Alisdair MacLeod
10b981a855
fix gorm id failures
2026-01-28 13:16:47 +00:00
Alisdair MacLeod
7700b4333d
correctly interpret custom domains from the database
2026-01-28 12:45:32 +00:00
Alisdair MacLeod
7d0131111e
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-01-28 12:36:23 +00:00
Alisdair MacLeod
1daea35e4b
remove scheme information from management address when connecting via grpc
2026-01-28 12:36:13 +00:00
pascal
f97544af0d
go mod tidy
2026-01-28 13:02:22 +01:00
pascal
231e80cc15
Merge branch 'main' into prototype/reverse-proxy
2026-01-28 12:52:42 +01:00
Alisdair MacLeod
a4c1362bff
pass proxy information to management on grpc connection
2026-01-28 10:50:35 +00:00
Alisdair MacLeod
b611d4a751
pass account manager in to proxy grpc server for setup key generation
2026-01-28 08:39:09 +00:00
Zoltan Papp
2248ff392f
Remove redundant square bracket trimming in USP endpoint parsing ( #5197 )
2026-01-27 20:10:59 +01:00
Alisdair MacLeod
2c9decfa55
fix domain store slice retrieval
2026-01-27 17:27:16 +00:00
Alisdair MacLeod
3c5ac17e2f
fix domain store nil pointer
2026-01-27 17:06:20 +00:00
Alisdair MacLeod
ae42bbb898
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-01-27 17:02:02 +00:00
Alisdair MacLeod
b86722394b
fix domain api registration
2026-01-27 17:01:55 +00:00
pascal
a103f69767
remove basic auth scheme
2026-01-27 17:53:59 +01:00
pascal
73fbb3fc62
fix reverse proxy put and post
2026-01-27 17:38:55 +01:00
Alisdair MacLeod
7b3523e25e
return empty domain list when none in database
2026-01-27 16:34:56 +00:00
pascal
6e4e1386e7
fix path variables
2026-01-27 17:13:42 +01:00
pascal
671e9af6eb
create setup key and policy to send to reverse proxies
2026-01-27 17:05:32 +01:00
Alisdair MacLeod
50f42caf94
connect api to store and manager for domains
2026-01-27 15:43:54 +00:00
pascal
b7eeefc102
send proxy mapping updates
2026-01-27 16:34:00 +01:00
pascal
8dd22f3a4f
move to reverse proxy and update api
2026-01-27 15:34:01 +01:00
pascal
4b89427447
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# shared/management/http/api/types.gen.go
2026-01-27 15:31:15 +01:00
pascal
b71e2860cf
Merge branch 'refs/heads/main' into prototype/reverse-proxy
...
# Conflicts:
# management/server/activity/codes.go
# management/server/http/handler.go
# management/server/store/sql_store.go
# management/server/store/store.go
# shared/management/http/api/openapi.yml
# shared/management/http/api/types.gen.go
# shared/management/proto/management.pb.go
2026-01-27 15:21:55 +01:00
Alisdair MacLeod
160b27bc60
create reverse proxy domain manager and api
2026-01-27 14:18:52 +00:00
pascal
c084386b88
add docker file
2026-01-27 11:42:51 +01:00
Viktor Liu
06966da012
[client] Support non-PTY no-command interactive SSH sessions ( #5093 )
v0.64.2
2026-01-27 11:05:04 +01:00
Viktor Liu
d4f7df271a
[cllient] Don't track ebpf traffic in conntrack ( #5166 )
2026-01-27 11:04:23 +01:00
Alisdair MacLeod
6889047350
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-01-27 09:58:28 +00:00
Alisdair MacLeod
245bbb4acf
move domain validation to management
2026-01-27 09:58:14 +00:00
pascal
2b2fc02d83
update openapi specs
2026-01-27 10:42:19 +01:00
Maycon Santos
5299549eb6
[client] Update fyne and add exit menu retry ( #5187 )
...
* Update fyne and add exit menu retry
- Fix an extra arrow on macos by updating fyne/systray
* use systray.TrayOpenedCh instead of loop and retry
2026-01-27 09:52:55 +01:00
Misha Bragin
7d791620a6
Add user invite link feature for embedded IdP ( #5157 )
2026-01-27 09:42:20 +01:00
Alisdair MacLeod
703ef29199
start and stop netbird embedded clients in proxy
2026-01-27 08:33:44 +00:00
Zoltan Papp
44ab454a13
[management] Fix peer deletion error handling ( #5188 )
...
