Commit Graph
716 Commits
Author SHA1 Message Date
Jim 1b980a0a0e align directory name with pkg name (#1284) 2021-06-06 17:11:59 -04:00
Naohisa Murakami 237590831b Fix comment in template for cli (#1281) 2021-06-06 13:36:55 -07:00
Jim cc2c71a261 base types for events package (#1275) 2021-06-06 07:57:24 -04:00
Jim 465c8c9036 stop panicing because the issuer port is invalid. (#1282) 2021-06-05 13:17:46 -04:00
Michael Gaffney 094bdcdd2b protobuf: remove unused imports (#1267)
This removes unused imports in the protobuf files which are reported as
warnings by the protoc compiler.
2021-06-02 14:59:36 -04:00
Todd Knight 4bd480c183 Fix field error message field name. (#1266) 2021-06-02 07:39:45 -07:00
Jim 6cfc1a7753 use a slice for claim maps so the order is deterministic (#1263) 2021-06-02 07:09:41 -04:00
Jeff Mitchell 765829be6e Update CORS to have an allowed_origin of * by default (#1249)
* Update CORS to have an allowed_origin of `*` by default

* Update changelog
2021-05-21 13:33:02 -04:00
Jeff Mitchell a0c1f69ae2 Already-canceled sessions return 200 (#1243)
If a session is already canceled or terminated, attempting to cancel it
will return the current session state and a 200, instead of an error.
2021-05-20 21:07:22 -04:00
Jeff Mitchell 13545e3171 Revert "internal/cmd/config: allow explicit origin list w/implicit CORS toggle (#1247)" (#1248)
This reverts commit 579fc621ec.
2021-05-20 21:06:38 -04:00
Chris Marchesi 579fc621ec internal/cmd/config: allow explicit origin list w/implicit CORS toggle (#1247)
This ensures that cors_allowed_origins can be set when cors_enabled is
not explicitly specified and allowed to be its default (currently true).

The current behavior is to clobber this value when cors_enabled is not
explicitly set, ultimately setting it to the default of
"serve://boundary" only.
2021-05-20 17:11:56 -07:00
Michele Degges e0138ce286 Upgrade build node version & packagespec (#1237) 2021-05-18 11:47:17 -04:00
Jim d9439fd32a Revert "chore: bump UI version and add changelog entry (#1229)" (#1233)
This reverts commit 8e0c3ea46f.
2021-05-17 19:04:57 -04:00
Randall Morey 8e0c3ea46f chore: bump UI version and add changelog entry (#1229) 2021-05-17 14:02:41 -07:00
Michael Gaffney 21033a6174 Refactor: multiple rename to fix the spelling of subtype (#1227)
The definition of 'subtype' is 'a secondary or subordinate type'. The
'T' should not be capitalized (unless it is referring to a type of
submarine, which its not).
2021-05-17 15:36:45 -04:00
Jeff Mitchell 7ee8ddba6a True up some spelling 2021-05-14 16:26:25 -04:00
Jeff Mitchell b54be8ee9a Add missing API-level state checks during session cancel (#1223)
* Add missing API-level state checks during session cancel

This validates it's not already canceled or in terminated state.
2021-05-14 15:57:30 -04:00
Jeff Mitchell b47b71d26c Refactor connection listing for tests (#1224) 2021-05-14 15:57:15 -04:00
Jeff Mitchell 6f34da8923 Add cleanup of dead connections no longer reported by a worker (#1220) 2021-05-14 13:23:12 -04:00
Michael Gaffney 0b5ac930ac Fix godoc wording 2021-05-12 12:22:04 -04:00
Michael Gaffney b8831b16f1 Fix some minor godoc problems 2021-05-12 11:43:03 -04:00
Jeff Mitchell 1ec0ba0a93 Migrate the server upsert query to use database time (#1214)
* Migrate the server upsert query to use database time

This ensures that we are using consistent ideas of time regardless of
the local time on each worker (for this query).

