CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
938 Commits 7 Branches 2 Tags
b8fe4083c1e9e4e7aaa7d3624f3d63397cf907fb
Commit Graph
938 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jeff Malnick b8fe4083c1 Add initial Desktop docs (#930) 
* docs: initial desktop docs
 2021-02-12 15:38:41 -08:00
Jeff Mitchell c45916918a Revert "Update UI version" 
This reverts commit bab647b5e2.
 2021-02-12 14:22:36 -05:00
Jeff Mitchell 9761f1deee Prep for release 2021-02-12 11:53:32 -05:00
Jeff Mitchell d7afd08148 Update API dep 2021-02-12 11:47:16 -05:00
Jeff Mitchell 46f0f55a28 Update SDK in API 2021-02-12 11:46:02 -05:00
Jeff Mitchell 377d837df3 Update gen 2021-02-12 11:44:46 -05:00
s-christoff 5dc821a41e Add testing section for individual/user testing (#927) 2021-02-12 10:43:05 -06:00
Jeff Mitchell bab647b5e2 Update UI version 2021-02-12 11:29:04 -05:00
Jeff Mitchell 1ce09069a5 Move worker selection above session creation (#929) 
This prevents a session being created when no workers are available to
handle it.
 2021-02-12 11:05:33 -05:00
Jeff Mitchell 0993747702 Change server default allowed origin (#931) 2021-02-12 11:04:09 -05:00
Jeff Mitchell e9da3a871d Switch on CORS by default if not specified (#928) 2021-02-11 20:10:48 -05:00
Dane Harrigan 433998494a Use uint for internal types (#926) 2021-02-11 16:49:36 -05:00
s-christoff 6623be8bfb Refactor internal/auth to return domain specific errors (#905) 
* Refactor internal/auth to return domain specific errors
 2021-02-11 13:32:45 -06:00
Jeff Mitchell 22462cdd84 Add read:self and cancel:self to sessions; add dev unpriv user (#923) 
* Sessions support for read:self and cancel:self permissions. This is automatic with fallback; no API change is needed.

* Strips out values from listing if only self actions are allowed on the resource and the user ID is different. This prevents a default ACL of id=*;type=session;actions=read:self,cancel:self from causing all values to be visible when listing.

* Adds an unprivileged user to development/testing instances. This user has only default permissions plus the ability to authorize sessions in the default target.
 2021-02-11 13:14:18 -05:00
Jeff MitchellandJeff Malnick d279a906ce Allow public_cluster_addr to use an env var or file (#907) 
Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-10 20:22:02 -05:00
Jeff Mitchell 5266eb3269 Don't error worker filters if a key isn't found, treat it as a non-match (#900) 2021-02-10 15:59:31 -05:00
Jeff Mitchell c6fa737e51 Add a duplicate authenticate:login API verb (#912) 2021-02-10 15:43:59 -05:00
Jim ffcda56f40 a small refactor, so we can easily support options when creating new auth tokens. (#920) 2021-02-10 13:52:42 -05:00
Jeff Mitchell b61dd0ef36 Update schema version check text 2021-02-09 13:42:14 -05:00
Bryce Kalow f97ffebaaf chore: upgrade nextjs-scripts & next (#908) 2021-02-09 10:38:08 -05:00
Louis Ruch ff1293b983 Don't leak user ids in error messages (#916) 2021-02-05 13:17:13 -08:00
Todd Knight 9576c46a4b Update changelog with fix for issue #909. 2021-02-05 13:22:18 -07:00
Todd Knight 568594d1b3 Release the shared lock using a non cancelled context (#918) 2021-02-05 12:58:54 -07:00
Jeff Mitchell cb3980cb8c Remove list:self from main (#915) 
* Remove list:self from main

As per futher discussions, we won't be supporting this, in favor of
simply read:self and cancel:self (since listing now already filters out
items on which you have no permissions).

