consts

Documentation

Index

• Constants
• type ConstEndpoints
• type EmailType
• type EntityConst
• type FailedReason
• type SSH_AUTH_TYPE
• type TokenExpiryTime
• type VerifyTokenIntent

Constants

const (
	ENTITY_USER                   EntityConst = "ENTITY_USER"
	ENTITY_APP                    EntityConst = "ENTITY_APP"
	ENTITY_APP_USER_MAP           EntityConst = "ENTITY_APP_USER_MAP"
	ENTITY_GROUP                  EntityConst = "ENTITY_GROUP"
	ENTITY_APP_GROUP_MAP          EntityConst = "ENTITY_APP_GROUP_MAP"
	ENTITY_USER_GROUP_MAP         EntityConst = "ENTITY_USER_GROUP_MAP"
	ENTITY_USERGROUP_APP          EntityConst = "ENTITY_USERGROUP_APP"
	ENTITY_USERGROUP_APPGROUP_MAP EntityConst = "ENTITY_USERGROUP_APPGROUP_MAP"
	ENTITY_USER_DEVICE            EntityConst = "ENTITY_USER_DEVICE"

	// Scopes
	ALL_USER        = "ALL_USER"
	ALL_ORGADMINS   = "ALL_ORGADMINS"
	ALL_NORMALUSERS = "ALL_NORMALUSERS"
	ALL_SERVICES    = "ALL_SERVICES"

	ALL_GROUPS           = "ALL_GROUPS"
	ALL_USERGROUPS       = "ALL_USERGROUPS"
	ALL_SERVICEGROUPS    = "ALL_SERVICEGROUPS"
	ALL_SSHSERVICES      = "ALL_SSHSERVICES"
	ALL_RDPSERVICES      = "ALL_RDPSERVICES"
	ALL_HTTPSERVICES     = "ALL_HTTPSERVICES"
	ALL_DATABASESERVICES = "ALL_DATABASESERVICES"

	ORG    = "ORG"
	DOMAIN = "DOMAIN"

	// Passwords
	ADMIN_FORGOT_PASSWORD = "ADMIN_FORGOT_PASSWORD"

	// Security
	SUSPICIOUS_LOGIN = "SUSPICIOUS_LOGIN"

	// System
	SYSTEM              = "SYSTEM"
	LOW_SYSTEM_RESOURCE = "LOW_SYSTEM_RESOURCE"
)

const (
	KEY_DOAPI = "KEY_DOAPI"
	KEY_LDAP  = "KEY_LDAP"
	KEY_SCIM  = "KEY_SCIM"
	KEY_SMTP  = "KEY_SMTP"
)

const (
	TOKEN_EXPIRY_CHANGEPASS time.Duration = time.Second * 900   // 15 MINUTES
	TOKEN_EXPIRY_SIGNUP     time.Duration = time.Second * 90000 // 25 HOURS
)

const (
	AUTH_RESP_NOTIF_LICENSE   = "AUTH_RESP_NOTIF_LICENSE"
	AUTH_RESP_ENROL_DEVICE    = "AUTH_RESP_ENROL_DEVICE"
	AUTH_RESP_TFA_REQUIRED    = "AUTH_RESP_TFA_REQUIRED"
	AUTH_RESP_TFA_DH_REQUIRED = "AUTH_RESP_TFA_DH_REQUIRED"
	AUTH_RESP_SELECT_ORG      = "AUTH_RESP_SELECT_ORG"
	AUTH_RESP_CHANGE_PASS     = "AUTH_RESP_CHANGE_PASS" // for authenticated session
	AUTH_RESP_RESET_PASS      = "AUTH_RESP_RESET_PASS"  // for resets due to policy direction or default passwords.
	AUTH_RESP_FORGOT_PASS     = "AUTH_RESP_FORGOT_PASS" // forgot password
)

const (
	AUTH_REQ_DASH_LOGIN    = "AUTH_REQ_DASH_LOGIN"
	AUTH_REQ_CHANGE_PASS   = "AUTH_REQ_CHANGE_PASS"
	AUTH_REQ_ENROL_DEVICE  = "AUTH_REQ_ENROL_DEVICE"
	AUTH_REQ_FORGOT_PASS   = "AUTH_REQ_FORGOT_PASS"
	AUTH_HTTP_ACCESS_PROXY = "AUTH_HTTP_ACCESS_PROXY"
	AUTH_REQ_TFA_DH        = "AUTH_REQ_TFA_DH"
)

const (
	CONSTRAINT_UNIQUE_GROUPNAME = "unique_groupname"

