Commit Graph

364 Commits (4d966c8eb40d8c1194e20ec0983f736f8dde6fd6)

Author SHA1 Message Date
Louis Ruch 70a5899e99
ICU-739/iam domain error refactor (#841)
5 years ago
Louis Ruch bfbb179741
ICU-738/Refactor internal/db to domain errors (#815)
5 years ago
Jeff Mitchell 11b821a200
Bump deps (#818)
5 years ago
Louis Ruch ec0020de90
Refactor host_repo -> domain errors (#786)
5 years ago
Todd Knight f6e50006fc
Generate postgres.gen.go using schema version directory structure (#808)
5 years ago
Jim af6ef1b687
Refactor existing sentinel errors (#774)
6 years ago
Jeff Mitchell 813d21565f
Allow authorize-session to be invoked with target name (#737)
6 years ago
Jim 547ae7c802
Fix database init when locale isn't english (#736)
6 years ago
Jim dc379ed09f
handle unlimited connections when terminating sessions. (#536)
6 years ago
Jim 09b43e5569
deprecate/remove LookupByName (#530)
6 years ago
Jim bd547fd0d6
terminate a canceled session when its last connection is closed. (#520)
6 years ago
Jeff Mitchell fa700dc002
Add account ID templating (#518)
6 years ago
Jim 19aecfefae
terminate "completed" sessions (#477)
6 years ago
Jeff Mitchell 6ddfe407a3
Update allowed formats of ACL strings (#508)
6 years ago
Jim 1e71c55920
deprecate access to underlying *sql.DB via internal/db.DB() (#506)
6 years ago
Michael Gaffney a9e806b673
Data warehouse (#475)
6 years ago
Jeff Mitchell cefea936c3
Update ACLs to allow type=*. (#504)
6 years ago
Jeff Mitchell a38f40606e
Create default roles in scopes to allow authentication and listing scopes/auth methods (#502)
6 years ago
Jeff Mitchell c1a1f8bb1b
Separate out docker dep into package (#482)
6 years ago
Jeff Mitchell bec3d702fb
Add -database-url to dev mode (#459)
6 years ago
Jim 978f7dc34c
fix immutable columns for session_state and session_connnection_state (#449)
6 years ago
Jim 21ca0b6388
SetAssociatedAccounts, DisassociateAccounts, AssociateAccounts with support for multiple accounts. (#439)
6 years ago
Michael Gaffney 36d465476c
Name all the check constraints in the database (#410)
6 years ago
Jim 57da9f918e
cancel a session when one of its FKs is set to null (#406)
6 years ago
Michael Gaffney f0c84de49c
Disambiguate auth_account scope_id by adding iam_user_scope_id column (#407)
6 years ago
Jeff Mitchell dd06615c2e
Add database initialization command (#400)
6 years ago
Jeff Mitchell 7e3c174b70
Disallow deletion of r_default (#398)
6 years ago
Jeff Mitchell f25186f78a
Standardize on one spelling of "canceled" (#399)
6 years ago
Michael Gaffney d52fb81e68
Change the default max session for a target to 8 hours (#392)
6 years ago
Jeff Mitchell 7db0e2a5ed Fix database check
6 years ago
Jim 5764b2c70a
return States as a field of Connection repo operations. (#382)
6 years ago
Jeff Mitchell edffc7863d
Change connection limit to -1 for unlimited so it works with TF (#383)
6 years ago
Jim 66400c9cff
changes needed for sessions.AuthorizeConnection (#377)
6 years ago
Jeff Mitchell 5bf555cca2
Remove connection idle timeout seconds for now (#379)
6 years ago
Jeff Mitchell 0a3f9b8357
Rename connection idle timeout duration -> seconds and sessions max duration -> seconds (#376)
6 years ago
Jeff Mitchell 62baef1b7e
Add multi connection parameters through targets and into session creation (#375)
6 years ago
Jeff Mitchell 07a7e9750a
Tie together the database-driven session handling with the worker and add relevant CLI comands (#370)
6 years ago
Jim e7e70b1b94
new domain functions for the session repo (#368)
6 years ago
Jim 7e927203e8
schema changes to support multi-connections (#372)
6 years ago
Jeff Mitchell 8bef1d734a Fix mismatch in default role creation permissions
6 years ago
Jim 611288bdc7
basic sessions (#337)
6 years ago
Jeff Mitchell c4e2b88022
Add database URL. (#365)
6 years ago
Jeff Mitchell 4ef0c57a39 Fix r_default description typo
6 years ago
Todd Knight b998591add
Adding and updating host address validation checks (#350)
6 years ago
Michael Gaffney 4ae3a52056
Define session database schema (#322)
6 years ago
Jim f29869b715
support for additional deks: oplog, session and token and new CreateKeysTx() (#321)
6 years ago
Jeff Mitchell ee35a92f7f Fix space issue in protobuf that apparently doesn't matter? Also apparently postgres migrations weren't run.
