CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
825 Commits 7 Branches 2 Tags
ec0020de90d2075da9fb18a881925673bb1ee280
Commit Graph
153 Commits
Author SHA1 Message Date
Louis Ruch ec0020de90 Refactor host_repo -> domain errors (#786) 
* Refactor domain errors: New -> E, create helper New and Wrap
* Update host repo to use domain errors
 2020-12-09 10:11:38 -08:00
Todd Knight aa4157639c Change Format of API Error (#784) 
This is a wire breaking change for json errors since we have removed and renamed a few fields, and changed part of the structure of the returned json error.

* Remove redundant fields in Status, details.error_id, details.TraceId and details.request_id from API errors.

* Added wrapped errors and "ops" field to indicate the internal operation of the errors returned by the API.

* Added error cli error reporting of Op and wrapped errors.
 2020-12-07 14:25:16 -07:00
Jeff Mitchell a37ba007f2 Update deps (#772) 
* Update deps

This also updates for the new (and required) paradigm for registering
service implementations as spelled out in
https://github.com/grpc/grpc-go/issues/3385

* Roll back dockertest
 2020-11-11 14:41:05 -05:00
Jim af6ef1b687 Refactor existing sentinel errors (#774) 2020-11-05 16:54:03 -05:00
Lars Lehtonen 876ae59c2b internal/servers/controller/handlers/groups: fix dropped test error (#763) 2020-11-02 10:01:37 -05:00
Jeff Mitchell 813d21565f Allow authorize-session to be invoked with target name (#737) 2020-10-22 08:40:00 -04:00
Jeff Mitchell 61e312db47 Add printable checks to request path and name/desc (#740) 2020-10-21 13:07:09 -04:00
Lars Lehtonen 0c959cbb71 internal/servers/controller/handlers/accounts: fix dropped test errors (#733) 2020-10-20 09:13:57 -04:00
Jeff Mitchell 13631064fc Don't create a default role when the scope being created is a project (#658) 
* Don't create a default role when the scope being created is a project

* Fix up some more tests
 2020-10-13 13:56:21 -04:00
Jeff Mitchell dd8973dd9f Move authenticate service into auth method service (#635) 
This was always an RPC-only distinction and from that perspective it
makes sense; however it causes the generated docs to treat it as an
entirely separate service even though it's under the same collection
path as auth methods and this is confusing.
 2020-10-12 18:03:15 -04:00
Todd Knight 11fd0d0300 Fixing some API error and comment copy/paste errors. (#580) 
* Fixing some error and comment copy/paste errors.

* Fix roles in project scope error message.
 2020-10-08 12:36:01 -07:00
Todd Knight abe5e9b950 Add Termination Reason (#573) 2020-10-07 21:37:30 -04:00
Jeff Mitchell ae3a9e32cf Remove proxy command 
You can now use -authz-token in `boundary connect` which also allows
using the connect subcommands when you already have a token.
 2020-10-07 21:30:44 -04:00
Todd Knight 04efdfe74a Adding scope list check and test. (#574) 2020-10-07 20:43:12 -04:00
Todd Knight e19d68dcf0 Test Cleanup. Alphabetize handler path test and add several paths that were missed (targets and sessions for example) (#534) 2020-10-06 11:29:53 -07:00
Jeff Mitchell b76cc95425 Make fmt 2020-10-06 13:17:28 -04:00
Todd Knight 54332c5da9 Fix description error message 2020-10-06 09:41:55 -07:00
Jeff Mitchell 9237d6f787 Rename authorize to authorize-session (#531) 
As pointed out by Rob, this makes it clearer what the action actually
is. We were sort of torn on it before, but I've definitely come around
to it.
 2020-10-05 11:02:23 -04:00
Todd Knight f76d5aed9f Additional validation for add|set|remove methods. (#527) 2020-10-02 16:45:32 -07:00
Todd Knight d1d94c19c8 List sessions CLI reports correct target id and status (#511) 
* Including some missing session fields and improving reporting of sessions of CLI.
 2020-10-01 15:57:01 -07:00
Jeff Mitchell fa700dc002 Add account ID templating (#518) 
* Remove default role and create via the same mechanism as other initial resources
 2020-10-01 10:51:54 -04:00
Jeff Mitchell 6ddfe407a3 Update allowed formats of ACL strings (#508) 2020-10-01 01:49:20 -04:00
Jeff Mitchell a38f40606e Create default roles in scopes to allow authentication and listing scopes/auth methods (#502) 2020-09-29 20:38:16 -04:00
Jeff Mitchell 15fadd40f4 Return ScopeInfo for adding/setting/removing host set hosts (#491) 2020-09-29 12:24:54 -04:00
Jim fde96924af refactor user account repo function names (#476) 2020-09-28 15:39:10 -04:00
Todd Knight f1873d623d Attach account to auth token response. (#480) 2020-09-28 09:55:44 -07:00
Jeff Mitchell cf3fa4522d Swap base58 libraries (#472) 
* Swap base58 libraries

