Commit Graph
2486 Commits
Author SHA1 Message Date
Zoltan Papp 8942c40fde [client] Fix nil pointer exception in lazy connection (#4109)
Remove unused variable
v0.50.1
2025-07-06 15:13:14 +02:00
Zoltan Papp fbb1b55beb [client] refactor lazy detection (#4050)
This PR introduces a new inactivity package responsible for monitoring peer activity and notifying when peers become inactive.
Introduces a new Signal message type to close the peer connection after the idle timeout is reached.
Periodically checks the last activity of registered peers via a Bind interface.
Notifies via a channel when peers exceed a configurable inactivity threshold.
Default settings
DefaultInactivityThreshold is set to 15 minutes, with a minimum allowed threshold of 1 minute.

Limitations
This inactivity check does not support kernel WireGuard integration. In kernel–user space communication, the user space side will always be responsible for closing the connection.
v0.50.0
2025-07-04 19:52:27 +02:00
Viktor Liu e4e0b8fff9 Remove empty file 2025-07-04 17:09:54 +02:00
Viktor Liu a4b067553d Merge branch 'main' into ssh-rewrite 2025-07-04 16:53:54 +02:00
Viktor Liu 77ec32dd6f [client] Implement dns routes for Android (#3989) 2025-07-04 16:43:11 +02:00
Bethuel Mmbaga 8c09a55057 [management] Log user id on account mismatch (#4101) 2025-07-04 10:51:58 +03:00
Pedro Maia Costa f603ddf35e management: fix store get account peers without lock (#4092) 2025-07-04 08:44:08 +01:00
Krzysztof Nazarewski (kdn) 996b8c600c [management] replace invalid user with a clear error message about mismatched logins (#4097) 2025-07-03 16:36:36 +02:00
Maycon Santos c4ed11d447 [client] Avoid logging setup keys on error message (#3962) 2025-07-03 16:22:18 +02:00
Viktor Liu 088956645f Fix username validation and skip ci tests properly 2025-07-03 15:36:42 +02:00
Viktor Liu aa30b7afe8 More windows tests 2025-07-03 14:11:20 +02:00
Viktor Liu f1bb4d2ac3 Fix more Windows tests 2025-07-03 13:35:53 +02:00
Viktor Liu 982841e25b Test up tests users if none are available on CI 2025-07-03 12:33:31 +02:00
Viktor Liu a476b8d12f Fix more windows tests 2025-07-03 11:26:04 +02:00
Viktor Liu a21f924b26 Fix some windows tests 2025-07-03 10:20:16 +02:00
Viktor Liu 9e51d2e8fb Fix lint and sonar 2025-07-03 09:58:25 +02:00
Viktor Liu 9afbecb7ac [client] Use unique sequence numbers for bsd routes (#4081)
updates the route manager on Unix to use a unique, incrementing sequence number for each route message instead of a fixed value.

Replace the static Seq: 1 with a call to r.getSeq()
Add an atomic seq field and the getSeq method in SysOps
2025-07-03 09:02:53 +02:00
Maycon Santos 2c81cf2c1e [management] Add account onboarding (#4084)
This PR introduces a new onboarding feature to handle such flows in the dashboard by defining an AccountOnboarding model, persisting it in the store, exposing CRUD operations in the manager and HTTP handlers, and updating API schemas and tests accordingly.

Add AccountOnboarding struct and embed it in Account
Extend Store and DefaultAccountManager with onboarding methods and SQL migrations
Update HTTP handlers, API types, OpenAPI spec, and add end-to-end tests
2025-07-03 09:01:32 +02:00
Viktor Liu 3e490d974c Remove duplicated code 2025-07-03 03:40:27 +02:00
Viktor Liu 04bb314426 Allow sftp same user switching on windows 2025-07-03 02:19:12 +02:00
Viktor Liu 6e15882c11 Fix tests and windows username validation 2025-07-03 01:58:15 +02:00
Viktor Liu 76f9e11b29 Fix tests 2025-07-03 01:07:58 +02:00
Viktor Liu 612de2c784 Remove socketfilter temporarily 2025-07-02 22:00:10 +02:00
Viktor Liu 1fdde66c31 More lint 2025-07-02 21:55:25 +02:00
Viktor Liu 5970591d24 Fix lint 2025-07-02 21:32:39 +02:00
Viktor Liu 0d5408baec Fix lint 2025-07-02 21:04:58 +02:00
Viktor Liu 96084e3a02 Reduce complexity 2025-07-02 20:43:17 +02:00
Viktor Liu 4bbca28eb6 Fix lint 2025-07-02 20:23:23 +02:00
Pascal Fischer 551cb4e467 [management] expect specific error types on registration with setup key (#4094) 2025-07-02 20:04:28 +02:00
Viktor Liu 279b77dee0 Bump sftp 2025-07-02 19:42:57 +02:00
Viktor Liu 9d1554f9f7 Complete overhaul 2025-07-02 19:35:19 +02:00
Viktor Liu f56075ca15 Tidy mod 2025-07-02 19:34:36 +02:00
Viktor Liu 6ed846ae29 Refactor ssh server and client 2025-07-02 19:34:36 +02:00
Viktor Liu 520f2cfdb4 Remove implicit inbound ssh firewall rules and change default port 2025-07-02 19:34:32 +02:00
Maycon Santos 57961afe95 [doc] Add forum link (#4093)
* Add forum link

