CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,139 Commits 7 Branches 2 Tags
962d708fdd237d875f9b9c05b0fe984b82ca5fe8
Commit Graph
610 Commits
Author SHA1 Message Date
shadowdaoandClaude Sonnet 5.5 962d708fdd Rename Go module paths to repo.anhonesthost.net/CyberCoveLLC/threshold 
Rename root, api and sdk module paths (imports, go.mod, go_package,
ldflags, build scripts, buf configs) and regenerate protobuf/gateway
code with the project's pinned toolchain. Wire identifiers unchanged.
api gets a local replace for sdk; root/api/sdk require v0.1.0.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:33:41 -07:00
shadowdaoandClaude Sonnet 5.5 306960d24b Add THRESHOLD_* env var support with BOUNDARY_* fallback 
Introduce api.Getenv/api.LookupEnv which prefer THRESHOLD_X and fall back to legacy BOUNDARY_X; use them for user-facing env var reads.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 09:45:44 -07:00
Emilia 01cd5c86e8 chore(tests): bump the postgres version used in CI (#6763) 
* bump the postgress version used in CI and fix the tests that broke

* sort Grants by raw grant string rather than GrantStrings

* trigger ci
 2026-08-06 12:09:06 -04:00
Amit Kotagi 969bd5f66d chore(API): add set/remove alias suffix API definitions (#6757) 
* chore: add set/remove alias suffix API definitions

* fix(test): revert alias_test changes

* revert alias_test.go changes
 2026-07-08 20:38:54 +05:30
Bharath Gajjala b495fe653b chore(controller): move grants schema route to internal (#6753) 2026-06-09 09:44:26 -04:00
Louis Ruch a700e1e22f Merge pull request #6692 from hashicorp/louis-auth 
fix(audit): populate email/name in audit events
 2026-05-11 10:31:45 -07:00
Chandrasekhar Gadde 81c997ab1f Improve worker logging 2026-05-11 15:24:50 +05:30
Louis Ruch fe35f74ee3 fix(audit): populate email/name in audit events 2026-05-08 12:56:52 -07:00
Chandrasekhar Gadde f19f776234 Merge pull request #6626 from hashicorp/ICU-18958 
Memory leak fix for worker session management by immediately removing closed connections
 2026-05-04 09:09:22 +05:30
Anton Averchenkov 5e6c9eecbe Clean up loop captures in tests (#6592) 
* Clean up loop captures

* some more
 2026-05-01 12:34:33 -04:00
Bharath Gajjala bf24d6607f feat(daemon): csp nonce handling (#6587) 
* Adding nonce handling

* Nonce token and fix content length mismatch

* Updating nonce injection for override situations

* nonce handling in Content Security Policy for custom CSP scenarios

* return original length in cspWriter to prevent truncation
 2026-04-27 09:06:46 -05:00
Chandrasekhar Gadde 963ea30274 Memory leak fix for worker session management by immediately removing closed connections 2026-04-24 17:26:03 +05:30
Louis Ruch 09962d0521 feat(listener): Set node tls handshake timeout to 15 seconds 2026-04-20 11:42:05 -07:00
Abhishek Manjegowda c1283c2875 fix(controller): Allow wildcard resources with specific actions in rate limit config (#6550) 
* Wildcard API rate limit added

* changes updated

* reviwed changes added
 2026-04-17 12:01:13 +05:30
aditya2548 f8363dd06e [COMPLIANCE] Update Copyright & License Headers 2026-04-06 15:48:57 +05:30
Pradeep Sekar 1354db6d50 feat: Add cookie attributes (#6476) 2026-03-24 12:49:50 -07:00
Abhishek Manjegowda 5347d17c24 Fix : Context timeout error handler changes (#6493) 
* context timeout error handler changes

