braginini
42c5db44d4
remove offline_access from device default scopes
2026-01-12 14:55:14 +01:00
braginini
d7c5f5dacb
Enforce HttpConfig overwrite when embeddedIdp is enabled
2026-01-10 22:07:09 -05:00
Misha Bragin
614e7d5b90
Validate OIDC issuer when creating or updating ( #5074 )
2026-01-09 09:45:43 -05:00
Misha Bragin
f7967f9ae3
Feature/resolve local jwks keys ( #5073 )
2026-01-09 09:41:27 -05:00
Vlad
684fc0d2a2
[management] fix the issue with duplicated peers with the same key ( #5053 )
2026-01-09 11:49:26 +01:00
Zoltan Papp
9c9d8e17d7
Revert "Revert "[relay] Update GO version and QUIC version ( #4736 )" ( #5055 )" ( #5071 )
...
This reverts commit 24df442198
2026-01-08 18:58:22 +01:00
Maycon Santos
9c5b2575e3
[misc] add embedded provider support metrics
...
count local vs idp users if embedded
2026-01-08 12:12:19 +01:00
Bethuel Mmbaga
00e2689ffb
[management] Fix race condition in experimental network map when deleting account ( #5064 )
2026-01-08 14:10:09 +03:00
Misha Bragin
cf535f8c61
[management] Fix role change in transaction and update readme ( #5060 )
2026-01-08 12:07:59 +01:00
Maycon Santos
24df442198
Revert "[relay] Update GO version and QUIC version ( #4736 )" ( #5055 )
...
This reverts commit 8722b79799
2026-01-07 19:02:20 +01:00
Zoltan Papp
8722b79799
[relay] Update GO version and QUIC version ( #4736 )
...
- Go 1.25.5
- QUIC 0.55.0
2026-01-07 16:30:29 +01:00
Vlad
afcdef6121
[management] add ssh authorized users to network map cache ( #5048 )
2026-01-07 15:53:18 +01:00
Misha Bragin
e586c20e36
[management, infrastructure, idp] Simplified IdP Management - Embedded IdP ( #5008 )
...
Embed Dex as a built-in IdP to simplify self-hosting setup.
Adds an embedded OIDC Identity Provider (Dex) with local user management and optional external IdP connectors (Google/GitHub/OIDC/SAML), plus device-auth flow for CLI login. Introduces instance onboarding/setup endpoints (including owner creation), field-level encryption for sensitive user data, a streamlined self-hosting provisioning script, and expanded APIs + test coverage for IdP management.
more at https://github.com/netbirdio/netbird/pull/5008#issuecomment-3718987393
2026-01-07 14:52:32 +01:00
Pascal Fischer
5393ad948f
[management] fix nil handling for extra settings ( #5049 )
2026-01-07 13:05:39 +01:00
Bethuel Mmbaga
20d6beff1b
[management] Increment network serial on peer update ( #5051 )
...
Increment the serial on peer update and prevent double serial increments and account updates when updating a user while there are peers set to expire
2026-01-07 14:59:49 +03:00
Bethuel Mmbaga
d35b7d675c
[management] Refactor integrated peer deletion ( #5042 )
2026-01-07 14:00:39 +03:00
Vlad
7142d45ef3
[management] network map builder concurrent batch processing for peer updates ( #5040 )
2026-01-06 19:25:55 +01:00
Bethuel Mmbaga
7bb4fc3450
[management] Refactor integrated peer validator ( #5035 )
2026-01-05 20:55:22 +03:00
Pascal Fischer
7ac65bf1ad
[management] Fix/delete groups without lock ( #5012 )
2025-12-31 11:53:20 +01:00
Misha Bragin
9ed1437442
Add DEX IdP Support ( #4949 )
2025-12-30 07:42:34 -05:00
Pascal Fischer
a8604ef51c
[management] filter own peer when having a group to peer policy to themself ( #4956 )
2025-12-30 10:49:43 +01:00
Pascal Fischer
1d2c7776fd
[management] apply login filter only for setup key peers ( #4943 )
2025-12-30 10:46:00 +01:00
Pascal Fischer
b6a327e0c9
[management] fix scanning authorized user on policy rule ( #5002 )
2025-12-29 15:03:16 +01:00
Zoltan Papp
67f7b2404e
[client, management] Feature/ssh fine grained access ( #4969 )
...