When a deleted peer tries to reconnect, GetUserIDByPeerKey was returning
Internal error instead of NotFound, causing clients to retry indefinitely
instead of recognizing the unrecoverable PermissionDenied error.
This fix:
1. Updates GetUserIDByPeerKey to properly return NotFound when peer doesn't exist
2. Updates Sync handler to convert NotFound to PermissionDenied with message
'peer is not registered', matching the behavior of GetAccountIDForPeerKey
Fixes the regression introduced in v0.61.1 where deleted peers would see:
- Before: 'rpc error: code = Internal desc = failed handling request' (retry loop)
- After: 'rpc error: code = PermissionDenied desc = peer is not registered' (exits)
2026-01-26 23:15:34 +01:00
Misha Bragin
11f50d6c38
Include default groups claim in CLI audience ( #5186 )
2026-01-26 22:26:29 +01:00
Alisdair MacLeod
b0b60b938a
add initial setup key provisioning
2026-01-26 16:15:24 +00:00
Alisdair MacLeod
e3a026bf1c
connect proxy grpc server to database
2026-01-26 15:28:50 +00:00
Alisdair MacLeod
94503465ee
stub out management proxy server database connection
2026-01-26 14:47:49 +00:00
Alisdair MacLeod
8d959b0abc
update management proxy gRPC server
2026-01-26 14:02:27 +00:00
Zoltan Papp
05af39a69b
[client] Add IPv6 support to UDP WireGuard proxy ( #5169 )
...
* Add IPv6 support to UDP WireGuard proxy
Add IPv6 packet header support in UDP raw socket proxy
to handle both IPv4 and IPv6 source addresses.
Refactor error handling in proxy bind implementations
to validate endpoints before acquiring locks.
2026-01-26 14:03:32 +01:00
Alisdair MacLeod
1d8390b935
refactor layout and structure
2026-01-26 09:28:46 +00:00
Viktor Liu
074df56c3d
[client] Fix flaky JWT SSH test ( #5181 )
2026-01-26 09:30:00 +01:00
Maycon Santos
2381e216e4
Fix validator message with warn ( #5168 )
2026-01-24 17:49:25 +01:00
Zoltan Papp
ded04b7627
[client] Consolidate authentication logic ( #5010 )
...
* Consolidate authentication logic
- Moving auth functions from client/internal to client/internal/auth package
- Creating unified auth.Auth client with NewAuth() constructor
- Replacing direct auth function calls with auth client methods
- Refactoring device flow and PKCE flow implementations
- Updating iOS/Android/server code to use new auth client API
* Refactor PKCE auth and login methods
- Remove unnecessary internal package reference in PKCE flow test
- Adjust context assignment placement in iOS and Android login methods
2026-01-23 22:28:32 +01:00
Maycon Santos
67211010f7
[client, gui] fix exit nodes menu on reconnect, remove tooltips ( #5167 )
...
* [client, gui] fix exit nodes menu on reconnect
clean s.exitNodeStates when disconnecting
* disable tooltip for exit nodes and settings
v0.64.1
2026-01-23 18:39:45 +01:00
Maycon Santos
c61568ceb4
[client] Change default rosenpass log level ( #5137 )
...
* Change default rosenpass log level
- Add support to environment configuration
- Change default log level to info
* use .String() for print log level
2026-01-23 18:06:54 +01:00
Vlad
737d6061bf
[management] ephemeral peers track on login ( #5165 )
2026-01-23 18:05:22 +01:00
Zoltan Papp
ee3a67d2d8
[client] Fix/health result in bundle ( #5164 )
...
* Add support for optional status refresh callback during debug bundle generation
* Always update wg status
* Remove duplicated wg status call
2026-01-23 17:06:07 +01:00
Viktor Liu
1a32e4c223
[client] Fix IPv4-only in bind proxy ( #5154 )
2026-01-23 15:15:34 +01:00
Viktor Liu
269d5d1cba
[client] Try next DNS upstream on SERVFAIL/REFUSED responses ( #5163 )
2026-01-23 11:59:52 +01:00