boundary

Commit Graph

Author	SHA1	Message	Date
Jeff Mitchell	3b77ebe641	Two fixes in our Go API code: (#5066 ) (#5073 ) * Replace `interface{}` with `any` * For options that are bools, don't always set true; set to the actual value passed in (some options already behaved this way, but they all should)	1 year ago
Hugo	540bdf0977	fix(api): Check MaxRetries integer bounds	2 years ago
Johan Brandhorst-Satzkorn	2080c4f98e	backport of commit `bb076a23ce`	2 years ago
Damian Debkowski	c0cf5c4e1b	feat(api): return remote storage states for worker	2 years ago
Damian Debkowski	88c67e4eea	feat(proto): define storage bucket state in worker status	2 years ago
Johan Brandhorst-Satzkorn	c6f3c375f3	api: remove deprecated grant_scope_id field (#4886 ) * api: remove deprecated grant_scope_id field The grant_scope_id field was deprecated in 0.15.0, so we can remove it for 0.17.0. * Fix tests * Fix more tests * Remove an option and some related code that stuck around * Fix bats tests --------- Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	2 years ago
Todd	5ff3216565	Instead of relying on termination reason use status (#4852 ) * Instead of relying on termination reason use status Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
Todd	98b5e3fa52	Close proxy listener if session is no longer active (#4850 ) * Close proxy listener if session is no longer active	2 years ago
Todd	6c378e7723	Create an option to set the session teardown timeout (#4834 )	2 years ago
Todd	590182cf72	Updated the expected status code for unimplemented api errors. (#4802 ) * Updated the expected status code for unimplemented api errors.	2 years ago
Todd	e675aed978	Add the unimplemented api error. (#4799 )	2 years ago
Todd	608b6bb2b7	Add ListResolvableAliases SDK changes (#4653 ) * Add API changs for list resolvable aliases	2 years ago
Elim Tsiagbey	2c140b1e09	feat: Local Storage State API & CLI - add `local_storage_state` value to API & CLI	2 years ago
Louis Ruch	e9e3d7cad5	feat(session): Include session recording id in auth-session resp (#4593 )	2 years ago
Todd	c42a940332	Updating deps (#4537 )	2 years ago
Todd	868228847d	Add handler and API support for alias creation with target (#4508 ) * Add handler and API support for alias creation with target	2 years ago
Todd	305bb09c35	Treat alias values like other required fields in API and CLI (#4404 ) * Treat Alias values like other required fields in API and CLI * Fix protoc versions since we recently rebased on main which uses updated version	2 years ago
Todd	a6c96d69ae	Add TargetAliasAuthorizeSessionArgumentsHostId api options (#4397 ) * Add host id api option	2 years ago
Todd	78e10864c4	Add alias CLI CRUDL commands (#4353 ) * Add alias CLI CRUDL commands	2 years ago
Todd	3f3b624b54	Add alias resolution to target service (#4277 ) * Add aliases to target resource and alias resolution to target service * Wire up the target alias domain package to the target service handler * Adding alias resolution to target api tests	2 years ago
Todd	92181e272a	Create the alias service and resource (#4276 ) * Create the alias service and resource * Add alias generated API files and tests	2 years ago
Michael Milton	2e69d59dd2	feat(billing): Add cli subcommand for monthly active user counts	2 years ago
Jeff Mitchell	35cef97bd4	Linter fixes PR 3 (#4415 ) * Linter fixes * fix(bsr): update test to register TEST protocol once --------- Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>	2 years ago
Elim Tsiagbey	1b1c8b3bf9	fix: Proxy closing listener with 0 connections left (#4389 ) * fix: Proxy closing listener with 0 connections left A bug was introduced in `0.15.0` where sessions with max connection counts were closed when the connections left hit 0. This issue was highlighted by a user: https://github.com/hashicorp/boundary/issues/4364. What was happening was when we have zero connections left the proxy code was closing the listener which closed its connections To fix this: - `boundary connect -target-id=xx -host-id=xx` command with no connections left will now wait for all connections to be closed and before exiting the session just like it did in `0.14.3` - As soon as there are no more connections left, the listener will close to stop accepting new connections - Fix issue where the websocket connection was throwing closing errors during the session teardown.	2 years ago
