133 Commits (46d7613e2ddadb60ce0b3f084e6865207e768830)

Author	SHA1	Message	Date
Jim	358f5a61fb	bump protoc to v3.15.8 (#1147)	5 years ago
Jeff Mitchell	be10cc4b42	Update grpc/proto deps (#1136) ... * Update grpc/proto deps * Make gen	5 years ago
Jim	f8f66abcf4	regen proto (#1109)	5 years ago
Jeff Mitchell	90b30bad25	Use 202 for token polling endpoint instead of 204 (#1103)	5 years ago
Todd Knight	71673ea161	Pass disable_discovered_config_validation in the API change-state call (#1100)	5 years ago
Jim	dd0f34bc35	Add new OIDC auth method. (#1090) ... Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com> Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com> Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>	5 years ago
Jeff Mitchell	6605b4c9f8	Revamp authenticate (#1025)	5 years ago
Jeff Mitchell	fcbf372881	Bump proto/grpc deps (#1017) ... * Bump proto/grpc deps * Back out buf change * Run make gen	5 years ago
Jeff Mitchell	09e57a6624	Dep update: (#955) ... * grpc-gateway and friends * buf * go-swagger * protoc-gen-go-grpc/genproto	5 years ago
Todd Knight	97b404032b	Add ability to filter List*Requests (#952)	5 years ago
Jeff Mitchell	c6fa737e51	Add a duplicate authenticate:login API verb (#912)	5 years ago
Jeff Mitchell	cb3980cb8c	Remove list:self from main (#915) ... * Remove list:self from main As per futher discussions, we won't be supporting this, in favor of simply read:self and cancel:self (since listing now already filters out items on which you have no permissions). This doesn't remove list:self entirely from the code base as much of that will simply be converted to read:self and cancel:self -- that will be in a later PR. However, with this removed if we want to release we won't expose an API publicly that isn't going to stick around.	5 years ago
Todd Knight	02cd972043	Create Sessions List Self Action (#888)	5 years ago
Jeff Mitchell	6cd97a4a6e	Add support for recursive listing (#885)	5 years ago
Jeff Mitchell	6b58a3317d	Add recursive listing to roles (#881) ... This also lays the framework for adding recursive listing to the rest of the resources.	5 years ago
Jeff Mitchell	717a3b52ee	Add worker tagging (#862) ... This allows workers to have tags assigned to them, which can then be filtered to control which targets they are allowed to serve.	5 years ago
Jeff Mitchell	dcb15cffbd	Add authorized actions output on resources (#870)	5 years ago
Jeff Mitchell	27919ab11b	Groundwork for returning authorized actions (#860) ... This returns authorized actions on targets to users when they perform an operation on a target, including listing. It also prevents users from seeing values in listing targets on which they have no permissions.	5 years ago
Jeff Mitchell	84c617dc49	Run make gen after the gofumpt update	5 years ago
Michael Gaffney	94cb79bbdd	See how Boundary would look with gofumpt applied (#853) ... * See how Boundary would look with https://github.com/mvdan/gofumpt applied Results of running `gofumpt -w -s .` * Update tools file and Makefile for gofumpt Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	5 years ago
Jeff Mitchell	a6cca576a3	Attempt canceling sessions by the client (#831) ... * Attempt canceling sessions by the client In some circumstances (like a Ctrl-C), the client knows it's shutting down and the TOFU token will be lost. In this case it makes sense to cancel the session rather than have it time out. This introduces a command enum to the handshake message which can be used for the client to send commands to the worker -- in this case the only specified command is to cancel the session. It doesn't occur if the session is already timed out or if we can't authorize connections as this generally means the session is already invalid.	5 years ago
Jeff Mitchell	11b821a200	Bump deps (#818)	5 years ago
