366 lines
14 KiB
HTML
366 lines
14 KiB
HTML
|
<!DOCTYPE html>
|
||
|
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="" xml:lang="">
|
||
|
|
<head>
|
||
|
|
<meta charset="utf-8" />
|
||
|
|
<meta name="generator" content="pandoc" />
|
||
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes" />
|
||
|
|
<meta name="dcterms.date" content="2023-09-26" />
|
||
|
|
<title>Wanderson FY23 Report</title>
|
||
|
|
<style>
|
||
|
|
html {
|
||
|
|
line-height: 1.5;
|
||
|
|
font-family: Georgia, serif;
|
||
|
|
font-size: 20px;
|
||
|
|
color: #1a1a1a;
|
||
|
|
background-color: #fdfdfd;
|
||
|
|
}
|
||
|
|
body {
|
||
|
|
margin: 0 auto;
|
||
|
|
max-width: 36em;
|
||
|
|
padding-left: 50px;
|
||
|
|
padding-right: 50px;
|
||
|
|
padding-top: 50px;
|
||
|
|
padding-bottom: 50px;
|
||
|
|
hyphens: auto;
|
||
|
|
overflow-wrap: break-word;
|
||
|
|
text-rendering: optimizeLegibility;
|
||
|
|
font-kerning: normal;
|
||
|
|
}
|
||
|
|
@media (max-width: 600px) {
|
||
|
|
body {
|
||
|
|
font-size: 0.9em;
|
||
|
|
padding: 1em;
|
||
|
|
}
|
||
|
|
h1 {
|
||
|
|
font-size: 1.8em;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
@media print {
|
||
|
|
body {
|
||
|
|
background-color: transparent;
|
||
|
|
color: black;
|
||
|
|
font-size: 12pt;
|
||
|
|
}
|
||
|
|
p, h2, h3 {
|
||
|
|
orphans: 3;
|
||
|
|
widows: 3;
|
||
|
|
}
|
||
|
|
h2, h3, h4 {
|
||
|
|
page-break-after: avoid;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
p {
|
||
|
|
margin: 1em 0;
|
||
|
|
}
|
||
|
|
a {
|
||
|
|
color: #1a1a1a;
|
||
|
|
}
|
||
|
|
a:visited {
|
||
|
|
color: #1a1a1a;
|
||
|
|
}
|
||
|
|
img {
|
||
|
|
max-width: 100%;
|
||
|
|
}
|
||
|
|
h1, h2, h3, h4, h5, h6 {
|
||
|
|
margin-top: 1.4em;
|
||
|
|
}
|
||
|
|
h5, h6 {
|
||
|
|
font-size: 1em;
|
||
|
|
font-style: italic;
|
||
|
|
}
|
||
|
|
h6 {
|
||
|
|
font-weight: normal;
|
||
|
|
}
|
||
|
|
ol, ul {
|
||
|
|
padding-left: 1.7em;
|
||
|
|
margin-top: 1em;
|
||
|
|
}
|
||
|
|
li > ol, li > ul {
|
||
|
|
margin-top: 0;
|
||
|
|
}
|
||
|
|
blockquote {
|
||
|
|
margin: 1em 0 1em 1.7em;
|
||
|
|
padding-left: 1em;
|
||
|
|
border-left: 2px solid #e6e6e6;
|
||
|
|
color: #606060;
|
||
|
|
}
|
||
|
|
code {
|
||
|
|
font-family: Menlo, Monaco, 'Lucida Console', Consolas, monospace;
|
||
|
|
font-size: 85%;
|
||
|
|
margin: 0;
|
||
|
|
}
|
||
|
|
pre {
|
||
|
|
margin: 1em 0;
|
||
|
|
overflow: auto;
|
||
|
|
}
|
||
|
|
pre code {
|
||
|
|
padding: 0;
|
||
|
|
overflow: visible;
|
||
|
|
overflow-wrap: normal;
|
||
|
|
}
|
||
|
|
.sourceCode {
|
||
|
|
background-color: transparent;
|
||
|
|
overflow: visible;
|
||
|
|
}
|
||
|
|
hr {
|
||
|
|
background-color: #1a1a1a;
|
||
|
|
border: none;
|
||
|
|
height: 1px;
|
||
|
|
margin: 1em 0;
|
||
|
|
}
|
||
|
|
table {
|
||
|
|
margin: 1em 0;
|
||
|
|
border-collapse: collapse;
|
||
|
|
width: 100%;
|
||
|
|
overflow-x: auto;
|
||
|
|
display: block;
|
||
|
|
font-variant-numeric: lining-nums tabular-nums;
|
||
|
|
}
|
||
|
|
table caption {
|
||
|
|
margin-bottom: 0.75em;
|
||
|
|
}
|
||
|
|
tbody {
|
||
|
|
margin-top: 0.5em;
|
||
|
|
border-top: 1px solid #1a1a1a;
|
||
|
|
border-bottom: 1px solid #1a1a1a;
|
||
|
|
}
|
||
|
|
th {
|
||
|
|
border-top: 1px solid #1a1a1a;
|
||
|
|
