CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,053 Commits 7 Branches 2 Tags
db29c83daf377602e31a5aaebb5252c10e6da4bd
Commit Graph
92 Commits
Author SHA1 Message Date
JimTodd KnightJeff MitchellMichael Gaffney
 		dd0f34bc35 Add new OIDC auth method. (#1090) 
Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com>
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>
 2021-04-08 20:54:32 -04:00
Jeff Mitchell 06206de387 Remove go-swagger from the set of tools 
This indirectly removes a dependency on broken mongodb-driver 1.4.5; see https://jira.mongodb.org/browse/GODRIVER-1851
 2021-03-29 17:17:23 -04:00
Jeff Mitchell fcbf372881 Bump proto/grpc deps (#1017) 
* Bump proto/grpc deps

* Back out buf change

* Run make gen
 2021-03-20 16:12:01 -04:00
Jeff Mitchell d148dddb16 Update go-fumpt and multierror 2021-03-18 11:20:27 -04:00
Jeff Mitchell 559d304b59 Bump go-mod-upgrade 2021-03-18 11:11:07 -04:00
Jeff Mitchell 1047e7dab3 Update main's api/sdk 2021-03-09 13:53:27 -05:00
Jeff Mitchell 9fbb552031 Update shared-secure-libs to support tls_max_version 2021-03-09 08:33:35 -05:00
Jeff Mitchell 72aa110f72 CLI JSON updates (#962) 
See Changelog for details.
 2021-02-25 12:43:17 -05:00
Jeff Mitchell b967ff7f05 Pull in new API tag 2021-02-25 12:41:56 -05:00
Jeff Mitchell 652297328c Run go mod tidy 2021-02-22 18:52:25 -05:00
Jeff Mitchell 2ed1643e3a Dep updates (pgx, dktest) (#956) 
* Dep updates:

* pgx
* dktest

* Remove pgx
 2021-02-22 13:36:07 -05:00
Jeff Mitchell 09e57a6624 Dep update: (#955) 
* grpc-gateway and friends
* buf
* go-swagger
* protoc-gen-go-grpc/genproto
 2021-02-22 12:46:00 -05:00
Todd Knight 97b404032b Add ability to filter List*Requests (#952) 2021-02-22 10:09:25 -07:00
Jeff Mitchell d7afd08148 Update API dep 2021-02-12 11:47:16 -05:00
Jeff Mitchell 377d837df3 Update gen 2021-02-12 11:44:46 -05:00
Jeff Mitchell e9da3a871d Switch on CORS by default if not specified (#928) 2021-02-11 20:10:48 -05:00
Jeff Mitchell c6fa737e51 Add a duplicate authenticate:login API verb (#912) 2021-02-10 15:43:59 -05:00
Jeff Mitchell 08686ef6f5 Update Jeff libs :-) 2021-02-04 14:41:56 -05:00
Jeff Mitchell d7a24b6b34 Run go mod tidy 2021-01-28 10:41:15 -05:00
Jeff Mitchell 5de4befb58 Upgrade some deps (#886) 
These are Jeff-managed deps, and the changelogs have been evaluated.
 2021-01-25 10:41:56 -05:00
Jeff Mitchell 717a3b52ee Add worker tagging (#862) 
This allows workers to have tags assigned to them, which can then be filtered to control which targets they are allowed to serve.
 2021-01-21 16:27:20 -05:00
Jeff Mitchell 2bafd8a07c Bump go-mod-upgrade 2021-01-20 12:12:33 -05:00
Jeff Mitchell 46644300d9 Switch to execabs for os/exec in connect cmd (#873) 
* Switch to execabs for os/exec in connect cmd

This is more of an abundance-of-caution change (e.g. defense in depth)
but it doesn't seem like we should be using binaries from the current
directory for `boundary connect` executions (unless given an explicit
path).

