 Ximon Eighteen
|
3a4d4374fc
|
FIX: We require Rust 1.45.0 due to use of strip_prefix() from the Rust str_strip feature.
|
2021-01-08 12:34:36 +01:00 |
|
|
Ximon Eighteen
|
1c3f915390
|
Merge branch 'v0.8.1-bis' of github.com:NLnetLabs/krill into v0.8.1-bis
|
2021-01-07 13:19:28 +01:00 |
|
|
Ximon Eighteen
|
60ab21b2be
|
FIX: Ensure at the entrypoint that all API requests are authenticated which is more consistent with the v0.8.2 released code, is simpler (less code in each handler fn) and cannot be forgotten unlike checks in each handler fn.
|
2021-01-07 13:19:25 +01:00 |
|
|
Tim Bruijnzeels
|
ece0950419
|
Remove HATEOS links from publisher list (make API consistent #330)
|
2021-01-07 09:56:26 +01:00 |
|
|
Ximon Eighteen
|
394e325b7c
|
cargo fmt
|
2021-01-06 14:27:59 +01:00 |
|
|
Ximon Eighteen
|
8343456b11
|
FIX: Flakey UI test: AssertionError: Timed out retrying after 4000ms: Expected to find content: '<child_request' within the element: <code.language-xml> but never did.
|
2021-01-06 14:25:39 +01:00 |
|
|
Ximon Eighteen
|
f19994354e
|
FIX: Incorrect UI subtest title.
|
2021-01-06 14:08:22 +01:00 |
|
|
Ximon Eighteen
|
db8647b60f
|
FIX: Initial rough implementation: Don't fail Krill startup if the OpenID Connect provider is unavailable. Synced with Lagosta master commit 5f61a5c9. Also includes some minor log / error consistency/cleanup tweaks.
|
2021-01-06 13:56:39 +01:00 |
|
|
Tim Bruijnzeels
|
a1c8889b56
|
Remove a CA (CLI and API only) #359
|
2021-01-05 16:08:23 +01:00 |
|
|
Ximon Eighteen
|
e0be300283
|
Clippy goodness.
|
2021-01-05 12:45:20 +01:00 |
|
|
Ximon Eighteen
|
59cd7bb364
|
FIX: Show internal auth errors (e.g. OpenID Connect provider invalid response) distinctly from Krill "general" errors (which might imply a problem with Krill itself which is not the case). Synced with Lagosta master commit 259958f.
|
2021-01-05 12:44:11 +01:00 |
|
|
Ximon Eighteen
|
76eb78f5a5
|
Add failing a test for verifying that Krill starts up even if the OpenID Connect provider is unavailable.
|
2021-01-05 12:21:23 +01:00 |
|
|
Ximon Eighteen
|
78630a719d
|
FIX: wrong log level for test.
|
2021-01-05 12:20:56 +01:00 |
|
|
Ximon Eighteen
|
9bd8968dd0
|
Add a test for the case where the OpenID Connect provider responds with a non-spec compliant ID Token. Currently fails because the error message shown to the user could imply that Krill had a problem rather than correctly reporting that this is an OpenID Connect provider issue.
|
2021-01-05 12:17:25 +01:00 |
|
|
Ximon Eighteen
|
24e37b88de
|
Enable UI 'Add ROA for CA' UI based test which now passes.
|
2021-01-05 11:19:52 +01:00 |
|
|
Ximon Eighteen
|
c436f0d0a7
|
Remove strange unnecessary & in const ActorDefs and consume ActorDefs to make Actors.
|
2021-01-05 11:15:39 +01:00 |
|
|
Ximon Eighteen
|
076fa17655
|
Rename get_actor_def() to authenticate() which better reflects its purpose.
|
2021-01-05 11:01:54 +01:00 |
|
|
Ximon Eighteen
|
ddde6b41d8
|
Add Actor module level intro rustdoc.
|
2021-01-05 11:01:14 +01:00 |
|
|
Ximon Eighteen
|
544c3bdde0
|
FIX: master token fallback fails if the primary provider cannot decode the bearer token, as we don't know if that's an internal / provider error that should be reported to the user, or is because the token is for the master token provider and so doesn't match. Try the master token provider first instead as error handling is easier this way around and failure is fast and provider delays won't slow down auth when using a master token.
|
2021-01-05 10:59:42 +01:00 |
|
|
Ximon Eighteen
|
1a6be4d753
|
FIX: UI tests time out due to slow route analysis of vast TA resources when TA isn't even needed.
|
2020-12-31 16:33:54 +01:00 |
|
|
Ximon Eighteen
|
dd7d3f41b2
|
FIX: Avoid stack overflow triggered by addition of new Actor::auth_error field by flattening out chained async API handler invocation. This avoids deep recursive .or_else() macro expansion of calls that pass the large Request value (of which Actor is part) resulting in stack overflow. This fix also removes the need for the boosted recursion_limit compiler setting.
|
2020-12-31 15:57:02 +01:00 |
|
|
Ximon Eighteen
|
1b1d7f9a5d
|
More Clippy goodness.
