Commit Graph
699 Commits
Author SHA1 Message Date
Jeff Mitchell b47b71d26c Refactor connection listing for tests (#1224) 2021-05-14 15:57:15 -04:00
Jeff Mitchell 6f34da8923 Add cleanup of dead connections no longer reported by a worker (#1220) 2021-05-14 13:23:12 -04:00
Michael Gaffney 0b5ac930ac Fix godoc wording 2021-05-12 12:22:04 -04:00
Michael Gaffney b8831b16f1 Fix some minor godoc problems 2021-05-12 11:43:03 -04:00
Jeff Mitchell 1ec0ba0a93 Migrate the server upsert query to use database time (#1214)
* Migrate the server upsert query to use database time

This ensures that we are using consistent ideas of time regardless of
the local time on each worker (for this query).

* Fix insert part of the upsert query
2021-05-10 16:58:09 -04:00
Alexey Dubkov a33d1922a1 Fix cmd help for groups: rename user to member (#1212) 2021-05-10 13:12:59 -04:00
denniskniep 5ba8377106 Remove text in oidc command on json format (#1213)
Fixes #1193

Fixes that the openid connect authenticate command formatted as json returns
disturbing text. Therefore it can not be piped and parsed by another tool
2021-05-10 13:12:11 -04:00
Louis Ruch feb5d7385d Louis job scheduler (#1197)
* Adds job repo
* Adds scheduler
* Adds plugin table which is a place holder for future expansion of the scheduler. Currently all jobs that are created are linked to the pi_system plugin which are jobs that are held in a local registeredJobs map populated at controller startup.
2021-05-06 14:54:10 -07:00
Jeff Mitchell c22631fbca Fix boundary database init respecting format flag (#1204)
The output was ready for json format but the flag wasn't included.
2021-05-05 11:49:06 -04:00
Michael Gaffney 120b5e4c79 Run make migrations 2021-05-05 10:53:08 -04:00
Jeff Mitchell 22d5c88a0b Add Output Fields support (#1192) 2021-05-04 20:57:35 -04:00
Michael Gaffney 88c3fdc043 Fix godoc spelling 2021-05-04 10:38:33 -04:00
Jim c7bac26e1a Fix a broken auth token test and support conditional tests for "versioned" releases. (#1195) 2021-05-04 10:25:11 -04:00
Jeff Mitchell f32e7f9144 Add ability for the controller/worker name to be read from env/file (#1181) 2021-05-04 09:37:56 -04:00
Michael Gaffney f130563da7 Run make fmt 2021-05-04 09:23:35 -04:00
Jim 2437cdcc8d OIDC: add support for account claim maps (#1186) 2021-05-04 08:41:04 -04:00
Dylan Scott 4ae5003763 PR #1001: Postgres Connection Pooling Control (#1015) 2021-05-03 18:42:18 -04:00
s-christoff 9ceeb3bd65 Add -container-image flag (#1112) 2021-05-03 13:11:28 -05:00
Michael Gaffney ecc9d6d649 Run make fmt 2021-05-03 13:38:29 -04:00
Michael Gaffney 95e5db3aa3 Fix godoc wording 2021-05-03 12:48:39 -04:00
Todd Knight 5d17bd9eec Error on boundary database migrate if the db hasn't been initialized (#1184) 2021-05-03 08:55:37 -07:00
Jim 8d317023f8 OIDC: make callback URL paths deterministic. (#1188) 2021-05-02 15:25:29 -04:00
Todd Knight 61e236f76d OIDC Callback Error Redirect (#1174) 2021-04-29 14:47:13 -07:00
Jim 25e657fa51 Ongoing OIDC: support to request additional OIDC scopes from the IdP (#1175) 2021-04-28 06:53:13 -04:00
Michael Gaffney a7ba27148b Fix godoc wording 2021-04-27 08:26:08 -04:00
Jeff Mitchell 4690225c1e Update delete action behavior and JSON format output (#1155)
This PR changes delete behavior:

* On success, a 204 is returned rather than a 200 with an empty JSON object
* The CLI now passes through the 404 error if encountered instead of swallowing it

