CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
811 Commits 7 Branches 2 Tags
d30dd0ff644e5c5e73fff8dc96e42e4ee0f5c8cd
Commit Graph
510 Commits
Author SHA1 Message Date
Louis Ruch d30dd0ff64 Refactor domain error to use errorId (#790) 
* Refactor domain error to use errorId

* Wrap accepts options and uses New internally
 2020-11-17 18:54:23 -08:00
Jeff MalnickandJeff Mitchell 11c7c8dbe8 feat: make auth token staleness and duration configurable (#777) 
* feat: make auth token time to live and staleness configurable

* docs: add configuration docs for auth token TTL and staleness

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-11-16 10:39:18 -08:00
Jeff MalnickandJeff Mitchell a7fca44809 Fix authz flag (#787) 
* Fix authz flag

* add changelog bug fix for authz flag

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-11-13 10:06:37 -05:00
Jeff Mitchell a37ba007f2 Update deps (#772) 
* Update deps

This also updates for the new (and required) paradigm for registering
service implementations as spelled out in
https://github.com/grpc/grpc-go/issues/3385

* Roll back dockertest
 2020-11-11 14:41:05 -05:00
Randall Morey 3eb9d62411 ui: bump UI release commit for 0.1.2 (#783) 2020-11-09 09:32:04 -08:00
Randall MoreyandSusmitha Girumala 8813952439 Ui next release update (#778) 
* Update ui version to latest for next release

* Bump up ui version to pick up org label fix

* chore: update changelog with ui scope awareness

Co-authored-by: Susmitha Girumala <susmitha@hashicorp.com>
 2020-11-05 16:22:40 -08:00
Jim af6ef1b687 Refactor existing sentinel errors (#774) 2020-11-05 16:54:03 -05:00
Jim fb3f11997e New domain errors based on the ICU-019 RFC (#760) 2020-11-04 14:42:20 -05:00
Lars Lehtonen 876ae59c2b internal/servers/controller/handlers/groups: fix dropped test error (#763) 2020-11-02 10:01:37 -05:00
Jeff Mitchell 6d59ac1eda Update synopsis for Connect command so it doesn't wrap on most terminals 2020-11-02 09:45:33 -05:00
Jeff Mitchell e2e4631929 Add ability to set public cluster address (#761) 2020-10-30 16:54:53 -04:00
Jeff Mitchell f063b8601c Fix IPv4-only check when no port is specified (#752) 
We have behavior that causes "0.0.0.0" to only listen on IPv4, however,
it also assumed there was a port suffixed. This changes it so that it
also works with a port-less address.
 2020-10-27 10:43:50 -04:00
Jeff Mitchell 3b9ef13f17 Update UI and Changelog (#741) 2020-10-22 12:24:36 -04:00
Jeff Mitchell 813d21565f Allow authorize-session to be invoked with target name (#737) 2020-10-22 08:40:00 -04:00
Jeff Mitchell 61e312db47 Add printable checks to request path and name/desc (#740) 2020-10-21 13:07:09 -04:00
Jeff Mitchell 09b865ab28 Add pass cred storage support (#731) 
* Add `pass` cred storage support

Make it the default on non-Windows/macOS

Document the token storage behavior
 2020-10-21 09:00:17 -04:00
Jeff Malnick bfa3edbbac feat: override PG host Docker-advertised address when set (#732) 2020-10-20 21:28:57 -04:00
Jim 547ae7c802 Fix database init when locale isn't english (#736) 
* use IsMissingTableError(error)

* update changelog
 2020-10-20 21:13:01 -04:00
Lars Lehtonen 0c959cbb71 internal/servers/controller/handlers/accounts: fix dropped test errors (#733) 2020-10-20 09:13:57 -04:00
Jeff Mitchell 1f48d97327 Support for Unix domain socket listeners (#705) 
The client already supports protocol-agnostic transport so handles
unix:/// schemes.
 2020-10-16 13:45:47 -04:00
Jeff Mitchell 97e8613eb7 Fix hyphenation of resource subcommand output (#689) 
* Fix hyphenation of resource subcommand output

Fixes #686
 2020-10-15 19:29:33 -04:00
Lars Lehtonen c538ca335e internal/servers/controller: fix dropped test error (#687) 2020-10-14 20:59:38 -04:00
Jeff Malnick 76a891cfe2 tests: remove testing of revision output for now (#667) 2020-10-14 07:29:31 -07:00
Jeff Mitchell f454fa9ef2 Don't return error code 1 if saving the value to the keyring (#668) 2020-10-13 17:13:31 -04:00
Jeff Malnick e08ab98a2b tests: add CLI tests for version output (#664) 2020-10-13 12:34:38 -07:00
Sam Salisbury bcfd9d038f version command: fix version string (#662) 2020-10-13 12:21:45 -07:00
Jeff Mitchell ef16b6177c Update configuration docs (#661) 
* Update configuration docs

