Vlad
af8f730bda
[management] check stream start time for connecting peer ( #5267 )
2026-02-06 18:00:43 +01:00
pascal
adbd7ab4c3
send account updates on proxy change
2026-02-06 17:03:18 +01:00
pascal
0419834482
add routed exposed services support in nmap
2026-02-06 15:42:13 +01:00
pascal
d6e35bd0fe
fix merge conflicts
2026-02-05 15:22:23 +01:00
pascal
0e00f1c8f7
Merge remote-tracking branch 'origin/prototype/reverse-proxy-clusters' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/manager/manager.go
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/modules.go
# management/internals/shared/grpc/proxy.go
# management/server/http/handler.go
# management/server/http/testing/testing_tools/channel/channel.go
2026-02-05 15:19:57 +01:00
mlsmaycon
5ccce1ab3f
add debug logging for proxy connections and domain resolution
...
- Log proxy address and cluster info when proxy connects
- Log connected proxy URLs when GetConnectedProxyURLs is called
- Log proxy allow list when GetDomains is called
- Helps debug issues with free domains not appearing in API response
2026-02-05 02:18:38 +01:00
pascal
096d4ac529
rewrite peer creation and network map calc [WIP]
2026-02-04 20:01:00 +01:00
Alisdair MacLeod
694ae13418
add stateless proxy sessions
2026-02-04 16:52:35 +00:00
Alisdair MacLeod
a0005a604e
fix minor potential security issues with OIDC
2026-02-04 12:25:19 +00:00
Alisdair MacLeod
28f3354ffa
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/boot.go
# management/internals/shared/grpc/proxy.go
# proxy/internal/auth/middleware.go
# shared/management/proto/proxy_service.pb.go
# shared/management/proto/proxy_service.proto
# shared/management/proto/proxy_service_grpc.pb.go
2026-02-04 11:56:04 +00:00
Alisdair MacLeod
562923c600
management OIDC implementation using pkce
2026-02-04 11:51:46 +00:00
Vlad
d488f58311
[management] fix set disconnected status for connected peer ( #5247 )
2026-02-04 11:44:46 +01:00
mlsmaycon
b02982f6b1
add logs
2026-02-04 03:14:26 +01:00
mlsmaycon
4d89ae27ef
add clusters logic
2026-02-04 02:16:57 +01:00
pascal
92f72bfce6
add reverse proxy meta to api resp
2026-02-03 17:37:55 +01:00
pascal
bffb25bea7
add status confirmation for certs and tunnel creation
2026-02-03 16:58:14 +01:00
Alisdair MacLeod
3af4543e80
check for domain ownership via subdomain rather than naked domain
2026-02-03 12:50:25 +00:00
Alisdair MacLeod
5243481316
get OIDC configuration from proxy flags/env
2026-02-03 12:10:23 +00:00
Alisdair MacLeod
76a39c1dcb
Revert "add management side of OIDC authentication"
...
This reverts commit 02ce918114
2026-02-03 10:03:38 +00:00
Alisdair MacLeod
02ce918114
add management side of OIDC authentication
2026-02-03 09:42:40 +00:00
Alisdair MacLeod
30cfc22cb6
correct proto and proxy authentication for oidc
2026-02-03 09:01:39 +00:00
Alisdair MacLeod
3168afbfcb
clean up proxy reported urls when using them for validation
2026-02-02 15:59:24 +00:00
Alisdair MacLeod
fa6ff005f2
add validation logging
2026-02-02 10:53:46 +00:00
Alisdair MacLeod
095379fa60
add logging to domain validation
2026-02-02 10:27:20 +00:00
Alisdair MacLeod
30572fe1b8
add domain validation using values from proxies
2026-02-02 09:53:49 +00:00
Vlad
8931293343
[management] run cancelPeerRoutinesWithoutLock in sync ( #5234 )
2026-02-01 15:44:27 +01:00
Vlad
7b830d8f72
disable sync lim ( #5233 )
2026-02-01 14:37:00 +01:00
Misha Bragin
3a0cf230a1
Disable local users for a smooth single-idp mode ( #5226 )
...
Add LocalAuthDisabled option to embedded IdP configuration
This adds the ability to disable local (email/password) authentication when using the embedded Dex identity provider. When disabled, users can only authenticate via external
identity providers (Google, OIDC, etc.).
This simplifies user login when there is only one external IdP configured. The login page will redirect directly to the IdP login page.
Key changes:
Added LocalAuthDisabled field to EmbeddedIdPConfig
Added methods to check and toggle local auth: IsLocalAuthEnabled, HasNonLocalConnectors, DisableLocalAuth, EnableLocalAuth
Validation prevents disabling local auth if no external connectors are configured
Existing local users are preserved when disabled and can login again when re-enabled
Operations are idempotent (disabling already disabled is a no-op)
2026-02-01 14:26:22 +01:00
Alisdair MacLeod
3a6f364b03
use a defined logger
...
this should avoid issues with the embedded
client also attempting to use the same global logger
2026-01-30 16:31:32 +00:00
Alisdair MacLeod
5345d716ee
Merge branch 'main' into prototype/reverse-proxy
2026-01-30 14:46:08 +00:00
Alisdair MacLeod
e95cfa1a00
add support for some basic authentication methods
2026-01-29 16:34:52 +00:00
pascal
8e0b7b6c25
add api for access log events
2026-01-29 14:27:57 +01:00
Viktor Liu
81c11df103
[management] Streamline domain validation ( #5211 )
2026-01-29 13:51:44 +01:00
Alisdair MacLeod
f204da0d68
fix management reverseproxy proto mapping
2026-01-29 12:29:21 +00:00
Vlad
0169e4540f
[management] fix skip of ephemeral peers on deletion ( #5206 )
2026-01-29 10:58:45 +01:00
Alisdair MacLeod
f4ca36ed7e
fix non-nil path assignment
2026-01-29 08:40:03 +00:00
mlsmaycon
717da8c7b7
fix nil path
2026-01-28 22:40:39 +01:00
mlsmaycon
a0a61d4f47
add extra debug logs
2026-01-28 21:26:57 +01:00
Vlad
cead3f38ee
[management] fix ephemeral peers being not removed ( #5203 )
2026-01-28 18:24:12 +01:00
Alisdair MacLeod
5b1fced872
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-01-28 16:55:12 +00:00
Alisdair MacLeod
c98dcf5ef9
get all proxy endpoints when a proxy connects
2026-01-28 16:55:05 +00:00
pascal
57cb6bfccb
add log on broadcasting update
2026-01-28 17:52:38 +01:00
Alisdair MacLeod
7700b4333d
correctly interpret custom domains from the database
2026-01-28 12:45:32 +00:00
Alisdair MacLeod
b611d4a751
pass account manager in to proxy grpc server for setup key generation
2026-01-28 08:39:09 +00:00
Alisdair MacLeod
2c9decfa55
fix domain store slice retrieval
2026-01-27 17:27:16 +00:00
Alisdair MacLeod
b86722394b
fix domain api registration
2026-01-27 17:01:55 +00:00
pascal
73fbb3fc62
fix reverse proxy put and post
2026-01-27 17:38:55 +01:00
Alisdair MacLeod
7b3523e25e
return empty domain list when none in database
2026-01-27 16:34:56 +00:00
pascal
6e4e1386e7
fix path variables
2026-01-27 17:13:42 +01:00
pascal
671e9af6eb
create setup key and policy to send to reverse proxies
2026-01-27 17:05:32 +01:00
Vlad