6 years ago
Jim f3dd62d5d8
database DEKs (#317)
6 years ago
Jim fcb61d4b67
targets repo (#298)
6 years ago
Michael Gaffney 58dec98ea2
Rename table from servers to server (#307)
6 years ago
Michael Gaffney de162c5533
Replace and remove ErrNilParameter with ErrInvalidParameter (#295)
6 years ago
Jeff Mitchell ac4d9fa311
Add nonce storage and replay prevention test (#293)
6 years ago
Jeff Mitchell b47cca0329
Add (non-db aspects of) the recovery key workflow (#286)
6 years ago
Jeff Mitchell 6bf4a5ce38
Add not null checks to wt_private_id, wt_scope_id, and wt_user_id (#284)
6 years ago
Jim 9570897032
basic keys mgmt repo (#264)
6 years ago
Michael Gaffney 041e1f9fd3
Update host (#278)
6 years ago
Jeff Mitchell 282177afc2
Remove the default org (#270)
6 years ago
Todd Knight 01059e6ca8
Wrap StartDbInDocker in a mutex. (#275)
6 years ago
Michael Gaffney 7d133878be
Add base types for host catalog, host set, and host (#272)
6 years ago
Jeff Mitchell c195c4bc9b
Remove disabled property and sync up field ordering and numbering (#259)
6 years ago
Jeff Mitchell 203e2b5dc2
Initial worker porting steps (#232)
6 years ago
Jeff Mitchell 73a38b1433
Remove some unneeded resource types and fix the resource typing for default role in global scope (#256)
6 years ago
Jeff Mitchell 4cfab04307
Migrate user name to login name (#255)
6 years ago
Michael Gaffney 6f886976e4
Add not null constraint to wt_version domain (#254)
6 years ago
Jeff Mitchell 78d7f539c5
Add versioning to host catalogs/sets/hosts and fix up tests (#247)
6 years ago
Jeff Mitchell 565059ed63
Add versioning to auth methods and accounts (#249)
6 years ago
Michael Gaffney a7c467bd68
Password - UpdateAccount and SetPassword (#248)
6 years ago
Jeff Mitchell 6661117d4c The name. The name. The name!
