Viktor Liu
0a3a9f977d
Add proxy <-> management authentication
2026-02-08 14:33:27 +08:00
mlsmaycon
2f263bf7e6
fix cluster logic for domains and reverse proxy
2026-02-07 11:43:01 +01:00
pascal
d09c69f303
fix scan sql
2026-02-04 21:05:25 +01:00
pascal
096d4ac529
rewrite peer creation and network map calc [WIP]
2026-02-04 20:01:00 +01:00
Alisdair MacLeod
694ae13418
add stateless proxy sessions
2026-02-04 16:52:35 +00:00
pascal
8e0b7b6c25
add api for access log events
2026-01-29 14:27:57 +01:00
Alisdair MacLeod
c98dcf5ef9
get all proxy endpoints when a proxy connects
2026-01-28 16:55:05 +00:00
Alisdair MacLeod
10b981a855
fix gorm id failures
2026-01-28 13:16:47 +00:00
Alisdair MacLeod
2c9decfa55
fix domain store slice retrieval
2026-01-27 17:27:16 +00:00
Alisdair MacLeod
3c5ac17e2f
fix domain store nil pointer
2026-01-27 17:06:20 +00:00
Alisdair MacLeod
50f42caf94
connect api to store and manager for domains
2026-01-27 15:43:54 +00:00
pascal
8dd22f3a4f
move to reverse proxy and update api
2026-01-27 15:34:01 +01:00
pascal
b71e2860cf
Merge branch 'refs/heads/main' into prototype/reverse-proxy
...
# Conflicts:
# management/server/activity/codes.go
# management/server/http/handler.go
# management/server/store/sql_store.go
# management/server/store/store.go
# shared/management/http/api/openapi.yml
# shared/management/http/api/types.gen.go
# shared/management/proto/management.pb.go
2026-01-27 15:21:55 +01:00
Misha Bragin
7d791620a6
Add user invite link feature for embedded IdP ( #5157 )
2026-01-27 09:42:20 +01:00
Zoltan Papp
44ab454a13
[management] Fix peer deletion error handling ( #5188 )
...
When a deleted peer tries to reconnect, GetUserIDByPeerKey was returning
Internal error instead of NotFound, causing clients to retry indefinitely
instead of recognizing the unrecoverable PermissionDenied error.
This fix:
1. Updates GetUserIDByPeerKey to properly return NotFound when peer doesn't exist
2. Updates Sync handler to convert NotFound to PermissionDenied with message
'peer is not registered', matching the behavior of GetAccountIDForPeerKey
Fixes the regression introduced in v0.61.1 where deleted peers would see:
- Before: 'rpc error: code = Internal desc = failed handling request' (retry loop)
- After: 'rpc error: code = PermissionDenied desc = peer is not registered' (exits)
2026-01-26 23:15:34 +01:00
Zoltan Papp
58daa674ef
[Management/Client] Trigger debug bundle runs from API/Dashboard ( #4592 ) ( #4832 )
...
This PR adds the ability to trigger debug bundle generation remotely from the Management API/Dashboard.
2026-01-19 11:22:16 +01:00
pascal
2851e38a1f
add management API to store
2026-01-16 16:16:29 +01:00
Bethuel Mmbaga
067c77e49e
[management] Add custom dns zones ( #4849 )
2026-01-16 12:12:05 +03:00
Vlad
684fc0d2a2
[management] fix the issue with duplicated peers with the same key ( #5053 )
2026-01-09 11:49:26 +01:00
Zoltan Papp
9c9d8e17d7
Revert "Revert "[relay] Update GO version and QUIC version ( #4736 )" ( #5055 )" ( #5071 )
...
This reverts commit 24df442198
2026-01-08 18:58:22 +01:00
Misha Bragin
cf535f8c61
[management] Fix role change in transaction and update readme ( #5060 )
2026-01-08 12:07:59 +01:00
Maycon Santos
24df442198
Revert "[relay] Update GO version and QUIC version ( #4736 )" ( #5055 )
...
This reverts commit 8722b79799
2026-01-07 19:02:20 +01:00
Zoltan Papp
8722b79799
[relay] Update GO version and QUIC version ( #4736 )
...
- Go 1.25.5
- QUIC 0.55.0
2026-01-07 16:30:29 +01:00
Misha Bragin
e586c20e36
[management, infrastructure, idp] Simplified IdP Management - Embedded IdP ( #5008 )
...
Embed Dex as a built-in IdP to simplify self-hosting setup.
