Brian Joerger cf1dee4a29 Update several admin actions to allow reusable MFA challenges (#49095) ...

* Allow reused MFA for more admin action endpoints; Add comment to AuthorizeAdminAction."

* Add update to when to extend reuse section of RFD 155.

2024-11-19 18:56:32 +00:00

..

accessmonitoringrules/accessmonitoringrulesv1

add periodic cleanup for notifications (#40941)

2024-09-20 10:56:41 +00:00

accesspoint

Fix update and list for DynamicWindowsDesktops (#48046)

2024-10-29 22:18:27 +00:00

authclient

feat: identity center and provisioning service gRPC client with deleteAllxxx methods (#48714)

2024-11-12 16:57:47 +00:00

autoupdate/autoupdatev1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

clusterconfig/clusterconfigv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

crownjewel

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

dbobject/dbobjectv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

dbobjectimportrule/dbobjectimportrulev1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

discoveryconfig/discoveryconfigv1

Convert some lib/auth subpackages to slog (#47477)

2024-10-11 10:00:37 +00:00

dynamicwindows/dynamicwindowsv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

integration/integrationv1

Fix EKS Discover flow fields (#48665)

2024-11-08 15:33:38 +00:00

join

Convert more lib packages to slog. (#47787)

2024-10-24 11:22:36 +00:00

keygen

eliminate rsa.GenerateKey and lib/auth/native (#47768)

2024-10-21 20:55:22 +00:00

keystore

Use thread-local RNGs for jitters (#48860)

2024-11-13 16:35:09 +00:00

kubewaitingcontainer/kubewaitingcontainerv1

add periodic cleanup for notifications (#40941)

2024-09-20 10:56:41 +00:00

loginrule/loginrulev1

Unify naming and location of auth RPC services (#46559)

2024-09-12 22:34:58 +00:00

machineid/machineidv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

mfatypes

Use json compatible struct for SSOMFASessionData (#47826)

2024-10-31 19:59:53 +00:00

migration

Convert some lib/auth subpackages to slog (#47477)

2024-10-11 10:00:37 +00:00

mocku2f

feat: Implement the WebAuthn credProps extension (#45252)

2024-08-15 13:28:19 +00:00

notifications/notificationsv1

Enhance the tctl notifications command (#48829)

2024-11-13 17:24:38 +00:00

okta

Update backend.Key to be its own distinct type (#46701)

2024-10-04 14:02:00 +00:00

presence/presencev1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

state

Prevent auth from starting when an incompatible major upgrade is detected (#43520)

2024-07-12 22:01:21 +00:00

storage

Introduce a dedicated backend key type (#45706)

2024-08-22 18:29:42 +00:00

test

…

testauthority

eliminate rsa.GenerateKey and lib/auth/native (#47768)

2024-10-21 20:55:22 +00:00

touchid

Set min macOS version to 11 (#46461)

2024-10-04 23:31:00 +00:00

trust/trustv1

Clean up code marked for deletion in v17 (#47364)

2024-10-10 15:36:53 +00:00

userloginstate

feat: Allow including Access Lists as nested members and owners (#38738)

2024-11-01 22:07:36 +00:00

userpreferences/userpreferencesv1

add sticky mode support to sidenav (#48326)

2024-11-13 00:35:50 +00:00

userprovisioning/userprovisioningv2

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

users/usersv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

usertasks/usertasksv1

Add UserTask audit events (#47496)

2024-10-18 09:34:51 +00:00

vnetconfig/vnetconfigv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

webauthn

Use json compatible struct for SSOMFASessionData (#47826)

2024-10-31 19:59:53 +00:00

webauthncli

fix: Address flakiness and revisit TestTeleportClient_Login_local (#47406)

2024-10-10 13:18:20 +00:00

webauthntypes

Use json compatible struct for SSOMFASessionData (#47826)

2024-10-31 19:59:53 +00:00

webauthnwin

fix: Always prompt if multiple MFA methods are running (#47114)

2024-10-03 19:04:17 +00:00

windows

eliminate rsa.GenerateKey and lib/auth/native (#47768)

2024-10-21 20:55:22 +00:00

access_request_test.go

feat: Allow including Access Lists as nested members and owners (#38738)

2024-11-01 22:07:36 +00:00

access_test.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

access.go

Replace more Logrus usage with Slog (#46757)