6 years ago
Jim 1c836c430b
support for associating/disassociating an auth account with a user (#233)
6 years ago
Michael Gaffney bdb31cf8b5
Bump deps (#245)
6 years ago
Jeff Mitchell 0d0660b061 Fix some tests I broke
6 years ago
Jeff Mitchell 908a299ea3
Convert SDK to the new options API (#238)
6 years ago
Todd Knight b7bf76a9ba
Auth Method API Handler for CRUDL (not updating password specific fields)(#239)
6 years ago
Michael Gaffney 7fefd5e2fe
Change password (#237)
6 years ago
Jeff Mitchell 2ca7e0b88e Fix some linting complaining
6 years ago
Todd Knight 3204e54dc2
Add lookup, list, update, and delete methods for auth methods. (#230)
6 years ago
Michael Gaffney 5ceb335466
Rehash credential during authentication if config has change (#234)
6 years ago
Michael Gaffney 6c679a9939
Add password authentication using Argon2 (#227)
6 years ago
Michael Gaffney 87492816cb
Replace immutable_create_time_func with immutable_columns (#231)
6 years ago
Jim cb89422d9d
define immutable fields including PKs. (#205)
6 years ago
Michael Gaffney 5e8179c6fb
Allow lookupAfterWrite for resources with Private Ids (#229)
6 years ago
Michael Gaffney c163d790a4
Add configuration settings for Argon2 password KDF (#217)
6 years ago
Michael Gaffney 76abd4f3b4
Update comments to use "base type" instead of "abstract" (#222)
6 years ago
Michael Gaffney 7897c1cf52
Add base resources for password authentication (#213)
6 years ago
Michael Gaffney e03a0ff9d7
Simplify SetTableName pattern (#214)
6 years ago
Todd Knight f47046f158
Update Watchtower to use grpc-gateway v2 (#204)
6 years ago
Michael Gaffney 799242fce4
Bump deps and run 'make gen' (#212)
6 years ago
Michael Gaffney ebf69bbd27
Fix error string for lookupAfterWrite (#208)
6 years ago
Jeff Mitchell dec1f07266 Update deps and make proto
6 years ago
Jim c83e90ed38
implement SetTableName patttern that allows table name to be set back to the default for the storage type. (#196)
6 years ago
Jim 1bebe7a261
Convert option db.WithVersion to *uint32 (#195)
6 years ago
Todd Knight 28dbcd84bd
Authenticate Handler API and SDK, and much more (#183)
6 years ago
Jeff Mitchell acce195dcb
Organizations -> orgs consistency (#189)
6 years ago
Jim 260703febe
add group member capabilities (#178)
6 years ago
Jeff Mitchell c657e4b9fc
Fix test broken through various merges (#186)
6 years ago
Jeff Mitchell bcdcaffa6f
Port over 162 and 165 to master (#176)
6 years ago
Todd Knight 1ddc59f81e
Adding principal custom methods to roles handler. (#180)
6 years ago
Jim 136e923583
make iam_role scope_id immutable (#179)
6 years ago
Jeff Mitchell 732c07126d
Introduce global scope (#168)
6 years ago
Jim 6c1b45f7f5
add principal roles (users and groups) to iam (#163)
6 years ago
Todd Knight f69d6b9952
Creating Auth Token Repo (#125)
6 years ago
Todd Knight bb4a185412
Pushing test db cleanup up to where the database objects are created using t.Cleanup. (#166)
6 years ago
Jeff Mitchell 316b250a24
Use dockertest v3 consistently (#167)
6 years ago
Jim d0a846823a
support for NewOplogMsgs() option when calling CreateItems and DeleteItems (#158)
6 years ago
Jim 8d8bb42418
add CreateItems and DeleteItems to writer interface (#156)
6 years ago
Jim 3e3144117e
iam and auth integration (#144)
6 years ago
Jim 9a87df38c7
add CreateItems() and DeleteItems() (#146)
6 years ago
Michael Gaffney d69588131c
Fix for panic in db.setFieldsToNil (#155)
6 years ago
Jim 6641244734
add support for WithVersion option to updates (#126)
6 years ago
Michael Gaffney c110c86ee5
Add function to check if db error is a check constraint violation (#142)
6 years ago
Todd Knight 0c8385b423
Updating TxHandler to accept a reader as well in order to support reads inside the same transactions as writes. (#139)
6 years ago
Michael Gaffney 6908f7a7a2
Use standard column names (#138)
6 years ago
Michael Gaffney 1023c90729
Enforce auth_account to iam_user plus iam_scope constraints (#137)
