Grant Limberg
aa97aabb4e
for now, only enable sso on certain platforms
...
mac, windows, linux x86/x86_64/aarch64
4 years ago
Grant Limberg
d719137565
temp workaround for oidc auth dropping issue
...
Add a method to "kick" the refresh thread and re-post the tokens in the case where the thread is somehow still running & controller pushes out an AUTH_REQUIRED. This situation happens in a corner case still under investigation where the controller pushes out many copies of the network config repeatedly
4 years ago
Grant Limberg
953e62f103
Clean up some extraneous output in release mode
4 years ago
staphen
1c956494a4
Use lowercase when including Windows headers
4 years ago
Grant Limberg
057356a725
Just some comments
4 years ago
Grant Limberg
2435ab70ab
remove some extra verbose logging
...
... and baby you got a full flow goin on
4 years ago
Grant Limberg
f489862500
update final page text a smidge
4 years ago
Grant Limberg
2642fa1ee2
Return HTML instead of blank page when auth is successful!
4 years ago
Grant Limberg
2293b0703f
Can get Central JSON bundle back to zerotier-one window
4 years ago
Grant Limberg
b567e91f68
fix
4 years ago
Grant Limberg
df9a7497b1
refactor out the separate AuthInfo struct
...
consolidated everything into the single IDC struct. Should help keep from rotating the pkce token as often & causing issues with the login window flapping
4 years ago
Joseph Henry
1c6fd4125d
Fix custom policy parsing bug mentioned in issue #1507
4 years ago
Travis LaDuke
afdc91f21f
Convince macOS to do ipv6 dns lookups
...
Puts a value into System Config, similar to how DNS push works.
closes #1466
https://apple.stackexchange.com/questions/309430/ipv6-dns-resolution-on-macos-high-sierra
4 years ago
Grant Limberg
2d4fe9e6d0
Get oidc lib compiled into main binary on Windows
4 years ago
Grant Limberg
1192b1b422
refresh token run loop
...
Need central-side work to complete
4 years ago
Grant Limberg
43c528fdb6
Get expiry time out of access token & propagate
4 years ago
Grant Limberg
4ce810b421
On our way to processing tokens
4 years ago
Grant Limberg
730482e62f
encode network ID into sso state param
4 years ago
Grant Limberg
663a09b38d
oidc stuff coming across the wire properly and generating a working login URL
4 years ago
Grant Limberg
eaccce743f
moar plumbing progress
4 years ago
Grant Limberg
7cce23ae79
wip
4 years ago
Grant Limberg
a33d7c64fe
more fixin
4 years ago
Grant Limberg
d15516f0ef
query fix & controller build fix
4 years ago
Grant Limberg
4a1d6f4cc8
get central controller docker builds working again
4 years ago
Grant Limberg
6393a4beec
progress
4 years ago
Grant Limberg
5f548705dd
lots more refactoring
4 years ago
Grant Limberg
87fdd644d4
cleanup some ifdef'd things
4 years ago
Grant Limberg
2e356613ec
Refactor NetworkState into object with accessor methods
4 years ago
Joseph Henry
b277e04efa
Remove vestigial bonding parameters
4 years ago
Adam Ierymenko
75a45eeb27
Revert "Backport guts of 1.8 to 1.6 tree so we can point release without waiting for UI quirks to be fixed."
...
This reverts commit 48ce7632fa .
5 years ago
Adam Ierymenko
48ce7632fa
Backport guts of 1.8 to 1.6 tree so we can point release without waiting for UI quirks to be fixed.
5 years ago
Grant Limberg
3b375b55c2
fix central docker launch without redis
5 years ago
Grant Limberg
27ce787fbd
fix central docker launch without redis
5 years ago
Adam Ierymenko
1b8917a57c
Fix for MacOS interface setup and config timing bugs.
5 years ago
Adam Ierymenko
d7ba2957cd
Tear down routes before devices when leaving a network or shutting down.
5 years ago
Joseph Henry
e1af003e4f
Consolidation of multipath logic. Better system separation
5 years ago
Adam Ierymenko
5005244d1b
Mac install fixes, remove obsolete stuff, and write local.conf via API for new UI integration.
5 years ago
Adam Ierymenko
11b352458e
Pick a new random secondary port if we are offline for more than path-timeout seconds (COMA problem workaround).
5 years ago
Adam Ierymenko
958420ee44
Fix Windows slowness on API query bug.
5 years ago
Travis LaDuke
db29c3ac13
Don't use v6 source addresses for v4 routes
...
and vice versa.
For issue #1104
With some printf debugging, I was seeing:
here, src fe80::3c7a:2dff:fe0c:21ed, target 10.147.20.0, matchingPrefixBits 0, mostMatchingPrefixBits 0
here, src fd8b:d512:4fd6:255:3c99:932f:2fda:6eff, target 10.147.20.0, matchingPrefixBits 0, mostMatchingPrefixBits 0
and (matchingPrefixBits >= mostMatchingPrefixBits) would be true
Then on mac, somewhere downstream from there, the default route would
get messed up:
default via 92:29:f1:6f:2f:76 dev en0
5 years ago
Grant Limberg
364ad87e2b
add ssoEnabled flag to network config
5 years ago
Grant Limberg
e6b4fb5af7
add "ssoRedirectURL" to local.conf
...
plumbed it through to the central controller code
5 years ago
Grant Limberg
4fed56443e
secondary ports are no longer based on the node ID and fully randomized instead
5 years ago
Adam Ierymenko
2c1d7f3dcc
CLI printing of URL.
5 years ago
Adam Ierymenko
b270d527f4
Basic plumbing for authentication requirement and piping through of URL information.
5 years ago
Joseph Henry
11ddbc6f30
Fix (some) compile-time warnings on Linux
5 years ago
Adam Ierymenko
79e2fd4586
Automatically detect Ethernet tap friendly name in Windows shouldBind stuff.
5 years ago
Joseph Henry
353905394e
Fix interface blacklisting in shouldBindInterface
5 years ago
Pablo Hinojosa
d3fd0d3916
Show the port number which is not able to connect
5 years ago
Adam Ierymenko
a1b6cc44fc
Revert wireguard blacklist by default... turns out we have people who depend on that. may revisit.
5 years ago