Axonius-api-client

AXONSHELL

AXONSHELL fixes

- axonshell certs from-file

'tuple' object has no attribute 'to_str'


- axonshell certs gui-get

** ERROR: WRAPPED EXCEPTION: builtins.FileNotFoundError
[Errno 2] No such file or directory: '/Users/jimbo/gh/Axonius/axonapi/10.20.3.233.pem'


AXONSHELL enhancments

- axonshell certs *
- add a barrier between each certificate printed out in str format

API Library

API Library fixes

- axonius_api_client.http.Http - fix requests environment variable merging
- If OS Environment variable `REQUESTS_CA_BUNDLE` exists, it would replace the supplied certpath causing SSL verification to fail.
- Fixed by passing in values from session instead of None.

**Full Changelog**: https://github.com/Axonius/axonius_api_client/compare/4.20.1...4.20.2

AXONSHELL

AXONSHELL fixes

AXONSHELL enhancments
- tweaks/minor fixes to numerous commands

- NEW ENVIRONMENT VARIABLES:
- AX_USER_AGENT: if set, will override the User Agent used internally

- NEW COMMAND GROUP: axonshell certs - work with SSL certificates
- axonshell certs ca-enable - enable/disable custom CAs setting in GUI
- axonshell certs ca-add - add a custom CA to the GUI from a file
- axonshell certs ca-remove - remove a custom CA from the GUI
- axonshell certs ca-get - get the current custom CAs in GUI
- axonshell certs gui-info - get basic info about the current SSL cert in GUI
- axonshell certs gui-reset - revert the GUI SSL cert to the one generated at install time
- axonshell certs gui-update - update the GUI SSL cert with a cert & key file
- axonshell certs csr-get - get the pending CSR
- axonshell certs csr-create - create a CSR
- axonshell certs csr-cancel - cancel a pending CSR
- axonshell certs from-file - display / convert certs from a PEM/PKCS7/DER file to PEM/str/json
- axonshell certs from-url - display / convert cert chain from a URL to PEM/str/json

- REMOVED COMMANDS:
- axonshell tools convert-cert - use axonshell certs from-file as a replacement

API Library

API Library fixes

API Library Enhancements
- package:
- numerous improvements to axonius_api_client.http.Http
- NEW MODULES:
- cert_human - to add tooling for working with SSL certs

- NEW DEPENDENCIES:
- asn1crypto>=1.4.0 for working with SSL certs

- NEW ENVIRONMENT VARIABLES:
- AX_USER_AGENT: if set, will override the User Agent used internally

- NEW METHODS:
- settings_global.ca_enable - enable/disable custom CAs setting in GUI
- settings_global.check_cert_is_ca - check if a cert is a CA cert
- settings_global.ca_add_path - add a custom CA to the GUI from a file
- settings_global.ca_add - add a custom CA to the GUI from bytes/str
- settings_global.cas_to_str - pretty print the custom CAs currently in GUI
- settings_global.ca_remove - remove a custom CA from the GUI
- settings_global.ca_get - get the current custom CAs in GUI
- settings_global.gui_cert_info - get basic info about the current SSL cert in GUI
- settings_global.gui_cert_reset - revert the GUI SSL cert to the one generated at install time
- settings_global.gui_cert_update_path - update the GUI SSL cert with a cert & key file
- settings_global.gui_cert_update - update the GUI SSL cert with a cert & key bytes/str
- settings_global.csr_get - get the pending CSR
- settings_global.csr_create - create a CSR
- settings_global.csr_cancel - cancel a pending CSR
- settings_global._cert_uploaded - direct API method
- settings_global._gui_cert_update - direct API method
- settings_global._gui_cert_reset - direct API method
- settings_global._cert_settings - direct API method
- settings_global._gui_cert_info - direct API method
- settings_global._csr_get - direct API method
- settings_global._csr_cancel - direct API method
- settings_global._csr_create - direct API method

What's Changed
* Feature/install ssl cert by nate-axonius in https://github.com/Axonius/axonius_api_client/pull/175


**Full Changelog**: https://github.com/Axonius/axonius_api_client/compare/4.20.0...4.20.1

AXONSHELL

AXONSHELL fixes

- axonshell devices get*: remove 'base' from export_format
- axonshell adapters cnx *: was not prompting due to issue with fetching schemas
- axonshell *: many fixes to commands that were not tested previously

