Sunny Prakash Tiwari
12cc99432a
[minor] Create an API endpoint for agents to retrieve PGP public keys and update the documentation for api endpoints fixes #240
2016-09-12 23:39:44 +05:30
Aaron Meihm
10499cbe9d
[minor] fix comment whitespace issue
2016-08-16 12:40:19 -05:00
Aaron Meihm
bb5f690710
[major] expand permission model to be per-endpoint
2016-08-15 18:28:57 -05:00
Aaron Meihm
07d135a000
[medium] more granular permissions for investigators
...
This removes the previous implementation where an investigator could
either be set to an admin or not, and expands this to per-endpoint
permissions that can be set for individual investigators.
2016-08-15 15:25:01 -05:00
Aaron Meihm
9e7799c679
Merge pull request #256 from ameihm0912/loaderexpect
...
[medium] add environment validation to loader authorization
2016-08-15 15:15:00 -05:00
Aaron Meihm
90301cf0ba
[minor/bug] permit larger form sizes for manifest uploads
2016-08-12 10:29:53 -05:00
Aaron Meihm
c32c3b4ab2
[medium] add environment validation to loader authorization
...
Adds ability to specify an expected environment or tag query string to
loader instances which are verified prior to manifest lookup.
Resolves #255
2016-08-11 15:28:57 -05:00
Aaron Meihm
63787dded6
[minor] configured handling of X-Forwarded-For
...
Adds a configuration option to the API to inform the API when it should
use the X-Forwarded-For header value as the public IP of a client. Also
does some validation of the value.
Resolves #247
2016-07-12 15:28:06 -05:00
Aaron Meihm
5c4a5deceb
[minor] validate auth material returned from database before use
2016-07-12 09:10:58 -05:00
Aaron Meihm
f4b825db46
[minor] store key salt in an additional column
2016-07-12 09:01:41 -05:00
Aaron Meihm
8bf6bd6b5c
[minor] differentiate request types in api request log
...
Adds a request category to the log message to indicate if it is a loader
related request, or a regular investigator. Also updates auth section
for loader requests so it includes the loader name.
2016-07-11 14:23:31 -05:00
Aaron Meihm
e70bb04105
[major] hashed storage of api loader keys and format standardization
2016-07-10 16:24:53 -05:00
Julien Vehent
f5d7092171
[doc] remove "describe" endpoints in API
2016-05-31 17:39:12 -04:00
Julien Vehent
fbc17b40dc
[minor] reorganize api endpoints to satisfy my OCD-ness
2016-05-31 16:51:04 -04:00
Aaron Meihm
638a6de11e
[minor] support creating investigator as admin
2016-05-26 15:16:31 -05:00
Aaron Meihm
6cfd4bbf96
[minor] support enable/disable admin flag via api and console
2016-05-26 14:59:35 -05:00
Aaron Meihm
325640a388
[minor] return 201 created on manifest create
2016-05-17 16:06:34 -05:00
Aaron Meihm
f0cd2c69a6
Merge pull request #216 from ameihm0912/api-auth
...
Minor improvements to loader API authentication
2016-04-26 09:50:47 -05:00
Aaron Meihm
4ecec68909
[minor] improve validation of loader key on read
2016-04-25 16:44:17 -05:00
Aaron Meihm
e07647e01a
[minor] extend logging for failed access to privileged api endpoints
2016-04-25 15:34:02 -05:00
Aaron Meihm
6cb30162c9
[medium] mig-console and api loader key change support
2016-04-25 13:46:20 -05:00
Aaron Meihm
12765044c4
[minor] update numeric HTTP status codes to use values from net/http
...
had a mix of both, this should clean the rest of them up.
2016-04-20 16:47:47 -05:00
Aaron Meihm
461163a032
[medium] add console loader management operations
2016-04-20 16:47:47 -05:00
Aaron Meihm
da8bbb2ee5
[minor] add loader search to console
2016-04-20 16:47:47 -05:00
Aaron Meihm
d056b5b4fb
[minor] make api required signatures a config option
2016-03-24 17:08:14 -05:00
Aaron Meihm
f3e60cb772
[minor] return a better error response in manifestLoaders list fail
2016-03-24 17:08:14 -05:00
Aaron Meihm
cae93f70d7
[medium] transform agent configuration with relay credentials
2016-03-24 17:08:14 -05:00
Aaron Meihm
df27a0d3dd
[medium] add new administrator privilege for investigators
2016-03-24 17:08:14 -05:00
Aaron Meihm
0858d284bc
[medium] add functions to list target loader entries in manifest reader
2016-03-24 17:08:14 -05:00
Aaron Meihm
6452e47f01
[minor] if loader manifest selection fails, return a generic error
2016-03-24 17:08:14 -05:00
Aaron Meihm
1caba2e2c5
[minor] small cleanup to loader api endpoint functions
2016-03-24 17:08:14 -05:00
Aaron Meihm
c7d2350208
[minor] authenticate loader requests using path similar to standard api
2016-03-24 17:08:13 -05:00
Aaron Meihm
509b6dcaa0
[minor] add disable manifest functionality
2016-03-24 17:08:13 -05:00
Aaron Meihm
58644787bf
[medium] add console and api functionality for manifest creation
2016-03-24 17:08:13 -05:00
Aaron Meihm
1c9ba0bec1
[minor] move auth manifest endpoints under correct section in function
2016-03-24 17:08:13 -05:00
Aaron Meihm
93d4adec9f
[minor] correctly handle invalid loader key indications from api
2016-03-24 17:08:13 -05:00
Aaron Meihm
97cac21624
[minor] manifest signature status reset from console
2016-03-24 17:08:13 -05:00
Aaron Meihm
578a2d1a34
[minor] return a proper 404 if invalid manifest is requested from api
2016-03-24 17:08:13 -05:00
Aaron Meihm
7c897edc06
[major] Initial code for mig-loader
...
Checkpoint commit for initial revision of mig-loader related code. This
change adds functionality supporting agent auto-update using manifests
stored in the API.
2016-03-24 17:08:13 -05:00
Kishor Bhat
bd13251564
[medium] unify hashes under sha2/sha3, fixes #155
2016-01-14 16:42:06 +05:30
Julien Vehent
76f33f2dea
[minor] Add base Version in MIG package, overrided by Makefile
2015-09-24 08:54:07 -04:00
Julien Vehent
7e4d77c28f
[minor] cleanup search code in db/console/api/scheduler
2015-09-23 12:57:39 -04:00
Julien Vehent
f9c24e9828
[minor] change folder structure to go get with nice names
2015-08-26 12:22:02 -04:00