* changes updated

* oidc test case added
 2026-03-24 10:25:23 +05:30
Bharath Gajjala 8dae2ee45b feat: expose grant schema for UI linting support (#6470) 2026-03-18 09:49:16 -05:00
oss-core-libraries-dashboard[bot]hashicorp-copywrite[bot]Justin Nguyen
 		429247f407 [COMPLIANCE] Update Copyright Headers (#6282) 
* [COMPLIANCE] Update Copyright and License Headers

* chore: make gen to generate files with copyright headers

* chore: update missed copyright headers

---------

Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com>
Co-authored-by: Justin Nguyen <justin.nguyen@hashicorp.com>
 2026-01-28 11:05:07 -06:00
hashicc ef75427403 Add path attribute to split cookies (#6298) 
* Add "Path" attribute to "/"

Without this the browser defaults to a path of the parent of the
path in the request. See:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Set-Cookie#pathpath-value

This means the cookie isn't included in api requests since the path
is too restrictive

* Update tests with split cookie path attribute
 2026-01-15 09:38:25 -05:00
Abhishek Manjegowda a1718effba CE changes for ENT (#6334) 
Approved
 2026-01-14 19:58:51 +05:30
Sorawis Nilparuk (Bo) fe09f61a85 chore(test) fix flaky tests (#6315) 
* internal/cmd/commands/server/listener_reload_test.go remove t.Parallel() comment

* internal/cmd/commands/server/worker_initial_upstreams_reload_test.go remove t.Parallel

* internal/cmd/commands/server/worker_tags_reload_test.go wait by polling worker instead of sleep

* internal/daemon/worker/routing_info.go make deep copy in LastRoutingInfoSuccess to avoid race condition

* internal/tests/cluster/parallel/orphaned_connections_test.go raise grace period time to allow test to wait for longer

* improve logging in sequential tests

* move ports around and use t.Cleanup to send shutdown signal to test server

* fix one typo

* do final assert in t.Cleanup instead of defer

* undo t.Cleanup change

* add another signal to force shutdown running servers

* add exit early and increase server start timeout

* tighten workerRPC settings on session tests

* tighten more workerRPC timing

* make gen

* add comment explaining deep copying lastRoutingInfoSuccess
 2026-01-05 10:40:28 -08:00
Abhishek Manjegowda c4dc2a43cc refactor : ICU-18284-Unify SecureRandomReader (#6303) 
* Unify SecureRandomReader

* vault changes updated

* target changes added

* reviwed changes updated
 2025-12-22 11:30:10 +05:30
Louis Ruch 4bae4f23f5 feat(ssh): support ssh known hosts file (#6263) 2025-11-19 16:24:20 -08:00
Bharath Gajjala d4f7bd55d1 feat(cli): Add password credential CLI commands (#6117) 2025-11-13 12:28:04 -08:00
Bharath Gajjala 11c4fd7580 feat(handlers): CRUDL support for static password credential (#6181) 2025-11-13 12:28:04 -08:00
Justin Nguyen 82745e16be feat(handlers): Implement CRUDL for vault generic Password credential (#6161) 2025-11-13 12:28:04 -08:00
Bharath Gajjala 5cf33fa8b3 feat(credentials): Add PasswordAttributes credential type (#6110) 2025-11-13 12:28:04 -08:00
dani 4a7342b074 fix(credential/vault): add case for upd creds in injected creds switch (#6226) 2025-11-06 16:37:57 -05:00
Hugo 84dd5543cf feat(handlers/credentiallibraries): Support Vault LDAP credential library 2025-11-05 16:20:44 -05:00
April-May 003007aaa3 chore(proxy): Reduce noisy error logs (#6136) 2025-10-10 08:43:40 -07:00
Irena Rindos b6849b1c15 fix(sess): grab kms wrapper before tx (#6052) 2025-09-15 13:42:47 -04:00
dependabot[bot]andJohan Brandhorst-Satzkorn 959fe3ebd3 chore(deps): bump the go group across 7 directories with 5 updates (#6035) 
* chore(deps): bump the go group across 7 directories with 5 updates