AXONSHELL enhancments

- open-api get-spec: add gen version/date to OAS output file
- axonshell devices saved-query *: add more metadata to --export-format str
- axonshell devices saved-query *: add table as --export-format
- adapters cnx *: reworked from the ground up, prompting with more verbose output, better validation, and more...
- NEW ARGUMENT: devices/users get: --fields-regex-root-only: to exclude complex field sub fields from selection
- NEW ARGUMENT: root group: --log-file-rotate: to force the log file to rotate
- NEW ARGUMENT: system discover start add: --wait: wait until discover finishes before returning
- NEW COMMAND: devices/users saved_query update-name
- NEW COMMAND: devices/users saved_query update-description
- NEW COMMAND: devices/users saved_query update-private
- NEW COMMAND: devices/users saved_query update-always-cached
- NEW COMMAND: devices/users saved_query update-tags
- NEW COMMAND: devices/users saved_query update-page_size
- NEW COMMAND: devices/users saved_query update-sort
- NEW COMMAND: devices/users saved_query update-query
- NEW COMMAND: devices/users saved_query update-fields
- NEW COMMAND: devices/users saved_query copy

API Library

API Library fixes

- devices/users.get explode=True would only populate values for the first entry
- devices/users.saved_query.validate with fields_regex should not return "all" field
- devices/users.saved_query.validate with fields_regex should not return "raw_data" field
- devices/users.saved_query.add/update: SQ 'query_type' not always returned, added safe default
- devices/users.saved_query.*: SQ gui page sizes now 20,50,100, not 25,50,100
- devices/users.get: table export format was not paying attention to table_format
- devices/users.get: table export format was not paying attention to table_max_rows
- query wizard: query building was failing, double quotes are now needed around field name
- adapters.get: get_clients=True throwing exception
- package: add pyOpenSSL as dependency
- package: many underlying fixes done to ApiEndpoints, API models, and dataclass models & schemas
- package: coverage increase from 76% to 96%

API Library Enhancements

- data models: add support for dataclasses to be referenced as dictionaries
- devices.saved_query.get*: sq as dataclass or dict
- devices.saved_query.*: notfounderror show more metadata on each SQ
- NEW ARGUMENT: devices/users.fields.validate: 'fields_regex_root_only' to exclude complex field sub fields from selection
- NEW ARGUMENT: devices.saved_query.add(): 'asset_scope' and 'wiz_entries'
- NEW METHOD: devices/users.saved_query.copy
- NEW METHOD: devices/users.saved_query.get_by_multi
- NEW METHOD: devices/users.saved_query.update_always_cached
- NEW METHOD: devices/users.saved_query.update_description
- NEW METHOD: devices/users.saved_query.update_fields
- NEW METHOD: devices/users.saved_query.update_name
- NEW METHOD: devices/users.saved_query.update_page_size
- NEW METHOD: devices/users.saved_query.update_private
- NEW METHOD: devices/users.saved_query.update_query
- NEW METHOD: devices/users.saved_query.update_sort
- NEW METHOD: devices/users.saved_query.update_tags
- package: remove raw_data feature, built in to product now

AXONSHELL

FIXES

- deleting saved query now prints the name correctly

NEW COMMANDS

n/a

NEW ARGUMENTS

n/a

ENHANCEMENTS

n/a

API Library

FIXES

QUERY WIZARD

- compOp must be empty string!
- field must be saved_query not specific_data.sq!
- add index for parent expression entries
- temp. disabled column filters due to object shape change

NEW METHODS

n/a

NEW ARGUMENTS

n/a

ENHANCEMENTS

n/a

AXONSHELL

FIXES

n/a

NEW COMMANDS

n/a

NEW ARGUMENTS

n/a

ENHANCEMENTS

n/a

API Library

FIXES

NEW METHODS

n/a

NEW ARGUMENTS

n/a

ENHANCEMENTS

Field schemas
- Unknown/unexpected field schemas will no longer error out
- they will now throw a warning and fallback to a string type

API Query Wizard

- Added saved query support via:
simple sq equals $NAME_OF_SQ

AXONSHELL

FIXES

n/a

NEW COMMANDS

n/a

NEW ARGUMENTS

n/a

ENHANCEMENTS

n/a

API Library

FIXES

devices/users.get

- Performance improved when using 'field_explode': no longer using copy.deepcopy()

NEW METHODS

n/a

NEW ARGUMENTS

n/a

ENHANCEMENTS

- Add debug timing for asset callbacks
- Improved handling for non-strict schemas
- Add support for new field format 'string-date'