Brian JoergerandMike Jensen 129df08ba4 Enable hardware key support in the WebUI (#32781) ...

* Add web_session private key policy.

* Add attestation logic for web session.

* Prevent users from retrieving their own web session secrets.

* Update RFD.

* Attest extended web sessions if the original web session was attested.

* Update rfd/0080-hardware-key-support.md

Co-authored-by: Mike Jensen <jentfoo@users.noreply.github.com>

* Fix policy set unit test.

---------

Co-authored-by: Mike Jensen <jentfoo@users.noreply.github.com>

2023-10-13 19:59:11 +00:00

..

atlas

Support authenticating with AWS IAM role for MongoDB Atlas (#26439)

2023-06-06 14:57:27 +00:00

aws

DiscoveryMatchers: move checkandset to types package (#32857)

2023-10-04 13:48:09 +00:00

azure

Fuzzing test improvements (#28066)

2023-06-20 16:14:15 +00:00

gcp

GCP CLI support: server-side request handler (#19789)

2023-01-11 15:50:20 +00:00

grpc

Deprecate AddMFADevice and its top-level messages (#32516)

2023-09-26 13:16:29 +00:00

keypaths

Add kube credentials lockfile to prevent possibility of excessive login attempts (#26102)

2023-06-05 12:56:43 +00:00

keys

Enable hardware key support in the WebUI (#32781)

2023-10-13 19:59:11 +00:00

pingconn

Split PingConn to PingConn and PingTLSConn (#24167)

2023-04-06 14:00:17 +00:00

prompt

Move lib/utils/prompt to api/utils/prompt (#32334)

2023-09-25 19:31:37 +00:00

retryutils

reduce cache retry load (#23025)

2023-03-21 05:03:51 +00:00

sshutils

Drain unused SSH channels (#32505)

2023-09-27 17:05:48 +00:00

tlsutils

Add full IP pinning enforcement (#24743)

2023-04-23 17:09:49 +00:00

addr_test.go

Allow login over plain http in restricted situations (#7835)

2021-09-17 19:47:03 +10:00

addr.go

Allow login over plain http in restricted situations (#7835)

2021-09-17 19:47:03 +10:00

bool.go

…

cluster.go

ALPN SNI Proxy (#7524)

2021-09-13 11:54:49 +02:00

conv.go

Update golangci-lint to 1.49.0 (#16507)

2022-09-19 22:38:59 +00:00

delegator.go

Refactor api package and docs to use pkg.go.dev effectively. (#6388)

2021-04-20 16:44:17 -07:00

protobuf_test.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466)

2023-05-04 21:22:01 +00:00

protobuf.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466)

2023-05-04 21:22:01 +00:00

proxy_test.go

Add a dedicated client to communicate with the Proxy SSH server (#22629)

2023-03-15 13:41:56 +00:00

proxy.go

Add a dedicated client to communicate with the Proxy SSH server (#22629)

2023-03-15 13:41:56 +00:00

route_test.go

support case-insensitive routing option (#29320)

2023-08-17 00:48:19 +00:00

route.go

support case-insensitive routing option (#29320)

2023-08-17 00:48:19 +00:00

slices_test.go

Client store generalization (#19420)

2023-01-06 01:34:04 +00:00

slices.go

TLS routing behind LB support for Auth, SSH, Reverse tunnel (#23866)

2023-04-14 19:22:23 +00:00

strings_test.go

Add MatchSearch to resources for fuzzy search (#9892)

2022-01-28 09:18:34 -08:00

strings.go

Add MatchSearch to resources for fuzzy search (#9892)

2022-01-28 09:18:34 -08:00

time.go

…

uri_test.go

OIDC multiple redirect URLs (#12054)

2022-05-31 17:52:04 +00:00

uri.go

OIDC multiple redirect URLs (#12054)

2022-05-31 17:52:04 +00:00

user_test.go

only call 'user.Current' when we really need to (#24156)

2023-04-13 21:16:26 +00:00

user.go

only call 'user.Current' when we really need to (#24156)

2023-04-13 21:16:26 +00:00