Commit graph

31 commits

Author SHA1 Message Date
Aceix
bfc61fa359
session management for remote access client (#2592)
* feat(NET-584): wip: session mgmt for RAC

* feat(NET-584): session mgmt for RAC

* feat(NET-584): session mgmt for RAC

* feat(NET-584): session mgmt for RAC

* feat(NET-584): session mgmt for RAC

* feat(NET-584): session mgmt for RAC

* feat(NET-584): session mgmt for RAC

* feat(NET-584): session mgmt for RAC

* feat(NET-584): only enable if client is disabled

* feat(NET-584): check only for normal users

* feat(NET-584): fix condition
2023-10-02 08:57:58 +04:00
Abhishek K
719e0c254d
NET-551: User Mgmt Re-Design (#2547)
* add superadmin role, apis to create superadmin user

* apis to attach and remove user from remote access gateways

* add api to list user's remote client has gateway clients

* remove code related user groups

* remove networks and groups from user model

* refactor user CRUD operations

* fix network permission test

* add superadmin to authorize func

* remove user network and groups from cli

* api to transfer superadmin role

* add api to list users on a ingress gw

* restrict user access to resources on server

* deny request from remote access client if extclient is already created

* fix user tests

* fix static checks

* fix static checks

* add limits to extclient create handler

* set username to superadmin on if masterkey is used

* allow creation of extclients using masterkey

* add migration func to assign superadmin role for existing admin user

* check for superadmin on migration if users are present

* allowe masterkey to extcleint apis

* check ownerid

* format error, on jwt token verification failure return unauthorized rather than forbidden

* user update fix

* move user remote functionality to ee

* fix update user api

* security patch

* initalise ee user handlers

* allow user to use master key to update any user

* use slog

* fix auth user test

* table headers

* remove user role, it's covered in middleware

* setuser defaults fix
2023-09-01 14:27:08 +05:30
Gabriel de Souza Seibel
8ce7da2ce9
[NET-494 / ACC-322] New free tier limits (#2495)
* Rename var

* Rename consts and use iota

* Use switch instead of repeated else if

* Rename limits related vars

* Introduce new free tier limits

* Measure new limits and report on license validation

* Separate usage and limits, have new ones

* Don't check for hosts and clients limits, but for machines instead

* Error on egress creation @ free tier w/ internet gateways

* Remove clients and hosts limit from code

* Rename var

* Rename consts and use iota

* Use switch instead of repeated else if

* Rename limits related vars

* Introduce new free tier limits

* Measure new limits and report on license validation

* Separate usage and limits, have new ones

* Don't check for hosts and clients limits, but for machines instead

* Error on egress creation @ free tier w/ internet gateways

* Remove clients and hosts limit from code
2023-08-08 23:17:49 +05:30
Gabriel de Souza Seibel
11933fc07e
Don't expose user hashed password (#2419) 2023-06-26 10:53:00 +05:30
Tobias Cudnik
723375b334
NET-152 enrollment keys for non admins (#2346)
* return 401 instead of 403

* fixed http.StatusForbidden

* Tagged build version (temp)

* Unauthorized_Err when applicable

* untagged version

* fixed PUT /api/users/networks/user1

* - expired token redirs to login
- added `/api/enrollment_keys` for non-admins
- unit test for enrollment keys for non-admins

* handle user perms in `/hosts`

* removed debug

* misc

* - support masteradmin
- return hosts with partial access

* added `ismaster` to middleware
2023-05-31 13:11:54 +05:30
Aceix
5271a2084b
fix error with user update (#2348)
* fix: user update

* fix: user update
2023-05-30 13:07:47 +00:00
Tobias Cudnik
615f058b3f
NET-53 Fixed user update returns old data (#2312)
* fixed gids in user update

* review comments

* review comments

* review comments
2023-05-22 17:57:32 -04:00
dcarns
700147e3ca
Merge pull request #2171 from walkerwmanuel/GRA-1336-sort-before-sending
GRA-1336: sort before sending
2023-04-19 13:08:08 -04:00
0xdcarns
18c9bcc58f adapted sso to host registration 2023-04-17 22:23:17 -04:00
walkerwmanuel
9e56135424 Added user sorting and fixed error 2023-04-03 14:36:38 -04:00
Matthew R Kasun
c2a4cb1145 update function name 2023-04-03 09:54:16 -04:00
Matthew R Kasun
d82e3a9b9e add checks to user update processing 2023-03-30 15:10:17 -04:00
0xdcarns
0b7df753f7 removed references to AccessKey model 2023-03-13 16:02:44 -04:00
Anish Mukherjee
289bb3e5ec add headless sso login 2023-01-02 13:18:40 +05:30
walkerwmanuel
6611941ca2 Replaced string methods with HTTP consts 2022-12-23 09:49:08 -05:00
walkerwmanuel
71d66b7f93 Refactored user functions to use refrences rather than values 2022-12-20 15:10:40 -05:00
Alex Feiszli
53d2250049
Merge branch 'develop' into bugfix_v0.16.0_swagger_sections 2022-09-19 12:55:32 -04:00
0xdcarns
b1b497faa4 PR comments addressed 2022-09-15 10:23:19 -04:00
cameronts
4cc32a5b50 Fix sections for /server/ and /users/ paths in Swagger docs 2022-09-15 05:47:48 -07:00
afeiszli
b670755cce refactoring for ee 2022-09-14 13:26:31 -04:00
0xdcarns
88cd0a6497 initial commit 2022-09-13 15:25:56 -04:00
cameronts
661290c84d Update swagger docs 2022-09-10 21:51:59 -07:00
cameronts
cb23b871dd Added swagger for API docs. 2022-09-06 05:20:24 -07:00
Abhishek Kondur
87db489b1a GRA-414: added additional logs for dns controllers 2022-07-12 19:41:46 +04:00
Abhishek Kondur
5163f77e1f GRA-414: added additional logs for network controllers 2022-07-12 18:50:32 +04:00
Abhishek Kondur
1b6074834c GRA-414: added additional logs for user controllers 2022-07-12 14:49:49 +04:00
Matthew R. Kasun
932eba8d21 fix statticcheck errors 2022-06-16 15:42:32 -04:00
Matthew R. Kasun
7152f6ccd4 remove references to grpc/comms net 2022-04-21 15:53:44 -04:00
0xdcarns
4f181a950c disallowed comms access to non admins 2022-02-21 09:42:39 -05:00
0xdcarns
8a4dce7bec fixed user deletion 2022-01-03 10:02:40 -05:00
0xdcarns
0c6c09caa9 organized http logic, renamed files 2021-12-07 12:46:55 -05:00
Renamed from controllers/userHttpController.go (Browse further)