71 Commits (7101fbb0ee939d24756695508845e78e41a1cb59)

Author	SHA1	Message	Date
Andrew Reed	7101fbb0ee	Provisioner webhooks (#1001)	2 years ago
Mariano Cano	72e2c4eb2e	Render proper policy and constrains errors	2 years ago
max furman	120629edab	Do not use the templateError in the BadRequestErr	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
max furman	99c9155467	disableSSHHostsListAPI -> disableGetSSHHosts	2 years ago
max furman	fb7f57a8df	Add attribute to disable SSH Hosts list API	2 years ago
Mariano Cano	6b3a8f22f3	Add provisioner to SSH renewals ... This commit allows to report the provisioner to the linkedca when a SSH certificate is renewed.	2 years ago
Mariano Cano	293586079a	Store provisioner with SignSSH ... This change also allows to store the old certificate on renewal on linkedca or if the db interface supports it.	2 years ago
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	76112c2da1	Improve error creation and testing for core policy engine	2 years ago
Herman Slatman	3fa96ebf13	Improve policy errors returned to client	2 years ago
Herman Slatman	571b21abbc	Fix (most) PR comments	2 years ago
Herman Slatman	7c541888ad	Refactor configuration of allow/deny on authority level	2 years ago
Herman Slatman	0475a4d26f	Refactor extraction of JSON template syntax errors	2 years ago
Herman Slatman	a5455d3572	Improve errors related to template execution failures (slightly)	2 years ago
Mariano Cano	031d4d7000	Return BadRequest when validating sign options.	3 years ago
Mariano Cano	bb26799583	Modify errs.Wrap with forbidden errors.	3 years ago
Mariano Cano	668d3ea6c7	Modify errs.Wrap() with bad request to send messages to users.	3 years ago
Mariano Cano	8c8db0d4b7	Modify errs.BadRequestErr() to always return an error to the client.	3 years ago
Mariano Cano	8ce807a6cb	Modify errs.BadRequest() calls to always send an error to the client.	3 years ago
max furman	922d239171	Simplify conditional	3 years ago
max furman	a7d144996f	SSH backwards compat updates ... - use existence of new value in data map as boolean - add tests for backwards and forwards compatibility - fix old tests that used static dir locations	3 years ago
max furman	507be61e8c	Use a more distint map key to indicate template version ... - make the key a variable that can be reused on the CLI side.	3 years ago
max furman	f426c152a9	backwards compatibility for version of cli older than v0.18.0	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	f7542a5bd9	Move check of ssh revocation from provisioner to the authority.	3 years ago
Mariano Cano	71f8019243	Store x509 and ssh certificates on linkedca if enabled.	3 years ago
max furman	7b5d6968a5	first commit	3 years ago
Mariano Cano	4d375a06f5	Make clearer what's an unsigned cert.	4 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
Mariano Cano	e83e47a91e	Use sshutil and randutil from go.step.sm/crypto.	4 years ago
Mariano Cano	c4bbc81d9f	Fix authority tests.	4 years ago
Mariano Cano	a78f7e8913	Add template support on k8ssa provisioner.	4 years ago
Mariano Cano	c1fc45c872	Simplify SSH modifiers with options. ... It also changes the behavior of the request options to modify only the validity of the certificate.	4 years ago
Mariano Cano	d7e590908e	Use sshutil for ssh renewing and rekeying.	4 years ago
Mariano Cano	b66d123572	Use sshutil for SSH certificate signing.	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
Mariano Cano	39650637d4	Merge pull request #297 from smallstep/no-bastion-bastion ... Do not return bastion for the configured bastion host.	4 years ago
Mariano Cano	b0fdd0b2be	Do not return bastion for the configured bastion host. ... Fixes #296	4 years ago
Mariano Cano	e3ae751b57	Use templates from authority instead of config.	4 years ago
Mariano Cano	237baa5169	Check for required variables in templates. ... Fixes smallstep/cli#232	4 years ago
Mariano Cano	9832d1538b	Avoid nil pointer panic on step ssh config with no templates.	4 years ago
Mariano Cano	b0ff731d18	Add support for user provisioner certificates on OIDC provisioners. ... OIDC provisioners create an SSH certificate with two principals. This was avoiding the creationg of user provisioner certificates for those provisioners. Fixes smallstep/cli#268	4 years ago
Mariano Cano	c49a9d5e33	Add context parameter to all SSH methods.	4 years ago
max furman	397a181d10	Add backdate validation to sshCertValidityValidator.	4 years ago
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	4 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	74b5d7f984	Add backdate support on ssh rekey.	4 years ago
Mariano Cano	84ff172093	Add support for backdate to SSH certificates.	4 years ago
max furman	b9f6aacb0f	Move api errors to their own package and modify the typedef	4 years ago