* Fix insert part of the upsert query
2021-05-10 16:58:09 -04:00
Alexey Dubkov a33d1922a1 Fix cmd help for groups: rename user to member (#1212) 2021-05-10 13:12:59 -04:00
denniskniep 5ba8377106 Remove text in oidc command on json format (#1213)
Fixes #1193

Fixes that the openid connect authenticate command formatted as json returns
disturbing text. Therefore it can not be piped and parsed by another tool
2021-05-10 13:12:11 -04:00
Louis Ruch feb5d7385d Louis job scheduler (#1197)
* Adds job repo
* Adds scheduler
* Adds plugin table which is a place holder for future expansion of the scheduler. Currently all jobs that are created are linked to the pi_system plugin which are jobs that are held in a local registeredJobs map populated at controller startup.
2021-05-06 14:54:10 -07:00
Jeff Mitchell c22631fbca Fix boundary database init respecting format flag (#1204)
The output was ready for json format but the flag wasn't included.
2021-05-05 11:49:06 -04:00
Michael Gaffney 120b5e4c79 Run make migrations 2021-05-05 10:53:08 -04:00
Jeff Mitchell 22d5c88a0b Add Output Fields support (#1192) 2021-05-04 20:57:35 -04:00
Michael Gaffney 88c3fdc043 Fix godoc spelling 2021-05-04 10:38:33 -04:00
Jim c7bac26e1a Fix a broken auth token test and support conditional tests for "versioned" releases. (#1195) 2021-05-04 10:25:11 -04:00
Jeff Mitchell f32e7f9144 Add ability for the controller/worker name to be read from env/file (#1181) 2021-05-04 09:37:56 -04:00
Michael Gaffney f130563da7 Run make fmt 2021-05-04 09:23:35 -04:00
Jim 2437cdcc8d OIDC: add support for account claim maps (#1186) 2021-05-04 08:41:04 -04:00
Dylan Scott 4ae5003763 PR #1001: Postgres Connection Pooling Control (#1015) 2021-05-03 18:42:18 -04:00
s-christoff 9ceeb3bd65 Add -container-image flag (#1112) 2021-05-03 13:11:28 -05:00
Michael Gaffney ecc9d6d649 Run make fmt 2021-05-03 13:38:29 -04:00
Michael Gaffney 95e5db3aa3 Fix godoc wording 2021-05-03 12:48:39 -04:00
Todd Knight 5d17bd9eec Error on boundary database migrate if the db hasn't been initialized (#1184) 2021-05-03 08:55:37 -07:00
Jim 8d317023f8 OIDC: make callback URL paths deterministic. (#1188) 2021-05-02 15:25:29 -04:00
Todd Knight 61e236f76d OIDC Callback Error Redirect (#1174) 2021-04-29 14:47:13 -07:00
Jim 25e657fa51 Ongoing OIDC: support to request additional OIDC scopes from the IdP (#1175) 2021-04-28 06:53:13 -04:00
Michael Gaffney a7ba27148b Fix godoc wording 2021-04-27 08:26:08 -04:00
Jeff Mitchell 4690225c1e Update delete action behavior and JSON format output (#1155)
This PR changes delete behavior:

* On success, a 204 is returned rather than a 200 with an empty JSON object
* The CLI now passes through the 404 error if encountered instead of swallowing it

It also updates formatting for JSON to use the response body, which means that the item (or items) in the JSON format are actually the format across the wire, instead of being reinterpreted by unmarshaling into the Go SDK and then remarshaling.
2021-04-26 20:38:55 -04:00
Jeff Mitchell e6af51943d Add read:self and delete:self to auth tokens and add logout command (#1162) 2021-04-23 13:45:08 -04:00
Michael Gaffney 3fe94335d4 Run make fmt 2021-04-23 13:19:28 -04:00
Jeff Mitchell 727d1c7085 Add "no-op" action and use it as default for scope permissions (#1138)
Because of listing visibility, if no actions are assigned to a user for
an individual resource, it's excluded from the list. This is fine and
good. However, when we made a change in 0.2.0 to restrict the
information returned from listing for the anonymous user for scopes and
auth methods, it exposed the fact that because of the way this
visibility works we had to add `read` to scopes by default -- thereby
rather defeating the purpose of restricting what goes back to `u_anon`
requests.

The purpose of "no-op" is to never be used for real actions within the
API, but as something that can be granted to specifically enable
visibility for the targeted user. This makes the controls over list
visibility much more granular.
2021-04-23 10:13:37 -04:00
Jim Lambert be7fc67842 regenerate migrations 2021-04-22 07:38:58 -04:00
Jim 3ee651deab fix primary account data returned for users when a passwd auth method is the primary auth method (#1154) 2021-04-21 19:10:54 -04:00
Jim 75108cbc8b Ongoing OIDC: return the primary account info along with the user. (#1145) 2021-04-20 20:33:56 -04:00
Jeff MitchellandSam Salisbury a90a64d787 Use Go 1.16 native embedding and remove go-bindata (#1151)
Co-authored-by: Sam Salisbury <samsalisbury@gmail.com>
2021-04-20 10:45:05 -04:00