	CONSTRAINT_UNIQUE_SERVICENAME = "unique_servicename"
	CONSTRAINT_UNIQUE_HOSTNAME    = "unique_hostname"

	CONSTRAINT_UNIQUE_USERNAME = "unique_username"
	CONSTRAINT_UNIQUE_EMAIL    = "unique_email"
)

const (
	GLOBAL_TSXVAULT             = "GLOBAL_TSXVAULT"
	GLOBAL_PASSWORD_CONFIG      = "GLOBAL_PASSWORD_CONFIG"
	GLOBAL_EMAIL_CONFIG         = "GLOBAL_EMAIL_CONFIG"
	GLOBAL_EMAIL_CONFIG_SECRET  = "GLOBAL_EMAIL_CONFIG_SECRET"
	GLOBAL_DEVICE_HYGIENE_CHECK = "GLOBAL_DEVICE_HYGIENE_CHECK"
	GLOBAL_ERROR_REPORT         = "GLOBAL_ERROR_REPORT"
	GLOBAL_DYNAMIC_ACCESS       = "GLOBAL_DYNAMIC_ACCESS"
	GLOBAL_CLOUDPROXY_APIKEY    = "GLOBAL_CLOUDPROXY_APIKEY"
)

const (
	CREATE_USER          = "CREATE_USER"
	CREATE_ADMIN_USER    = "CREATE_ADMIN_USER"
	UPDATE_USER          = "UPDATE_USER"
	DELETE_USER          = "DELETE_USER"
	DELETE_MULTIPLE_USER = "DELETE_MULTIPLE_USER"

	// Admins
	ADMIN_ACTIVITY         = "ADMIN_ACTIVITY"
	DELETE_ADMIN_USER      = "DELETE_ADMIN_USER"
	GRANT_ADMIN_PRIVILEGE  = "GRANT_ADMIN_PRIVILEGE"
	ADMIN_PROFILE_EDITED   = "ADMIN_PROFILE_EDITED"
	REVOKE_ADMIN_PRIVILEGE = "REVOKE_ADMIN_PRIVILEGE"

	CREATE_APP = "CREATE_APP"
	UPDATE_APP = "UPDATE_APP"
	DELETE_APP = "DELETE_APP"

	CREATE_GROUP = "CREATE_GROUP"
	UPDATE_GROUP = "UPDATE_GROUP"
	DELETE_GROUP = "DELETE_GROUP"

	CREATE_POLICY = "CREATE_POLICY"
	UPDATE_POLICY = "UPDATE_POLICY"
	DELETE_POLICY = "DELETE_POLICY"

	ASSIGN_USER_TO_APP             = "ASSIGN_USER_TO_APP"
	ASSIGN_USER_TO_APPGROUP        = "ASSIGN_USER_TO_APPGROUP"
	ASSIGN_USERGROUP_TO_APP        = "ASSIGN_USERGROUP_TO_APP"
	ASSIGN_USERGROUP_TO_APPGROUP   = "ASSIGN_USERGROUP_TO_APPGROUP"
	REMOVE_USER_FROM_APP           = "REMOVE_USER_FROM_APP"
	REMOVE_USERGROUP_FROM_APP      = "REMOVE_USER_FROM_APP"
	REMOVE_USERGROUP_FROM_APPGROUP = "REMOVE_USER_FROM_APP"

	SET_GLOBAL_SETTING = "SET_GLOBAL_SETTING"

	ENROLL_USER_DEVICE = "ENROLL_USER_DEVICE"
	REMOVE_USER_DEVICE = "REMOVE_USER_DEVICE"

	CREATE_HTTP_PROXY = "CREATE_HTTP_PROXY"
	UPDATE_HTTP_PROXY = "UPDATE_HTTP_PROXY"
	DELETE_HTTP_PROXY = "DELETE_HTTP_PROXY"

	UPDATE_PASSWORD_POLICY = "UPDATE_PASSWORD_POLICY"
	UPDATE_SSH_CERT_POLICY = "UPDATE_SSH_CERT_POLICY"

