CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,145 Commits 7 Branches 2 Tags
80ece9c4fc497a57c0fdb45f0a33c4fb68730e81
Commit Graph
2895 Commits
Author SHA1 Message Date
shadowdaoandClaude Sonnet 5.5 962d708fdd Rename Go module paths to repo.anhonesthost.net/CyberCoveLLC/threshold 
Rename root, api and sdk module paths (imports, go.mod, go_package,
ldflags, build scripts, buf configs) and regenerate protobuf/gateway
code with the project's pinned toolchain. Wire identifiers unchanged.
api gets a local replace for sdk; root/api/sdk require v0.1.0.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:33:41 -07:00
shadowdaoandClaude Sonnet 5.5 b30dead452 Bump golang.org/x/net to v0.60.0 (GO-2026-6603/6610/6611/6612/6617) and gofmt
Go fuzz test / Fuzz grants.Parse (push) Successful in 4m29s
Details 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:21:04 -07:00
shadowdaoandClaude Sonnet 5.5 ab4ed3c9e5 Rebrand user-visible CLI text; add legacy fallbacks for keyring, cache dir and version prefix 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:20:06 -07:00
shadowdaoandClaude Sonnet 5.5 306960d24b Add THRESHOLD_* env var support with BOUNDARY_* fallback 
Introduce api.Getenv/api.LookupEnv which prefer THRESHOLD_X and fall back to legacy BOUNDARY_X; use them for user-facing env var reads.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 09:45:44 -07:00
Irena Rindos c0dd0353af chore: udpate grpc (#6785) 
* chore: update grpc
 2026-09-28 15:45:17 -04:00
Bharath Gajjala 41d676acc5 feat(proto): Add ProviderType Field to OIDC Storage Protos 2026-09-21 13:53:04 -05:00
Bharath Gajjala e1f3020b28 feat(proto): Add ProviderType Field to OIDC API Protos 2026-09-21 13:53:04 -05:00
Bharath Gajjala 828742c46c feat(db): Add Provider Type to OIDC Auth Method 
test(db): add sqltest coverage for oidc auth method provider_type
 2026-09-21 13:53:00 -05:00
Emilia 01cd5c86e8 chore(tests): bump the postgres version used in CI (#6763) 
* bump the postgress version used in CI and fix the tests that broke

* sort Grants by raw grant string rather than GrantStrings

* trigger ci
 2026-08-06 12:09:06 -04:00
Amit Kotagi 969bd5f66d chore(API): add set/remove alias suffix API definitions (#6757) 
* chore: add set/remove alias suffix API definitions

* fix(test): revert alias_test changes

* revert alias_test.go changes
 2026-07-08 20:38:54 +05:30
Ryan Derr 6f03523372 chore(API): Update the API definitions for RDP (#6758) 2026-07-08 16:42:34 +05:30
Bharath Gajjala b495fe653b chore(controller): move grants schema route to internal (#6753) 2026-06-09 09:44:26 -04:00
Michael Li 9df1fad7d0 chore: Bump go version to 1.26.4 (#6750) 
* chore: Bump to go version 1.26.4

* chore: Bump golangci-lint version

* fix: Update URL to be ipv6 safe
 2026-06-03 16:09:39 -04:00
Bharath Gajjala efce25bdda feat(perms): expose valid output fields per resource in grants schema (#6701) 2026-05-19 14:07:33 -05:00
Damian DebkowskiRyan DerrManjeet Singhaditya2548
 		cbb76ea7c8 feat: storage plugin list objects (#6723) 
* feat(proto): add storage plugin proto definitions for session recording recovery

Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>

Co-authored-by: Ryan Derr <ryan.derr@hashicorp.com>

* feat(gen): add generated storage plugin code for session recording recovery

Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>

Co-authored-by: Manjeet Singh <manjeet.singh@hashicorp.com>

* feat(plugin): add plugin loopback support for session recording recovery

Co-authored-by: Ryan Derr <ryan.derr@hashicorp.com>

Co-authored-by: aditya2548 <aditya25dec2000@gmail.com>

---------

Co-authored-by: Ryan Derr <ryan.derr@hashicorp.com>
Co-authored-by: Manjeet Singh <manjeet.singh@hashicorp.com>
Co-authored-by: aditya2548 <aditya25dec2000@gmail.com>
 2026-05-14 13:02:32 -05:00
Louis Ruch a700e1e22f Merge pull request #6692 from hashicorp/louis-auth 
fix(audit): populate email/name in audit events
 2026-05-11 10:31:45 -07:00
Chandrasekhar Gadde 81c997ab1f Improve worker logging 2026-05-11 15:24:50 +05:30
Louis Ruch fe35f74ee3 fix(audit): populate email/name in audit events 2026-05-08 12:56:52 -07:00
Ryan Derr d76a3de802 fix(sqltest): Update makefile for sql test to utilie networks explicily rather then depricated --link opt (#6688) 2026-05-06 15:09:17 -05:00
Chandrasekhar Gadde f19f776234 Merge pull request #6626 from hashicorp/ICU-18958 
Memory leak fix for worker session management by immediately removing closed connections
 2026-05-04 09:09:22 +05:30
Anton Averchenkov 5e6c9eecbe Clean up loop captures in tests (#6592) 
* Clean up loop captures