2024-09-19 18:37:51 +00:00

accountrecovery_test.go

Replace dependencies on lib/auth with lib/authclient (#41623)

2024-05-16 17:34:58 +00:00

accountrecovery.go

Replace more Logrus usage with Slog (#46757)

2024-09-19 18:37:51 +00:00

apiserver_test.go

Clean up user and login enrichment code for v17 (#47459)

2024-10-10 21:33:49 +00:00

apiserver.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

auth_login_test.go

Headless authn support for split SSH/TLS keys (#45646)

2024-08-22 15:38:22 +00:00

auth_test.go

Sanitize SSH server hostnames (#48988)

2024-11-15 19:04:45 +00:00

auth_with_roles_okta_rbac_test.go

Clean up user and login enrichment code for v17 (#47459)

2024-10-10 21:33:49 +00:00

auth_with_roles_test.go

Add session_type and format to session.recording.access audit event event (#47309)

2024-11-12 21:02:40 +00:00

auth_with_roles.go

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

auth.go

Convert github auth code to use x/oauth2 (#48598)

2024-11-18 14:49:30 +00:00

aws_certs.go

Extend EC2 joining method to other AWS regions (#39045)

2024-03-07 09:40:31 +00:00

azure_certs_test.go

…

azure_certs.go

…

bot_test.go

Azure join method - Use attested data subscription id (#48707)

2024-11-18 20:03:22 +00:00

bot.go

resolve minor TODOs (#47777)

2024-10-22 17:46:00 +00:00

client_tls_config_generator.go

Use thread-local RNGs for jitters (#48860)

2024-11-13 16:35:09 +00:00

db_test.go

fix(auth): return db client CA when generating sql server certificates (#48772)

2024-11-13 17:48:43 +00:00

db.go

fix(auth): return db client CA when generating sql server certificates (#48772)

2024-11-13 17:48:43 +00:00

desktop_test.go

Surface Cloud Entitlements (#42394)

2024-06-28 00:22:13 +00:00

desktop.go

Improve troubleshooting for LDAP authentication errors (#42948)

2024-10-16 18:51:26 +00:00

externalauditstorage.go

Fix EAS Token generation (#40154)

2024-04-05 13:06:03 +00:00

fuzz_test.go

…

github_test.go

support split SSH/TLS keys in SSO login endpoints (#45876)

2024-09-04 19:07:57 +00:00

github.go

Convert github auth code to use x/oauth2 (#48598)

2024-11-18 14:49:30 +00:00

grpcserver_test.go

Sanitize SSH server hostnames (#48988)

2024-11-15 19:04:45 +00:00

grpcserver.go

feat: SSO MFA - Moderated Sessions (#48646)

2024-11-12 20:08:50 +00:00

helpers_mfa.go

Remove SolveAuthenticateChallenge from MFA Ceremony in favor of PromptConstructor (#47650)

2024-10-21 18:38:50 +00:00

helpers.go

Disable server-side TLS session tickets (#48130)

2024-10-30 19:02:54 +00:00

init_test.go

set default algorithm suite when other auth pref fields are set (#47820)

2024-10-24 21:13:16 +00:00

init.go

set default algorithm suite when other auth pref fields are set (#47820)

2024-10-24 21:13:16 +00:00

join_azure_test.go

Azure join method - Use attested data subscription id (#48707)

2024-11-18 20:03:22 +00:00

join_azure.go

Azure join method - Use attested data subscription id (#48707)

2024-11-18 20:03:22 +00:00

join_circleci_test.go

…

join_circleci.go

Use pkg slices from the standard library (#35905)

2023-12-19 23:06:53 +00:00

join_ec2_test.go

…

join_ec2.go

Improve the error message when joining fails (#38409)

2024-02-20 21:18:31 +00:00

join_gcp_test.go

…

join_gcp.go

Use pkg slices from the standard library (#35905)

2023-12-19 23:06:53 +00:00

join_github_test.go

Support for joining Actions in un-reachable GitHub Enterprise Servers via Static JWKS (#48973)

2024-11-15 12:32:55 +00:00

join_github.go

Support for joining Actions in un-reachable GitHub Enterprise Servers via Static JWKS (#48973)