Bumps the go group with 4 updates in the / directory: [github.com/coder/websocket](https://github.com/coder/websocket), [github.com/docker/docker](https://github.com/docker/docker), [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) and [mvdan.cc/gofumpt](https://github.com/mvdan/gofumpt).
Bumps the go group with 2 updates in the /api directory: [github.com/coder/websocket](https://github.com/coder/websocket) and [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary).
Bumps the go group with 1 update in the /plugins/boundary/mains/aws directory: [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary).
Bumps the go group with 1 update in the /plugins/boundary/mains/azure directory: [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary).
Bumps the go group with 1 update in the /plugins/boundary/mains/gcp directory: [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary).
Bumps the go group with 1 update in the /plugins/boundary/mains/minio directory: [github.com/hashicorp/boundary/sdk](https://github.com/hashicorp/boundary).
Bumps the go group with 1 update in the /sdk directory: [github.com/coder/websocket](https://github.com/coder/websocket).

Updates `github.com/coder/websocket` from 1.8.13 to 1.8.14
- [Release notes](https://github.com/coder/websocket/releases)
- [Commits](https://github.com/coder/websocket/compare/v1.8.13...v1.8.14)

Updates `github.com/docker/docker` from 28.3.3+incompatible to 28.4.0+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v28.3.3...v28.4.0)

Updates `github.com/prometheus/client_golang` from 1.23.0 to 1.23.2
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.23.0...v1.23.2)

Updates `mvdan.cc/gofumpt` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/mvdan/gofumpt/releases)
- [Changelog](https://github.com/mvdan/gofumpt/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mvdan/gofumpt/compare/v0.8.0...v0.9.0)

Updates `github.com/coder/websocket` from 1.8.13 to 1.8.14
- [Release notes](https://github.com/coder/websocket/releases)
- [Commits](https://github.com/coder/websocket/compare/v1.8.13...v1.8.14)

Updates `github.com/hashicorp/boundary/sdk` from 0.0.54 to 0.0.55
- [Release notes](https://github.com/hashicorp/boundary/releases)
- [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/boundary/compare/api/v0.0.54...api/v0.0.55)

Updates `github.com/hashicorp/boundary/sdk` from 0.0.54 to 0.0.55
- [Release notes](https://github.com/hashicorp/boundary/releases)
- [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/boundary/compare/api/v0.0.54...api/v0.0.55)

Updates `github.com/hashicorp/boundary/sdk` from 0.0.54 to 0.0.55
- [Release notes](https://github.com/hashicorp/boundary/releases)
- [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/boundary/compare/api/v0.0.54...api/v0.0.55)

Updates `github.com/hashicorp/boundary/sdk` from 0.0.54 to 0.0.55
- [Release notes](https://github.com/hashicorp/boundary/releases)
- [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/boundary/compare/api/v0.0.54...api/v0.0.55)

Updates `github.com/hashicorp/boundary/sdk` from 0.0.54 to 0.0.55
- [Release notes](https://github.com/hashicorp/boundary/releases)
- [Changelog](https://github.com/hashicorp/boundary/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/boundary/compare/api/v0.0.54...api/v0.0.55)

Updates `github.com/coder/websocket` from 1.8.13 to 1.8.14
- [Release notes](https://github.com/coder/websocket/releases)
- [Commits](https://github.com/coder/websocket/compare/v1.8.13...v1.8.14)

---
updated-dependencies:
- dependency-name: github.com/coder/websocket
  dependency-version: 1.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/docker/docker
  dependency-version: 28.4.0+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: mvdan.cc/gofumpt
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/coder/websocket
  dependency-version: 1.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/boundary/sdk
  dependency-version: 0.0.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/boundary/sdk
  dependency-version: 0.0.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/boundary/sdk
  dependency-version: 0.0.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/boundary/sdk
  dependency-version: 0.0.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/boundary/sdk
  dependency-version: 0.0.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/coder/websocket
  dependency-version: 1.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>

