658 Commits (8332eb10c5bf136557d16abc6e9a3effc26cdd7f)

Author	SHA1	Message	Date
Jeff Mitchell	afe828c118	Update returned information in list responses for anon user (#1127)	5 years ago
Susmitha Girumala	5ce21e118e	ui: Bump ui version to latest (#1125)	5 years ago
Jeff Mitchell	604d642e1e	Restrict auth method listing for u_anon (#1122) ... This keeps only essential information in list output for auth methods when the user is u_anon. Boundary's default is to allow listing of auth methods for anonymous users to allow discovery of authentication points, but there's no need to return more information about internal configuration than necessary.	5 years ago
Jeff Mitchell	c54aedcf1a	By default, add Boundary Desktop's origin to allowed CORS origins (#1121) ... This also adds support for a flag to disable this behavior. Fixes #1093	5 years ago
Jim	e0e6e58bb2	better api error codes from OIDC auth method update/change-state operations (#1116)	5 years ago
Todd Knight	fad9f6d525	Allow oidc accounts to be add|set|removed to users. (#1117)	5 years ago
Jeff Mitchell	c57841fa2e	Update wording for user not found to indicate the auth method isn't primary for the scope	5 years ago
Todd Knight	dc881e65d4	Fix alignment for `Is Primary For Scope` field and values for listing.	5 years ago
Michael Gaffney	5855930921	Renumber migrations in the '2/' directory to start at 01 (#1114)	5 years ago
Jim	6c003c94f7	add "Is Primary" to auth method CLI output (#1115)	5 years ago
Jim Lambert	06df7e0240	updated UI_COMMITISH	5 years ago
Todd Knight	072b950540	Filter inactive and private oidc auth methods from unauthenticated list requests (#1110)	5 years ago
Jeff Mitchell	ca57e50516	Add more OIDC error output. (#1108) ... Some of this is in the form of logging, and some via returning error messages to users. Also cleans a couple of linter complaints.	5 years ago
Jeff Mitchell	412018fbb4	Update misleading Authenticated bool with new name and explanation. (#1111)	5 years ago
Jim	f8f66abcf4	regen proto (#1109)	5 years ago
Todd Knight	53ec3c44bc	Auth Method Listing matches other resources, remove repeated "Version" field. (#1107)	5 years ago
Todd Knight	14c222709c	Make oidc auth callback redirect on most errors (#1105)	5 years ago
Jim	d0f36f6a74	ensure that inbound auth method id matches request wrapper auth metho… (#1104)	5 years ago
Jeff Mitchell	90b30bad25	Use 202 for token polling endpoint instead of 204 (#1103)	5 years ago
Todd Knight	71673ea161	Pass disable_discovered_config_validation in the API change-state call (#1100)	5 years ago
Michael Gaffney	3130bd615e	Fix go doc: remove sentence fragment	5 years ago
Jim	8f9c287233	properly handle ClientSecret updates (#1097)	5 years ago
Randall Morey	5500566fca	chore: bump UI commitish to latest (#1096)	5 years ago
Jeff Mitchell	f05f37d0fa	Fix panic in non-generated API calls when printing as JSON (#1095) ... Fixes #992	5 years ago
Jim	26c0c4479d	send MaxAge when set for auth method (#1094)	5 years ago
Jim	dd0f34bc35	Add new OIDC auth method. (#1090) ... Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com> Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com> Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>	5 years ago
s-christoff	5c5b07c04a	Revert "Refactor internal/servers/controller/handlers errors (#1070)" (#1092) ... This reverts commit 21ac3cdddd.	5 years ago
s-christoff	21ac3cdddd	Refactor internal/servers/controller/handlers errors (#1070)	5 years ago
Michael Gaffney	d3146992f1	Errors: add Code and Kind for external system errors (#1080)	5 years ago
Lars Lehtonen	d3b72899f1	fix scopes double import (#1066)	5 years ago
Jeff Mitchell	6c48f6ea77	Use pointers for any Uber atomic values (#1044) ... BK clued me into the fact that for some types, similar alignment problems exist as with the normal atomic package (e.g. 64-bit types on 32-bit architectures) if they are not pointer values. So change the few places they weren't pointers to pointers. None of these are 64-bit, but it feels like best practice for using the library and should just standardize on it.	5 years ago
Michael Gaffney	aafbada3ae	Remove calls to `t.Helper()` from test methods (not helpers) (#1063)	5 years ago
Jim	c281e808d6	refactor to use WithOrderByCreateTime(...) (#1058)	5 years ago
Jim	f21996d8ad	refactor to use WithOrderByVersion(...) (#1059)	5 years ago
Louis Ruch	93bad3cb83	400 if account already assocaited (#1048)	5 years ago
Jeff Mitchell	17ad2410cd	Add extra tags config test	5 years ago
Jeff Mitchell	b05ed0bf65	If the database is already initialized, use 0 as the return value (#1033) ... This matches the migrations code, which treats the operation as idempotent.	5 years ago
Jeff Mitchell	3c430678ae	Fix test scope errors (#1029) ... When using a disabled verifier context we were faking scope information. Due to other recent changes, this was now causing test errors. This adjusts that flow to actually query the DB, fixing tests and making them more like real code.	5 years ago
Jeff Mitchell	6605b4c9f8	Revamp authenticate (#1025)	5 years ago
Jeff Mitchell	aa570f4e48	Honor child scope list permissions when recursing (#1016) ... Current behavior is that you need list grant on the parent scope when recursively listing, and this is sufficient. This is good for administrative workflows but can be unintuitive for resources that only exist at a project level. This change allows permissions on the child scope to also be taken into account, so that you can start a recursive list from a parent scope without direct list support on that scope but still get back child scopes for which list access is granted. This also fixes a bug where visibility of a scope for recursive listing would be based on whether the user had list resources for roles within that scope instead of for the resource type in question.	5 years ago
Jeff Mitchell	fcbf372881	Bump proto/grpc deps (#1017) ... * Bump proto/grpc deps * Back out buf change * Run make gen	5 years ago
Jim	b39dff8140	New error codes. (#1019) ... * new error codes * Add general system errors to API interceptor Co-authored-by: Louis Ruch <louisruch@gmail.com>	5 years ago
Louis Ruch	ebdc08e5ff	Skip hidden directories when generating version numbers (#1008)	5 years ago
Todd Knight	48ef25433f	Fix creation of initial Scope roles (#996) ... * Fix the creation of initial roles and users so the admin has permission to list/read resources. * Adding known permission issue to CHANGELOG.md.	5 years ago
Jeff Mitchell	bb2d86eb39	Add ability to generate pseudo-random IDs (#984)	5 years ago
Randall Morey	c0f33f982c	chore: bump ui version (#990)	5 years ago
Jeff Mitchell	68f8d7e595	Rerun make gen	5 years ago
Louis Ruch	e3e96a87fa	Fix error codes	5 years ago
Jeff Mitchell	90a6a71f99	Cleanup container if it's started but can't ping Postgres	5 years ago
Jeff Mitchell	645a068dab	Fix error message	5 years ago