	VAULT_INITIALIZED     = "VAULT_INITIALIZED"
	VAULT_RESET           = "VAULT_RESET"
	VAULT_UNSEALED        = "VAULT_UNSEALED"
	VIEW_VAULT_PASSWORD   = "VIEW_VAULT_PASSWORD"
	SAVE_VAULT_PASSWORD   = "SAVE_VAULT_PASSWORD"
	REMOVE_VAULT_PASSWORD = "REMOVE_VAULT_PASSWORD"
	VAULT_DECRYPTED       = "VAULT_DECRYPTED"

	TAKE_BACKUP        = "TAKE_BACKUP"
	CREATE_BACKUP_PLAN = "CREATE_BACKUP_PLAN"

	FILE_UPLOAD   = "FILE_UPLOAD"
	FILE_DOWNLOAD = "FILE_DOWNLOAD"

	UPDATE_APP_CERTS    = "UPDATE_APP_CERTS"
	DOWNLOAD_HOST_CERTS = "DOWNLOAD_HOST_CERTS"
	GENERATE_USER_CERTS = "GENERATE_USER_CERTS"

	CREATE_IDP            = "CREATE_IDP"
	UPDATE_IDP            = "UPDATE_IDP"
	IMPORT_USERS_FROM_IDP = "IMPORT_USERS_FROM_IDP"
	GENERATE_SCIM_TOKEN   = "GENERATE_SCIM_TOKEN"

	ADHOC_REQUEST_ACK = "ADHOC_REQUEST_ACK"
)

const (
	KEX_EXPORT_DH    = "KEX_EXPORT_DH"
	KEX_ENROL_DEVICE = "KEX_ENROL_DEVICE"
	KEX_HTTP_SR      = "KEX_HTTP_SR"
)

const (
	SSH_AUTH_TYPE_PUB      = "PUB"      // trasa cert
	SSH_AUTH_TYPE_PASSWORD = "PASSWORD" //using email and password

)

const (
	IDP_TRASA           = "IDP_TRASA"
	IDP_FREEIPA         = "IDP_FREEIPA"
	UIDP_NOT_REGISTERED = "UIDP_NOT_REGISTERED"
)

const (
	SCIM_USER_SCHEMA            = "urn:ietf:params:scim:schemas:core:2.0:User"
	SCIM_ENTERPRISE_USER_SCHEMA = "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"

	SCIM_GROUP_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:Group"

	SCIM_ERR      = "urn:ietf:params:scim:api:messages:2.0:Error"
	SCIM_LISTRESP = "urn:ietf:params:scim:api:messages:2.0:ListResponse"

	SCIMKEY = "SCIMKEY"
)

const (
	SAML_INVALID_POSTFORM       = "SAML_INVALID_POSTFORM"
	SAML_METADATA_ERROR         = "SAML_METADATA_ERROR"
	SAML_PARSE_CERT             = "SAML_PARSE_CERT"
	SAML_INVALID_ASSERTION_INFO = "SAML_INVALID_ASSERTION_INFO"
	SAML_INVALID_TIME           = "SAML_INVALID_TIME"
	SAML_AUDIENCE_MISMATCH      = "SAML_AUDIENCE_MISMATCH"
)

const CERT_TYPE_HTTP_CA = "HTTP_CA"

const CERT_TYPE_SSH_CA = "SSH_CA"

const CERT_TYPE_SSH_HOST_KEY = "SSH_HOST_KEY"

const CERT_TYPE_TLS_KEYS = "TLS_KEYS"

const (
	ChangePassword = "changepassword"
)

const DEFAULT_ROOT_PASSWORD = "changeme"

const TRASA_VERSION = "2020.7.2"

TRASA_VERSION is current version of TRASA

Types

type ConstEndpoints

type ConstEndpoints string

const (
	ENDPOINT_RDP       ConstEndpoints = "RDP"
	ENDPOINT_SSH       ConstEndpoints = "SSH"
	ENDPOINT_HTTP      ConstEndpoints = "HTTP"
	ENDPOINT_DASHBOARD ConstEndpoints = "DASHBOARD"
	ENDPOINT_DATABASE  ConstEndpoints = "DATABASE"
	ENDPOINT_AGENT     ConstEndpoints = "AGENT"
	ENDPOINT_RADIUS    ConstEndpoints = "RADIUS"
)

type EmailType

type EmailType string

const (
	EMAIL_ADHOC          EmailType = "EMAIL_ADHOC"
	EMAIL_DYNAMIC_ACCESS EmailType = "EMAIL_DYNAMIC_ACCESS"
	EMAIL_SECURITY_ALERT EmailType = "EMAIL_SECURITY_ALERT"
	EMAIL_USER_CRUD      EmailType = "EMAIL_USER_CRUD"
	EMAIL_ERR_REPORT     EmailType = "EMAIL_ERR_REPORT"
)