* Fix public addr example
 2020-10-13 12:21:09 -07:00
Jeff Mitchell 13631064fc Don't create a default role when the scope being created is a project (#658) 
* Don't create a default role when the scope being created is a project

* Fix up some more tests
 2020-10-13 13:56:21 -04:00
Jeff Mitchell f7bd5e18f9 Fix spacing for scope output in account command 2020-10-13 11:49:50 -04:00
Jeff Mitchell 437f874d44 Fix spacing before Attributes when printing auth method 2020-10-13 11:08:10 -04:00
Jeff Mitchell 868a65ac3d Don't show "Version v" on startup if empty (#653) 
We'll still show the SHA in this case
 2020-10-13 10:47:14 -04:00
Jeff Malnick dfa94c7990 tests: allow overriding auth variables in CLI tests (#647) 
* tests: ensure default user can connect to default target and ensure created target has intended host sets

* docs: update readme for CLI tests with how to run against arbitrary clusters

* feat: override auth variables in CLI tests
 2020-10-13 07:41:32 -07:00
Jeff Malnick 7f48e2edc6 tests: ensure default user can connect to default target and ensure created target has intended host sets (#646) 2020-10-13 07:41:14 -07:00
Jeff Malnick 3c1670c0d0 tests: add scopes CLI tests (#645) 2020-10-12 21:15:49 -07:00
Jeff Malnick 70e696a446 tests: add roles CLI tests (#644) 2020-10-12 20:57:57 -07:00
Jeff Malnick cad8949ac8 tests: add host sets CLI tests (#643) 2020-10-12 17:00:34 -07:00
Jeff Malnick bee1412785 tests: add host catalog CLI tests (#639) 2020-10-12 16:44:45 -07:00
Jeff Mitchell 1dd145e707 Fix up swagger title, which was in the authentication service 2020-10-12 18:06:22 -04:00
Jeff Mitchell dd8973dd9f Move authenticate service into auth method service (#635) 
This was always an RPC-only distinction and from that perspective it
makes sense; however it causes the generated docs to treat it as an
entirely separate service even though it's under the same collection
path as auth methods and this is confusing.
 2020-10-12 18:03:15 -04:00
Jeff Malnick 0f1fbea8f7 tests: add hosts CLI tests (#638) 2020-10-12 14:56:23 -07:00
Jeff Malnick c4c1e108b0 test: add groups resource CLI tests (#633) 2020-10-12 14:40:32 -07:00
Jeff Malnick 90e1dbe444 tests: add bats tests for testing CLI on arbitrary Boundary deployments (#614) 2020-10-12 10:26:26 -07:00
Jeff Mitchell 1acd690299 Clear account ID if token does not map to a user 
It's possible there are acceptable use cases for still matching account
ID if the account no longer maps to a user, but it's equally possible
that this can cause confusion. Removing it seems safer.
 2020-10-12 10:15:38 -04:00
Jeff Mitchell 6f36a1cab6 Update security docs (#613) 2020-10-10 19:29:34 -04:00
Jeff Mitchell 95404b2a56 Separate out protocol-specific functions (#610) 
Placing them into separate files slims down the main connect file and
makes it more obvious where things need to be handled for future
integrations.
 2020-10-10 16:12:04 -04:00
Jeff Mitchell a982fc9437 Remove proxy proto documentation for now (#606) 
We haven't tested it with the new lib yet. We can add this back whenever
we get to testing it.
 2020-10-10 13:42:04 -04:00
Jeff Mitchell 603b0582d7 Fix CLI help output and make more consistent (#605) 2020-10-09 20:26:48 -04:00
Jeff Mitchell bd271b707d Add version command (#604) 2020-10-09 19:35:04 -04:00
Jeff Mitchell 4833fbba23 Simplify worker->controller connection (#601) 
Go's TLS stack doesn't need a separate CA cert and in fact for sessions
we don't use this. So simplify the worker connection to remove an
unnecessary extra key generation.
 2020-10-09 16:49:36 -04:00
Jeff Mitchell 7f00e61ab0 Migrate to newer grpc utilities and bump deps (#593) 
* Migrate to newer grpc utilities and bump deps

* Revert grpc back as it was an accidental tag
 2020-10-09 13:18:53 -04:00