* some more
 2026-05-01 12:34:33 -04:00
Louis Ruch bb806026b3 feat(pprof): Enable pprof endpoints behind flag (#6644) 2026-04-27 09:35:40 -07:00
Bharath Gajjala bf24d6607f feat(daemon): csp nonce handling (#6587) 
* Adding nonce handling

* Nonce token and fix content length mismatch

* Updating nonce injection for override situations

* nonce handling in Content Security Policy for custom CSP scenarios

* return original length in cspWriter to prevent truncation
 2026-04-27 09:06:46 -05:00
Chandrasekhar Gadde 963ea30274 Memory leak fix for worker session management by immediately removing closed connections 2026-04-24 17:26:03 +05:30
Louis Ruch 09962d0521 feat(listener): Set node tls handshake timeout to 15 seconds 2026-04-20 11:42:05 -07:00
Abhishek Manjegowda c1283c2875 fix(controller): Allow wildcard resources with specific actions in rate limit config (#6550) 
* Wildcard API rate limit added

* changes updated

* reviwed changes added
 2026-04-17 12:01:13 +05:30
Michael Li efc6fed502 test(bats): Fix flaky connect helper... AGAIN (#6580) 2026-04-10 08:48:02 -04:00
Michael Li a52bdded1f test(bats): Debug for flaky test (#6578) 2026-04-09 08:07:48 -04:00
Michael Li 4eec5ce0e1 test(bats): Fix flaky connect helper methods (#6535) 
* test(bats): Fix flaky connect helper methods

* test(bats): Add more debug

* chore: Fix copywrite headers
 2026-04-08 12:34:13 -04:00
Aditya Sharma a420c93643 [COMPLIANCE] Update Copyright & License Header (#6573) 2026-04-08 09:58:51 -04:00
aditya2548 f8363dd06e [COMPLIANCE] Update Copyright & License Headers 2026-04-06 15:48:57 +05:30
aditya2548 b0dfa8af17 chore: Enable copywrite check & add ignore_year1 flag 2026-04-06 15:48:57 +05:30
Pradeep Sekar 1354db6d50 feat: Add cookie attributes (#6476) 2026-03-24 12:49:50 -07:00
Abhishek Manjegowda 5347d17c24 Fix : Context timeout error handler changes (#6493) 
* context timeout error handler changes

* changes updated

* oidc test case added
 2026-03-24 10:25:23 +05:30
Michael Li d005dd048f test(bats): Add more information on test failure (#6504) 2026-03-19 15:52:42 -04:00
Irena Rindos 53c1243b3e chore: update use of jackc pgconn to address CVE GHSA-jqcq-xjh3-6g23 (#6494) 2026-03-19 09:12:35 -04:00
Bharath Gajjala 8dae2ee45b feat: expose grant schema for UI linting support (#6470) 2026-03-18 09:49:16 -05:00
Michael Li c18b6afbb4 test(bats): Add logging to flaky tests (#6456) 2026-03-05 09:48:19 -05:00
Dan Heath 2678013391 docs: Update resource tables with missing content (#6443) 
* docs: Update resource tables with missing content

* docs: Align strings

* docs: Fix alignment
 2026-02-18 16:57:37 -05:00
Emilia 66a0e08112 fix(clientcache): sort target names case insensitively (#6428) 
* change targets sorted by name to sort case insensitive

* remove print

* switch to collate
 2026-02-16 12:17:47 -05:00
dependabot[bot]andirenarindos 4a7bef3939 chore(deps): bump the go group across 2 directories with 14 updates (#6438) 
* chore(deps): bump the go group across 2 directories with 14 updates

Bumps the go group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.5` | `2.27.8` |
| [github.com/hashicorp/go-secure-stdlib/password](https://github.com/hashicorp/go-secure-stdlib) | `0.1.4` | `0.1.5` |
| [github.com/lib/pq](https://github.com/lib/pq) | `1.10.9` | `1.11.2` |
| [github.com/miekg/dns](https://github.com/miekg/dns) | `1.1.70` | `1.1.72` |
| [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) | `0.9.0` | `0.11.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.47.0` | `0.48.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.78.0` | `1.79.1` |
| [google.golang.org/grpc/cmd/protoc-gen-go-grpc](https://github.com/grpc/grpc-go) | `1.6.0` | `1.6.1` |

Bumps the go group with 2 updates in the /sdk directory: [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.5 to 2.27.8
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.5...v2.27.8)

Updates `github.com/hashicorp/go-secure-stdlib/password` from 0.1.4 to 0.1.5
- [Release notes](https://github.com/hashicorp/go-secure-stdlib/releases)
- [Commits](https://github.com/hashicorp/go-secure-stdlib/compare/awsutil/v0.1.4...awsutil/v0.1.5)

