Commit Graph

905 Commits

Author SHA1 Message Date
Dane Everitt e3df0738da Change the way API keys are stored and validated; clarify API namespacing
Previously, a single key was used to access the API, this has not changed in terms of what the user sees. However, API keys now use an identifier and token internally. The identifier is the first 16 characters of the key, and the token is the remaining 32. The token is stored encrypted at rest in the database and the identifier is used by the API middleware to grab that record and make a timing attack safe comparison.
2018-01-13 16:06:19 -06:00
Dane Everitt 11c4f3f6f2 Finish putting permissions on the API 2018-01-13 14:08:19 -06:00
Dane Everitt d644a53951 Update users & locations to use new permissions format 2018-01-12 20:39:15 -06:00
Dane Everitt a31e5875dc First round of changes to API to support simpler permissions. 2018-01-11 22:49:46 -06:00
Dane Everitt 0e24c669c4 docblock 2018-01-11 20:08:49 -06:00
Dane Everitt cf21fd5a4b More API updates, better support for node config edits 2018-01-10 23:19:03 -06:00
Dane Everitt 800e2df6b2 Merge branch 'develop' into feature/api-v1
# Conflicts:
#	app/Contracts/Repository/RepositoryInterface.php
#	app/Repositories/Eloquent/EloquentRepository.php
#	app/Services/Nodes/NodeUpdateService.php
#	tests/Unit/Services/Nodes/NodeUpdateServiceTest.php
2018-01-10 20:55:22 -06:00
Dane Everitt 22511c8e24 Fix allocation behavior, closes #712 2018-01-08 22:12:19 -06:00
Dane Everitt 036bea2b94 Update schedule process to allow toggling/triggering via UI 2018-01-08 21:43:10 -06:00
Dane Everitt adcab5969a Fix server description nullablility 2018-01-06 12:58:30 -06:00
Dane Everitt a75b15cd8d closes #852 2018-01-06 12:53:17 -06:00
Dane Everitt d2afc29a80 Refactor how repositories for the daemon work. 2018-01-05 18:27:47 -06:00
Dane Everitt 60eb60013c Update repository base code to be cleaner and make use of PHP 7 features 2018-01-04 22:49:50 -06:00
Dane Everitt f32cee3ae5 Add location control through API 2018-01-03 21:14:53 -06:00
Dane Everitt 15289b76a7 Finish first round of User/Node API additions
Will still need some tweaking and improvements to allow everything to be used.
2018-01-01 15:11:44 -06:00
Dane Everitt d21f70c04b Merge branch 'develop' into feature/api-v1 2018-01-01 13:33:06 -06:00
Dane Everitt 0ec5a4e08c Fix some file management bugs, closes #621 2018-01-01 13:21:10 -06:00
Dane Everitt 4457634127 Fix user creation to use UUIDs correctly
Also updates the notification send method to be cleaner and more maintainable
2018-01-01 12:13:08 -06:00
Dane Everitt 8a38a8af4a Update file manager to account for new API error responses 2017-12-31 10:39:07 -06:00
Dane Everitt 46d7ba7585 Merge branch 'develop' into feature/api-v1 2017-12-31 10:32:28 -06:00
Dane Everitt 5efee34378 close #840 2017-12-30 20:25:04 -06:00
Dane Everitt 54b6fb5ebd More work on the API utilizing Laravel 5.5 exception rendering
Also corrects API format to maintain JSONAPI spec
2017-12-17 14:57:05 -06:00
Dane Everitt b9d67459b2 Update to Laravel 5.5 (#814) 2017-12-17 13:07:38 -06:00
Dane Everitt f30f4b45ba Merge branch 'feature/laravel-55-update' into feature/api-v1 2017-12-16 17:19:35 -06:00
Dane Everitt 631b5eb1b2 Fix form requests 2017-12-16 13:44:30 -06:00
Dane Everitt c6cece51ee Fix the surprisingly few broken tests 2017-12-16 13:35:32 -06:00
Dane Everitt 3c48947f9d Fix known issues from the upgrade guide 2017-12-16 13:15:09 -06:00
Dane Everitt 0dcf2aaed6 Inital upgrade to 5.5
This simply updates dependencies and gets all of the providers and config files updated based on what  the laravel/laravel currently ships with
2017-12-16 12:20:09 -06:00
Dane Everitt 4a65dff940 Implement admin user management API routes 2017-12-16 11:31:18 -06:00
Dane Everitt a1da8a3c9d Merge branch 'develop' into feature/api-v1 2017-12-14 21:12:17 -06:00
Dane Everitt f9df463d32 Implement a better management interface for Settings (#809) 2017-12-14 21:05:26 -06:00
Dane Everitt 285485d7b0 Change how API keys are validated (#771) 2017-12-03 14:29:14 -06:00
Dane Everitt 975597b4d0 Implement changes to administrative user revocation, closes #733 2017-12-03 14:00:47 -06:00
Dane Everitt 20beb2f280 Fix error causing tasks to be un-deletable.
closes #786
2017-12-01 20:10:06 -06:00
Dane Everitt fb7d8a9626 Merge branch 'feature/api-key-changes' into feature/api-v1 2017-11-26 13:27:39 -06:00
Dane Everitt a10db204ab Misc fixes 2017-11-26 13:26:38 -06:00
Dane Everitt 4c57b5e8ee Merge branch 'develop' into feature/api-v1 2017-11-26 13:22:25 -06:00
Dane Everitt 80ddd5b659 Merge branch 'develop' into feature/api-key-changes 2017-11-26 13:20:25 -06:00
Dane Everitt 47f2ca0673 Fix incorrect CPU usage display for limited servers, closes #758 2017-11-26 13:17:40 -06:00
Dane Everitt a710bdf457 Make a todo a todid, closes #774 2017-11-25 13:45:47 -06:00
Dane Everitt 0bb44a4972 Fix server startup dropdown for egg being incorrect, fixes #778 2017-11-25 12:27:08 -06:00
Dane Everitt 698c121e11 First round of API additions 2017-11-19 16:30:00 -06:00
Dane Everitt bf9708fe4f Add permissions checking to API middleware list 2017-11-19 15:23:37 -06:00
Dane Everitt 49379bd115 Pop some tests for new middleware in there. 2017-11-19 14:34:55 -06:00
Dane Everitt 45a153427e Add new API middleware 2017-11-19 14:05:13 -06:00
Dane Everitt 47e14ccaae API key UI changes and backend storage of the keys 2017-11-19 13:32:17 -06:00
Dane Everitt 6f52f4a614 Push updates to login page, mostly UI enhancements. 2017-11-18 15:09:58 -06:00
Dane Everitt c7c2c1a45e Implement changes to 2FA system (#761) 2017-11-18 13:35:33 -05:00
Dane Everitt 26eeffd764 Fix bug preventing changing of the server startup on first save attempt. 2017-11-11 15:07:01 -06:00
Dane Everitt 81869bd5f2 Fix allocation alias setting 2017-11-10 21:47:43 -06:00