Add fine-grained SSH access control with authorized users/groups
2025-12-29 12:50:41 +01:00
Zoltan Papp
011cc81678
[client, management] auto-update ( #4732 )
2025-12-19 19:57:39 +01:00
Pascal Fischer
c29bb1a289
[management] use xid as request id for logging ( #4955 )
2025-12-16 14:02:37 +01:00
Bethuel Mmbaga
932c02eaab
[management] Approve all pending peers when peer approval is disabled ( #4806 )
2025-12-12 18:49:57 +03:00
Pascal Fischer
abcbde26f9
[management] remove context from store methods ( #4940 )
2025-12-11 21:45:47 +01:00
Pascal Fischer
90e3b8009f
[management] Fix sync metrics ( #4939 )
2025-12-11 20:11:12 +01:00
Pascal Fischer
94d34dc0c5
[management] monitoring updates ( #4937 )
2025-12-11 18:29:15 +01:00
Pascal Fischer
44851e06fb
[management] cleanup logs ( #4933 )
2025-12-10 19:26:51 +01:00
Bethuel Mmbaga
27dd97c9c4
[management] Add support to disable geolocation service ( #4901 )
2025-12-03 14:45:59 +03:00
Pascal Fischer
a232cf614c
[management] record pat usage metrics ( #4888 )
2025-12-02 18:31:59 +01:00
Pascal Fischer
7193bd2da7
[management] Refactor network map controller ( #4789 )
2025-12-02 12:34:28 +01:00
Bethuel Mmbaga
52948ccd61
[management] Add user created activity event ( #4893 )
2025-12-02 14:17:59 +03:00
Fahri Shihab
4b77359042
[management] Groups API with name query parameter ( #4831 )
2025-12-01 16:57:42 +01:00
Bethuel Mmbaga
f31bba87b4
[management] Preserve validator settings on account settings update ( #4862 )
2025-11-26 17:07:44 +03:00
Aziz Hasanain
ba2e9b6d88
[management] Fix SSH JWT issuer derivation for IDPs with path components ( #4844 )
2025-11-24 12:12:51 +01:00
Maycon Santos
290fe2d8b9
[client/management/signal/relay] Update go.mod to use Go 1.24.10 and upgrade x/crypto dependencies ( #4828 )
...
Upgrade Go toolchain and golang.org/x/* deps to 1.24.10, standardize GitHub Actions to derive Go version from go.mod and adjust checkout ordering, raise WASM size limit to 55 MB, update FreeBSD tarball and gomobile refs, fix a few format-string/logging calls, treat usernames ending with $ as system accounts, and add Windows tests.
2025-11-22 10:10:18 +01:00
Vlad
7fb1a2fe31
[management] removed TestBufferUpdateAccountPeers because it was incorrect ( #4839 )
2025-11-22 01:23:33 +01:00
Maycon Santos
68f56b797d
[management] Add native ssh port rule on 22 ( #4810 )
...
Implements feature-aware firewall rule expansion: derives peer-supported features (native SSH, portRanges) from peer version, prefers explicit Ports over PortRanges when expanding, conditionally appends a native SSH (22022) rule when policy and peer support allow, and adds helpers plus tests for SSH expansion behavior.
2025-11-19 13:16:47 +01:00
Pascal Fischer
3351b38434
[management] pass config to controller ( #4807 )
2025-11-19 11:52:18 +01:00
Pascal Fischer
05cbead39b
[management] Fix direct peer networks route ( #4802 )
2025-11-18 17:15:57 +01:00
Vlad
4eeb2d8deb
[management] added exception on not appending route firewall rules if we have all wildcard ( #4801 )
2025-11-17 18:20:30 +01:00
Viktor Liu
d71a82769c
[client,management] Rewrite the SSH feature ( #4015 )
2025-11-17 17:10:41 +01:00
Pascal Fischer
6fb568728f
[management] Removed policy posture checks on original peer ( #4779 )
...
Co-authored-by: crn4 <vladimir@netbird.io >
2025-11-13 12:51:03 +01:00
Pascal Fischer
cc97cffff1
[management] move network map logic into new design ( #4774 )
2025-11-13 12:09:46 +01:00
Vlad
56f169eede
[management] fix pg db deadlock after app panic ( #4772 )
2025-11-10 23:43:08 +01:00
Pascal Fischer
7df49e249d
[management ] remove timing logs ( #4761 )
2025-11-07 20:14:52 +01:00
Pascal Fischer
dbfc8a52c9
[management] remove GLOBAL when disabling foreign keys on mysql ( #4615 )
2025-11-07 16:03:14 +01:00
