Commit Graph

224 Commits

Author SHA1 Message Date
Adam Ierymenko 7c3166e9be Add a bit of hardening in the network certificate of membership by incorporating a full hash of the identity to which it is issued. This means the recipient need not depend entirely on the root verifying identities properly to make sure impersonation is not occurring. 2021-09-20 18:26:49 -04:00
Grant Limberg 20721491e8 kill some noisy logs 2021-08-19 13:03:56 -07:00
Grant Limberg 9eae444104 kill some verbose logs 2021-08-19 09:21:52 -07:00
Adam Ierymenko 576b4f03a5 Adjust deauth time window and send revocation when SSO members expire. 2021-08-18 12:17:40 -04:00
Adam Ierymenko 461810b06a Move return so record gets created before URL. 2021-08-10 11:22:29 -04:00
Grant Limberg 613d7b5ece fix backwards logic 2021-08-04 09:16:04 -07:00
Adam Ierymenko 663e748b8d Deauth expiring members right away. 2021-07-26 23:45:18 -04:00
Adam Ierymenko 0cf62d334d Remove pointless check. 2021-07-26 13:38:35 -04:00
Adam Ierymenko 0310bfa3e3 Include authentication URL in config 2021-07-23 19:17:42 -04:00
Adam Ierymenko efe0e8aa7b Notification of about-to-expire status... almost there. 2021-07-23 19:05:59 -04:00
Adam Ierymenko 5c7e51feaf Merge branch 'dev' of github.com:zerotier/ZeroTierOne into dev 2021-07-23 18:49:05 -04:00
Adam Ierymenko 34de579c91 Handling of soon-to-expire members 2021-07-23 18:49:00 -04:00
Grant Limberg 10215af96d whoops 2021-07-06 13:18:08 -07:00
Grant Limberg e67fee0264 debug logging 2021-07-06 13:08:21 -07:00
Grant Limberg 364ad87e2b add ssoEnabled flag to network config 2021-06-05 13:44:45 -07:00
Grant Limberg e6b4fb5af7 add "ssoRedirectURL" to local.conf
plumbed it through to the central controller code
2021-06-04 16:29:03 -07:00
Adam Ierymenko 1dfe909bab Increase authentication URL sizes. 2021-06-04 16:46:56 -04:00
Grant Limberg 74a678c1e1 chicken or egg problem.
member must exist in the database before we can generate a nonce & SSO URL
2021-06-04 12:49:26 -07:00
Grant Limberg f27d193cf6 . 2021-06-04 11:56:12 -07:00
Grant Limberg 7ca2ecb421 put expiry time back on nc object 2021-06-04 11:39:52 -07:00
Grant Limberg 0702e581a1 remove some noisy log lines & fix a query error 2021-06-04 11:06:54 -07:00
Grant Limberg c78792a705 moar temporary debug printfs 2021-06-04 11:00:51 -07:00
Grant Limberg 287c19e822 move this outside the auth block. If SSO is enabled, it should be checked whether authorized or not 2021-06-04 09:46:31 -07:00
Grant Limberg 4f521baafd Big SSO update
make things hopefully work
2021-06-03 14:38:26 -07:00
Grant Limberg fc6d90a04a set the correct default 2021-06-02 14:27:58 -07:00