2024-11-15 12:32:55 +00:00

join_gitlab_test.go

…

join_gitlab.go

…

join_iam_test.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join_iam.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join_kubernetes_test.go

…

join_kubernetes.go

…

join_spacelift_test.go

…

join_spacelift.go

…

join_terraformcloud_test.go

Enable Terraform Cloud joining for Teleport Community Edition (#46419)

2024-09-12 02:37:41 +00:00

join_terraformcloud.go

Enable Terraform Cloud joining for Teleport Community Edition (#46419)

2024-09-12 02:37:41 +00:00

join_test.go

Update backend.Key to be its own distinct type (#46701)

2024-10-04 14:02:00 +00:00

join_tpm_test.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join_tpm.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join.go

Machine ID: Terraform Cloud joining (#45574)

2024-08-27 23:27:09 +00:00

kube_test.go

eliminate rsa.GenerateKey and lib/auth/native (#47768)

2024-10-21 20:55:22 +00:00

kube.go

[kube] Drop usage of ProcessKubeCSR (#46779)

2024-09-20 09:56:04 +00:00

methods_test.go

Replace dependencies on lib/auth with lib/authclient (#41623)

2024-05-16 17:34:58 +00:00

methods.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

middleware_test.go

Make rejected connections easier to identify (#45176)

2024-08-08 17:46:31 +00:00

middleware.go

lib/limiter: remove the Oxy rate limiter (#47257)

2024-10-10 22:32:52 +00:00

moderated_sessions_test.go

…

notification_test.go

make access request notifications expire alongside the request (#42527)

2024-06-06 22:58:11 +00:00

oidc.go

feat: SSO MFA - SSO MFA challenge creation and verification (#47684)

2024-10-24 20:12:59 +00:00

password_test.go

Clean up code marked for deletion in v17 (#47364)

2024-10-10 15:36:53 +00:00

password.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

periodic_test.go

Add automatic_updates label (#40563)

2024-04-25 18:43:50 +00:00

periodic.go

Add automatic_updates label (#40563)

2024-04-25 18:43:50 +00:00

register.go

chore: update IAM join method to use aws-sdk-go-v2 (#47044)

2024-10-02 00:58:00 +00:00

rotate.go

Get rid of internal reloads (#44882)

2024-09-11 21:13:09 +00:00

saml.go

feat: SSO MFA - SSO MFA challenge creation and verification (#47684)

2024-10-24 20:12:59 +00:00

server_info_test.go

Add retry logic to server info reconciler (#47160)

2024-10-10 16:25:47 +00:00

server_info.go

Use thread-local RNGs for jitters (#48860)

2024-11-13 16:35:09 +00:00

session_access_test.go

…

session_access.go

Fix incorrect usages of "it's" (#48252)

2024-10-31 23:35:30 +00:00

sessions_test.go

Test DeviceWebToken creation from CreateWebSessionFromReq (#44818)

2024-07-30 19:34:15 +00:00

sessions.go

include access request metadata in app.session.start events (#48663)

2024-11-12 12:06:53 +00:00

sso_diag_context_test.go

…

sso_diag_context.go

…

sso_mfa_test.go

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

sso_mfa.go

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

tls_test.go

Make TestRemoteUser more robust against slow trust establishment (#49208)

2024-11-19 18:24:13 +00:00

transport_credentials_test.go

Close expired gRPC connections if disconnect_expired_cert is set (#41826)

2024-05-21 19:42:43 +00:00

transport_credentials.go

Fix gRPC connections being disconnected regardless of DisconnectCertExpiry (#43270)

2024-06-20 14:48:38 +00:00

trustedcluster_test.go

switch trusted/remote cluster management to atomic write (#48009)

2024-10-29 17:28:01 +00:00

trustedcluster.go

upsert trusted cluster cleanup (#48176)

2024-11-05 22:15:50 +00:00

usage_test.go

Surface Cloud Entitlements (#42394)

2024-06-28 00:22:13 +00:00

user.go

Clean up user and login enrichment code for v17 (#47459)

2024-10-10 21:33:49 +00:00

usertoken_test.go

Replace dependencies on lib/auth with lib/authclient (#41623)

2024-05-16 17:34:58 +00:00

usertoken.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

version.go

Prevent auth from starting when an incompatible major upgrade is detected (#43520)

2024-07-12 22:01:21 +00:00