CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,327 Commits 7 Branches 2 Tags
83b61275d52f915ce674ef491d6832e8a8a2f606
Commit Graph
2595 Commits
Author SHA1 Message Date
Irena Rindos 83b61275d5 (cmd): unhide client agent commands (#5097) 2024-09-11 11:20:18 -04:00
Johan Brandhorst-Satzkorn a830892fec Some test fixes (#5084) 
* internal/session: update variable name in test

This was missed in #5071

* internal/tests/cluster: skip failing tests

These tests will need to be fixed or removed. It is not
clear why they are failing, but they are always failing.

* Makefile: try upgrading golangci-lint

* internal/host/plugin: fix flaky test

Hosts contain IP addresses in string form, whose
order is not defined.
 2024-09-09 09:22:34 -07:00
Damian Debkowski 89c9a309ce test(host): validate ipv6 address for hosts (#5052) 2024-09-05 10:44:55 -07:00
Damian Debkowski bd03c99f89 test(target): validate ipv6 address for tcp targets (#5076) 2024-09-05 10:30:30 -07:00
dani 557591967a add tests for sql ip address columns to ensure ipv6 capabiltiy (#5062) 2024-09-05 11:03:05 -04:00
Jeff Mitchell 66af7dba98 Allow reloading some server timings (#5071) 
Allows changing grace period and a few other things timing-related via
HUP instead of just a restart.

Tested manually via config changes and HUP.
 2024-09-04 15:40:44 -04:00
Jeff Mitchell 35d1df7388 Two fixes in our Go API code: (#5066) 
* Replace `interface{}` with `any`
* For options that are bools, don't always set true; set to the actual
  value passed in (some options already behaved this way, but they all
  should)
 2024-09-04 11:40:43 -04:00
David Bond 660e2063a4 Return HTTP 400 status for inactive OIDC auth methods (#5048) 
This commit modifies the OIDC authentication start method to return a 400 (Bad Request) error
if a client attempts to start the authentication flow against an OIDC auth method that is set to
inactive. This is something we noticed in our error logs in HCP Boundary that is impacting our
SLOs.

Previously this returned its own error code which is mapped to a 500 response. Tests have been updated
to catch this new scenario.

Signed-off-by: David Bond <davidsbond93@gmail.com>
 2024-08-30 16:33:18 +01:00
Elim Tsiagbey 306c722750 feat: Add support for capturing URL actions in request info (#5044) 
* feat: Add support for capturing URL actions in request info

- Pass request context to services to validate actions.
- Validate actions for auth methods during authentication. `/v1/auth-methods/{{AUTH_METHOD_ID}}:authenticate:callback` is currently only supported on `OIDC` auth methods. An error is thrown if `:callback` is not supported
 2024-08-29 17:14:42 -04:00
Johan Brandhorst-Satzkorn 4a031d9910 api: remove items deleted during refresh pagination (#5056) 
The API automatically paginates to the end of a pagination,
and would take into account any items updated and subsequently
removed since the last pagination. It now also removes any items
removed during the current pagination.
 2024-08-29 12:43:54 -07:00
Elim Tsiagbey 84707c04cb feat: Disable path length fallback (#5050) 
Add `WithDisablePathLengthFallback()` runtime option to the grpc-gateway mux HTTP server. This prevents the issue where the request method can be overridden with a `X-HTTP-Method-Override` header.
 2024-08-28 09:30:05 -04:00
Johan Brandhorst-Satzkorn 96688b36d5 internal/daemon: simplify time update tests (#5041) 
Using time.After makes the intent clearer
 2024-08-27 11:00:04 -07:00
Elim Tsiagbey 123286cf94 feat: Validate LDAP URL port number (#5046) 
Add validation for the port number in LDAP URLs. If a port number is provided, it is checked to ensure it is a valid integer and within the valid range. This validation helps prevent errors when configuring LDAP authentication.
 2024-08-27 11:27:14 -04:00
Elim Tsiagbey e6d355b65a fix: constant-time comparison of grpc-gateway tickets (#5031) 
Update GRPC Gateway tickets to compare tickets in constant-time
 2024-08-21 12:26:22 -04:00
Hugo 1c62470ba6 chore(cmd): Move FlagClientAgentPort and flagTargetDefaultPort to uint16 2024-08-21 13:55:58 +01:00
Hugo 3e3f2153c0 feat(cmd): New Uint16 flag type 2024-08-21 13:55:58 +01:00
Hugo bf9dbd818e chore(cmd): Remove IntVar and move to Int64Var 2024-08-21 13:55:58 +01:00
Hugo 3195dcba4e chore(cmd): Remove UintVar and move to Uint64Var 2024-08-21 13:55:58 +01:00
Hugo abb2d50494 fix(worker): Use 16-bit int parsing for TCP port 2024-08-21 13:55:58 +01:00
Louis Ruch a3788ab978 fix(policy): Cascade delete policy when scope is deleted (#5014) 2024-08-14 09:03:17 -07:00
Sorawis Nilparuk (Bo) 350ac90a57 implement configurable getDownstreamWorker timeout (#5007) 
* implement configurable getDownstreamWorker timeout

* add parsing test

* typos

* fix tests

* fix worker tests

* 0 is a valid value
 2024-08-13 14:27:39 -07:00
Hugo 903039e885 fix(daemon): Return 404 if alias interceptor ResolveRequestIds fails (#5006) 2024-08-13 14:24:01 +01:00
Johan Brandhorst-Satzkorn a77769fdb6 internal/server: only use non-nil tags (#4996) 2024-08-06 09:17:40 -07:00
Damian Debkowski 5707a64b20 fix(db): remove storage_plugin_storage_bucket_secret-rewrapping-job table (#4993) 2024-08-02 09:08:16 -07:00
Jim 28b465e4b8 refact: to use go-dbw CreateItems, DeleteItems (#4974) 
* refact: to use go-dbw CreateItems, DeleteItems

Latest version of go-dbw updated the signature of
CreateItems(...) and DeleteItems(...) on a happy
note this latest version of go-dbw actually does
batch inserts and updates for this functions.