const (
	EMAIL_SMTP    EmailType = "EMAIL_SMTP"
	EMAIL_MAILGUN EmailType = "EMAIL_MAILGUN"
)

type EntityConst

type EntityConst string

type FailedReason

type FailedReason string

Failed reasons

const (
	REASON_MALFORMED_REQUEST_RECEIVED FailedReason = "REASON_MALFORMED_REQUEST_RECEIVED"

	REASON_INVALID_SERVICE_HOSTNAME    FailedReason = "REASON_INVALID_SERVICE_HOSTNAME"
	REASON_INVALID_SERVICE_CREDS       FailedReason = "INVALID_SERVICE_CREDS"
	REASON_INVALID_SERVICE_ID          FailedReason = "INVALID_SERVICE_ID"
	REASON_USER_DISABLED               FailedReason = "USER_DISABLED"
	REASON_INVALID_USER_CREDS          FailedReason = "INVALID_USER_CREDS"
	REASON_USER_NOT_FOUND              FailedReason = "USER_NOT_FOUND"
	REASON_INVALID_PUBLIC_KEY          FailedReason = "INVALID_PUBLIC_KEY"
	REASON_INVALID_CERTIFICATE         FailedReason = "INVALID_CERTIFICATE"
	REASON_IDENTITY_PROVIDER_NOT_FOUND FailedReason = "IDENTITY_PROVIDER_NOT_FOUND"
	REASON_INVALID_TOKEN               FailedReason = "INVALID_TOKEN"
	REASON_SPOOFED_LOGIN               FailedReason = "SPOOFED_LOGIN"
	REASON_INVALID_TOTP                FailedReason = "INVALID_TOTP"
	REASON_U2F_FAILED                  FailedReason = "U2F_FAILED"
	REASON_U2FY_FAILED                 FailedReason = "U2FY_FAILED"
	REASON_TIME_POLICY_FAILED          FailedReason = "TIME_POLICY_FAILED"
	REASON_IP_POLICY_FAILED            FailedReason = "IP_POLICY_FAILED"
	REASON_POLICY_EXPIRED              FailedReason = "POLICY_EXPIRED"
	REASON_ADHOC_POLICY_FAILED         FailedReason = "ADHOC_POLICY_FAILED"
	REASON_NO_POLICY_ASSIGNED          FailedReason = "NO_POLICY_ASSIGNED"

	REASON_INVALID_PRIVILEGE      FailedReason = "INVALID_PRIVILEGE"
	REASON_LDAP_AUTH_FAILED       FailedReason = "LDAP_AUTH_FAILED"
	REASON_UNKNOWN                FailedReason = "UNKNOWN"
	REASON_TRASA_ERROR            FailedReason = "TRASA_ERROR"
	REASON_HOST_NOT_REACHABLE     FailedReason = "HOST_NOT_REACHABLE"
	REASON_DYNAMIC_SERVICE_FAILED FailedReason = "DYNAMIC_SERVICE_FAILED"
	REASON_COUNTRY_POLICY_FAILED  FailedReason = "COUNTRY_POLICY_FAILED"

	REASON_DEVICE_POLICY_FAILED FailedReason = "DEVICE_POLICY_FAILED"
	REASON_DEVICE_NOT_ENROLLED  FailedReason = "DEVICE_NOT_ENROLLED"

	REASON_PASSWORD_POLICY_FAILED    FailedReason = "PASSWORD_POLICY_FAILED"
	REASON_INVALID_HOST_KEY          FailedReason = "INVALID_HOST_KEY"
	REASON_FILE_TRANSFER_NOT_ALLOWED FailedReason = "FILE_TRANSFER_NOT_ALLOWED"
)

type SSH_AUTH_TYPE

type SSH_AUTH_TYPE string

type TokenExpiryTime

type TokenExpiryTime int

type VerifyTokenIntent

type VerifyTokenIntent string

const (
	VERIFY_TOKEN_CHANGEPASS VerifyTokenIntent = "VERIFY_TOKEN_CHANGEPASS"
	VERIFY_TOKEN_TFA        VerifyTokenIntent = "VERIFY_TOKEN_TFA"
)