rosstimothy 553eb02bdf Fix moderated session presence checking (#25988) ...

* Fix moderated session presence checking

Addresses all of the issues that were preventing presence checking during
moderated sessions from working as described in
[#18092](https://github.com/gravitational/teleport/issues/18092#issuecomment-1540900859).

Closes #18092

* make presence test clearer

* fix presence checking on the web ui

* Refactor web socket message handling

A single message processing loop handles retrieving the envelope
and passing it off to individual message handlers. This allows all
messages to be processed outside of `Read` which was dependent on
the terminal being active to process any messages.

The webauthn challenge response was also moved from a raw message
to a webauthn message. By sending it as a raw message it made
presence checking fail because the response has a `t` in it which
caused the session to be killed during moderated sessions.

* enforce mfa ceremony when joining and cluster wide mfa is enabled

* fix conflicts with master

* moderated tests

* Add moderated session tests for the UI

* Add moderated session integration test

* fix lints

* clean up presence test

* refactor envelope handling

* fix build

* fix: revert test debug timeout

* fix: use local context in tests

* simplify closing streams

* generalize waitForOutput to work with an io.Reader

* fix error handling in stream close

* unexport PresenceOptions

* Improve waitForOutput to match against output in successive reads

2023-06-08 20:27:13 +00:00

..

conntest

Add connection tester for SQL Server databases (#24690)

2023-05-15 23:37:05 +00:00

db

refactor tsh db (#26182)

2023-05-19 21:37:11 +00:00

escape

Update golangci-lint to 1.49.0 (#16507)

2022-09-19 22:38:59 +00:00

identityfile

Add Support for Oracle protocol (#23227)

2023-03-31 17:35:21 +00:00

terminal

Run GCI as make fix-imports (#17956)

2022-11-04 15:46:46 +00:00

tncon

tncon: Remove unused return variables (#27278)

2023-06-05 15:15:33 +00:00

alpn.go

Support App access behind load balancer (#22565)

2023-03-14 13:47:41 +00:00

api_login_test.go

Auto-enroll devices on user login (#25599)

2023-05-05 14:11:44 +00:00

api_test.go

Fix TeleportClient.ConnectToProxy logic error with closed context. (#27090)

2023-05-31 06:50:58 +00:00

api.go

Fix moderated session presence checking (#25988)

2023-06-08 20:27:13 +00:00

ca_export_test.go

Migrate GetCertAuthorities to gRPC (#22985)

2023-03-14 14:45:01 +00:00

ca_export.go

Export CRL and Database CA in DER format (#22578)

2023-03-10 14:30:07 +00:00

client_store_test.go

Client store generalization (#19420)

2023-01-06 01:34:04 +00:00

client_store.go

TLS Routing behind ALB: tsh kube subcommands UX (#26305)

2023-05-30 16:29:17 +00:00

client_test.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

client.go

Fix moderated session presence checking (#25988)

2023-06-08 20:27:13 +00:00

cluster_client.go

Revert usage of grpc error interceptors in lib/client (#26169)

2023-05-15 15:02:24 +00:00

export_test.go

Add tsh e2e tests with various security features enabled (#26862)

2023-06-06 01:25:09 +00:00

export.go

Windows Webauthn connect with webauthncli package

2022-10-14 09:59:24 +02:00

fuzz_test.go

oss fuzz integration (#13473)

2022-06-18 21:28:07 +00:00

https_client_test.go

Set extra proxy headers in all tsh HTTP requests (#19766)

2023-01-11 10:29:05 +00:00

https_client.go

Add a dedicated client to communicate with the Proxy SSH server (#22629)

2023-03-15 13:41:56 +00:00

interfaces.go

Remove duplicate imports (#24736)

2023-04-18 19:08:26 +00:00

keyagent_test.go

Fix identity file relogin issue (#20452)

2023-01-30 18:07:35 +00:00

keyagent.go

Fix tsh kube credentials fails on remove cluster for the first time (#23252)

2023-03-20 17:20:22 +00:00

keystore_test.go

Client store generalization (#19420)

2023-01-06 01:34:04 +00:00

keystore.go

Add kube credentials lockfile to prevent possibility of excessive login attempts (#26102)

2023-06-05 12:56:43 +00:00

known_hosts_migrate_test.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

known_hosts_migrate.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

kubesession.go

Fix moderated session presence checking (#25988)

2023-06-08 20:27:13 +00:00

local_proxy_middleware.go

Move db cert renewal message to debug log (#25097)

2023-04-26 16:41:36 +00:00

mfa_test.go

Decrease test timeout (#26164)

2023-05-15 15:55:19 +00:00

mfa.go

Return a better message on "lacks registered credentials" errors (#26079)

2023-05-11 19:07:31 +00:00

player_test.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

player.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

presence.go

Fix moderated session presence checking (#25988)

2023-06-08 20:27:13 +00:00

profile_test.go

TLS Routing behind ALB: tsh kube subcommands UX (#26305)

2023-05-30 16:29:17 +00:00

profile.go

Enable use of user traits in label expressions (#27138)

2023-06-08 06:21:11 +00:00

redirect.go

Set extra proxy headers in all tsh HTTP requests (#19766)

2023-01-11 10:29:05 +00:00

session.go

Fix moderated session presence checking (#25988)

2023-06-08 20:27:13 +00:00

trusted_certs_store_test.go

Fix identity file relogin issue (#20452)

2023-01-30 18:07:35 +00:00

trusted_certs_store.go

Fix identity file relogin issue (#20452)

2023-01-30 18:07:35 +00:00

weblogin_test.go

feat: early feedback for successful security key taps (#21691)

2023-02-13 23:23:38 +00:00

weblogin.go

Headless SSO web endpoint and UI (#22914)

2023-03-22 15:16:09 +00:00

x11_session.go

Trace ssh sessions (#14966)

2022-08-04 22:14:37 +00:00