* Update changelog
 2021-01-20 12:09:55 -05:00
Michael GaffneyandJeff Mitchell 94cb79bbdd See how Boundary would look with gofumpt applied (#853) 
* See how Boundary would look with https://github.com/mvdan/gofumpt applied

Results of running `gofumpt -w -s .`

* Update tools file and Makefile for gofumpt

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2021-01-07 10:02:32 -05:00
Jeff Mitchell 77525298bd Use modified version of keyring lib 2021-01-04 21:29:46 -05:00
Jeff Mitchell 5b5602969f Update go-keyring to use forked version (#846) 
This may help with #830.
 2021-01-04 21:05:42 -05:00
Jeff Mitchell 6a6b95dd01 Update go.mod API ref 2020-12-17 19:17:19 -05:00
Jeff Mitchell 11b821a200 Bump deps (#818) 2020-12-15 14:56:41 -05:00
Jeff Mitchell a37ba007f2 Update deps (#772) 
* Update deps

This also updates for the new (and required) paradigm for registering
service implementations as spelled out in
https://github.com/grpc/grpc-go/issues/3385

* Roll back dockertest
 2020-11-11 14:41:05 -05:00
Todd Knight 6e5aff3d5b Add buf breaking change detection to makefile (#756) 
* Add buf breaking change detection to makefile.

* Bump buf version to latest and fixed some deprecation and new flag warnings.
 2020-11-02 12:21:20 -07:00
Jeff Mitchell 09b865ab28 Add pass cred storage support (#731) 
* Add `pass` cred storage support

Make it the default on non-Windows/macOS

Document the token storage behavior
 2020-10-21 09:00:17 -04:00
Jeff Mitchell bd271b707d Add version command (#604) 2020-10-09 19:35:04 -04:00
Jeff Mitchell 7f00e61ab0 Migrate to newer grpc utilities and bump deps (#593) 
* Migrate to newer grpc utilities and bump deps

* Revert grpc back as it was an accidental tag
 2020-10-09 13:18:53 -04:00
Jeff Mitchell 0294683876 Update main module with updated submodules 2020-10-07 14:18:27 -04:00
Jeff Mitchell 77c837342e Use api/sdk tags 2020-10-07 14:12:10 -04:00
Jeff Mitchell 70a8051974 Update mod file 2020-10-07 13:56:11 -04:00
Jeff Mitchell 617921ef65 Bump deps (#522) 2020-10-01 14:49:52 -04:00
Jeff Mitchell 70fa231377 Update dbassert 2020-10-01 13:47:20 -04:00
Jeff Mitchell c1a1f8bb1b Separate out docker dep into package (#482) 
This also then removes support for docker-based containing starting (for
now) from platforms other than windows/darwin/linux as there are build
issues on several.
 2020-09-28 16:05:15 -04:00
Jeff Mitchell cf3fa4522d Swap base58 libraries (#472) 
* Swap base58 libraries

This doesn't reduce binary size but it removes a metric ton of
dependencies.
 2020-09-26 14:01:49 -04:00
Jeff Mitchell 446286e251 Bump deps (#435) 2020-09-25 17:09:07 -04:00
Jeff Mitchell 61a0ae02c1 Bring go-alpnmux in house for now 2020-09-25 10:17:12 -04:00
Jeff Mitchell 05c2e38f03 Bump deps (#364) 
* Bump deps

* Revert go-kms-wrapping as the vault team broke it :-(
 2020-09-16 09:08:46 -04:00
Jeff Mitchell 23156afa11 Add in most of the proxy flow (#326) 2020-09-03 13:24:34 -04:00
Jeff Mitchell 74544f6324 Encrypt tokens on the way out and decrypt on the way in (#302) 
* Encrypt tokens on the way out and decrypt on the way in

This isn't a security feature related to tokens specifically; it's so
that we can discard cryptographically bad tokens before we ever hit the
DB. This way we can't pass through a DDoS to the database due to
fetching obviously invalid token values.

I'm using base58 to encode the resulting value as there aren't great
base62 options, and allowing base64 / and + values can hamper usability
by creating copying/highlighting breaks.
 2020-08-25 00:20:50 -04:00
Jeff Mitchell bc32272ca7 Update go-retryablehttp, strcase, gorm 2020-08-20 17:59:47 -04:00
Jeff Mitchell b47cca0329 Add (non-db aspects of) the recovery key workflow (#286) 2020-08-20 13:34:03 -04:00
Jim 9570897032 basic keys mgmt repo (#264) 2020-08-19 16:47:18 -04:00
Todd Knight 23b437894a Masks can now update attribute fields. (#271) 2020-08-14 14:08:12 -07:00
Jeff Mitchell 5d104a7a01 Migrate off Vault's internalshared folder to the separated-out repo 2020-08-12 16:12:45 -04:00