WEBDIENSTE/NLnetLabs-krill
1
0
Fork 0
mirror of https://github.com/NLnetLabs/krill.git synced 2026-09-22 09:24:55 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,242 Commits 30 Branches 93 Tags
e3eb5e67525ebff2e830fa5efbce57ddb77442dd
Commit Graph
1242 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ximon EighteenandGitHub e3eb5e6752 Add a CTRL-C handler to Cypress UI tests to prevent the Cypress Docker container being left running if the test is aborted while running. (#431) 2021-03-08 11:27:23 +01:00
Ximon EighteenandGitHub c50050c481 Support use of env vars CYPRESS_INTERACTIVE and CYPRESS_DEBUG to control the Cypress test experience. (#404) (#405) 2021-02-10 23:50:00 +01:00
Ximon EighteenandGitHub 824cf04f6b FIX: Correctly compare login session cache eviction timestamp to now. (fixes #390) (#399) 2021-02-10 14:26:33 +01:00
Ximon EighteenandGitHub 58c9cb5a4b Use strongly typed permissions in policy rules. (#417) 
* Use strongly typed Permission checks instead of unrestricted String based checks.

* FIX: Don't include Permission:: in the message logged at WARN level about a user not having permission, only log the permission name, e.g. CA_CREATE.

* FIX: Also update the team policy demo polar file to use the new Permission type.
 2021-02-10 12:29:53 +01:00
Ximon EighteenandGitHub 248807ebc7 Fix master token access restrictions when not using the multi-user feature. (#415) 
* Add a test that should (but doesn't in non-multi-user mode) panic because it tries to create a CA using the wrong master token.

* cargo fmt

* Add some comments explaining what the test does and how it works.

* FIX: Don't permit anonymous users to perform restricted actions in non-multi-user mode (this regression was introduced in the v0.8.1-bis branch, it was never released).
 2021-02-10 11:21:30 +01:00
Ximon EighteenandGitHub f02451c6eb Run functional and UI tests in non-multi-user mode (#414) 
Otherwise we only run them with --all-features whcih includes multi-user mode.
 2021-02-10 11:04:30 +01:00
Ximon EighteenandGitHub c226bc6d18 Use Rust named enum fields for more readable code. (#413) 2021-02-10 10:57:52 +01:00
Ximon EighteenandGitHub dc6580a000 Use an official Alpine docker image release rather than Alpine Edge. (#394) 
* Use an official Alpine docker image release rather than Alpine Edge.

