Aaron Meihm
07d135a000
[medium] more granular permissions for investigators
...
This removes the previous implementation where an investigator could
either be set to an admin or not, and expands this to per-endpoint
permissions that can be set for individual investigators.
2016-08-15 15:25:01 -05:00
Aaron Meihm
c32c3b4ab2
[medium] add environment validation to loader authorization
...
Adds ability to specify an expected environment or tag query string to
loader instances which are verified prior to manifest lookup.
Resolves #255
2016-08-11 15:28:57 -05:00
Aaron Meihm
63787dded6
[minor] configured handling of X-Forwarded-For
...
Adds a configuration option to the API to inform the API when it should
use the X-Forwarded-For header value as the public IP of a client. Also
does some validation of the value.
Resolves #247
2016-07-12 15:28:06 -05:00
Aaron Meihm
8bf6bd6b5c
[minor] differentiate request types in api request log
...
Adds a request category to the log message to indicate if it is a loader
related request, or a regular investigator. Also updates auth section
for loader requests so it includes the loader name.
2016-07-11 14:23:31 -05:00
Aaron Meihm
e70bb04105
[major] hashed storage of api loader keys and format standardization
2016-07-10 16:24:53 -05:00
Julien Vehent
f5d7092171
[doc] remove "describe" endpoints in API
2016-05-31 17:39:12 -04:00
Julien Vehent
fbc17b40dc
[minor] reorganize api endpoints to satisfy my OCD-ness
2016-05-31 16:51:04 -04:00
Aaron Meihm
f0cd2c69a6
Merge pull request #216 from ameihm0912/api-auth
...
Minor improvements to loader API authentication
2016-04-26 09:50:47 -05:00
Aaron Meihm
4ecec68909
[minor] improve validation of loader key on read
2016-04-25 16:44:17 -05:00
Aaron Meihm
e07647e01a
[minor] extend logging for failed access to privileged api endpoints
2016-04-25 15:34:02 -05:00
Aaron Meihm
6cb30162c9
[medium] mig-console and api loader key change support
2016-04-25 13:46:20 -05:00
Aaron Meihm
12765044c4
[minor] update numeric HTTP status codes to use values from net/http
...
had a mix of both, this should clean the rest of them up.
2016-04-20 16:47:47 -05:00
Aaron Meihm
461163a032
[medium] add console loader management operations
2016-04-20 16:47:47 -05:00
Aaron Meihm
df27a0d3dd
[medium] add new administrator privilege for investigators
2016-03-24 17:08:14 -05:00
Aaron Meihm
0858d284bc
[medium] add functions to list target loader entries in manifest reader
2016-03-24 17:08:14 -05:00
Aaron Meihm
c7d2350208
[minor] authenticate loader requests using path similar to standard api
2016-03-24 17:08:13 -05:00
Aaron Meihm
58644787bf
[medium] add console and api functionality for manifest creation
2016-03-24 17:08:13 -05:00
Aaron Meihm
1c9ba0bec1
[minor] move auth manifest endpoints under correct section in function
2016-03-24 17:08:13 -05:00
Aaron Meihm
97cac21624
[minor] manifest signature status reset from console
2016-03-24 17:08:13 -05:00
Aaron Meihm
7c897edc06
[major] Initial code for mig-loader
...
Checkpoint commit for initial revision of mig-loader related code. This
change adds functionality supporting agent auto-update using manifests
stored in the API.
2016-03-24 17:08:13 -05:00
Julien Vehent
76f33f2dea
[minor] Add base Version in MIG package, overrided by Makefile
2015-09-24 08:54:07 -04:00
Julien Vehent
f9c24e9828
[minor] change folder structure to go get with nice names
2015-08-26 12:22:02 -04:00