pangolin_mirror/pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-10-29 15:09:07 +01:00
Code Issues Packages Projects Releases Wiki Activity
8,846 Commits 21 Branches 99 Tags
3bb89467c12c9ee32bc76e20b00bf64c5912e95a
Commit Graph
3463 Commits
Author SHA1 Message Date
Owen 8ff05c0ec3 Start pulling cert at 15 days (due to cert update) 2026-09-30 14:01:17 -04:00
miloschwartz a46fc531d4 show exit nodes in resource launcher 2026-09-29 17:05:07 -04:00
Owen c0c0cfb18a Support exit-node as an alias for gateway type private resources 2026-09-29 13:59:46 -04:00
mr-pmillzandClaude Opus 5.5 4cb620f46b Fix Integration API organization delete (regression of #1376) 
DELETE /v1/org/{orgId} on the Integration API always returned
500 "An error occurred..." and left the organization in place, even for a
root API key holding the deleteOrg action. The handler looked up the
caller's ownership with req.user!.userId, but Integration API requests are
authenticated by verifyApiKey, which sets req.apiKey and never req.user,
so the lookup threw "Cannot read properties of undefined (reading
'userId')".

#1376 was fixed in f37eda47 by dropping the user-only permission check;
79cf7c84 later added the owner check to the handler shared by both
routers, reintroducing the failure for API keys.

Keep the owner check for dashboard sessions. For Integration API keys the
route is already restricted by verifyApiKeyIsRoot and
verifyApiKeyHasAction(deleteOrg), so load the organization directly. Both
paths still refuse a billing organization and return the same 404 for an
unknown organization.