Jeff Mitchell	d4a6efb363	Pass endpoint to the client (#811) ... This allows us to automatically set TLS parameters, useful for `boundary connect http` and some other features to come.	5 years ago
Todd Knight	aa4157639c	Change Format of API Error (#784) ... This is a wire breaking change for json errors since we have removed and renamed a few fields, and changed part of the structure of the returned json error. * Remove redundant fields in Status, details.error_id, details.TraceId and details.request_id from API errors. * Added wrapped errors and "ops" field to indicate the internal operation of the errors returned by the API. * Added error cli error reporting of Op and wrapped errors.	5 years ago
Jeff Mitchell	a37ba007f2	Update deps (#772) ... * Update deps This also updates for the new (and required) paradigm for registering service implementations as spelled out in https://github.com/grpc/grpc-go/issues/3385 * Roll back dockertest	6 years ago
Jeff Mitchell	813d21565f	Allow authorize-session to be invoked with target name (#737)	6 years ago
Jeff Mitchell	1dd145e707	Fix up swagger title, which was in the authentication service	6 years ago
Jeff Mitchell	dd8973dd9f	Move authenticate service into auth method service (#635) ... This was always an RPC-only distinction and from that perspective it makes sense; however it causes the generated docs to treat it as an entirely separate service even though it's under the same collection path as auth methods and this is confusing.	6 years ago
Jeff Mitchell	7f00e61ab0	Migrate to newer grpc utilities and bump deps (#593) ... * Migrate to newer grpc utilities and bump deps * Revert grpc back as it was an accidental tag	6 years ago
Todd Knight	abe5e9b950	Add Termination Reason (#573)	6 years ago
Jeff Mitchell	ae3a9e32cf	Remove proxy command ... You can now use -authz-token in `boundary connect` which also allows using the connect subcommands when you already have a token.	6 years ago
Jeff Mitchell	0c3d90fdd6	Erp, forgot to make gen	6 years ago
Jeff Mitchell	a38f40606e	Create default roles in scopes to allow authentication and listing scopes/auth methods (#502)	6 years ago
Todd Knight	0eb35f49d5	Correcting a bunch of incorrect documentation for the different API services and resources. (#494)	6 years ago
Jeff Mitchell	b1fc9fd547	Sanitize protos (#471)	6 years ago
Jeff Mitchell	63224d094e	Make gen	6 years ago
Todd Knight	0e5a849402	Adding Add|Set|Remove Accounts on the user resource (#461)	6 years ago
Jeff Mitchell	446286e251	Bump deps (#435)	6 years ago
Jeff Mitchell	e86c11db62	Add session lifecycle info to controller's INFO log. (#431) ... This required some plumbing, but nothing major.	6 years ago
Todd Knight	2f8d7f0a32	API Errors: Hide and log internal errors (#411)	6 years ago
Jeff Mitchell	f25186f78a	Standardize on one spelling of "canceled" (#399)	6 years ago
Jeff Mitchell	27d728875c	Cleanup session state enum (#394) ... It's up to the worker to understand what a change in state means, so there was no functional difference between simply sending a state change request and a cancel request.	6 years ago
Jeff Mitchell	33b0021547	Add Sessions CLI command and add session cleanup to worker (#388)	6 years ago
Jeff Mitchell	9cbc7b5c3d	Add connection close call from worker to controller (#387)	6 years ago
Jeff Mitchell	7ff4b7f106	Send connected RPC to controller (#386)	6 years ago
Jeff Mitchell	4669c95999	Pass more session info around, make proxy UX nicer (#385)	6 years ago
Todd Knight	e937b0ea27	Sessions Read/List/Cancel API and SDK (#369)	6 years ago
Jeff Mitchell	f7e48ec836	Plumb connection limit to proxy and output it (#384)	6 years ago
Jeff Mitchell	edffc7863d	Change connection limit to -1 for unlimited so it works with TF (#383) ... * Migrate connection limit unlimited value to -1 * Fix authorization check	6 years ago
Jeff Mitchell	5214f14105	Work on connection authorization (#381)	6 years ago