Commit graph

52 commits

Author SHA1 Message Date
Abhishek K a9a237cafc
check if new network is overlapping (#2655) 2023-11-08 17:43:20 +04:00
Abhishek K 719e0c254d
NET-551: User Mgmt Re-Design (#2547)
* add superadmin role, apis to create superadmin user

* apis to attach and remove user from remote access gateways

* add api to list user's remote client has gateway clients

* remove code related user groups

* remove networks and groups from user model

* refactor user CRUD operations

* fix network permission test

* add superadmin to authorize func

* remove user network and groups from cli

* api to transfer superadmin role

* add api to list users on a ingress gw

* restrict user access to resources on server

* deny request from remote access client if extclient is already created

* fix user tests

* fix static checks

* fix static checks

* add limits to extclient create handler

* set username to superadmin on if masterkey is used

* allow creation of extclients using masterkey

* add migration func to assign superadmin role for existing admin user

* check for superadmin on migration if users are present

* allowe masterkey to extcleint apis

* check ownerid

* format error, on jwt token verification failure return unauthorized rather than forbidden

* user update fix

* move user remote functionality to ee

* fix update user api

* security patch

* initalise ee user handlers

* allow user to use master key to update any user

* use slog

* fix auth user test

* table headers

* remove user role, it's covered in middleware

* setuser defaults fix
2023-09-01 14:27:08 +05:30
Farukh Khan 449f3f947b
Net 509 515 (#2496)
* NET-509

* External client config files with IPv6 endpoints now have the [] separating the address and port.

* NET-515

* Increased network name max length to 32

* NET-509-515

* Updated unit test for network name max length check.

* Updated extclient endpoint ip string manipulation to use sprintf

* Added proper error message for network name length more than max allowed.

* NET-515 small typo fix for error strings should not be capitalized
2023-08-08 23:17:22 +05:30
Matthew R Kasun 78640f1342
Extclient NET-63x (#2286)
* model changes

* additional fields for extclient create

* add DNS to extclient config

* extclient name checks

* update extclient

* nmctl extclient

* final tweaks

* review comments

* add extclientdns to node on ingress creation

* fix to add ingress dns to api (#2296)

---------

Co-authored-by: Aceix <aceixsmartX@gmail.com>
2023-05-17 10:58:03 -04:00
0xdcarns 0b7df753f7 removed references to AccessKey model 2023-03-13 16:02:44 -04:00
Matthew R Kasun 828b3f7162 remove local network/range 2023-02-26 16:28:16 -05:00
Matthew R Kasun 77cfae41ff remove postup/down 2023-02-02 11:16:54 -05:00
Matthew R Kasun 4e3ff513b7 remove point to site from network model 2023-01-30 10:47:40 -05:00
Matthew R Kasun 9edb541388 remove localrange 2023-01-20 05:42:05 -05:00
0xdcarns 88cd0a6497 initial commit 2022-09-13 15:25:56 -04:00
cameronts 38e4950ed1 Fixed by adding validation tags.
To test: run go test ./... -test.v (tested with go 1.18.4).
2022-07-20 12:32:48 -07:00
0xdcarns 99abd9666d removed required status for ipv6 and added check on create network 2022-04-25 13:10:55 -04:00
0xdcarns 8e976d1f55 removed isdualstack references 2022-04-25 13:09:23 -04:00
0xdcarns 611a425852 added more uniform unique address checks 2022-04-25 13:08:45 -04:00
Matthew R. Kasun 747d6bc692 remove comms network leftovers
Signed-off-by: Matthew R. Kasun <mkasun@nusak.ca>
2022-04-22 05:21:35 -04:00
0xdcarns 5ba79afeba added default acl value option for networks 2022-03-17 13:24:57 -04:00
afeiszli f21dad5184 fixed hub logic 2022-02-21 09:45:42 -05:00
0xdcarns 6028e1b6de added comms checks 2022-02-18 19:37:12 -05:00
afeiszli f55eeedbb9 settings for comms network 2022-02-18 11:11:21 -05:00
afeiszli 8cd19c20c6 removed unnecessary variables from network, added IsHubAndSpoke 2022-02-18 09:49:58 -05:00
0xdcarns cd4e2c57d6 added new struct and adapted to funcs 2022-01-29 18:15:52 -05:00
0xdcarns 0d3813295d server update 2022-01-29 18:15:52 -05:00
0xdcarns 26a0d8bdbe initial commit 2022-01-29 18:15:52 -05:00
0xdcarns 8f72ecbaa0 refactored logic 2021-10-26 12:50:34 -04:00
0xdcarns d7cafbbc4c code linting 2021-10-08 15:07:12 -04:00
afeiszli 21ba362eca allowing IsServer to be modified, configurable checkin time, single checkin for linux, moved cfg files 2021-10-02 12:28:17 -04:00
0xdcarns 90d941854b made some more efficient images and added set defaults for node reads 2021-09-27 17:51:20 -04:00
0xdcarns 34717417ce began windows userspace implementation 2021-09-10 13:39:51 -04:00
worker-9 c2a9007b8c automated ext client egress range addition and ext client dns from network 2021-08-25 09:46:45 -04:00
afeiszli 8056f024e2 client mode enablement 2021-08-19 13:41:04 -04:00
worker-9 e029979ab6 I push 2021-08-05 12:39:01 -04:00
worker-9 44d03f6805 began refactoring of client 2021-08-05 12:24:16 -04:00
afeiszli 12c4fa33f5 v0.7 2021-07-28 02:23:20 +00:00
afeiszli fd223e3d4a refactored nodes model 2021-07-24 16:13:24 -04:00
afeiszli a982b62445 refactoring validation and models 2021-07-23 18:24:34 -04:00
afeiszli 93b0b94788 Mid way through adopting rqlite 2021-07-21 18:55:19 -04:00
afeiszli b33f5b2fab fixing validation 2021-07-11 10:28:50 -04:00
afeiszli 977da6b129 compiling with changes pushed for json token. Have NOT TESTED. Will probably run into issues. Need to test multiple egress ranges, AllowedIPs, and overriding connection strings. 2021-07-11 00:49:31 -04:00
afeiszli ccce74be97 added setting node limits 2021-07-02 23:25:36 -04:00
afeiszli 8e9a0b46aa test changes 2021-05-27 17:21:28 -04:00
afeiszli 78ae219b03 major overhaul initiated 2021-05-25 12:48:04 -04:00
Matthew R Kasun a827f8caad Test Cleanup 2021-05-03 17:51:38 -04:00
Matthew R Kasun aa6112a38e Network update validation tests 2021-05-03 07:13:12 -04:00
Matthew R Kasun 699619a371 Fix Access Key tests 2021-05-02 10:46:07 -04:00
Matthew R Kasun 0e1a5f534f Network Validation Test Cases 2021-04-30 23:07:25 -04:00
afeiszli 22b5a714fd fixing address validation 2021-04-27 23:22:52 -04:00
afeiszli a0dd5929cb adding ipv6 details. Need to test now 2021-04-27 23:17:59 -04:00
afeiszli 529a511a79 fixed constant peer update issue 2021-04-19 10:49:52 -04:00
Alex 0d526aee74
Update network.go 2021-04-13 16:01:54 -04:00
afeiszli 976c1847bf changing private to local for clarity 2021-04-13 10:04:31 -04:00