* Add forum link
2025-07-02 18:40:07 +02:00
Pascal Fischer 22678bce7f [management] add uniqueness constraint for peer ip and label and optimize generation (#4042) 2025-07-02 18:13:10 +02:00
Viktor Liu 0f79a8942d Fix route notificaiton 2025-07-02 17:24:14 +02:00
Viktor Liu 5299e9fda3 Merge branch 'main' into android-dns-routes 2025-07-02 15:23:14 +02:00
Maycon Santos 6c633497bc [management] fix network update test for delete policy (#4086)
when adding a peer we calculate the network map an account using backpressure functions and some updates might arrive around the time we are deleting a policy.

This change ensures we wait enough time for the updates from add peer to be sent and read before continuing with the test logic
2025-07-02 12:25:31 +02:00
Carlos Hernandez 6922826919 [client] Support fullstatus without probes (#4052) 2025-07-02 10:42:47 +02:00
Maycon Santos 56a1a75e3f [client] Support random wireguard port on client (#4085)
Adds support for using a random available WireGuard port when the user specifies port `0`.

- Updates `freePort` logic to bind to the requested port (including `0`) without falling back to the default.
- Removes default port assignment in the configuration path, allowing `0` to propagate.
- Adjusts tests to handle dynamically assigned ports when using `0`.
2025-07-02 09:01:02 +02:00
Ali Amer d9402168ad [management] Add option to disable default all-to-all policy (#3970)
This PR introduces a new configuration option `DisableDefaultPolicy` that prevents the creation of the default all-to-all policy when new accounts are created. This is useful for automation scenarios where explicit policies are preferred.
### Key Changes:
- Added DisableDefaultPolicy flag to the management server config
- Modified account creation logic to respect this flag
- Updated all test cases to explicitly pass the flag (defaulting to false to maintain backward compatibility)
- Propagated the flag through the account manager initialization chain

### Testing:

- Verified default behavior remains unchanged when flag is false
- Confirmed no default policy is created when flag is true
- All existing tests pass with the new parameter
2025-07-02 02:41:59 +02:00
Krzysztof Nazarewski (kdn) dbdef04b9e [misc] getting-started-with-zitadel.sh: drop unnecessary port 8080 (#4075) 2025-07-02 02:35:13 +02:00
Maycon Santos 29cbfe8467 [misc] update sign pipeline version to v0.0.20 (#4082) 2025-07-01 16:23:31 +02:00
Maycon Santos 6ce8643368 [client] Run login popup on goroutine (#4080) 2025-07-01 13:45:55 +02:00
Krzysztof Nazarewski (kdn) 07d1ad35fc [misc] start the service after installation on arch linux (#4071) 2025-06-30 12:02:03 +02:00
Krzysztof Nazarewski (kdn) ef6cd36f1a [misc] fix arch install.sh error with empty temporary dependencies
handle empty var before calling removal command
2025-06-30 11:59:35 +02:00
Krzysztof Nazarewski (kdn) c1c71b6d39 [client] improve adding route log message (#4034)
from:
  Adding route to 1.2.3.4/32 via invalid IP @ 10 (wt0)
to:
  Adding route to 1.2.3.4/32 via no-ip @ 10 (wt0)
2025-06-30 11:57:42 +02:00
Pascal Fischer 0480507a10 [management] report networkmap duration in ms (#4064) 2025-06-28 11:38:15 +02:00
Viktor Liu 11bdf5b3a5 Use r 2025-06-26 15:41:56 +02:00