padding: 0.25em 0.5em 0.25em 0.5em;
|
||
|
|
}
|
||
|
|
td {
|
||
|
|
padding: 0.125em 0.5em 0.25em 0.5em;
|
||
|
|
}
|
||
|
|
header {
|
||
|
|
margin-bottom: 4em;
|
||
|
|
text-align: center;
|
||
|
|
}
|
||
|
|
#TOC li {
|
||
|
|
list-style: none;
|
||
|
|
}
|
||
|
|
#TOC ul {
|
||
|
|
padding-left: 1.3em;
|
||
|
|
}
|
||
|
|
#TOC > ul {
|
||
|
|
padding-left: 0;
|
||
|
|
}
|
||
|
|
#TOC a:not(:hover) {
|
||
|
|
text-decoration: none;
|
||
|
|
}
|
||
|
|
code{white-space: pre-wrap;}
|
||
|
|
span.smallcaps{font-variant: small-caps;}
|
||
|
|
span.underline{text-decoration: underline;}
|
||
|
|
div.column{display: inline-block; vertical-align: top; width: 50%;}
|
||
|
|
div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;}
|
||
|
|
ul.task-list{list-style: none;}
|
||
|
|
.display.math{display: block; text-align: center; margin: 0.5rem auto;}
|
||
|
|
</style>
|
||
|
|
<style>
|
||
|
|
body { font-family: monospace; font-size: 14px; line-height: 1.5em; max-width: 60em; margin: 0 auto; padding-top: 0; }
|
||
|
|
h1,h2,h3,h4 { margin: 0.25em 0; }
|
||
|
|
header { margin-bottom: 0; }
|
||
|
|
header h1 { border: none; }
|
||
|
|
h1 { border-top: solid 10px; border-bottom: solid 10px; margin-bottom: 1em; padding: 0.5em 0; width: 100%; text-align: center;}
|
||
|
|
h2 { border-top: solid; text-align: center; margin-top: 1em; padding-top: 1em; }
|
||
|
|
h3 { margin-left: 1em; color: #cb4b16; }
|
||
|
|
h4 { margin-left: 2em; }
|
||
|
|
u { display: inline-block; margin-left: 2.75em; opacity: 0.3; }
|
||
|
|
hr { opacity: 0; }
|
||
|
|
a { color: #06a;}
|
||
|
|
ul { margin-left: 3em; }
|
||
|
|
#TOC ul { margin-left: 0.5em; }
|
||
|
|
li { clear: both; }
|
||
|
|
li > a { float: right; }
|
||
|
|
nav li a { float: none; }
|
||
|
|
blockquote { opacity: 0.7; }
|
||
|
|
</style>
|
||
|
|
<!--[if lt IE 9]>
|
||
|
|
<script src="//cdnjs.cloudflare.com/ajax/libs/html5shiv/3.7.3/html5shiv-printshiv.min.js"></script>
|
||
|
|
<![endif]-->
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<header id="title-block-header">
|
||
|
|
<h1 class="title">Wanderson FY23 Report</h1>
|
||
|
|
<p class="subtitle">back to one month older</p>
|
||
|
|
<p class="date">2023-09-26</p>
|
||
|
|
</header>
|
||
|
|
<nav id="TOC" role="doc-toc">
|
||
|
|
<ul>
|
||
|
|
<li><a href="#wanderson-58">Wanderson [58]</a>
|
||
|
|
<ul>
|
||
|
|
<li><a href="#iroh-53-41-12">iroh [53 (41 / 12)]</a></li>
|
||
|
|
<li><a href="#tenzin-1-1-0">tenzin [1 (1 / 0)]</a></li>
|
||
|
|
<li><a href="#tenzin-config-4-3-1">tenzin-config [4 (3 / 1)]</a></li>
|
||
|
|
</ul></li>
|
||
|
|
</ul>
|
||
|
|
</nav>
|
||
|
|
<h3 id="wanderson-58">Wanderson [58]</h3>
|
||
|
|
<h4 id="iroh-53-41-12">iroh [53 (41 / 12)]</h4>
|
||
|
|
<ul>
|
||
|
|
<li><code>W30</code> Design doc to webhook support on Entitlement
|
||
|
|
create/update <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/8112">#8112</a></li>
|
||
|
|
<li><code>W30</code> NewEvent <code>:created-at</code> is optional for
|
||
|
|
IROH internal calls and mandatory to HTTP events <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/8121">#8121</a></li>
|
||
|
|
<li><code>W30</code> [IROH Auth] Support XDR <code>signup-url</code> <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/8117">#8117</a></li>
