #1097 )
2021-04-09 15:33:21 -04:00
Randall Morey
5500566fca
chore: bump UI commitish to latest ( #1096 )
2021-04-09 13:30:00 -04:00
Jeff Mitchell
f05f37d0fa
Fix panic in non-generated API calls when printing as JSON ( #1095 )
...
Fixes #992
2021-04-09 13:09:51 -04:00
Jim
26c0c4479d
send MaxAge when set for auth method ( #1094 )
2021-04-09 10:41:54 -04:00
dd0f34bc35
Add new OIDC auth method. ( #1090 )
...
Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com >
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com >
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com >
2021-04-08 20:54:32 -04:00
s-christoff
5c5b07c04a
Revert "Refactor internal/servers/controller/handlers errors ( #1070 )" ( #1092 )
...
This reverts commit 21ac3cdddd
2021-04-08 19:20:36 -05:00
s-christoff
21ac3cdddd
Refactor internal/servers/controller/handlers errors ( #1070 )
2021-04-08 17:48:57 -05:00
Michael Gaffney
d3146992f1
Errors: add Code and Kind for external system errors ( #1080 )
2021-04-07 14:50:00 -04:00
Todd Knight
Jim
Michael Gaffney
Jeff Mitchell
Lars Lehtonen
Michael Gaffney
s-christoff
Susmitha Girumala
Randall Morey