CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,213 Commits 7 Branches 2 Tags
aea1da77b67aa49d56fb2647af89263eb4cf0523
Commit Graph
733 Commits
Author SHA1 Message Date
Jim Lambert aa41676dc9 make gen changes prior to staging release 2021-06-08 13:12:26 -04:00
Jeff Mitchell e958a77280 Merge remote-tracking branch 'origin/main' into ICU-1573 2021-06-08 12:34:49 -04:00
Randall Morey 5c5678cd39 chore: bump UI version to include OIDC CRUD (#1280) 
* chore: bump UI version to include OIDC CRUD

* chore: bump ui version again
 2021-06-08 12:33:31 -04:00
Jeff Mitchell 054c0aa538 Update password generated account IDs (#1290) 2021-06-08 12:31:58 -04:00
Jeff Mitchell 4d27b58d2d Add managed groups test (#1289) 2021-06-07 20:35:45 -04:00
Jeff Mitchell d6ef2732e7 Merge remote-tracking branch 'origin/main' into ICU-1573 2021-06-07 15:21:30 -04:00
Jeff Mitchell b513f21153 Add test for GrantsForUser (#1287) 
* Start of test

* Add a test for existing GrantsForUser functionality.

The test has randomization built in to allocate users across groups and
both users and groups across roles. It tracks which users and groups
have been assigned to which roles, then ensures that GrantsForUser
returns the correct set of roles for a given user.

This required modifying the CTE in GrantsForUser to return role_id as
well.

This doesn't test managed groups yet, that will come in a follow-on PR.
 2021-06-07 10:19:21 -04:00
Jim 1b980a0a0e align directory name with pkg name (#1284) 2021-06-06 17:11:59 -04:00
Naohisa Murakami 237590831b Fix comment in template for cli (#1281) 2021-06-06 13:36:55 -07:00
Jim cc2c71a261 base types for events package (#1275) 2021-06-06 07:57:24 -04:00
Jim 465c8c9036 stop panicing because the issuer port is invalid. (#1282) 2021-06-05 13:17:46 -04:00
Jeff Mitchell 9ecc384007 Add managed group support to role principals (#1270) 2021-06-04 10:44:57 -04:00
Jeff Mitchell ad93315b59 Add predictable account IDs in dev mode (#1271) 2021-06-04 10:35:51 -04:00
Jeff Mitchell 5c8a8c3998 Merge remote-tracking branch 'origin/main' into ICU-1573 2021-06-03 13:39:44 -04:00
Michael Gaffney 094bdcdd2b protobuf: remove unused imports (#1267) 
This removes unused imports in the protobuf files which are reported as
warnings by the protoc compiler.
 2021-06-02 14:59:36 -04:00
Jeff Mitchell 9208d10936 Merge branch 'main' into ICU-1573 2021-06-02 14:09:02 -04:00
Jeff Mitchell 306d4fb4d3 Add API/CLI for managed groups (#1265) 2021-06-02 14:05:10 -04:00
Jeff Mitchell 179a49657e Managed Groups service (#1262) 2021-06-02 14:01:37 -04:00
Todd Knight 4bd480c183 Fix field error message field name. (#1266) 2021-06-02 07:39:45 -07:00
Jim 6cfc1a7753 use a slice for claim maps so the order is deterministic (#1263) 2021-06-02 07:09:41 -04:00
Jeff Mitchell 6c9b9e948e Add the bits to actually read filters and assign values to users (#1261) 2021-06-01 20:15:57 -04:00
Jeff Mitchell 4363a4084e Add membership setting function (#1259) 2021-06-01 15:18:10 -04:00
Jeff Mitchell 7da892a054 Managed Groups OIDC Repo (#1254) 2021-06-01 15:12:34 -04:00
Jeff Mitchell 15bd1a5245 Add initial SQL for managed groups (#1253) 2021-05-26 20:43:36 -04:00
Jeff Mitchell 765829be6e Update CORS to have an allowed_origin of * by default (#1249) 
* Update CORS to have an allowed_origin of `*` by default

* Update changelog
 2021-05-21 13:33:02 -04:00
Jeff Mitchell a0c1f69ae2 Already-canceled sessions return 200 (#1243) 
If a session is already canceled or terminated, attempting to cancel it
will return the current session state and a 200, instead of an error.
 2021-05-20 21:07:22 -04:00
Jeff Mitchell 13545e3171 Revert "internal/cmd/config: allow explicit origin list w/implicit CORS toggle (#1247)" (#1248) 
This reverts commit 579fc621ec.
 2021-05-20 21:06:38 -04:00
Chris Marchesi 579fc621ec internal/cmd/config: allow explicit origin list w/implicit CORS toggle (#1247) 
This ensures that cors_allowed_origins can be set when cors_enabled is
not explicitly specified and allowed to be its default (currently true).

