 Grant Limberg
|
17f6b3a10b
central controller metrics & request path updates (#2012)
|
%!s(int64=2) %!d(string=hai) anos |
 Brenton Bostick
|
da71e2524c
fix typos (#2010)
|
%!s(int64=2) %!d(string=hai) anos |
|
Brenton Bostick
|
f3da2b4031
Capture setContent by-value instead of by-reference (#2006)
|
%!s(int64=2) %!d(string=hai) anos |
|
Grant Limberg
|
adfbbc3fb0
Controller Metrics & Network Config Request Fix (#2003)
|
%!s(int64=2) %!d(string=hai) anos |
|
Grant Limberg
|
e5fc89821f
use cpp-httplib for HTTP control plane (#1979)
|
%!s(int64=2) %!d(string=hai) anos |
 Grant Limberg
|
64b7f8e445
quiet down logs more
|
%!s(int64=3) %!d(string=hai) anos |
 Adam Ierymenko
|
ef08346a74
Fix a possible excessive memory use issue in controller and clean up a bunch of COM handling and other code in the normal node.
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
912036b260
Push credentials always if updated (client-side) and some controller-side cleanup that should be logically irrelevant but will prevent unnecessary DB lookups.
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
a4e8847664
Restore sending of rejections but move it exclusively to a thread, widen netconf window to 30 minutes.
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
c492bf7eea
Forgot to send error on v0 auth expiry.
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
cb086ff97f
Simplify SSO logic. SSO should just normally expire when it expires. No full deauth needed. Deauth is for really giving someone the boot.
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
55a99f34d0
Tighten certificate window and deprecate sending of revocations for ordinary SSO timeouts. Revocations should only be for deliberate deauth to kick people off networks. Cert window should now stay within refresh window for SSO so normal cert expiration should handle it just fine.
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
58119598ae
comment out some new deauth code
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
42a2afaef9
This may improve controller behavior with SSO and mixed SSO, needs testing!
|
%!s(int64=3) %!d(string=hai) anos |
|
Grant Limberg
|
b3fbbd3124
refresh tokens now working
|
%!s(int64=3) %!d(string=hai) anos |
|
Grant Limberg
|
7cce23ae79
wip
|
%!s(int64=3) %!d(string=hai) anos |
|
Grant Limberg
|
a33d7c64fe
more fixin
|
%!s(int64=3) %!d(string=hai) anos |
|
Grant Limberg
|
fa21fdc1cc
rename stuff for clarity
|
%!s(int64=3) %!d(string=hai) anos |
|
Grant Limberg
|
43433cdb5a
integrate rust build of zeroidc to linux
|
%!s(int64=3) %!d(string=hai) anos |
|
Grant Limberg
|
8d39c9a861
plumbing full flow from controller -> client network
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
134d33c218
Add a bit of hardening in the network certificate of membership by incorporating a full hash of the identity to which it is issued. This means the recipient need not depend entirely on the root verifying identities properly to make sure impersonation is not occurring.
|
%!s(int64=3) %!d(string=hai) anos |
|
Grant Limberg
|
20721491e8
kill some noisy logs
|
%!s(int64=3) %!d(string=hai) anos |
|
Grant Limberg
|
9eae444104
kill some verbose logs
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
576b4f03a5
Adjust deauth time window and send revocation when SSO members expire.
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
461810b06a
Move return so record gets created before URL.
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
613d7b5ece
fix backwards logic
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
663e748b8d
Deauth expiring members right away.
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
0cf62d334d
Remove pointless check.
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
0310bfa3e3
Include authentication URL in config
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
efe0e8aa7b
Notification of about-to-expire status... almost there.
|
%!s(int64=4) %!d(string=hai) anos |