|
||
|
|
<li><code>W27</code> [IROH Auth] Make
|
||
|
|
<code>use-cache-to-build-identity</code> throw if short JWT info is
|
||
|
|
missing <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/8032">#8032</a></li>
|
||
|
|
<li><code>W27</code> [IROH Auth] Change error message for
|
||
|
|
org-level-authorization clients <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/8034">#8034</a></li>
|
||
|
|
<li><code>W27</code> Invitation missing test cases <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/8030">#8030</a></li>
|
||
|
|
<li><code>W24</code> [IROH Auth] RBAC JWT Revocation on
|
||
|
|
<code>role</code> change <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7875">#7875</a></li>
|
||
|
|
<li><code>W21</code> [IROH Auth] Fix wrong role name in Invites for XDR
|
||
|
|
roles <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7908">#7908</a></li>
|
||
|
|
<li><code>W20</code> [IROH Auth] add <code>:entitlement-summary</code>
|
||
|
|
to profile org return values <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7896">#7896</a></li>
|
||
|
|
<li><code>W20</code> [IROH Auth] Fix <code>/profile</code> swagger.json
|
||
|
|
bug <a href="https://github.com/advthreat/iroh/pull/7897">#7897</a></li>
|
||
|
|
<li><code>W20</code> [IROH Auth] add Entitlement Summary to
|
||
|
|
<code>whoami</code> <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7894">#7894</a></li>
|
||
|
|
<li><code>W20</code> [IROH Auth] Expose entitlement methods in Profile
|
||
|
|
webservice <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7881">#7881</a></li>
|
||
|
|
<li><code>W20</code> [IROH Auth] Declare entitlement-svc in
|
||
|
|
default-bootstrap <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7891">#7891</a></li>
|
||
|
|
<li><code>W20</code> [IROH Auth] fix EntitlementSummary structure <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7886">#7886</a></li>
|
||
|
|
<li><code>W20</code> [IROH Auth] Decide JWT format based on the new
|
||
|
|
<code>client</code>'s <code>tokens-format</code> property <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7789">#7789</a></li>
|
||
|
|
<li><code>W19</code> [IROH Auth] Fix potential bug in PROD in
|
||
|
|
OrgAccessRequests for xdr-roles <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7861">#7861</a></li>
|
||
|
|
<li><code>W19</code> [IROH Auth] - Remove <code>xdr-instance-id</code>
|
||
|
|
<a href="https://github.com/advthreat/iroh/pull/7860">#7860</a></li>
|
||
|
|
<li><code>W19</code> [IROH Auth] Restrict <code>xdr-roles</code> by
|
||
|
|
<code>env</code> and <code>org</code> feature flags <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7855">#7855</a></li>
|
||
|
|
<li><code>W17</code> [IROH Auth] introducing <code>TimeService</code> in
|
||
|
|
<code>AuthService</code> <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7806">#7806</a></li>
|
||
|
|
<li><code>W17</code> [IROH Auth] allow only <code>iroh-core.time</code>
|
||
|
|
in oauth2.core ns <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7793">#7793</a></li>
|
||
|
|
<li><code>W16</code> [IROH Auth] - Update IROH Web middleware to build
|
||
|
|
short JWTs with profile data <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7671">#7671</a></li>