|
2020-12-30 15:58:32 +01:00 |
|
|
Ximon Eighteen
|
de5fa9f9ce
|
Clippy goodness.
|
2020-12-30 15:46:08 +01:00 |
|
|
Ximon Eighteen
|
8bc43d7640
|
rustfmt on recently modified files.
|
2020-12-30 15:46:08 +01:00 |
|
|
Ximon Eighteen
|
5d6fbcd66f
|
UI test tweaks.
|
2020-12-30 15:46:08 +01:00 |
|
|
Ximon Eighteen
|
54fe369d87
|
Minor comment & whitespace tweaks.
|
2020-12-30 15:46:08 +01:00 |
|
|
Ximon Eighteen
|
77e2420638
|
Correct invalid Cargo.toml syntax inside commented out line.
|
2020-12-30 15:46:08 +01:00 |
|
|
Ximon Eighteen
|
1c2ee3d336
|
Separate actor definitions from actor instances, use Token type for password_hash, move request/response handling into the AuthProviders plus some additional error handling.
|
2020-12-30 15:46:08 +01:00 |
|
|
Ximon Eighteen
|
9f3e2c7588
|
Logging tweaks.
|
2020-12-30 15:46:08 +01:00 |
|
|
Ximon Eighteen
|
b2cf7535dd
|
Error handling tweaks.
|
2020-12-30 15:46:08 +01:00 |
|
|
Ximon Eighteen
|
bd47bd7ed8
|
FIX: Don't log a warning on every initial load of the UI.
|
2020-12-30 15:46:07 +01:00 |
|
|
Ximon Eighteen
|
b2e092814f
|
Remove duplicate fn.
|
2020-12-30 15:46:07 +01:00 |
|
|
Ximon Eighteen
|
c813e7b77e
|
FIX: session expiration handling.
|
2020-12-30 15:46:07 +01:00 |
|
|
Ximon Eighteen
|
14013fd6ca
|
FIX: Don't respond with auth errors (e.g. token expiration) to requests to unprotected API endpoints.
|
2020-12-30 15:46:07 +01:00 |
|
|
Ximon Eighteen
|
ddcc6708fc
|
TEST FIX: error[E0432]: unresolved import 'krill::daemon::mq::EventQueueListener'
|
2020-12-30 15:45:36 +01:00 |
|
|
Ximon EighteenandGitHub
|
9aba7b84a6
|
Error message typo: bing -> bind
|
2020-12-30 13:31:04 +01:00 |
|
|
Tim Bruijnzeels
|
7a00b9c37d
|
Rename 'krillpubc server delete' to `krillpubc server clear' #365
|
2020-12-23 15:08:46 +01:00 |
|
|
Tim Bruijnzeels
|
0413217c53
|
Rename 'krillpubc server delete' to `krillpubc server clear' #365
|
2020-12-23 15:00:38 +01:00 |
|
|
Tim Bruijnzeels
|
35d9b766bb
|
Let multiple CA each request update from parents in paralel #364
|
2020-12-21 18:26:09 +01:00 |
|
|
Tim Bruijnzeels
|
cf378663d6
|
Process ca-refresh with parents in its own loop, don't block the work queue for other things.
|
2020-12-21 18:05:13 +01:00 |
|
|
Tim Bruijnzeels
|
982e1d3bff
|
Reschedule failed sync to parent requests, use single queue for parent syncs. (#363)
|
2020-12-21 15:31:39 +01:00 |
|
|
Tim Bruijnzeels
|
5bbeb074f2
|
Send pending requests - if present - as part of the CA to parent resync. (#363)
|
2020-12-21 10:08:25 +01:00 |
|
|
Tim Bruijnzeels
|
48edbff602
|
Report configured next parent exchange time (#357)
|
2020-12-20 14:30:16 +01:00 |
|
|
Tim Bruijnzeels
|
88f66f327a
|
Clean up comment.
|
2020-12-18 11:28:05 +01:00 |
|
|
Tim Bruijnzeels
|
b7a091e3c0
|
Skip background job if it's still running. (#356)
|
2020-12-18 11:01:58 +01:00 |
|
|
Tim Bruijnzeels
|
62aa602c4d
|
Add openapi spec for krillpubd (#353)
|
2020-12-16 14:37:14 +01:00 |
|
|
Tim Bruijnzeels
|
3513f9e45b
|
Update openapi spec for CA and PUBD split. (#353)
|
2020-12-16 14:21:44 +01:00 |
|
|
Tim Bruijnzeels
|
fa1cebf4d1
|
Fix multi-user config initialisation.
|
2020-12-15 17:23:42 +01:00 |
|
|
Ximon Eighteen
|
d30875dae9
|
More state based instead of time based test behaviour.
|
2020-12-15 16:54:45 +01:00 |
|
|
Ximon Eighteen
|
d619e91fd6
|
Make the token refresh test wait for the expected API call to prevent checking the DOM too early.
|
2020-12-15 16:41:38 +01:00 |
|