Updates `github.com/lib/pq` from 1.10.9 to 1.11.2
- [Release notes](https://github.com/lib/pq/releases)
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)
- [Commits](https://github.com/lib/pq/compare/v1.10.9...v1.11.2)

Updates `github.com/miekg/dns` from 1.1.70 to 1.1.72
- [Commits](https://github.com/miekg/dns/compare/v1.1.70...v1.1.72)

Updates `github.com/pires/go-proxyproto` from 0.9.0 to 0.11.0
- [Release notes](https://github.com/pires/go-proxyproto/releases)
- [Commits](https://github.com/pires/go-proxyproto/compare/v0.9.0...v0.11.0)

Updates `golang.org/x/crypto` from 0.47.0 to 0.48.0
- [Commits](https://github.com/golang/crypto/compare/v0.47.0...v0.48.0)

Updates `golang.org/x/net` from 0.48.0 to 0.49.0
- [Commits](https://github.com/golang/net/compare/v0.48.0...v0.49.0)

Updates `golang.org/x/sys` from 0.40.0 to 0.41.0
- [Commits](https://github.com/golang/sys/compare/v0.40.0...v0.41.0)

Updates `golang.org/x/term` from 0.39.0 to 0.40.0
- [Commits](https://github.com/golang/term/compare/v0.39.0...v0.40.0)

Updates `golang.org/x/text` from 0.33.0 to 0.34.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.33.0...v0.34.0)

Updates `golang.org/x/tools` from 0.40.0 to 0.41.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/compare/v0.40.0...v0.41.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260120221211-b8f7ae30c516 to 0.0.0-20260209200024-4cfbd4190f57
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.78.0 to 1.79.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.1)

Updates `google.golang.org/grpc/cmd/protoc-gen-go-grpc` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.6.0...cmd/protoc-gen-go-grpc/v1.6.1)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.5 to 2.27.8
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.5...v2.27.8)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260120221211-b8f7ae30c516 to 0.0.0-20260209200024-4cfbd4190f57
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.78.0 to 1.79.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.1)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.5 to 2.27.8
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.5...v2.27.8)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260120221211-b8f7ae30c516 to 0.0.0-20260209200024-4cfbd4190f57
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.78.0 to 1.79.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.1)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.5 to 2.27.8
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.5...v2.27.8)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260120221211-b8f7ae30c516 to 0.0.0-20260209200024-4cfbd4190f57
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.78.0 to 1.79.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.1)

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.27.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/go-secure-stdlib/password
  dependency-version: 0.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/lib/pq
  dependency-version: 1.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/miekg/dns
  dependency-version: 1.1.72
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/pires/go-proxyproto
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sys
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/term
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/text
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/tools
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20260209200024-4cfbd4190f57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/grpc/cmd/protoc-gen-go-grpc
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.27.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20260209200024-4cfbd4190f57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.27.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20260209200024-4cfbd4190f57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.27.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20260209200024-4cfbd4190f57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: update generated files

* chore: update generated files

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: irenarindos <irena.rindos@gmail.com>
 2026-02-16 10:25:58 -05:00
Louis Ruch ca58ac0e20 fix(cli): remove connect inactive-timeout defaults expect for darwin+rdp (#6429) 2026-02-13 08:05:06 -08:00
Michael Li cb8f0fe188 chore: Add worker check to bats tests to avoid flake (#6421) 2026-02-12 11:59:08 -05:00
Emilia f01cd7019b Merge pull request #6383 from hashicorp/llb-desktop-client-sort 
feat(clientcahe): add client cache sorts
 2026-02-11 08:29:17 -08:00
Michael Liandddedbko 8c917f6bae chore: pprof build updates (#6419) 
* chore: Ensure Admin UI is included in pprof build

Co-authored-by: ddedbko <Damian3395@gmail.com>

* chore: Isolate handlers for pprof endpoints

Co-authored-by: ddebko <Damian3395@gmail.com>

---------

Co-authored-by: ddedbko <Damian3395@gmail.com>
 2026-02-11 10:01:23 -05:00
Justin Nguyen 8f8a0cef16 [COMPLIANCE] Update Copyright and License Headers (#6400) 2026-02-03 15:12:00 -06:00
Sepehr 8201630b12 feat(clientcache): Implement session sorting in repository (#6348, #6378) 2026-02-03 09:18:16 -08:00
Emilia GrantandSepehr 7f1a993122 feat(clientcache): Add sort parameters to CLI search command (#6362, #6366) 
Co-authored-by: Sepehr <sepehr.foroughishafiei@hashicorp.com>
 2026-02-03 09:18:16 -08:00
Emilia Grant 4c49331753 feat(clientcache): Implement sorting in targets repository (#6346) 2026-02-03 09:18:16 -08:00
Sepehr 2e9623d462 feat(clientcache): Extend SearchParams and Options with sort support and validation (#6342) 2026-02-03 09:18:16 -08:00