4 Commits

Include renames

Author	SHA1	Message	Date
Alan Parra	a469c4ce2b	feat!: Apply role device mode to App Access (#35274) ... * Apply role device mode to App Access * nit: Don't capture traces on guard errors * Consistently return ErrTrustedDeviceRequired * Surface device error trust error for apps * Reply with a custom message for device trust errors * Review: Remove the DisableDeviceAuthorization field * Review: Refactor device trust message into its own method * Review: Wrap guard errors * Review: Simplify device error message	2023-12-04 17:53:30 +00:00
fheinecke	b178b8b732	Updated Teleport codebase to AGPL3 license (#35259) ... Signed-off-by: Fred Heinecke <fred.heinecke@goteleport.com>	2023-12-01 17:48:14 +00:00
Alan Parra	8ef8324b8c	Enable role-based device authz for DB, k8s and SSH (#20640) ... * Expose device verification methods in lib/devicetrust/authz * Set device fields in auth.Context.GetAccessState * Enable role-based device verification for SSH * Enable role-based device verification for DBs * Add TODO for better SSH error messages * Do not override device error on lib/kube/proxy * Run gci	2023-01-27 21:11:01 +00:00
Alan Parra	ecf9e5c7d1	Enforce device extensions for SSH access (#19574) ... Add device-aware authorization for SSH access, including both long-lived and single-use certificates. If the device trust mode is set to "required", then the presence of the corresponding extensions is enforced. (Requires Teleport Enterprise.) Adds logic related to TLS validation and single-use certificates as well, where appropriate. TLS device-aware validation is not wired into Teleport yet, but will be in follow up PRs. gravitational/teleport.e#514	2022-12-21 22:54:13 +00:00