Verified against a local SQLite instance with a root key: before the
change, create returned 201 and delete returned 500 with the organization
still present; after it, delete returns 200 and a repeated delete or GET
returns 404. npx tsc --noEmit passes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-09-29 11:09:18 -04:00
Owen c92b2f22ba Update version 2026-09-29 11:02:37 -04:00
Owen e3ce453155 Send disconnect messages if the session is bad 2026-09-29 10:24:59 -04:00
Owen 97e0c19276 Add migrations 2026-09-28 20:39:38 -04:00
Owen 393af877c9 Merge branch 'dev' of github.com:fosrl/pangolin into dev 2026-09-28 20:34:31 -04:00
Owen d859576835 Merge branch 'site-exit-node' into dev 2026-09-28 20:34:21 -04:00
miloschwartz fa37599819 update mac models 2026-09-28 09:24:49 -04:00
Fred KISSIE dfe4314a5b ♻️ refactor 2026-09-25 21:10:52 +02:00
Owen 90848581a1 Push gateway updates to clients 2026-09-25 11:51:38 -04:00
Owen Schwartz 4a20a66791 Merge pull request #3811 from Fra146/feature-badger-headers-config 
Add config options and badger options injection
 2026-09-25 09:40:05 -04:00
Owen 37ed8997f2 Add fist pass of mtls support 2026-09-24 16:56:57 -04:00
Owen 6ddb1550e9 Export blueprint functionality 2026-09-24 16:31:54 -04:00
Owen e92911e7c8 Use formatEndpoint where appropriate 
Fixes fosrl/newt#454
 2026-09-24 14:34:54 -04:00
Owen ed28d34945 Support batched relay,unrelay,local,unlocal messages 2026-09-24 11:56:10 -04:00
Owen e68963b852 Add comments about not processing gateway 2026-09-24 09:49:09 -04:00
Owen 021626d382 Send gateway resources downstream like cidr resources to newt 2026-09-24 09:49:09 -04:00
Owen 118120c9ce Create gateway resources in blueprints 2026-09-24 09:49:09 -04:00
Owen 3378125f8e Can create gateway resource 2026-09-24 09:49:09 -04:00
Owen a17b870ed2 Adding gateway resources 2026-09-24 09:49:08 -04:00
Owen Schwartz 9aa2adadf6 Merge pull request #3797 from MauryaQbit/fix/ai-gateway-302-api-clients 
fix(ai-gateway): return JSON auth error instead of 302 for API clients on inference resources
 2026-09-24 09:36:52 -04:00
Fra146 7ad56a8bae Add config options and badger options injection 2026-09-24 11:42:05 +02:00
Fred KISSIE 5430e5687c ♻️ Show popup for invalid redirect resource domain 2026-09-23 21:22:43 +02:00
Fred KISSIE 0b0f62d8de ♻️ fix types and validate destination Host correcly 2026-09-23 21:00:26 +02:00
Fred KISSIE 14fda9cec0 ♻️ Force disable redirects when domain is missing attached resource domain 2026-09-23 20:49:45 +02:00
Owen 29d93a574b Fix optional() type errors 2026-09-23 14:48:05 -04:00
Owen d406cc61b5 Pull jit limit from org 2026-09-23 10:40:21 -04:00
Owen 6ec37220d6 Remove default from server 
Fixes #3804
 2026-09-23 10:33:49 -04:00
Fred KISSIE ca18320ca3 Merge branch 'dev' into feat/redirect-tables 2026-09-22 22:36:53 +02:00
Owen 70f677a277 Don't allow personal and non-personal keys at the same time 2026-09-22 10:40:47 -04:00
Owen d38281b9f7 Update language and add debug 2026-09-22 10:37:52 -04:00
Owen 0364257e68 Pick key based on tier ranked 2026-09-22 09:45:11 -04:00
Owen 750f267451 Try to link email to org when creating for first time 2026-09-21 16:25:58 -04:00
Owen 0c752c9c29 Merge branch 'main' into dev 2026-09-21 15:21:12 -04:00
Owen Schwartz 3392120855 Merge pull request #3172 from Gulianrdgd/feature-response-headers 
Feature response headers
 2026-09-21 15:16:24 -04:00
Owen Schwartz 8fcffe2202 Merge pull request #3590 from shleeable/patch-2 
Add guard on resource policy change
 2026-09-21 15:05:22 -04:00
Owen Schwartz af1cda6278 Merge pull request #3510 from shubhamsinnh/codex/fix-integration-site-resource 
Fix integration API site resource lookup
 2026-09-21 15:01:37 -04:00
Owen Schwartz ee08bc8927 Merge pull request #3599 from shleeable/patch-13 
Typo: Update verifyApiKeyAccess to use generated apiKey.apiKeyOrg?.orgId data
 2026-09-21 14:36:38 -04:00
Owen Schwartz cf22bd1a13 Merge pull request #3600 from shleeable/patch-14 
Typo: Fix error to be correctly related to newt
 2026-09-21 14:35:26 -04:00
Owen Schwartz 085e85f652 Merge pull request #3592 from shleeable/patch-6 
Typo: eq(sites.orgId, sites.orgId), same same
 2026-09-21 14:34:36 -04:00
Owen Schwartz c7222b67b9 Merge pull request #3591 from shleeable/patch-5 
Typo: Update exportConnectionAuditLog.ts to use MAX_EXPORT_LIMIT
 2026-09-21 14:33:22 -04:00
Dhananjay Maurya 0b3329939b fix(ai-gateway): return JSON auth error instead of 302 for API clients on inference resources 2026-09-21 23:44:15 +05:30
Owen Schwartz 7e188ffae6 Merge pull request #3738 from breken-ai/fix/path-rule-percent-encoding 
▚▚ fix(rules): decode percent-encoded PATH rule patterns before matching
 2026-09-21 13:55:25 -04:00
Owen Schwartz 74d10acad9 Merge pull request #3704 from Blacks-Army/feat/http-method-rules 
Add HTTP method matching to resource rules
 2026-09-21 11:44:54 -04:00
Owen Schwartz f5018073ef Merge pull request #3785 from Tyagiquamar/fix/sqlite-single-backup-per-upgrade 
fix(sqlite): tag per-migration database backups with version and prevent collisions
 2026-09-21 11:39:40 -04:00
Owen f71b9e7c54 Merge branch 'dev' of github.com:fosrl/pangolin into dev 2026-09-21 10:48:32 -04:00
Owen 6f3e0cf5a6 Time is un utc 2026-09-21 10:18:45 -04:00
miloschwartz d4488ec125 update ios identifiers 2026-09-21 09:57:03 -04:00