6 years ago
Michael Gaffney 0ebb38bbe5
auth method schema (#131)
6 years ago
Jim c413e013bd
get oplog Ticket before writing data (#127)
6 years ago
Jim d9073a03d5
listing users (#118)
6 years ago
Jim ffddf24f86
iam roles (#116)
6 years ago
Michael Gaffney 2d650b241d
Fix down migrations (#120)
6 years ago
Jim 5c2cff3ad2
iam groups (#112)
6 years ago
Michael Gaffney 4f30983c14
Bump deps and run make gen (#115)
6 years ago
Jim 2d18177c9d
oplog support for null field updates (#107)
6 years ago
Jim c70847fbac
refactor delete test to be table driven. (#102)
6 years ago
Jeff Mitchell 5333482ff8
Fix gorm newlines issue (#108)
6 years ago
Jim 7d4993fb61
iam users (#96)
6 years ago
Jim e3fdb493b8
prevent primary key updates (#95)
6 years ago
Jim 1048673171
update dbassert dep (#100)
6 years ago
Jim 9feb280536
wrapper for dbasserts (#94)
6 years ago
Jeff Mitchell c175fcde8d
Add a gorm log formatter to adapt to hclog (#93)
6 years ago
Michael Gaffney 5bdd8a46ea
Extract timestamp scanners into reusable package (#91)
6 years ago
Michael Gaffney 9eaf8afb6f
Rename db.IsUnique to db.IsUniqueError (#90)
6 years ago
Jim ef6edbd515
Null updates (#78)
6 years ago
Michael Gaffney 6d123d91bb
Fix comment for trigger (#92)
6 years ago
Jeff Mitchell 31ef4a65ac Bump deps and make gen
6 years ago
Michael Gaffney 0c7f6da936
Static Host Catalog (#51)
6 years ago
Jim aa64579a8c
db timestamp guards (#70)
6 years ago
Jeff Mitchell b718091419 Update signatures of generated files to match our tool versions
6 years ago
Jim Lambert a7d8bda7c0 add missing parameter
6 years ago
Jim b75feb957d
require fieldMaskPaths in Update and refactor errors (#71)
6 years ago
Michael Gaffney c9ad86c7ba
Refactor: move error variables from host/static to db (#68)
6 years ago
Todd Knight 7f0dfa2344
Fix Update Project Logic (#54)
6 years ago
Jim 980a55a4e3
Added DeleteScope() with tests and TestVerifyOplog() for easier testing (#49)
6 years ago
Jim d1acc1437b
fix multierror
6 years ago
Jim ee46266893
ErrRecordNotFound from LookupWhere() when no rows found (#59)
6 years ago
Michael Gaffney fad302a36d
Run make migrations (#61)
6 years ago
Michael Gaffney 3d614dd732
Run migrations in a transaction (#60)
6 years ago
Jeff Mitchell f8b456f3a7
Add TestController (#50)
6 years ago
Jim 2aca5fff03
fix transaction rollbacks in DoTx (#55)
6 years ago
Jim 4a88d10ecc
fix a minor defect in fakeFile Readdir() and unit tests (#53)
6 years ago
Michael Gaffney 477a47897e
Add wt_timestamp type to database (#52)
6 years ago
Michael Gaffney 8d7f24268c
Return url of test database (#48)
6 years ago
Jeff Mitchell 7d8661be31 Remove migrations tag, not needed anymore
6 years ago
Jim c04c73453f
refactor Update/Delete to return the number of rows affected. (#46)
6 years ago
Jim 61ca88dac9
refactor to use db.New() and clean up error msgs (#45)
6 years ago
Jeff Mitchell ad8d4e9c80 Rename Db's Tx to underlying
6 years ago
Jeff Mitchell 670abaed88 Rename GormReadWriter -> Db
6 years ago
Jim ee4a0d3f45
refactor lookups so we can easily check for not found and do the "right" thing in the repos (#42)
6 years ago
Jeff Mitchell 7f2aa5ca8f
Add httpfs DB migrations and generate the input (#35)
6 years ago
Jim bd5ddea6e4
refactor clonable to not rely on the resource interface (#36)
6 years ago
Jim 0676ea51f1
refactor oplog to use db/internal migrations, remove InitTicket() for more reliability and simplify test step up and tear down (#37)
6 years ago
Jim c43e05be2e
provide db.Open() and db.Migrate() as part of icu-64 (#34)
6 years ago
Jim 8a5197e39e
implement schema, store and repository for IAM scopes of organization and project
6 years ago
Michael Gaffney 8824a6f7f9
database: add wt_public_id domain type (#30)
6 years ago
Jim 725a777baf
refactor friendly name to just be name (#29)
6 years ago
Jim 27b4d7a034
basic internal db interfaces and Gorm implementation
6 years ago