Граф коммитов

43 Коммитов

Автор SHA1 Сообщение Дата
Sunny Prakash Tiwari 12cc99432a [minor] Create an API endpoint for agents to retrieve PGP public keys and update the documentation for api endpoints fixes #240 2016-09-12 23:39:44 +05:30
Aaron Meihm 10499cbe9d [minor] fix comment whitespace issue 2016-08-16 12:40:19 -05:00
Aaron Meihm bb5f690710 [major] expand permission model to be per-endpoint 2016-08-15 18:28:57 -05:00
Aaron Meihm 07d135a000 [medium] more granular permissions for investigators
This removes the previous implementation where an investigator could
either be set to an admin or not, and expands this to per-endpoint
permissions that can be set for individual investigators.
2016-08-15 15:25:01 -05:00
Aaron Meihm 9e7799c679 Merge pull request #256 from ameihm0912/loaderexpect
[medium] add environment validation to loader authorization
2016-08-15 15:15:00 -05:00
Aaron Meihm 90301cf0ba [minor/bug] permit larger form sizes for manifest uploads 2016-08-12 10:29:53 -05:00
Aaron Meihm c32c3b4ab2 [medium] add environment validation to loader authorization
Adds ability to specify an expected environment or tag query string to
loader instances which are verified prior to manifest lookup.

Resolves #255
2016-08-11 15:28:57 -05:00
Aaron Meihm 63787dded6 [minor] configured handling of X-Forwarded-For
Adds a configuration option to the API to inform the API when it should
use the X-Forwarded-For header value as the public IP of a client. Also
does some validation of the value.

Resolves #247
2016-07-12 15:28:06 -05:00
Aaron Meihm 5c4a5deceb [minor] validate auth material returned from database before use 2016-07-12 09:10:58 -05:00
Aaron Meihm f4b825db46 [minor] store key salt in an additional column 2016-07-12 09:01:41 -05:00
Aaron Meihm 8bf6bd6b5c [minor] differentiate request types in api request log
Adds a request category to the log message to indicate if it is a loader
related request, or a regular investigator. Also updates auth section
for loader requests so it includes the loader name.
2016-07-11 14:23:31 -05:00
Aaron Meihm e70bb04105 [major] hashed storage of api loader keys and format standardization 2016-07-10 16:24:53 -05:00
Julien Vehent f5d7092171 [doc] remove "describe" endpoints in API 2016-05-31 17:39:12 -04:00
Julien Vehent fbc17b40dc [minor] reorganize api endpoints to satisfy my OCD-ness 2016-05-31 16:51:04 -04:00
Aaron Meihm 638a6de11e [minor] support creating investigator as admin 2016-05-26 15:16:31 -05:00
Aaron Meihm 6cfd4bbf96 [minor] support enable/disable admin flag via api and console 2016-05-26 14:59:35 -05:00
Aaron Meihm 325640a388 [minor] return 201 created on manifest create 2016-05-17 16:06:34 -05:00
Aaron Meihm f0cd2c69a6 Merge pull request #216 from ameihm0912/api-auth
Minor improvements to loader API authentication
2016-04-26 09:50:47 -05:00
Aaron Meihm 4ecec68909 [minor] improve validation of loader key on read 2016-04-25 16:44:17 -05:00
Aaron Meihm e07647e01a [minor] extend logging for failed access to privileged api endpoints 2016-04-25 15:34:02 -05:00
Aaron Meihm 6cb30162c9 [medium] mig-console and api loader key change support 2016-04-25 13:46:20 -05:00
Aaron Meihm 12765044c4 [minor] update numeric HTTP status codes to use values from net/http
had a mix of both, this should clean the rest of them up.
2016-04-20 16:47:47 -05:00
Aaron Meihm 461163a032 [medium] add console loader management operations 2016-04-20 16:47:47 -05:00
Aaron Meihm da8bbb2ee5 [minor] add loader search to console 2016-04-20 16:47:47 -05:00
Aaron Meihm d056b5b4fb [minor] make api required signatures a config option 2016-03-24 17:08:14 -05:00
Aaron Meihm f3e60cb772 [minor] return a better error response in manifestLoaders list fail 2016-03-24 17:08:14 -05:00
Aaron Meihm cae93f70d7 [medium] transform agent configuration with relay credentials 2016-03-24 17:08:14 -05:00
Aaron Meihm df27a0d3dd [medium] add new administrator privilege for investigators 2016-03-24 17:08:14 -05:00
Aaron Meihm 0858d284bc [medium] add functions to list target loader entries in manifest reader 2016-03-24 17:08:14 -05:00
Aaron Meihm 6452e47f01 [minor] if loader manifest selection fails, return a generic error 2016-03-24 17:08:14 -05:00
Aaron Meihm 1caba2e2c5 [minor] small cleanup to loader api endpoint functions 2016-03-24 17:08:14 -05:00
Aaron Meihm c7d2350208 [minor] authenticate loader requests using path similar to standard api 2016-03-24 17:08:13 -05:00
Aaron Meihm 509b6dcaa0 [minor] add disable manifest functionality 2016-03-24 17:08:13 -05:00
Aaron Meihm 58644787bf [medium] add console and api functionality for manifest creation 2016-03-24 17:08:13 -05:00
Aaron Meihm 1c9ba0bec1 [minor] move auth manifest endpoints under correct section in function 2016-03-24 17:08:13 -05:00
Aaron Meihm 93d4adec9f [minor] correctly handle invalid loader key indications from api 2016-03-24 17:08:13 -05:00
Aaron Meihm 97cac21624 [minor] manifest signature status reset from console 2016-03-24 17:08:13 -05:00
Aaron Meihm 578a2d1a34 [minor] return a proper 404 if invalid manifest is requested from api 2016-03-24 17:08:13 -05:00
Aaron Meihm 7c897edc06 [major] Initial code for mig-loader
Checkpoint commit for initial revision of mig-loader related code. This
change adds functionality supporting agent auto-update using manifests
stored in the API.
2016-03-24 17:08:13 -05:00
Kishor Bhat bd13251564 [medium] unify hashes under sha2/sha3, fixes #155 2016-01-14 16:42:06 +05:30
Julien Vehent 76f33f2dea [minor] Add base Version in MIG package, overrided by Makefile 2015-09-24 08:54:07 -04:00
Julien Vehent 7e4d77c28f [minor] cleanup search code in db/console/api/scheduler 2015-09-23 12:57:39 -04:00
Julien Vehent f9c24e9828 [minor] change folder structure to go get with nice names 2015-08-26 12:22:02 -04:00