741 Commits

Author SHA1 Message Date
abhishek9686 f7b78ccad6 remove user role from acl policy types 2024-10-28 11:39:16 +04:00
abhishek9686 fcf94e5652 use name generator 2024-10-24 14:02:39 +04:00
Aceix ce7c164e09 fix(NET-1540): add cfg to autoclose connections on rac, when logged out (#3130)
only auto-disconnect non-admin users when JWT expires on RAC and RAC_AUTO_DISABLE is set
2024-10-24 13:54:00 +04:00
abhishek9686 c0f107b302 remove userips usage, add allow all to fwupdate 2024-10-23 14:15:13 +04:00
abhishek9686 dc7e262602 add network info to ingress model 2024-10-23 07:48:32 +04:00
abhishek9686 1c9b986f0e add static node ips in the ingress update 2024-10-21 19:48:13 +04:00
abhishek9686 3994183fe8 implement extclient to extclient acls 2024-10-21 16:49:30 +04:00
abhishek9686 04c2039beb add ingress gw status to peer update 2024-10-21 14:58:40 +04:00
abhishek9686 cd2d026fc8 add ingress id to model 2024-10-21 12:52:02 +04:00
abhishek9686 7fa6580103 add ingress rules to peer update 2024-10-21 12:35:10 +04:00
abhishek9686 c37cf2b7e3 create default user policies 2024-10-18 16:53:39 +04:00
abhishek9686 292c0744d5 add tags to static node model 2024-10-18 12:27:34 +04:00
abhishek9686 aea26dfdf6 check acl policy on ext client 2024-10-18 11:21:32 +04:00
abhishek9686 5418e9a13f resolve merge conflicts 2024-10-18 10:10:43 +04:00
abhishek9686 de7cabacba update tags on extclient update call 2024-10-17 19:55:58 +04:00
abhishek9686 d2918ccc2f support tags system on ext clients 2024-10-17 19:33:43 +04:00
abhishek9686 6c1208ad81 resolve merge conflicts 2024-10-17 15:15:54 +04:00
abhishek9686 67563ab753 resolve merge conflicts 2024-10-17 15:15:00 +04:00
abhishek9686 1596060d4b add tags to extclient 2024-10-17 14:13:33 +04:00
abhishek9686 725cb569dc Merge branch 'NET-1613' of https://github.com/gravitl/netmaker into NET-1615 2024-10-17 11:31:21 +04:00
abhishek9686 d407c6b6c4 add node to remote access gw tag 2024-10-17 11:24:37 +04:00
abhishek9686 9efdbcb414 Merge branch 'develop' of https://github.com/gravitl/netmaker into NET-1613 2024-10-16 18:41:32 +04:00
abhishek9686 66871ab210 resolve merge conflict 2024-10-16 18:41:07 +04:00
abhishek9686 6ccafe82ed set static nodes to list 2024-10-15 19:36:46 +04:00
abhishek9686 b41353b415 add static nodes to api resp 2024-10-14 16:36:25 +04:00
Abhishek K 1f9808ff59 NET-1604: New Simplified RAC Apis (#3147)
* ipv6 fix for mobile apps

* simplified RAC APIs

* add response to invite api

* fix get config api

* fix middleware for auth

* add separate controller for rac apis

* Revert "ipv6 fix for mobile apps"

This reverts commit dc84d90be2.
2024-10-01 17:48:36 +04:00
abhishek9686 a9697f9d7b add acl types api 2024-09-30 12:42:26 +04:00
abhishek9686 5b49872d5d fix update acl policy 2024-09-26 21:00:04 +04:00
abhishek9686 cc5ddd693f Merge branch 'develop' of https://github.com/gravitl/netmaker into NET-1613 2024-09-26 18:50:57 +04:00
abhishek9686 940ed8b2f0 remove uuid on id type 2024-09-26 18:45:54 +04:00
abhishek9686 1d1c033988 Merge branch 'develop' of https://github.com/gravitl/netmaker into NET-1615 2024-09-26 12:21:22 +04:00
Abhishek K d58439ac9d api for network with stats (#3111) 2024-09-26 11:52:21 +04:00
abhishek9686 fcd3325173 enforce new acl policy access check 2024-09-25 16:06:08 +04:00
abhishek9686 00b082d11c add validation check for tags 2024-09-25 13:01:40 +04:00
abhishek9686 630928b4f7 add acl policy checker 2024-09-25 10:37:44 +04:00
abhishek9686 6bc59adb2c add acls api handlers 2024-09-24 19:45:45 +04:00
abhishek9686 e258f12ecb set Acl DB crud 2024-09-24 19:09:15 +04:00
abhishek9686 873d3ea8d8 define acl model 2024-09-23 16:09:59 +04:00
abhishek9686 04b8737a02 move tags to node model 2024-09-22 13:37:58 +04:00
abhishek9686 c64dc852ae associate tags to network level 2024-09-22 12:22:24 +04:00
abhishek9686 db224ba2d9 allow tag name update 2024-09-19 16:49:31 +04:00
abhishek9686 db2550b7bd add tag groups to enrollment key 2024-09-18 12:22:49 +04:00
abhishek9686 6640b66ac6 add tag to api host 2024-09-18 11:16:13 +04:00
abhishek9686 99220fddd3 fix update tag handler 2024-09-18 00:35:50 +04:00
abhishek9686 d64f098181 Tag CRUD APIs 2024-09-17 19:34:45 +04:00
Max Ma 189ac27527 NET-1509:add ingresspersistentkeepalive and ingressmtu for extClient/RAC config (#3107)
* add ingresspersistentkeepalive and ingressmtu for extClient/RAC config