It also updates formatting for JSON to use the response body, which means that the item (or items) in the JSON format are actually the format across the wire, instead of being reinterpreted by unmarshaling into the Go SDK and then remarshaling.
2021-04-26 20:38:55 -04:00
Jeff Mitchell e6af51943d Add read:self and delete:self to auth tokens and add logout command (#1162) 2021-04-23 13:45:08 -04:00
Michael Gaffney 3fe94335d4 Run make fmt 2021-04-23 13:19:28 -04:00
Jeff Mitchell 727d1c7085 Add "no-op" action and use it as default for scope permissions (#1138)
Because of listing visibility, if no actions are assigned to a user for
an individual resource, it's excluded from the list. This is fine and
good. However, when we made a change in 0.2.0 to restrict the
information returned from listing for the anonymous user for scopes and
auth methods, it exposed the fact that because of the way this
visibility works we had to add `read` to scopes by default -- thereby
rather defeating the purpose of restricting what goes back to `u_anon`
requests.

The purpose of "no-op" is to never be used for real actions within the
API, but as something that can be granted to specifically enable
visibility for the targeted user. This makes the controls over list
visibility much more granular.
2021-04-23 10:13:37 -04:00
Jim Lambert be7fc67842 regenerate migrations 2021-04-22 07:38:58 -04:00
Jim 3ee651deab fix primary account data returned for users when a passwd auth method is the primary auth method (#1154) 2021-04-21 19:10:54 -04:00
Jim 75108cbc8b Ongoing OIDC: return the primary account info along with the user. (#1145) 2021-04-20 20:33:56 -04:00
Jeff MitchellandSam Salisbury a90a64d787 Use Go 1.16 native embedding and remove go-bindata (#1151)
Co-authored-by: Sam Salisbury <samsalisbury@gmail.com>
2021-04-20 10:45:05 -04:00
Jeff Mitchell 46d7613e2d Remove extra s in item table output for auth methods and host catalogs 2021-04-20 09:04:07 -04:00
Lars Lehtonen b02c050304 internal/servers/controller/handlers/users: fix dropped test error (#1130) 2021-04-19 16:06:17 -04:00
Jim 358f5a61fb bump protoc to v3.15.8 (#1147) 2021-04-18 21:34:25 -04:00
Michael Gaffney ea0e2e5df4 Add tests for common.BuildUpdatePaths (#1143) 2021-04-18 11:00:38 -04:00
Michael Gaffney 78159eef9c Fix godoc spelling and white space 2021-04-17 12:36:21 -04:00
s-christoff 0f424f6f7f Refactor internal/servers/controller/handlers errors v2 (#1099) 2021-04-16 12:06:03 -05:00
Jeff Mitchell be10cc4b42 Update grpc/proto deps (#1136)
* Update grpc/proto deps

* Make gen
2021-04-15 14:11:23 -04:00
Jeff Mitchell 7062bc70f0 Fix bug causing CORS to accept all origins by default (#1134) 2021-04-15 13:33:52 -04:00
Jeff Mitchell afe828c118 Update returned information in list responses for anon user (#1127) 2021-04-14 17:19:02 -04:00
Susmitha Girumala 5ce21e118e ui: Bump ui version to latest (#1125) 2021-04-14 17:01:22 -04:00
Jeff Mitchell 604d642e1e Restrict auth method listing for u_anon (#1122)
This keeps only essential information in list output for auth methods
when the user is u_anon. Boundary's default is to allow listing of
auth methods for anonymous users to allow discovery of authentication
points, but there's no need to return more information about internal
configuration than necessary.
2021-04-14 16:49:08 -04:00
Jeff Mitchell c54aedcf1a By default, add Boundary Desktop's origin to allowed CORS origins (#1121)
This also adds support for a flag to disable this behavior.

Fixes #1093
2021-04-14 16:26:21 -04:00
Jim e0e6e58bb2 better api error codes from OIDC auth method update/change-state operations (#1116) 2021-04-14 15:00:20 -04:00
Todd Knight fad9f6d525 Allow oidc accounts to be add|set|removed to users. (#1117) 2021-04-14 11:34:17 -07:00
Jeff Mitchell c57841fa2e Update wording for user not found to indicate the auth method isn't primary for the scope 2021-04-14 13:27:03 -04:00
Todd Knight dc881e65d4 Fix alignment for Is Primary For Scope field and values for listing. 2021-04-14 10:25:25 -07:00
Michael Gaffney 5855930921 Renumber migrations in the '2/' directory to start at 01 (#1114) 2021-04-14 11:47:21 -04:00