Louis Ruch	d59f089819	feat(policies): Update SDK/API to support setting/clearing attributes (#4385 )	2 years ago
Jeff Mitchell	f5dd457b34	Multiple grant scope IDs (#4251 ) Co-authored-by: Timothy Messier <tim.messier@gmail.com> Co-authored-by: Todd <github@quaddi.com>	2 years ago
Jeff Mitchell	fff5f9506f	Migrate proxy logic to the API package (#4216 ) This allows arbitrary programs to have an easy mechanism to make connections through Boundary using Go. Internal cluster tests and test helpers have been migrated to use this package, as well as the `connect` command. --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
Damian Debkowski	9e533912cd	feat(api): session recording reapply storage policy	2 years ago
Louis Ruch	f26243e9af	feat(recording): Delete Session Recording	2 years ago
Hugo	0d71976437	feat(proto): Add RetainUntil and DeleteAfter timestamps on Session Recordings	2 years ago
Louis Ruch	45de26bfe9	feat(scope): Add API for Attach/Detach StoragePolicy to scope	2 years ago
Hugo	c9f1c53693	feat(api): Policies	2 years ago
Damian Debkowski	50990d1b19	chore: generated files	2 years ago
Todd	2d18f82c9f	Rename refresh token errors to list error (#4138 )	2 years ago
Todd	9aab26e91b	clientcache commands now can output curl strings (#4042 )	2 years ago
Todd	b71d134e06	Create Client and update Errors for client daemon commands (#4011 ) * Create a client cache daemon client * Fix error formatting for the client cache cmds	2 years ago
Todd	b2fec2e4f0	Store and use refresh tokens in the client cache (#3857 ) * Refresh resources using refresh tokens	2 years ago
Jim	fba9d1cdf1	Add client daemon repo, server, and cmd The commands added are: boundary daemon start boundary daemon stop boundary daemon add-token boundary daemon status boundary search If these actions are performed on a platform that doesn't support sqlite natively in go an error is returned. Besides some hooks into the cmd package all the significant logic resides in internal/clientcache feat (cmds/authenticate): output the token name when storing token feat: update go-dbw which now uses pure go sqlite driver refact (base.Command): export FlagOutputCurlString Exporting FlagOutputCurlString allows other commands that embed the base.Command to access the flag as needed feat: add a cache Repository to manage cache storage feat: add a "cache" CLI command This new command will support both managing and searching the local CLI cache daemon. feat: start cache daemon as needed when issue CLI commands Move files to new directories and add persona table (#3526) * Add persona table and move files to new directories Client daemon now uses unix sockets and update pathing (#3535) * Add unix socket listen and dialers with file permissions applied * Update the pathing to match RFC Cache refreshing now uses all stored personas. (#3545) Updating headers for LLB files Decouple daemon and cache server (#3566) * Separate daemon from server * Add persona handler to daemon server (#3579) Moved search to use mql and added tests for the search command (#3589) * search uses hashicorp/mql Windows support for client side daemon (#3618) * exec.Command for background process * Log to stderr when in foreground and file always * Use pid files across platform for start and stop Requests with version info must match the daemon's version (#3640) * requests with version info must match daemons Update dependencies and breakout cgo/pure go sqlite drivers (#3657) upgrade go-dbw deps and add cgo build tags Enable graceful shutdown in windows (#3695) * Enable graceful shutdown in windows Co-authored-by: Jim <jlambert@hashicorp.com> Targets delete when a persona changes address or user id (#3673) * Handle cache refresh in repo Add sessions to the client side cache (#3682) * Add sessions to repository * Search command supports sessions * adding session related tests to db and refresh Change cache schema from personas to tokens+users (#3737) * Change from personas to tokens+users * Separate keyring tokens from auth tokens Add support for keyringless auth tokens (#3765) * Add support for keyringless auth tokens