This doesn't remove list:self entirely from the code base as much of
that will simply be converted to read:self and cancel:self -- that will
be in a later PR. However, with this removed if we want to release we
won't expose an API publicly that isn't going to stick around.
 2021-02-05 14:01:03 -05:00
Louis Ruch 6e40d8e483 Update anon listing test (#917) 2021-02-05 14:00:19 -05:00
Louis RuchandJeff Mitchell 628a02ad15 Scope role grants (#913) 
* Add scope read grant to default roles

* Update CHANGELOG.md

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2021-02-05 09:41:48 -08:00
Jeff Mitchell 1afa3a4b6c Disallow an invalid grant format (#914) 2021-02-05 12:39:55 -05:00
Jeff Mitchell 942fa7bc9c Update to Go 1.15.8 2021-02-05 11:11:56 -05:00
Jeff Mitchell b8a953ba53 Add anon listing test 2021-02-04 16:02:20 -05:00
Jeff Mitchell 08686ef6f5 Update Jeff libs :-) 2021-02-04 14:41:56 -05:00
Jeff Malnick be90a23fdb update docker config for boundary to remove the controllers setting (#906) 2021-02-03 17:49:00 -08:00
Louis Ruch 178d4efa64 ICU-745/Refactor internal/session to new domain errors (#877) 
* Refactor internal/sessions to use domain errors
 2021-02-03 16:25:56 -08:00
s-christoff 81785e139f [enhancement] Refactor authtoken repo to return domain specific errors (#876) 2021-02-03 17:34:46 -06:00
Jeff Mitchell bd7322dfb8 Fix changelog whitespacing 2021-02-03 09:03:12 -05:00
Jeff Mitchell 61ec5b47e4 When running single-server mode, use public_cluster_addr if given (#904) 
When running single-server mode, use public_cluster_addr if given

Right now you don't need to specify a controller address and we use the
cluster listener address; this allows overriding it to the
public_cluster_addr if one is given.

If `controllers` is specified we allow it to be either the cluster
listener or the public cluster address if one is specified before trying
to parse and use it.
 2021-02-03 08:58:42 -05:00
Jeff Mitchell 3a3b664efb Changelog #901/902 2021-02-02 20:51:44 -05:00
Kevin Maris 8a8b2fb8e1 Fix nil TLSClientConfig (#901) 2021-02-02 20:50:30 -05:00
Jeff Mitchell 7cf74596bf Update info output key name 2021-02-02 18:42:52 -05:00
Todd Knight 02cd972043 Create Sessions List Self Action (#888) 2021-02-02 13:37:32 -07:00
Louis Ruch 06c59e19bd Add worker filter to create target tests (#899) 2021-02-02 11:03:47 -08:00
Jeff MitchellandJeff Malnick 6d2ab34087 Add initial filtering docs (#898) 
* Add initial filtering docs

Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-01 16:03:46 -08:00
Jeff Mitchell ba6c0df8ca Prep for 0.1.5 2021-01-29 18:36:14 -05:00
Jeff Mitchell 0b44583859 Update API in main 2021-01-29 18:29:49 -05:00
Jeff Mitchell 9879841e00 Update SDK in API 2021-01-29 18:28:52 -05:00
Randall Morey e324d23a44 chore: bump ui commitish to latest from boundary-ui/main (#895) 
* chore: bump ui commitish to latest from boundary-ui/main

* fix: bump UI version to fix scopes nav bug
 2021-01-29 15:44:49 -05:00
Jeff Malnick 10a5f1b832 test: add tests for authorized-action (#893) 2021-01-29 08:04:46 -08:00
Louis Ruch d65d4dbf6f Fix examples in website (#891) 2021-01-28 20:42:35 -08:00
Todd Knight 57d4bf2bfd Removing dev migration feature and checks (#892) 2021-01-28 19:28:31 -07:00
Todd Knight 955ae41215 Support upgrading from old migration table name (#889) 2021-01-28 14:30:08 -07:00
Jeff Mitchell 3461dcbd0c Remove down and dev migrations (#890) 
* Remove down and dev migrations

This won't be the pattern going forward, so this removes these from the
code.
 2021-01-28 16:12:14 -05:00