Commit graph

12 commits

Author SHA1 Message Date
Aceix 033e203d91
fix(NET-786): enhance enrollment key validation (#2726) 2024-01-03 12:23:04 +05:30
Aceix 61ef6142ff
feat(NET-688): auto relaying via enrollment keys (#2647)
* feat(NET-688): auto relaying via enrollment keys

* feat(NET-688): address pr comments
2023-11-04 16:28:57 +04:00
Abhishek K 719e0c254d
NET-551: User Mgmt Re-Design (#2547)
* add superadmin role, apis to create superadmin user

* apis to attach and remove user from remote access gateways

* add api to list user's remote client has gateway clients

* remove code related user groups

* remove networks and groups from user model

* refactor user CRUD operations

* fix network permission test

* add superadmin to authorize func

* remove user network and groups from cli

* api to transfer superadmin role

* add api to list users on a ingress gw

* restrict user access to resources on server

* deny request from remote access client if extclient is already created

* fix user tests

* fix static checks

* fix static checks

* add limits to extclient create handler

* set username to superadmin on if masterkey is used

* allow creation of extclients using masterkey

* add migration func to assign superadmin role for existing admin user

* check for superadmin on migration if users are present

* allowe masterkey to extcleint apis

* check ownerid

* format error, on jwt token verification failure return unauthorized rather than forbidden

* user update fix

* move user remote functionality to ee

* fix update user api

* security patch

* initalise ee user handlers

* allow user to use master key to update any user

* use slog

* fix auth user test

* table headers

* remove user role, it's covered in middleware

* setuser defaults fix
2023-09-01 14:27:08 +05:30
Tobias Cudnik 723375b334
NET-152 enrollment keys for non admins (#2346)
* return 401 instead of 403

* fixed http.StatusForbidden

* Tagged build version (temp)

* Unauthorized_Err when applicable

* untagged version

* fixed PUT /api/users/networks/user1

* - expired token redirs to login
- added `/api/enrollment_keys` for non-admins
- unit test for enrollment keys for non-admins

* handle user perms in `/hosts`

* removed debug

* misc

* - support masteradmin
- return hosts with partial access

* added `ismaster` to middleware
2023-05-31 13:11:54 +05:30
0xdcarns 596de6b9e3 shortened name 2023-02-16 18:56:45 -05:00
0xdcarns 9078608bd1 fix initial map allocation 2023-02-16 15:13:40 -05:00
0xdcarns 607198d563 added host registration endpoint 2023-02-16 14:27:57 -05:00
walkerwmanuel 193ef6b6ed removed print lines 2023-02-16 11:08:43 -05:00
walkerwmanuel 8f8c4f1df0 Wrote test to test Enrolment Keys 2023-02-16 10:57:18 -05:00
walkerwmanuel 442b32e0d9 Wrote test to test Enrolment Keys 2023-02-16 10:56:13 -05:00
0xdcarns 0e5e34ef0c added try to use func and edited tests 2023-02-15 15:52:58 -05:00
0xdcarns db4ea9faa4 completed crud unit tests 2023-02-15 15:27:26 -05:00
Renamed from logic/enrollment_key_test.go (Browse further)