Adds an embedded OIDC Identity Provider (Dex) with local user management and optional external IdP connectors (Google/GitHub/OIDC/SAML), plus device-auth flow for CLI login. Introduces instance onboarding/setup endpoints (including owner creation), field-level encryption for sensitive user data, a streamlined self-hosting provisioning script, and expanded APIs + test coverage for IdP management.
more at https://github.com/netbirdio/netbird/pull/5008#issuecomment-3718987393
2026-01-07 14:52:32 +01:00
Pascal Fischer
7ac65bf1ad
[management] Fix/delete groups without lock ( #5012 )
2025-12-31 11:53:20 +01:00
Pascal Fischer
1d2c7776fd
[management] apply login filter only for setup key peers ( #4943 )
2025-12-30 10:46:00 +01:00
Pascal Fischer
b6a327e0c9
[management] fix scanning authorized user on policy rule ( #5002 )
2025-12-29 15:03:16 +01:00
Zoltan Papp
67f7b2404e
[client, management] Feature/ssh fine grained access ( #4969 )
...
Add fine-grained SSH access control with authorized users/groups
2025-12-29 12:50:41 +01:00
Bethuel Mmbaga
932c02eaab
[management] Approve all pending peers when peer approval is disabled ( #4806 )
2025-12-12 18:49:57 +03:00
Pascal Fischer
abcbde26f9
[management] remove context from store methods ( #4940 )
2025-12-11 21:45:47 +01:00
Pascal Fischer
44851e06fb
[management] cleanup logs ( #4933 )
2025-12-10 19:26:51 +01:00
Vlad
56f169eede
[management] fix pg db deadlock after app panic ( #4772 )
2025-11-10 23:43:08 +01:00
Pascal Fischer
7df49e249d
[management ] remove timing logs ( #4761 )
2025-11-07 20:14:52 +01:00
Pascal Fischer
dbfc8a52c9
[management] remove GLOBAL when disabling foreign keys on mysql ( #4615 )
2025-11-07 16:03:14 +01:00
Vlad
6aa4ba7af4
[management] incremental network map builder ( #4753 )
2025-11-07 10:44:46 +01:00
Pascal Fischer
719283c792
[management] update db connection lifecycle configuration ( #4740 )
2025-11-03 17:40:12 +01:00
Viktor Liu
b5daec3b51
[client,signal,management] Add browser client support ( #4415 )
2025-10-01 20:10:11 +02:00
Bethuel Mmbaga
5113c70943
[management] Extends integration and peers manager ( #4450 )
2025-09-06 13:13:49 +03:00
Pascal Fischer
6fc50a438f
[management] remove withContext from store methods ( #4422 )
2025-08-30 12:46:54 +02:00
Pascal Fischer
5e273c121a
[management] Remove store locks 3 ( #4390 )
2025-08-21 20:47:28 +02:00
Pascal Fischer
f9d64a06c2
[management] Remove all store locks from grpc side ( #4374 )
2025-08-20 12:41:14 +02:00
Pascal Fischer
6a3846a8b7
[management] Remove save account calls ( #4349 )
2025-08-18 12:37:20 +02:00
Pascal Fischer
a942e4add5
[management] use readlock on add peer ( #4308 )
2025-08-11 15:21:26 +02:00
Pascal Fischer
f5b4659adb
[management] Mark SaveAccount deprecated ( #4300 )
2025-08-07 11:49:37 +02:00
Pascal Fischer
5860e5343f
[management] Rework DB locks ( #4291 )
2025-08-06 18:55:14 +02:00
Viktor Liu
abd152ee5a
[misc] Separate shared code dependencies ( #4288 )
...
* Separate shared code dependencies
* Fix import
* Test respective shared code
* Update openapi ref
* Fix test
* Fix test path
2025-08-05 18:34:41 +02:00
Pascal Fischer
552dc60547
[management] migrate group peers into seperate table ( #4096 )
2025-08-01 12:22:07 +02:00
Pedro Maia Costa
f603ddf35e
management: fix store get account peers without lock ( #4092 )
2025-07-04 08:44:08 +01:00
Maycon Santos
2c81cf2c1e
[management] Add account onboarding ( #4084 )
...
This PR introduces a new onboarding feature to handle such flows in the dashboard by defining an AccountOnboarding model, persisting it in the store, exposing CRUD operations in the manager and HTTP handlers, and updating API schemas and tests accordingly.
Add AccountOnboarding struct and embed it in Account
Extend Store and DefaultAccountManager with onboarding methods and SQL migrations
Update HTTP handlers, API types, OpenAPI spec, and add end-to-end tests
2025-07-03 09:01:32 +02:00
Pascal Fischer
22678bce7f
[management] add uniqueness constraint for peer ip and label and optimize generation ( #4042 )
2025-07-02 18:13:10 +02:00