This doesn't reduce binary size but it removes a metric ton of
dependencies.
 2020-09-26 14:01:49 -04:00
Jeff Mitchell b1fc9fd547 Sanitize protos (#471) 2020-09-26 08:30:27 -04:00
Todd Knight 0e5a849402 Adding Add|Set|Remove Accounts on the user resource (#461) 2020-09-25 20:44:55 -07:00
Todd Knight 14f9fc9173 Removing status from all handlers, repo errors are passed on directly for the most part to be intercepted and translated by the API error handler. (#447) 2020-09-25 13:41:20 -07:00
Jim 21ca0b6388 SetAssociatedAccounts, DisassociateAccounts, AssociateAccounts with support for multiple accounts. (#439) 2020-09-25 13:35:32 -04:00
Jeff Mitchell e86c11db62 Add session lifecycle info to controller's INFO log. (#431) 
This required some plumbing, but nothing major.
 2020-09-24 14:12:34 -04:00
Jeff Mitchell 31fe9292b3 Instantiate default resources (#425) 2020-09-24 03:31:26 -04:00
Todd Knight 278902db1a Allow target type field to be included in an update. (#412) 2020-09-23 08:30:25 -07:00
Todd Knight 2f8d7f0a32 API Errors: Hide and log internal errors (#411) 2020-09-23 08:10:27 -07:00
Jeff Mitchell 7e3c174b70 Disallow deletion of r_default (#398) 
If it's a useful named resource and people accidentally delete it e.g.
with TF, they can't get it back. This doesn't affect TF's ability to
manage it, just delete.
 2020-09-21 16:50:39 -04:00
Jeff Mitchell f25186f78a Standardize on one spelling of "canceled" (#399) 2020-09-21 16:33:28 -04:00
Jeff Mitchell 6a09e0966e Fix some broken tests that were expecting nil but are now getting an empty struct 2020-09-21 16:03:47 -04:00
Todd Knight 21f5cc274f Don't return nil, nil for API service methods. Add tests for updating w/ wrong version. (#396) 2020-09-21 15:09:30 -04:00
Jeff Mitchell 1adbe64160 Update some tests that are failing due to 300 nano difference in time comparisons between create and lookup (#393) 2020-09-21 15:08:15 -04:00
Jeff Mitchell 27d728875c Cleanup session state enum (#394) 
It's up to the worker to understand what a change in state means, so
there was no functional difference between simply sending a state change
request and a cancel request.
 2020-09-21 11:36:38 -04:00
Jeff Mitchell 5747ea603e Fix nil pointer with revamped chosen host ID logic 2020-09-21 10:21:40 -04:00
Jeff Mitchell 9cbc7b5c3d Add connection close call from worker to controller (#387) 2020-09-21 00:09:50 -04:00
Jeff Mitchell 7ff4b7f106 Send connected RPC to controller (#386) 2020-09-20 23:09:42 -04:00
Jeff Mitchell 4669c95999 Pass more session info around, make proxy UX nicer (#385) 2020-09-20 21:18:07 -04:00
Todd Knight e937b0ea27 Sessions Read/List/Cancel API and SDK (#369) 2020-09-20 20:22:57 -04:00
Jeff Mitchell f7e48ec836 Plumb connection limit to proxy and output it (#384) 2020-09-20 16:28:00 -04:00
Jeff Mitchell 697ea561e0 Fix breakage from dual merges 2020-09-20 16:04:05 -04:00
Jeff Mitchell edffc7863d Change connection limit to -1 for unlimited so it works with TF (#383) 
* Migrate connection limit unlimited value to -1

* Fix authorization check
 2020-09-20 15:53:49 -04:00
Jeff Mitchell 5214f14105 Work on connection authorization (#381) 2020-09-20 12:51:08 -04:00