Commit Graph

91 Commits (master)

Author SHA1 Message Date
Herman Slatman 0898c6db97
Use UUIDv4 as automatically generated client request identifier 3 months ago
Herman Slatman 532b9df0a3
Improve CA client request ID handling 3 months ago
Herman Slatman 2255857b3a
Fix `client` shadowing and e2e request ID test case 3 months ago
Herman Slatman 5c2572c443
Add support for user provider `X-Request-Id` header value 3 months ago
Herman Slatman cf8a50157f
Add a basic e2e test for `X-Request-Id` reflection 3 months ago
Herman Slatman c1c2e73475
Add `X-Request-Id` to all requests made by our CA clients 3 months ago
Mariano Cano b20af51f32
Upgrade go.step.sm/crypto to use go-jose/v3 6 months ago
Herman Slatman b5961beba9
Fix and/or ignore linting issues 1 year ago
Herman Slatman 319333f936
Add `WithContext` methods to the CA client 1 year ago
Mariano Cano fcfd2b9bdc
Return an appropriate error when requests fail
If an http client Do method fails, it always returns an *url.URL error,
this change generalizes all those errors in one common method instead of
returning an fake HTTP error.

Fixes smallstep/cli#738
2 years ago
max furman ffff9af323
linting and fixing review feedback 2 years ago
max furman ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors 2 years ago
Mariano Cano 23b8f45b37 Address gosec warnings
Most if not all false positives
2 years ago
max furman bfb406bf70 Fixes for PR review 2 years ago
max furman b91affdd34 exposing authority configuration for provisioner cli commands 2 years ago
Mariano Cano 304bb5b97a Remove unused code. 2 years ago
Mariano Cano c55b27a2fc Refactor admin token to use with RAs. 2 years ago
Mariano Cano 6dcde8a743 Fix typo 2 years ago
Mariano Cano a4dd586a81 Add method to get the CA url from the client. 2 years ago
Mariano Cano 616490a9c6 Refactor renew after expiry token authorization
This changes adds a new authority method that authorizes the
renew after expiry tokens.
2 years ago
Mariano Cano 8c8db0d4b7 Modify errs.BadRequestErr() to always return an error to the client. 3 years ago
Mariano Cano 8ce807a6cb Modify errs.BadRequest() calls to always send an error to the client. 3 years ago
max furman 7fac8c96c3 Merge branch 'master' into max/context 3 years ago
max furman d777fc23c2 Add ca.WithInsecure and use methods for file names 3 years ago
max furman 10db335f13 mv pkg config -> step 3 years ago
Herman Slatman e7a988b2cd
Pin golangci-lint to v1.43.0 and fix issues 3 years ago
max furman 933b40a02a Introduce gocritic linter and address warnings 3 years ago
max furman 9fdef64709 Admin level API for provisioner mgmt v1 3 years ago
max furman 4d48072746 wip admin CRUD 3 years ago
Mariano Cano 5846314f88 Add missing Rekey method to the ca.Client
Fixes #315
3 years ago
Mariano Cano c5234e9c61 Refactor tls tunnel connections.
New method will use an identity-like file with the configuration
used to create the (m)TLS connection to the tunnel.
3 years ago
Mariano Cano e75a9409a5 Add experimental support for a TLS over TLS tunnel. 3 years ago
Mariano Cano 02a5879cfe Specify always a Proxy in all custom transports.
Fixes #535
3 years ago
Mariano Cano 40d0596b71 Use smallstep/cli-utils instead of smallstep/cli 4 years ago
Mariano Cano d30a95236d Use always go.step.sm/crypto 4 years ago
Mariano Cano 533ad0ca20 Use always go.step.sm/crypto/x509util 4 years ago
max furman 1951669e13 wip 4 years ago
max furman 1cb8bb3ae1 Simplify statuscoder error generators. 4 years ago
max furman dccbdf3a90 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
max furman 9aafe265d0 Should be returning nil from applyIdentity if cert expired. 4 years ago
max furman b9f6aacb0f Move api errors to their own package and modify the typedef 4 years ago
Mariano Cano 65b4dda420 Add wrappers to identity methods in the ca package. 4 years ago
Mariano Cano d85386d0b4 Add identity client and move identity to a new package. 4 years ago
Mariano Cano c6f6493bb7 Fail silently if the identity fails. 4 years ago
max furman 3ac388612a Use x5cInsecure token for /ssh/check-host endpoint 4 years ago
Mariano Cano ab126d6405 Add GetTransport to client. 4 years ago
Mariano Cano d2b1f1547f Create a custom client that sends a custom User-Agent. 4 years ago
Mariano Cano 5d7829b198 Replace /ssh/get-hosts to /ssh/hosts 4 years ago
Mariano Cano 2fe07cd79c Fix tests. 4 years ago
Mariano Cano 85d3843968 Add Identity helpers. 4 years ago