|
||
|
|
<li><code>W12</code> [IROH Auth] - update
|
||
|
|
<code>check-refresh-token</code> function <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7669">#7669</a></li>
|
||
|
|
<li><code>W12</code> [IROH Auth] - Update Design docs for Short JWT Epic
|
||
|
|
<a href="https://github.com/advthreat/iroh/pull/7670">#7670</a></li>
|
||
|
|
<li><code>W10</code> [IROH Auth] <code>/profile/permissions</code>
|
||
|
|
endpoint <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7562">#7562</a></li>
|
||
|
|
<li><code>W08</code> Patch <code>compojure-api</code> to allow endpoints
|
||
|
|
with string-keys (without keywordize the request <code>:body</code>) <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7574">#7574</a></li>
|
||
|
|
<li><code>W08</code> [IROH Auth] Include route
|
||
|
|
<code>/profile/scopes</code> <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7553">#7553</a></li>
|
||
|
|
<li><code>W07</code> [IROH Auth] - Store Short JWTs <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7476">#7476</a></li>
|
||
|
|
<li><code>W05</code> [IROH Auth] refactor <code>gen-short-tokens</code>
|
||
|
|
to avoid code duplication <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7485">#7485</a></li>
|
||
|
|
<li><code>W04</code> Allow wildcard login origin in TEST env <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7474">#7474</a></li>
|
||
|
|
<li><code>W03</code> [IROH Auth] Generate Short JWT tokens <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7450">#7450</a></li>
|
||
|
|
<li><code>W02</code> [IROH Auth] Short JWT design <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7436">#7436</a></li>
|
||
|
|
<li><code>W50</code> org-svc using crud-context instead of gen-ctx <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7306">#7306</a></li>
|
||
|
|
<li><code>W49</code> IROH-Auth: Remove <code>oauth/scopes</code> claims
|
||
|
|
from AO jwts <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7368">#7368</a></li>
|
||
|
|
<li><code>W48</code> RBAC: Remove confusing and big claims from JWT <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7363">#7363</a></li>
|
||
|
|
<li><code>W48</code> Remove the usage of <code>invitee-name</code> from
|
||
|
|
the invite-svc <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7356">#7356</a></li>
|
||
|
|
<li><code>W41</code> <code>InviteService</code> - Using HOF
|
||
|
|
<code>get-valid-user!</code> and <code>get-valid-org!</code> <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7045">#7045</a></li>
|
||
|
|
<li><code>W36</code> <code>ProvisioningService</code> - fix folder
|
||
|
|
structure <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7047">#7047</a></li>
|
||
|
|
<li><code>W36</code> [IROH-Auth] Specify the tenant at login <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7036">#7036</a></li>
|
||
|
|
<li><code>W35</code> Add query param <code>show-tenant-selector</code>
|
||
|
|
to force redirect to Registration UI <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7034">#7034</a></li>
|
||
|
|
<li><code>W34</code> remove ctim tutorial pngs from trojan scan <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/7005">#7005</a></li>
|