The current behavior is to clobber this value when cors_enabled is not
explicitly set, ultimately setting it to the default of
"serve://boundary" only.
 2021-05-20 17:11:56 -07:00
Michele Degges e0138ce286 Upgrade build node version & packagespec (#1237) 2021-05-18 11:47:17 -04:00
Jim d9439fd32a Revert "chore: bump UI version and add changelog entry (#1229)" (#1233) 
This reverts commit 8e0c3ea46f.
 2021-05-17 19:04:57 -04:00
Randall Morey 8e0c3ea46f chore: bump UI version and add changelog entry (#1229) 2021-05-17 14:02:41 -07:00
Michael Gaffney 21033a6174 Refactor: multiple rename to fix the spelling of subtype (#1227) 
The definition of 'subtype' is 'a secondary or subordinate type'. The
'T' should not be capitalized (unless it is referring to a type of
submarine, which its not).
 2021-05-17 15:36:45 -04:00
Jeff Mitchell 7ee8ddba6a True up some spelling 2021-05-14 16:26:25 -04:00
Jeff Mitchell b54be8ee9a Add missing API-level state checks during session cancel (#1223) 
* Add missing API-level state checks during session cancel

This validates it's not already canceled or in terminated state.
 2021-05-14 15:57:30 -04:00
Jeff Mitchell b47b71d26c Refactor connection listing for tests (#1224) 2021-05-14 15:57:15 -04:00
Jeff Mitchell 6f34da8923 Add cleanup of dead connections no longer reported by a worker (#1220) 2021-05-14 13:23:12 -04:00
Michael Gaffney 0b5ac930ac Fix godoc wording 2021-05-12 12:22:04 -04:00
Michael Gaffney b8831b16f1 Fix some minor godoc problems 2021-05-12 11:43:03 -04:00
Jeff Mitchell 1ec0ba0a93 Migrate the server upsert query to use database time (#1214) 
* Migrate the server upsert query to use database time

This ensures that we are using consistent ideas of time regardless of
the local time on each worker (for this query).

* Fix insert part of the upsert query
 2021-05-10 16:58:09 -04:00
Alexey Dubkov a33d1922a1 Fix cmd help for groups: rename user to member (#1212) 2021-05-10 13:12:59 -04:00
denniskniep 5ba8377106 Remove text in oidc command on json format (#1213) 
Fixes #1193

Fixes that the openid connect authenticate command formatted as json returns
disturbing text. Therefore it can not be piped and parsed by another tool
 2021-05-10 13:12:11 -04:00
Louis Ruch feb5d7385d Louis job scheduler (#1197) 
* Adds job repo
* Adds scheduler
* Adds plugin table which is a place holder for future expansion of the scheduler. Currently all jobs that are created are linked to the pi_system plugin which are jobs that are held in a local registeredJobs map populated at controller startup.
 2021-05-06 14:54:10 -07:00
Jeff Mitchell c22631fbca Fix boundary database init respecting format flag (#1204) 
The output was ready for json format but the flag wasn't included.
 2021-05-05 11:49:06 -04:00
Michael Gaffney 120b5e4c79 Run make migrations 2021-05-05 10:53:08 -04:00
Jeff Mitchell 22d5c88a0b Add Output Fields support (#1192) 2021-05-04 20:57:35 -04:00
Michael Gaffney 88c3fdc043 Fix godoc spelling 2021-05-04 10:38:33 -04:00
Jim c7bac26e1a Fix a broken auth token test and support conditional tests for "versioned" releases. (#1195) 2021-05-04 10:25:11 -04:00
Jeff Mitchell f32e7f9144 Add ability for the controller/worker name to be read from env/file (#1181) 2021-05-04 09:37:56 -04:00
Michael Gaffney f130563da7 Run make fmt 2021-05-04 09:23:35 -04:00
Jim 2437cdcc8d OIDC: add support for account claim maps (#1186) 2021-05-04 08:41:04 -04:00