Remove expired auth tokens from cache (#3768) * Remove expired auth tokens from cache Complete the TODO of checking for inflight tx (#3779) Delete tokens that the controller says are invalid (#3782) fix search test with boundary token check (#3799) Collect resource info in repository_<resource>s.go (#3769) * Collect resource info in repository_<resource>s.go * Move search logic into the domain (#3794) Daemon and search restricted to supported platforms (#3801) * Daemon and search restricted to supported platforms Reorganize the clientcache packages (#3814) * Refactor for self contained domain logic * Put clientcache stuff under internal	2 years ago
Johan Brandhorst-Satzkorn	acc048a1d1	internal/genapi: correct list response body and map When using the new auto-pagination logic, we would previously return the Body and Map of the last response, instead of one corresponding to the returned result. Correct this by overwriting the Body and Map after pagination has finished.	2 years ago
Johan Brandhorst-Satzkorn	3b54611d14	api: update api listing Change from refresh token to list token	2 years ago
Johan Brandhorst-Satzkorn	ef3bdfd5eb	api: add automatic list pagination Updates all List endpoints to automatically paginate through results to preserve backwards compatibility. Adding support for user controllable pagination could be considered at a later time.	2 years ago
Timothy Messier	c70a6ff6ba	chore: Bump to Go version 1.21.5 Go 1.21.5 fixes a few vulnerabilities. Most notably for boundary is a fix in net/http to limit chunked data overhead. See: https://groups.google.com/g/golang-announce/c/iLGK3x6yuNo (cherry picked from commit `575cd9d63b`)	2 years ago
Timothy Messier	da5dd383ad	feat(api): Use Retry-After header when retrying a request If the api.Client receives a 429 or 503 along with a Retry-After header, the client will automatically wait the amount of time specified, and then re-try the request.	2 years ago
Damian Debkowski	3394d3e13a	chore: update go mod and dependencies (#4073 )	2 years ago
Elim Tsiagbey	8b8d2822df	feat(oidc): OIDC Prompt (#4053 ) Boundary OIDC method does not currently support passing in prompts during authentication. This change adds the capability of passing OIDC prompts. Prompts are optional OIDC parameters that determine the behaviour of the authentication server: https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest ## Changes - New `auth_oidc_prompt` table which contains all the prompts for OIDC auth method - New `auth_oidc_prompt_enm` table which contains possible enum values for a prompt - Currently supported: - `none`: The Authorization Server MUST NOT display any authentication or consent user interface pages - `login`: The Authorization Server SHOULD prompt the End-User for reauthentication - `consent`: The Authorization Server SHOULD prompt the End-User for consent before returning information to the Client - `select_account`: The Authorization Server SHOULD prompt the End-User to select a user account - `oidc_auth_method_with_value_obj` view has been updated to return `prompt` value - Add `prompt` option for OIDC auth method CLI create and update - Pass configured prompt during OIDC authentication - Add `prompt` API validation for create and update	2 years ago
Jeff Mitchell	cb1386932d	Use sdk wspb library and remove internal (#4025 )	2 years ago
Jeff Mitchell	34b558fdc0	Update api deps (#3970 )	2 years ago
dani	c89777de41	Expose Valid Principals for Vault SSH Signed Certs (#3791 ) * allow additional valid principals when creating vault ssh signed cert cred lib * add additional_valid_principals field to credential libraries documentation page	2 years ago
Jeff Mitchell	fb4a5a98dc	Add some target fields and move some things around (#3879 ) In preparation for putting proxy code in the api package this creates some necessary fields in the target output and it pre-moves credential parsing and proxy handshake code to their new places. This will make the diff for the actual proxy code move quite a bit smaller. Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
Jeff Mitchell	eb20b80c71	Migrate some credential bits around (#3864 )	2 years ago

1 2 3 4 5 ...

317 Commits (a7fe48b8d827d1bf68ff8eea205428dd5faae381)