||
|
|
<li><code>W31</code> Cleanup AuthService <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6944">#6944</a></li>
|
||
|
|
</ul>
|
||
|
|
<p><u>between 12 and 13 months ago</u></p>
|
||
|
|
<ul>
|
||
|
|
<li><code>W31</code> cleanup gen user-identity-jwt code <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6942">#6942</a></li>
|
||
|
|
<li><code>W30</code> Format relative dates in account-stats <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6920">#6920</a></li>
|
||
|
|
<li><code>W30</code> bugfix: constrained expiration time for
|
||
|
|
access-token generated by the switch-tenant endpoint <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6902">#6902</a></li>
|
||
|
|
<li><code>W29</code> Bugfix redirect users rule remove disabled orgs <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6924">#6924</a></li>
|
||
|
|
<li><code>W29</code> add more logs to WebhookRunner to inspect
|
||
|
|
scopes-restriction logic <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6922">#6922</a></li>
|
||
|
|
<li><code>W28</code> safer implementation to list accounts <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6893">#6893</a></li>
|
||
|
|
<li><code>W28</code> bugfix - remove disabled orgs from Registration UI
|
||
|
|
org selector <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6884">#6884</a></li>
|
||
|
|
<li><code>W28</code> bugfix listing users that do not belong to your
|
||
|
|
user-identity <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6889">#6889</a></li>
|
||
|
|
<li><code>W28</code> Cleaning up <code>iroh-auth/test_helpers/-*</code>
|
||
|
|
files <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6872">#6872</a></li>
|
||
|
|
<li><code>W27</code> Add ProfileService <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6829">#6829</a></li>
|
||
|
|
<li><code>W27</code> bugfix - update login-date of the user on switching
|
||
|
|
tenants <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6866">#6866</a></li>
|
||
|
|
<li><code>W27</code> bugfix - include email to avoid errors for orgs
|
||
|
|
with whitelist settings <a
|
||
|
|
href="https://github.com/advthreat/iroh/pull/6862">#6862</a></li>
|
||
|
|
</ul>
|
||
|
|
<h4 id="tenzin-1-1-0">tenzin [1 (1 / 0)]</h4>
|
||
|
|
<ul>
|
||
|
|
<li><code>W02</code> Update GPG Wanderson Ferreira <a
|
||
|
|
href="https://github.com/advthreat/tenzin/pull/2648">#2648</a></li>
|
||
|
|
</ul>
|
||
|
|
<h4 id="tenzin-config-4-3-1">tenzin-config [4 (3 / 1)]</h4>
|
||
|
|
<ul>
|
||
|
|
<li><code>W30</code> config to support signup-url xdr <a
|
||
|
|
href="https://github.com/advthreat/tenzin-config/pull/955">#955</a></li>
|
||
|
|
<li><code>W07</code> add postgres and redis-cache store for IROH Auth
|
||
|
|
JWTs <a
|
||
|
|
href="https://github.com/advthreat/tenzin-config/pull/839">#839</a></li>
|
||
|
|
<li><code>W36</code> fix provisioning path <a
|
||
|
|
href="https://github.com/advthreat/tenzin-config/pull/717">#717</a></li>
|
||
|
|
</ul>
|
||
|
|
<p><u>between 12 and 13 months ago</u></p>
|
||
|
|
<ul>
|
||
|
|
<li><code>W27</code> include new profile-svc <a
|
||
|
|
href="https://github.com/advthreat/tenzin-config/pull/675">#675</a></li>
|
||
|
|
</ul>
|
||
|
|
</body>
|
||
|
|
</html>
|