Commit Graph

106 Commits

Author SHA1 Message Date
Derek Collison
efb91c4ade Upgrade to latest released client
Signed-off-by: Derek Collison <derek@nats.io>
2022-04-10 08:03:11 -07:00
Matthias Hanel
92f4dc986a added max_ack_pending setting to js account limits (#2982)
* added max_ack_penind setting to js account limits

because of the addition, defaults now have to be set later (depend on
these new limits now)

also re-organized the code to closer track how stream create looks

Signed-off-by: Matthias Hanel <mh@synadia.com>
2022-03-31 14:17:16 -04:00
Matthias Hanel
1445153130 Adding max stream bytes check (#2970)
* Adding max stream bytes check

Also start checking on  stream update

Signed-off-by: Matthias Hanel <mh@synadia.com>
2022-03-30 15:50:28 -04:00
Matthias Hanel
0c5f3688a7 [ADDED] Tiered limits and fix limit issues on updates (#2945)
* Adding tiered limits and fix limit issues on updates

Signed-off-by: Matthias Hanel <mh@synadia.com>
2022-03-28 20:47:54 -04:00
Derek Collison
7fd5f4dc24 Update Go client
Signed-off-by: Derek Collison <derek@nats.io>
2022-03-24 17:45:15 -06:00
Matthias Hanel
9a2da9ed8c Adding denies $KV.>/$OBJ.> along leaf connections on differing domain (#2916)
* Adding denies $KV.>/$OBJ.> along leaf connections on differing domain

Signed-off-by: Matthias Hanel <mh@synadia.com>
2022-03-09 13:17:59 -05:00
Ivan Kozlovic
26a8dc8add Update compress and highwayhash dependencies
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2022-02-22 17:09:05 -07:00
Matthias Hanel
fa12d096cd Fix jwt based user/activation token revocation and revocation granularity
user and activation token did not honor the jwt value for all * on
connect.

activation token where not re evaluated when the export revoked a key.
In part this is a consistency measure so servers that already have an
account and servers that don't behave the same way.

in jwt activation token revocations are stored per export.
The server stored them per account, thus effectively merging
revocations. Now they are stored per export inside the server too.

fixes nats-io/nsc/issues/442

Signed-off-by: Matthias Hanel <mh@synadia.com>
2022-01-25 13:48:12 -05:00
Derek Collison
56870e4ddb Update Go client
Signed-off-by: Derek Collison <derek@nats.io>
2022-01-24 10:24:49 -08:00
Ivan Kozlovic
2ba6d97dc1 Update deps
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2022-01-13 16:17:46 -07:00
Derek Collison
7dc99c3840 Merge from main
Signed-off-by: Derek Collison <derek@nats.io>
2022-01-13 10:01:33 -08:00
Matthias Hanel
78bbcd791f [Adding] support for JS MaxBytesRequired
Signed-off-by: Matthias Hanel <mh@synadia.com>
2022-01-12 22:57:34 -05:00
Derek Collison
42818f06c1 Update client
Signed-off-by: Derek Collison <derek@nats.io>
2022-01-10 16:58:52 -08:00
Ivan Kozlovic
cbfa93e4a8 [UPDATED] golang.org/x/crypto dependency
They just released some fix that is not affecting the NATS Server
but could cause some security vulnerability reports.

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-12-02 13:48:21 -07:00
Ivan Kozlovic
9f30bf00e0 [FIXED] Corrupted headers receiving from consumer with meta-only
When a consumer is configured with "meta-only" option, and the
stream was backed by a memory store, a memory corruption could
happen causing the application to receive corrupted headers.

Also replaced most of usage of `append(a[:0:0], a...)` to make
copies. This was based on this wiki:
https://github.com/go101/go101/wiki/How-to-efficiently-clone-a-slice%3F

But since Go 1.15, it is actually faster to call make+copy instead.

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-12-01 10:50:15 -07:00
Ivan Kozlovic
ede8124fb2 [FIXED/CHANGED] Add leafnode websocket connection type
This was missing since WEBSOCKET allowed connection type is really
used for client connections.
If one wants to limit a configured user to leafnode connections,
including if the connection is over websocket, but does not
want an application to connect over websocket using this user,
this would have been impossible to configure.

The JWT library has been updated to add LEAFNODE_WS and MQTT_WS for
future work.