* add ingressmtu and PKA in api response

* add pka and mtu in api/nodes PUT call

* add default value for PKA and mtu for extClients
2024-09-12 12:19:27 +04:00
Sayan Mallick 3d7569b22b Updated to go1.23 (#3096)
* Updated to go1.23

* Updated the go-version-file to have qoutes

* Updated the gravitl/go-builder to 1.23

* versioned tag in Dockerfile

* update go-builder workflow
2024-09-09 10:42:00 +04:00
abhishek9686 ed2a0a0a01 fix oidc invite flow 2024-09-02 10:57:10 +05:30
abhishek9686 ebce98448c use github apis to fetch user email 2024-09-02 09:23:28 +05:30
Abhishek K 2e8d95e80e NET-1227: User Mgmt V2 (#3055)
* user mgmt models

* define user roles

* define models for new user mgmt and groups

* oauth debug log

* initialize user role after db conn

* print oauth token in debug log

* user roles CRUD apis

* user groups CRUD Apis

* additional api checks

* add additional scopes

* add additional scopes url

* add additional scopes url

* rm additional scopes url

* setup middlleware permission checks

* integrate permission check into middleware

* integrate permission check into middleware

* check for headers for subjects

* refactor user role models

* refactor user groups models

* add new user to pending user via RAC login

* untracked

* allow multiple groups for an user

* change json tag

* add debug headers

* refer network controls form roles, add debug headers

* refer network controls form roles, add debug headers

* replace auth checks, add network id to role model

* nodes handler

* migration funcs

* invoke sync users migration func

* add debug logs

* comment middleware

* fix get all nodes api

* add debug logs

* fix middleware error nil check

* add new func to get username from jwt

* fix jwt parsing

* abort on error

* allow multiple network roles

* allow multiple network roles

* add migration func

* return err if jwt parsing fails

* set global check to true when accessing user apis

* set netid for acls api calls

* set netid for acls api calls

* update role and groups routes

* add validation checks

* add invite flow apis and magic links

* add invited user via oauth signup automatically

* create invited user on oauth signup, with groups in the invite

* add group validation for user invite

* update create user handler with new role mgmt

* add validation checks

* create user invites tables

* add error logging for email invite

* fix invite singup url

* debug log

* get query params from url

* get query params from url

* add query escape

* debug log

* debug log

* fix user signup via invite api

* set admin field for backward compatbility

* use new role id for user apis

* deprecate use of old admin fields

* deprecate usage of old user fields

* add user role as service user if empty

* setup email sender

* delete invite after user singup

* add plaform user role

* redirect on invite verification link

* fix invite redirect

* temporary redirect

* fix invite redirect

* point invite link to frontend

* fix query params lookup

* add resend support, configure email interface types

* fix groups and user creation

* validate user groups, add check for metrics api in middleware

* add invite url to invite model

* migrate rac apis to new user mgmt

* handle network nodes

* add platform user to default role

* fix user role migration

* add default on rag creation and cleanup after deletion

* fix rac apis

* change to invite code param

* filter nodes and hosts based on user network access

* extend create user group req to accomodate users

* filter network based on user access

* format oauth error

* move user roles and groups

* fix get user v1 api

* move user mgmt func to pro

* add user auth type to user model

* fix roles init

* remove platform role from group object

* list only platform roles

* add network roles to invite req

* create default groups and roles

* fix middleware for global access

* create default role

* fix nodes filter with global network roles

* block selfupdate of groups and network roles

* delete netID if net roles are empty

* validate user roles nd groups on update

* set extclient permission scope when rag vpn access is set

* allow deletion of roles and groups

* replace _ with - in role naming convention

* fix failover middleware mgmt

* format oauth templates

* fetch route temaplate

* return err if user wrong login type

* check user groups on rac apis

* fix rac apis

* fix resp msg

* add validation checks for admin invite

* return oauth type

* format group err msg

* fix html tag

* clean up default groups

* create default rag role

* add UI name to roles

* remove default net group from user when deleted

* reorder migration funcs

* fix duplicacy of hosts

* check old field for migration

* from pro to ce make all secondary users admins

* from pro to ce make all secondary users admins

* revert: from pro to ce make all secondary users admins

* make sure downgrades work

* fix pending users approval

* fix duplicate hosts

* fix duplicate hosts entries

* fix cache reference issue

* feat: configure FRONTEND_URL during installation

* disable user vpn access when network roles are modified

* rm vpn acces when roles or groups are deleted

* add http to frontend url

* revert crypto version

* downgrade crytpo version

* add platform id check on user invites

---------

Co-authored-by: the_aceix <aceixsmartx@gmail.com>
2024-08-20 17:08:56 +05:30