summaryrefslogtreecommitdiff
path: root/controller/EmbeddedNetworkController.cpp
AgeCommit message (Collapse)Author
2023-09-06fix /controller endpointGrant Limberg
2023-08-28fix for issue #2114Grant Limberg
2023-08-25Fix primary port binding issue in 1.12 (#2107)Joseph Henry
* Add test for primary port bindings to validator - See #2105 * Add delay to binding test * Remove TCP binding logic from Binder to fix #2105 * add second control plane socket for ipv6 * fix controller network post endpoint * exit if we can't bind at least one of IPV4 or IPV6 for control plane port --------- Co-authored-by: Grant Limberg <[email protected]>
2023-05-25fix init order for EmbeddedNetworkController (#2014)Grant Limberg
2023-05-23central controller metrics & request path updates (#2012)Grant Limberg
* internal db metrics * use shared mutexes for read/write locks * remove this lock. only used for a metric * more metrics * remove exploratory metrics place controller request benchmarks behind ifdef
2023-05-19fix typos (#2010)Brenton Bostick
2023-05-17Capture setContent by-value instead of by-reference (#2006)Brenton Bostick
Co-authored-by: Grant Limberg <[email protected]>
2023-05-16Controller Metrics & Network Config Request Fix (#2003)Grant Limberg
* add new metrics for network config request queue size and sso expirations * move sso expiration to its own thread in the controller * fix potential undefined behavior when modifying a set
2023-04-28use cpp-httplib for HTTP control plane (#1979)Grant Limberg
refactored the old control plane code to use [cpp-httplib](https://github.com/yhirose/cpp-httplib) instead of a hand rolled HTTP server. Makes the control plane code much more legible. Also no longer randomly stops responding.
2022-06-15quiet down logs moreGrant Limberg
2022-04-19Fix a possible excessive memory use issue in controller and clean up a bunch ↵Adam Ierymenko
of COM handling and other code in the normal node.
2022-04-19Push credentials always if updated (client-side) and some controller-side ↵Adam Ierymenko
cleanup that should be logically irrelevant but will prevent unnecessary DB lookups.
2022-04-19Restore sending of rejections but move it exclusively to a thread, widen ↵Adam Ierymenko
netconf window to 30 minutes.
2022-04-18Forgot to send error on v0 auth expiry.Adam Ierymenko
2022-04-18Simplify SSO logic. SSO should just normally expire when it expires. No full ↵Adam Ierymenko
deauth needed. Deauth is for really giving someone the boot.
2022-04-15Tighten certificate window and deprecate sending of revocations for ordinary ↵Adam Ierymenko
SSO timeouts. Revocations should only be for deliberate deauth to kick people off networks. Cert window should now stay within refresh window for SSO so normal cert expiration should handle it just fine.
2022-04-13comment out some new deauth codeAdam Ierymenko
2022-04-13This may improve controller behavior with SSO and mixed SSO, needs testing!Adam Ierymenko
2021-12-07refresh tokens now workingGrant Limberg
Still investigating the best way to do a couple things, but we have something working
2021-12-01wipGrant Limberg
2021-11-30more fixinGrant Limberg
2021-11-11rename stuff for clarityGrant Limberg
authenticationURL will still be used by the client for v1 and v2 of sso
2021-11-04integrate rust build of zeroidc to linuxGrant Limberg
2021-11-04plumbing full flow from controller -> client networkGrant Limberg
2021-09-20Add a bit of hardening in the network certificate of membership by ↵Adam Ierymenko
incorporating a full hash of the identity to which it is issued. This means the recipient need not depend entirely on the root verifying identities properly to make sure impersonation is not occurring.
2021-08-19kill some noisy logsGrant Limberg
2021-08-19kill some verbose logsGrant Limberg
2021-08-18Adjust deauth time window and send revocation when SSO members expire.Adam Ierymenko
2021-08-10Move return so record gets created before URL.Adam Ierymenko
2021-08-04fix backwards logicGrant Limberg
2021-07-26Deauth expiring members right away.Adam Ierymenko
2021-07-26Remove pointless check.Adam Ierymenko
2021-07-23Include authentication URL in configAdam Ierymenko
2021-07-23Notification of about-to-expire status... almost there.Adam Ierymenko
2021-07-23Merge branch 'dev' of github.com:zerotier/ZeroTierOne into devAdam Ierymenko
2021-07-23Handling of soon-to-expire membersAdam Ierymenko
2021-07-06whoopsGrant Limberg
2021-07-06debug loggingGrant Limberg
2021-06-05add ssoEnabled flag to network configGrant Limberg
2021-06-04add "ssoRedirectURL" to local.confGrant Limberg
plumbed it through to the central controller code
2021-06-04Increase authentication URL sizes.Adam Ierymenko
2021-06-04chicken or egg problem.Grant Limberg
member must exist in the database before we can generate a nonce & SSO URL
2021-06-04.Grant Limberg
2021-06-04put expiry time back on nc objectGrant Limberg
2021-06-04remove some noisy log lines & fix a query errorGrant Limberg
2021-06-04moar temporary debug printfsGrant Limberg
2021-06-04move this outside the auth block. If SSO is enabled, it should be checked ↵Grant Limberg
whether authorized or not
2021-06-03Big SSO updateGrant Limberg
make things hopefully work
2021-06-02set the correct defaultGrant Limberg
2021-06-02handle cases where authenticationURL and authenticationExpiryTime don't existGrant Limberg
generated by cgit v1.2.3 (git 2.39.1) at 2025-12-30 22:14:46 +0000