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-11-22 10:32:58 -07:00
Derek Collison
ab91da8f9b Upgrade Go client
Signed-off-by: Derek Collison <derek@nats.io>
2021-10-25 17:13:05 -07:00
Ivan Kozlovic
831c8254e3 Release v2.6.2
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-10-12 15:19:17 -06:00
Waldemar Quevedo
b96f731f1a Update nats-io/jwt dependency
Signed-off-by: Waldemar Quevedo <wally@synadia.com>
2021-09-28 13:24:24 -07:00
Ivan Kozlovic
f34156e411 Release v2.6.0
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-09-21 16:17:27 -06:00
Waldemar Quevedo
0bef39ab5b Update nats.go version
Signed-off-by: Waldemar Quevedo <wally@synadia.com>
2021-09-16 15:58:41 -07:00
Ivan Kozlovic
bc1b3a1884 Release v2.5.0
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-09-09 15:29:53 -06:00
Ivan Kozlovic
037a1f0461 Release v2.4.0
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-08-26 15:58:31 -06:00
Derek Collison
3a20582ad5 Add in optional compression schemes for Accept-Encoding on server api requests.
Signed-off-by: Derek Collison <derek@nats.io>
2021-08-23 13:06:18 -07:00
Derek Collison
143f145364 Update Go client
Signed-off-by: Derek Collison <derek@nats.io>
2021-08-19 18:19:39 -07:00
Matthias Hanel
fc9af36df6 updated go client for tests
Signed-off-by: Matthias Hanel <mh@synadia.com>
2021-08-17 10:47:34 -04:00
Derek Collison
b8d059e179 Update Go client
Signed-off-by: Derek Collison <derek@nats.io>
2021-08-13 15:08:55 -07:00
Derek Collison
a0b5a53870 Update Go client
Signed-off-by: Derek Collison <derek@nats.io>
2021-08-09 20:09:58 -07:00
Derek Collison
149ed38b57 Update Go client
Signed-off-by: Derek Collison <derek@nats.io>
2021-08-07 16:57:51 -07:00
Ivan Kozlovic
50c0b40907 Update go.mod JWT reference to latest release
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-08-02 09:39:35 -06:00
Matthias Hanel
c7f7077584 [fixed] updated jwt library to avoid an error when counting tokens
Signed-off-by: Matthias Hanel <mh@synadia.com>
2021-07-27 12:46:44 -04:00
Ivan Kozlovic
13334c227d Release v2.3.1
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-06-29 13:51:32 -06:00
Derek Collison
2a96be2fcf Updated Go client and crypto deps
Signed-off-by: Derek Collison <derek@nats.io>
2021-06-26 14:08:16 -07:00
Ivan Kozlovic
23ec1daab5 Bump to beta 16 and ran go mod tidy
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-06-22 11:42:43 -06:00
Derek Collison
9fd5bfcdbf Add in chacha20 and poly1305
Signed-off-by: Derek Collison <derek@nats.io>
2021-06-21 19:16:20 -07:00
Jaime Piña
0072107110 Vendor ocsp dep 2021-05-24 10:52:27 -07:00
Derek Collison
41ec9359fc Update client to released version
Signed-off-by: Derek Collison <derek@nats.io>
2021-05-06 18:46:32 -06:00
Matthias Hanel
61bf08fd98 [fixed] decorated jwt parsing issue by using same functionality of jwt
fixes #2069

Signed-off-by: Matthias Hanel <mh@synadia.com>
2021-05-04 23:04:51 -04:00
Ivan Kozlovic
38dcc79b3b Release v2.2.2
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-04-22 11:14:09 -06:00
Derek Collison
518ff9be14 Concurrent multiple durable subscribers would cause unpredictable behaviors.
Upgraded to current Go client.

Signed-off-by: Derek Collison <derek@nats.io>
2021-04-20 19:50:24 -07:00
Ivan Kozlovic
c2ee75303b Release v2.2.1
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-04-02 16:38:10 -06:00
Matthias Hanel
e390958beb Updated go client for unit tests and fixing test
One test had a race.
For the other one, the updated go client changed the callback used.s

Signed-off-by: Matthias Hanel <mh@synadia.com>
2021-03-30 21:46:39 -04:00
Jaime Piña
6941bb3ade Update Go client in tests 2021-03-30 13:17:34 -07:00
Ivan Kozlovic
0d5b037fc3 Release v2.2.0
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2021-03-14 19:51:14 -06:00
Matthias Hanel
eb1a91d5b6 [fixed] private import issue by pulling in up to date jwt library
Also prevent nats based account resolver from storing invalid jwt
Updated compress and highwayhash

Signed-off-by: Matthias Hanel <mh@synadia.com>
2021-03-14 19:37:14 -04:00
R.I.Pienaar
236498a142 restore meta peer remove by name rather than id
Signed-off-by: R.I.Pienaar <rip@devco.net>
2021-03-03 15:55:50 +01:00
Derek Collison
7c67a9c5cc Update Go client
Signed-off-by: Derek Collison <derek@nats.io>
2021-02-28 05:11:01 -08:00
Derek Collison
afea79610a Consumer interest was not properly handled cross cluster.
Signed-off-by: Derek Collison <derek@nats.io>
2021-02-18 18:29:59 -08:00
Matthias Hanel
0cae6ab4e7 [added] support for jwt based account mappings (#1897)
support for jwt based account mappings

Signed-off-by: Matthias Hanel <mh@synadia.com>
2021-02-08 17:25:14 -05:00
Matthias Hanel
3799b90011 [Adding] support for account_token_position (#1874)
This change does 4 things:
Refactor to only have one function to validate imports.
Have this function support the jwt field account_token_position.
For completeness make this value configurable as well.
unit tests.

Signed-off-by: Matthias Hanel <mh@synadia.com>
2021-02-01 19:51:36 -05:00