* Remove accidental passing of multi-user feature flag to cargo build.
 2021-02-10 10:54:55 +01:00
Jasper den HertogandGitHub 1cba1dba70 authenticate()/try_refresh_token() rfc-6749 style errors (#396) 
Improved handling of OpenID Connect error responses when using a refresh token to obtain new tokens.
 2021-02-10 10:42:43 +01:00
Tim Bruijnzeels 19befdaada Check for pre-existing publication server more carefully. 2021-02-05 16:57:23 +01:00
Ximon EighteenandGitHub bbfe9a824a Testbed mode should be more liberal in handling formatting variations in child and publisher registration XML. (#369) (#403) 
Testbed mode should be more liberal in handling formatting variations in child and publisher registration XML. Synced with Lagosta commit d94470db. (#369, #403)
 2021-01-29 17:11:30 +01:00
Ximon EighteenandGitHub 424664001d Stabilize the add ROA UI test (#377) (#407) 
Wait until CA resources exist before adding a ROA. Synced with Lagosta master branch commit 30215b85. (#377).
 2021-01-29 12:10:18 +01:00
Ximon Eighteen cb5a510238 Add a module level RustDoc comment to the OpenID Connect provider. 2021-01-25 10:51:31 +01:00
Ximon EighteenandGitHub a362ad9dad Tune the ResizeObserver uncaught exception workaround. (#377) (#406) 
Update the uncaught exception string match to match on the right error property and text.
 2021-01-22 10:55:00 +01:00
Ximon EighteenandGitHub c617e3ac46 Store Cypress UI test screenshot and video captures for later review (resolves #373) 2021-01-19 16:08:51 +01:00
Ximon EighteenandGitHub c1ca53e13a Don't depend on private internal serde Display trait (fixes #391) 2021-01-19 16:05:05 +01:00
Ximon EighteenandGitHub e3cc74ff26 UI test stability improvements (#398) 
* Use a less short 'short-lived' token that doesn't expire in the GH Action runner VMs before Krill is able to validate it. (#377)
* Attempt to suppress occasional spurious "ResizeObserver loop limit exceeded" errors using a custom Cypress uncaught exception handler. Unable to reproduce locally or even confirm that the new handler is being invoked. (#377)
 2021-01-19 00:56:37 +01:00
Ximon EighteenandGitHub cb94515cbb Skip Add ROA test while investigating #377. 
As it is causing test failures for other commits/PRs.
 2021-01-15 16:26:07 +01:00
Jasper den Hertog ed6c080760 typo 2021-01-15 16:10:49 +01:00
Ximon EighteenandGitHub fa59e69d59 Bump 0.8.1-bis -> 0.8.2-bis. (#393) 2021-01-15 15:20:39 +01:00
Ximon EighteenandGitHub 8a7a7bcb3e Extend the CI job with code coverage reports by cargo tarpaulin. (#371) (#372) 
Trigger a new code coverage report GitHub Actions CI workflow after successful completion of the CI workflow (#371).
Also attempts to stablize the flakey add ROAs UI test (#377).
 2021-01-15 15:10:30 +01:00
Tim Bruijnzeels 1d1935e69d Move use statement into fn body with feature - stop confusing my IDE. 2021-01-13 09:59:45 +01:00
Ximon Eighteen 98ba564134 Revert code coverage CI changes in preparation for resubmitting them to a branch for proper PR based review. 2021-01-12 23:16:28 +01:00
Ximon Eighteen e22f3791f2 Attempt to extend the CI coverage build to run for all features while trying to be DRY. 2021-01-12 21:53:22 +01:00
Ximon Eighteen f2a79eb28f Test error reporting on authn success but authz LOGIN failure. 2021-01-12 21:19:50 +01:00
Ximon Eighteen 98215e8e49 FIX: broken init_multi_user_config_file test. 2021-01-12 21:17:22 +01:00
Ximon EighteenandGitHub 70f0461067 Bump min Rust version in CI job to match build.rs. 2021-01-12 20:36:37 +01:00
Ximon EighteenandGitHub b6ee0e87bc CI workflow YML indentation fix 2021-01-12 20:34:56 +01:00
Ximon EighteenandGitHub 56c44c41c3 Initial attempt at code coverage using tarpaulin (#371) 2021-01-12 19:27:09 +00:00
Ximon EighteenandGitHub e8451cfe0e Remove branch restrictions for CI run. 2021-01-12 19:55:33 +01:00
Ximon EighteenandGitHub 70def9b90d Config doc addition re logout mechanisms. 2021-01-12 19:53:16 +01:00
Ximon Eighteen 27a613ab01 FIX: 'Login denied for user' incorrectly reported due to use of string request path instead of RequestPath causing Oso policy rule match failure. 2021-01-12 17:12:44 +01:00
Ximon Eighteen 36b09d2790 FIX: Correct UI test expected string. 2021-01-12 17:11:52 +01:00
Jasper den Hertog 5ba611541e typo 2021-01-12 15:36:13 +01:00
Ximon Eighteen 2b6ccd1b44 FIX: Don't bounce a logged user back to the login screen if they authenticate successfully but are denied LOGIN access by the authorisation policy. 2021-01-12 14:49:32 +01:00
Ximon Eighteen 8ef1660a1f Move ActorDef constructors to ActorDef. 2021-01-12 14:48:40 +01:00
Ximon Eighteen 6295cb6a73 FIX: Purge the session decryption cache on a frequency closer to the order of magnitude of session::MAX_CACHCE_SECS. 2021-01-12 13:19:13 +01:00
Ximon Eighteen e3e188d3a6 Doc comment correction. 2021-01-12 00:18:46 +01:00
Ximon Eighteen dd8d2a2cab cargo fmt. 2021-01-12 00:13:01 +01:00
Ximon Eighteen adef1b7ad9 Clippy goodness. 2021-01-12 00:12:02 +01:00
Ximon Eighteen 1d315168bd Additional OpenID Connect provider comments relevant to the changes to support AWS Cognito. 2021-01-12 00:04:12 +01:00
Ximon Eighteen 6ffe5ceb53 FIX: Support OpenID Connect providers that don't advertise support for any of the logout mechanisms that we understand, but which do accept a HTTP redirect to a specified URL, such as AWS Cognito. 2021-01-12 00:02:14 +01:00
Ximon Eighteen 848fd72b8d FIX: Don't require response_modes_supported to be present in the OpenID Connect Discovery response as it is an optional field with the default value that we require. With this fix we can connect to the AWS Cognito OpenID Connect provider. 2021-01-11 23:59:01 +01:00
Tim Bruijnzeels 6792c6bc67 Forgot to add xml file resource for unit test (#369) 2021-01-11 11:24:49 +01:00
Ximon Eighteen 87cdf7962f FIX: Pass user attributes to Lagosta, not just the role. Synced with Lagosta master branch commit ac2dab37. 2021-01-09 14:55:06 +01:00
Tim Bruijnzeels 37750bab0d Be more lenient on whitespace in XML, but have better warnings for offending json. (#369) 2021-01-08 14:04:55 +01:00
Ximon Eighteen fea2dedd81 FIX: Temporarily bump Docker Alpine image to edge for newer Rust (1.47.0 vs 1.44.0) as Krill currently needs Rust 1.45.0. 2021-01-08 12:37:34 +01:00
Ximon Eighteen 26f25b68de Merge branch 'v0.8.1-bis' of github.com:NLnetLabs/krill into v0.8.1-bis 2021-01-08 12:34:42 +01:00
Ximon Eighteen 3a4d4374fc FIX: We require Rust 1.45.0 due to use of strip_prefix() from the Rust str_strip feature. 2021-01-08 12:34:36 +01:00
Ximon EighteenandGitHub f512539d45 Also build and test with all features enabled. 2021-01-08 12:05:38 +01:00