* all: regenerate protos with new protoc-gen-go version
 2024-08-01 11:18:53 -04:00
Dan HeathMichael LiRobin BeckRobin Beck
 		bbbe971ed1 docs: Move permissions to config for usage docs (#4962) 
* docs: Move permissions to config for usage docs

* docs: Update permissions concepts (#4970)

* docs: Update permissions concepts

* docs: Delete comments

* docs: Structural edits and adding workflow

* docs: Fix wording

* docs: Change guide name, add resource table

* Rab manage roles refactor (#4980)

* refreshes the manage-roles docs

* adds href for common-workflows/manage-roles to configuration/identity-access-management

* docs: Fix a couple typos

* docs: Style updates

* docs: Fix image links, update alt text

* docs: Add more info/next steps sections

* docs: Remove number for single instruction

* fixes screenshot

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* updates path to resource-table.mdx

* sets aliases scope to Global

* updates aliases scope in resource table

* clarifies assigned scope id

* Update website/redirects.js

Co-authored-by: Michael Li <michael.li@hashicorp.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Michael Li <michael.li@hashicorp.com>
 2024-07-30 17:21:09 -04:00
Damian Debkowski 85b9adea81 feat(loopback): support dynamic credentials (#4982) 2024-07-30 10:15:57 -07:00
Lisbet Alvarez 126c4f55a0 chore: update ui commit to 219eba6 (#4969) 2024-07-26 10:51:15 -07:00
Irena Rindos 2191aa1d03 refact(session connection): remove session connection state table (#4617) 
* refact(session connection): remove session connection state table
 2024-07-23 14:19:21 -04:00
Lisbet Alvarez eb6e1b558d chore: bump ui commit to 25a99a4 (#4957) 2024-07-23 10:03:50 -07:00
Lisbet Alvarez bf41d23dbe chore: bump ui commit to 10c128e (#4950) 2024-07-22 10:33:57 -07:00
Damian Debkowski 1be0e5d413 fix: pass along storage bucket credential id for sb update job (#4947) 2024-07-22 12:06:35 -04:00
Lisbet Alvarez 59d5f854cb chore: bump ui commit to 03376f0 (#4946) 2024-07-19 11:07:08 -07:00
Danielle Miu 603719aa9b make gen for version 0.17.0 2024-07-18 11:32:24 -04:00
Lisbet Alvarez 184b1bf043 update ui commit to 96b6486 (#4942) 2024-07-17 16:09:54 -07:00
Guy J Grigsby 3316ef5228 Update attributes description for AuthenticateRequest to match proto (#4937) 
update attributes description for AuthenticateRequest to match proto and generate updated code.
 2024-07-17 13:21:48 -06:00
Damian Debkowski a20aae9879 update persisted storage bucket credential states from worker status 2024-07-17 14:23:11 -04:00
Damian Debkowski 4131c4b324 feat(cmd): display remote storage states for workers 2024-07-17 14:23:11 -04:00
Damian Debkowski c0cf5c4e1b feat(api): return remote storage states for worker 2024-07-17 14:23:11 -04:00
Elim Tsiagbey 11272b6c2a feat: update storage to support dependency calls 2024-07-17 14:23:11 -04:00
Damian Debkowski 00e4c5448b feat: workers filtered by sbc state 2024-07-17 14:23:11 -04:00
Elim Tsiagbey 130010a2ca feat(testing): add loopback plugin support for overriding the error state with SBC State 2024-07-17 14:23:11 -04:00
Damian Debkowski 9bc5e492f6 feat(sbc): add upsert worker storage bucket job 2024-07-17 14:23:11 -04:00
Elim TsiagbeyandDamian Debkowski 670a43ca22 feat(worker): set storage bucket states for worker status 
Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>
 2024-07-17 14:23:11 -04:00
Damian Debkowski 162a857a29 feat(sbc): Add domain changes for SBC 2024-07-17 14:23:11 -04:00
Damian Debkowski 7a3c484147 feat(storage): add UpsertStorageBucket & GetStorageBucketStates methods 2024-07-17 14:23:11 -04:00
Elim Tsiagbey 012ec400f0 feat: Update StorageBucketSecret to StorageBucketCredentialManagedSecret 
Update domain code to replace references of `StorageBucketSecret` to `StorageBucketCredentialManagedSecret`
 2024-07-17 14:23:11 -04:00
Damian Debkowski 88c67e4eea feat(proto): define storage bucket state in worker status 2024-07-17 14:23:11 -04:00
Damian Debkowski dc21e714a5 feat(db): tracking storage bucket by worker 2024-07-17 14:23:11 -04:00
Lisbet Alvarez 488c4ea44e bump ui commit (#4936) 2024-07-17 08:57:41 -07:00