Milo Schwartz
d25181118c
make auth page custom domains available in ee ( #3957 )
2026-10-21 18:07:31 -04:00
Owen Schwartz
4ad3a18c6d
Merge pull request #3948 from fosrl/dev
...
1.15.0
2026-10-21 11:30:03 -04:00
Owen
2b3639c525
Support redirects
2026-10-21 11:09:50 -04:00
Owen
1e675f824b
Add email whitelist remote header to response
2026-10-20 16:15:22 -04:00
Owen
d80c1ff27b
License machines
2026-10-20 15:29:37 -04:00
Owen
ee8724f117
Move the offline intervals to the regular config
2026-10-20 12:15:46 -04:00
Owen
d02d2f79ba
Make sure the MTLS is enforced for redirects
2026-10-20 11:53:44 -04:00
Owen
3510054a92
MTLS for all public resources
2026-10-20 11:51:43 -04:00
Owen
de62f9c6c9
Put the mtls on the policy creation screen
2026-10-20 10:21:10 -04:00
Owen
f4140fd6f6
Add mtls to blueprint, policy, and oss getTraefikConfig
2026-10-20 10:02:44 -04:00
Owen
ec184cdf33
Fix tier matrix bugs
2026-10-19 17:25:02 -04:00
Owen
a56e67f852
Move mtls out of private
2026-10-19 16:58:45 -04:00
Owen
ab4c105e75
Make rekey not private and in integration api
2026-10-19 16:55:10 -04:00
Owen Schwartz
0842e6df53
Merge pull request #3930 from fosrl/dev
...
Fix dynamic -> private import
2026-10-19 14:42:56 -04:00
Owen
4dcae5ff58
Fix dynamic -> private import
2026-10-19 14:40:43 -04:00
Owen Schwartz
22f42e225b
Merge pull request #3877 from MauryaQbit/fix/csv-injection-in-generate-csv
...
Neutralise formula prefixes in CSV log exports
2026-10-19 13:41:23 -04:00
Owen
7ffd46f133
Merge branch 'main' into dev
2026-10-19 11:04:49 -04:00
Owen
8fe55d10b8
Fix cluster license registration
2026-10-16 15:28:40 -04:00
Owen
2817af1816
Move mtls routes to private
2026-10-16 12:16:51 -04:00
Owen
0866456605
Quiet log
2026-10-16 10:58:49 -04:00
miloschwartz and Cursor
49c012800a
Merge branch 'dev' into feat/redirect-tables
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-15 16:59:32 -04:00
miloschwartz
d8c8fbc1c7
add hybrid route for remote nodes
2026-10-15 16:04:10 -04:00
Owen
1d567245d3
Import the right cache
2026-10-15 14:38:08 -04:00
miloschwartz
89f6748a1b
Merge branch 'dev' into feat/redirect-tables
2026-10-15 11:47:55 -04:00
Owen
3601ca17f1
Manage cert enabled with leader election
2026-10-14 15:30:58 -04:00
Owen
2f65a8c124
Make offline checking intervals configurable
...
Fixes #3855
2026-10-13 09:35:09 -04:00
Owen
b43709903d
Add support for configuring load balancing strategy
2026-10-12 16:47:12 -04:00
Owen
cccc2d1200
Merge branch 'mtls' into dev
2026-10-12 16:25:25 -04:00
Owen
148bcd9d1b
Merge branch 'machine-roles' into dev
2026-10-12 16:25:13 -04:00
Owen
3d590493d6
Fix relayPort missing from list
2026-10-12 15:33:52 -04:00
Dhananjay Maurya
bae174766b
Neutralise formula prefixes in CSV log exports
...
generateCSV escaped quotes only when a value happened to contain a comma and never neutralised formula prefixes, so every CSV log export could emit attacker controlled cells that execute when an admin opens the file. actor is a virtual API key name validated as nothing more than a non-empty string, and path, host, originalRequestURL, metadata and the AI session bodies come straight from the client request.
Each value now goes through a single encoder that collapses CR, LF and CRLF to a literal \n so a record can never be split across rows, prefixes a leading apostrophe when the first character would make a spreadsheet evaluate the cell as a formula, and quotes whenever the field contains a comma or a quote instead of only when it contains a comma. Headers use the same encoder so a column name cannot desynchronise the rows from the header row.
The five CSV export endpoints also declare charset=utf-8, matching the content type already used by the log streaming destination.
Fixes #3864
2026-10-08 14:43:43 +05:30
TiltedTeapot
3712921048
Propogated Changes. listen port is now accessed from db instead of config
2026-10-06 18:21:05 -06:00
Owen
bc2920af23
Support machine clients added to roles
2026-10-01 15:58:25 -04:00
Owen
e3ce453155
Send disconnect messages if the session is bad
2026-09-29 10:24:59 -04:00
Owen
37ed8997f2
Add fist pass of mtls support
2026-09-24 16:56:57 -04:00
Owen
ed28d34945
Support batched relay,unrelay,local,unlocal messages
2026-09-24 11:56:10 -04:00
Fred KISSIE
14fda9cec0
♻️ Force disable redirects when domain is missing attached resource domain
2026-09-23 20:49:45 +02:00
Fred KISSIE
ca18320ca3
Merge branch 'dev' into feat/redirect-tables
2026-09-22 22:36:53 +02:00
Owen
70f677a277
Don't allow personal and non-personal keys at the same time
2026-09-22 10:40:47 -04:00
Owen
d38281b9f7
Update language and add debug
2026-09-22 10:37:52 -04:00
Owen
0364257e68
Pick key based on tier ranked
2026-09-22 09:45:11 -04:00
Owen
750f267451
Try to link email to org when creating for first time
2026-09-21 16:25:58 -04:00
Owen
0c752c9c29
Merge branch 'main' into dev
2026-09-21 15:21:12 -04:00
Owen Schwartz
3392120855
Merge pull request #3172 from Gulianrdgd/feature-response-headers
...
Feature response headers
2026-09-21 15:16:24 -04:00
Owen Schwartz
c7222b67b9
Merge pull request #3591 from shleeable/patch-5
...
Typo: Update exportConnectionAuditLog.ts to use MAX_EXPORT_LIMIT
2026-09-21 14:33:22 -04:00
Fred KISSIE
57b80bf74e
♻️ Add ssl field to redirects and add traefik config to public file
2026-09-18 23:38:46 +02:00
Fred KISSIE
67f45023db
Merge branch 'dev' into feat/redirect-tables
2026-09-18 20:59:18 +02:00
Fred KISSIE
ec36317057
✨ finish redirect traefik config
2026-09-17 21:32:55 +02:00
Fred KISSIE
c51bcbb578
🚧 wip: traefik config for redirect
2026-09-16 19:30:10 +02:00
Owen
65ccd5a89d
Enhance error handling for subscription lifecycle events in billing hooks
2026-09-16 12:11:25 -04:00
Milo Schwartz