Граф коммитов

22 Коммитов

Автор SHA1 Сообщение Дата
Aaron Meihm 07d135a000 [medium] more granular permissions for investigators
This removes the previous implementation where an investigator could
either be set to an admin or not, and expands this to per-endpoint
permissions that can be set for individual investigators.
2016-08-15 15:25:01 -05:00
Aaron Meihm c32c3b4ab2 [medium] add environment validation to loader authorization
Adds ability to specify an expected environment or tag query string to
loader instances which are verified prior to manifest lookup.

Resolves #255
2016-08-11 15:28:57 -05:00
Aaron Meihm 63787dded6 [minor] configured handling of X-Forwarded-For
Adds a configuration option to the API to inform the API when it should
use the X-Forwarded-For header value as the public IP of a client. Also
does some validation of the value.

Resolves #247
2016-07-12 15:28:06 -05:00
Aaron Meihm 8bf6bd6b5c [minor] differentiate request types in api request log
Adds a request category to the log message to indicate if it is a loader
related request, or a regular investigator. Also updates auth section
for loader requests so it includes the loader name.
2016-07-11 14:23:31 -05:00
Aaron Meihm e70bb04105 [major] hashed storage of api loader keys and format standardization 2016-07-10 16:24:53 -05:00
Julien Vehent f5d7092171 [doc] remove "describe" endpoints in API 2016-05-31 17:39:12 -04:00
Julien Vehent fbc17b40dc [minor] reorganize api endpoints to satisfy my OCD-ness 2016-05-31 16:51:04 -04:00
Aaron Meihm f0cd2c69a6 Merge pull request #216 from ameihm0912/api-auth
Minor improvements to loader API authentication
2016-04-26 09:50:47 -05:00
Aaron Meihm 4ecec68909 [minor] improve validation of loader key on read 2016-04-25 16:44:17 -05:00
Aaron Meihm e07647e01a [minor] extend logging for failed access to privileged api endpoints 2016-04-25 15:34:02 -05:00
Aaron Meihm 6cb30162c9 [medium] mig-console and api loader key change support 2016-04-25 13:46:20 -05:00
Aaron Meihm 12765044c4 [minor] update numeric HTTP status codes to use values from net/http
had a mix of both, this should clean the rest of them up.
2016-04-20 16:47:47 -05:00
Aaron Meihm 461163a032 [medium] add console loader management operations 2016-04-20 16:47:47 -05:00
Aaron Meihm df27a0d3dd [medium] add new administrator privilege for investigators 2016-03-24 17:08:14 -05:00
Aaron Meihm 0858d284bc [medium] add functions to list target loader entries in manifest reader 2016-03-24 17:08:14 -05:00
Aaron Meihm c7d2350208 [minor] authenticate loader requests using path similar to standard api 2016-03-24 17:08:13 -05:00
Aaron Meihm 58644787bf [medium] add console and api functionality for manifest creation 2016-03-24 17:08:13 -05:00
Aaron Meihm 1c9ba0bec1 [minor] move auth manifest endpoints under correct section in function 2016-03-24 17:08:13 -05:00
Aaron Meihm 97cac21624 [minor] manifest signature status reset from console 2016-03-24 17:08:13 -05:00
Aaron Meihm 7c897edc06 [major] Initial code for mig-loader
Checkpoint commit for initial revision of mig-loader related code. This
change adds functionality supporting agent auto-update using manifests
stored in the API.
2016-03-24 17:08:13 -05:00
Julien Vehent 76f33f2dea [minor] Add base Version in MIG package, overrided by Makefile 2015-09-24 08:54:07 -04:00
Julien Vehent f9c24e9828 [minor] change folder structure to go get with nice names 2015-08-26 12:22:02 -04:00