* Format files with latest gofumpt

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2025-09-08 15:17:46 -04:00
Irena RindosandDanielle Miu eaf31ef17a feat(rdp): perform basic settings exchange and test the proxy fn (#1657) 
-----------
Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
 2025-09-02 15:14:09 -04:00
Irena Rindos 4527802c76 session(proxy cert):associate session with proxy certificates (#1606) 
* ce: session(proxy cert):associate session with proxy certificates
 2025-09-02 15:13:53 -04:00
irenarindos 92e6a6de26 rdp(repo): persist target proxy certificates 2025-09-02 15:13:45 -04:00
Irena Rindos cac944d948 chore(rdp): fix command text and cred conversion (#1656) 2025-09-02 15:13:31 -04:00
Andrew Gaffney f5cdf2a354 feat(api): Add RDP target attributes 2025-09-02 15:13:15 -04:00
Hugo 7a6c4eeb56 feat(target): Enrich CredentialLibrary object with credential type 
This allows for registered subtype-specific functions to perform logic using a
credential library's credential types.
 2025-09-02 15:12:46 -04:00
Andrew GaffneyandApril-May 0824dd7d16 feat(handlers): CRUDL support for vault-generic Username-Password-Domain credentials (#1527) 
---------

Co-authored-by: April-May <18632637+AprilMay0@users.noreply.github.com>
 2025-09-02 15:12:33 -04:00
Hugo fbcc256742 feat(handlers): Allow UPD brokered creds to be associated w/ Targets + Session auth 2025-09-02 15:12:25 -04:00
Andrew Gaffney f265ec4e5b feat(handlers): CRUDL support for static Username-Password-Domain credentials 2025-09-02 15:12:20 -04:00
Hugo 2316fecbd6 Remove nhooyr.io/websocket from Boundary (#5992) 2025-08-20 16:28:07 +01:00
David Kanney 8a0c388a96 test(grants): Use 'continue' when iterating over expected outputs (#5981) 2025-08-19 13:05:38 -04:00
Sorawis Nilparuk (Bo) 610aa340fc fix authorized_collections_action not returning for host-catalog (#5899) 2025-07-07 09:26:50 -07:00
Sorawis Nilparuk (Bo) ababe653f9 add tests to all users API (#5879) 2025-06-25 11:34:50 -07:00
Sorawis Nilparuk (Bo) ee26fefc5e bug: fix list target permissions resource ID overriding all resource grants (#5877) 
* fix list target not handling all resources permissions

* add test

* fix same bug for session package

* split target tests to two separate tests
 2025-06-23 14:03:33 -07:00
David Kanney 807eb34a79 Remove plugins from host catalog init logic (#5875) 2025-06-20 17:44:24 -07:00
David Kanney e6e3c9b41e Remove redundant TestCatalog initialization logic (#5874) 2025-06-20 19:34:39 -04:00
Sorawis Nilparuk (Bo) 50303f9c18 bosorawis cherrypick authtoken.TestRoleGrantsForToken removal (#5872) 
* bosorawis remove TestRoleGrantsForToken (#5840)

* refactor auth method grants tests

* refactor credential libraries grants tests

* refactor hosts grants tests

* refactor roles grants tests

* refactor scopes grants tests

* refactor tcp targets grants tests

* refactor users grants tests

* refactor worker grants tests

* fix authmethod test broken during the refactor

* remove authtoken.TestRoleGrantsForToken

* add pinned ID test

* correct event name

* fix make gen and lint
# Conflicts:
#	internal/daemon/controller/handlers/roles/grants_test.go
#	internal/daemon/controller/handlers/scopes/grants_test.go
#	internal/daemon/controller/handlers/targets/tcp/grants_test.go
#	internal/daemon/controller/handlers/workers/grants_test.go

* remove one forgotten reference
 2025-06-20 14:50:51 -07:00