Milo Schwartz
d25181118c
make auth page custom domains available in ee ( #3957 )
2026-10-21 18:07:31 -04:00
Owen Schwartz
4ad3a18c6d
Merge pull request #3948 from fosrl/dev
...
1.15.0
2026-10-21 11:30:03 -04:00
Owen
1e675f824b
Add email whitelist remote header to response
2026-10-20 16:15:22 -04:00
Owen
d80c1ff27b
License machines
2026-10-20 15:29:37 -04:00
Owen
ee8724f117
Move the offline intervals to the regular config
2026-10-20 12:15:46 -04:00
Owen
3510054a92
MTLS for all public resources
2026-10-20 11:51:43 -04:00
Owen
de62f9c6c9
Put the mtls on the policy creation screen
2026-10-20 10:21:10 -04:00
Owen
f4140fd6f6
Add mtls to blueprint, policy, and oss getTraefikConfig
2026-10-20 10:02:44 -04:00
Owen
ec184cdf33
Fix tier matrix bugs
2026-10-19 17:25:02 -04:00
Owen
a56e67f852
Move mtls out of private
2026-10-19 16:58:45 -04:00
Owen
ab4c105e75
Make rekey not private and in integration api
2026-10-19 16:55:10 -04:00
Owen Schwartz
0842e6df53
Merge pull request #3930 from fosrl/dev
...
Fix dynamic -> private import
2026-10-19 14:42:56 -04:00
Owen
4dcae5ff58
Fix dynamic -> private import
2026-10-19 14:40:43 -04:00
Owen Schwartz
22f42e225b
Merge pull request #3877 from MauryaQbit/fix/csv-injection-in-generate-csv
...
Neutralise formula prefixes in CSV log exports
2026-10-19 13:41:23 -04:00
Owen
2817af1816
Move mtls routes to private
2026-10-16 12:16:51 -04:00
miloschwartz
d8c8fbc1c7
add hybrid route for remote nodes
2026-10-15 16:04:10 -04:00
Owen
2f65a8c124
Make offline checking intervals configurable
...
Fixes #3855
2026-10-13 09:35:09 -04:00
Owen
cccc2d1200
Merge branch 'mtls' into dev
2026-10-12 16:25:25 -04:00
Owen
148bcd9d1b
Merge branch 'machine-roles' into dev
2026-10-12 16:25:13 -04:00
Dhananjay Maurya
bae174766b
Neutralise formula prefixes in CSV log exports
...
generateCSV escaped quotes only when a value happened to contain a comma and never neutralised formula prefixes, so every CSV log export could emit attacker controlled cells that execute when an admin opens the file. actor is a virtual API key name validated as nothing more than a non-empty string, and path, host, originalRequestURL, metadata and the AI session bodies come straight from the client request.
Each value now goes through a single encoder that collapses CR, LF and CRLF to a literal \n so a record can never be split across rows, prefixes a leading apostrophe when the first character would make a spreadsheet evaluate the cell as a formula, and quotes whenever the field contains a comma or a quote instead of only when it contains a comma. Headers use the same encoder so a column name cannot desynchronise the rows from the header row.
The five CSV export endpoints also declare charset=utf-8, matching the content type already used by the log streaming destination.
Fixes #3864
2026-10-08 14:43:43 +05:30
TiltedTeapot
3712921048
Propogated Changes. listen port is now accessed from db instead of config
2026-10-06 18:21:05 -06:00
Owen
bc2920af23
Support machine clients added to roles
2026-10-01 15:58:25 -04:00
Owen
e3ce453155
Send disconnect messages if the session is bad
2026-09-29 10:24:59 -04:00
Owen
37ed8997f2
Add fist pass of mtls support
2026-09-24 16:56:57 -04:00
Owen Schwartz
c7222b67b9
Merge pull request #3591 from shleeable/patch-5
...
Typo: Update exportConnectionAuditLog.ts to use MAX_EXPORT_LIMIT
2026-09-21 14:33:22 -04:00
Owen
65ccd5a89d
Enhance error handling for subscription lifecycle events in billing hooks
2026-09-16 12:11:25 -04:00
Owen
76a4f50ccf
Update how billing is presented for license keys
2026-09-16 11:42:19 -04:00
Owen
324f3e50ff
Add license tiers
2026-09-15 16:25:53 -04:00
Owen
c6c443f0e0
Remove optional before prefault for zod v4
2026-09-15 10:25:21 -04:00
Owen
e4a8e9ac8c
Add region from config file
2026-09-14 16:48:10 -04:00
Owen
7e4d38548f
Add certificate generation
2026-09-14 16:48:09 -04:00
Owen
0f69012c4d
Fix circular import
2026-09-14 16:48:07 -04:00
Owen
ba2eb87f20
Widen subnet
2026-09-14 16:48:07 -04:00
Owen
c0ea32863c
Quiet up error logs
2026-09-14 16:48:07 -04:00
Owen
1d3dcec4c8
Use endpoint instead of reachableAt for remote nodes
2026-09-14 16:48:07 -04:00
Owen
54bbe82504
Dont log invalid message type
...
Fixes #3695
2026-09-04 09:06:58 -04:00
Owen Schwartz
c36cf698c1
Merge pull request #3627 from fosrl/feat/ip-filtering
...
feat: Add IP column filtering to tables
2026-08-31 16:59:34 -04:00
Owen
a02d16fd58
Handle compression of ai session logs
2026-08-26 11:28:14 -04:00
Owen
e57826d6e0
Session logs and usage logs should use seconds not ms
2026-08-26 10:50:16 -04:00
Fred KISSIE
d00b9478a2
Merge branch 'dev' into feat/ip-filtering
2026-08-24 22:06:55 +02:00
Fred KISSIE
4ddf36ebcc
💄 some last UI fixes
2026-08-24 20:39:30 +02:00
miloschwartz
2051e5df37
fix syntax
2026-08-24 14:32:52 -04:00
Owen
9b0e049a21
Scope exit node creation to orgs
2026-08-24 10:44:54 -04:00
Fred KISSIE
28b32fe6f7
🏷️ fix types
2026-08-21 23:26:18 +02:00
Fred KISSIE
adfb6003d9
Merge branch 'dev' into feat/ip-filtering
2026-08-21 23:24:09 +02:00
Owen
19ce236262
Support AI session log streaming
2026-08-21 17:22:00 -04:00
Fred KISSIE
6a5ecab013
✨ Implement IP filtering for admin access logs
2026-08-21 22:49:45 +02:00
Owen
4229ef9173
Change log to warn
2026-08-21 14:03:36 -04:00
Owen
59f286299e
Move the request log to be public
2026-08-21 13:41:45 -04:00
Owen
2e87927b83
Remove unused use_subdomain
2026-08-21 10:21:21 -04:00
Milo Schwartz