jnfrati
4fb5e8e015
catch error on idp manager init mfa
2026-04-16 18:02:16 +02:00
jnfrati
d62f411567
update docs and config parsing
2026-04-16 17:17:51 +02:00
jnfrati
59abdc2363
implemented api for mfa configuration
2026-04-16 14:53:40 +02:00
jnfrati
77b65d9475
Merge branch 'main' of github.com:netbirdio/netbird into feat/local-user-totp
2026-04-15 17:30:38 +02:00
jnfrati
b54e46cd48
add dashboard post logout redirect uri to embedded config
2026-04-15 17:04:45 +02:00
jnfrati
43254950a4
remove unused config and rename totp issuer
2026-04-15 11:57:58 +02:00
jnfrati
4501f0f821
debug
2026-04-15 11:44:06 +02:00
jnfrati
a3fcf1153a
fixed coderabbit comments
...
Signed-off-by: jnfrati <nicofrati@gmail.com >
2026-04-15 11:44:05 +02:00
jnfrati
fb2628223a
fix qube issues
...
Signed-off-by: jnfrati <nicofrati@gmail.com >
2026-04-15 11:44:05 +02:00
jnfrati
cf541e785e
polished UI and fix post_login_redirect_uri
2026-04-15 11:44:05 +02:00
jnfrati
2b0f8b941a
fix providers not getting populated
2026-04-15 11:44:05 +02:00
jnfrati
6d251c7c2a
wip: totp for local users
2026-04-15 11:43:51 +02:00
Pascal Fischer
c5623307cc
[management] add context cancel monitoring ( #5879 )
2026-04-14 12:49:18 +02:00
Vlad
7f666b8022
[management] revert ctx dependency in get account with backpressure ( #5878 )
2026-04-14 12:16:03 +02:00
Viktor Liu
0a30b9b275
[management, proxy] Add CrowdSec IP reputation integration for reverse proxy ( #5722 )
2026-04-14 12:14:58 +02:00
Pascal Fischer
5259e5df51
[management] add domain and service cleanup migration ( #5850 )
2026-04-11 12:00:40 +02:00
Pascal Fischer
cf86b9a528
[management] enable access log cleanup by default ( #5842 )
2026-04-10 17:07:27 +02:00
Pascal Fischer
ee588e1536
Revert "[management] allow local routing peer resource ( #5814 )" ( #5847 )
2026-04-10 14:53:47 +02:00
Pascal Fischer
2a8aacc5c9
[management] allow local routing peer resource ( #5814 )
2026-04-10 13:08:21 +02:00
Pascal Fischer
15709bc666
[management] update account delete with proper proxy domain and service cleanup ( #5817 )
2026-04-10 13:08:04 +02:00
Pascal Fischer
ee343d5d77
[management] use sql null vars ( #5844 )
2026-04-09 18:12:38 +02:00
Maycon Santos
099c493b18
[management] network map tests ( #5795 )
...
* Add network map benchmark and correctness test files
* Add tests for network map components correctness and edge cases
* Skip benchmarks in CI and enhance network map test coverage with new helper functions
* Remove legacy network map benchmarks and tests; refactor components-based test coverage for clarity and scalability.
2026-04-08 21:28:29 +02:00
Pascal Fischer
c1d1229ae0
[management] use NullBool for terminated flag ( #5829 )
2026-04-08 21:08:43 +02:00
Viktor Liu
0588d2dbe1
[management] Load missing service columns in pgx account loader ( #5816 )
2026-04-07 14:56:56 +02:00
Pascal Fischer
14b3b77bda
[management] validate permissions on groups read with name ( #5749 )
2026-04-07 14:13:09 +02:00
Bethuel Mmbaga
9d1a37c644
[management,client] Revert gRPC client secret removal ( #5781 )
...
* This reverts commit e5914e4e8b
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com >
* Deprecate client secret in proto
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com >
* Fix lint
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com >
---------
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com >
2026-04-02 18:21:00 +02:00
Viktor Liu
5bf2372c4d
[management] Fix L4 service creation deadlock on single-connection databases ( #5779 )
2026-04-02 14:46:14 +02:00
Bethuel Mmbaga
c2c6396a04
[management] Allow updating embedded IdP user name and email ( #5721 )
2026-04-02 13:02:10 +03:00
Vlad
d97fe84296
[management] fix race condition in the setup flow that enables creation of multiple owner users ( #5754 )
2026-04-01 16:25:35 +02:00
shuuri-labs
940f530ac2
[management] Legacy to embedded IdP migration tool ( #5586 )
2026-04-01 13:53:19 +02:00
Vlad
5ae986e1c4
[management] fix panic on management reboot ( #5759 )
2026-04-01 12:31:30 +02:00
Bethuel Mmbaga
e5914e4e8b
[management,client] Remove client secret from gRPC auth flow ( #5751 )
...
Remove client secret from gRPC auth flow. The secret was originally included to support providers like Google Workspace that don't offer a proper PKCE flow, but this is no longer necessary with the embedded IdP. Deployments using such providers should migrate to the embedded IdP instead.
2026-03-31 18:50:49 +03:00
Pascal Fischer
c238f5425f
[management] proper module permission validation for posture check delete ( #5742 )
2026-03-31 16:43:49 +02:00
Pascal Fischer
3c3097ea74
[management] add target user account validation ( #5741 )
2026-03-31 16:43:16 +02:00
Akshay Ubale
7bbe71c3ac
[client] Refactor Android PeerInfo to use proper ConnStatus enum type ( #5644 )
...
* Simplify Android ConnStatus API with integer constants
Replace dual field PeerInfo design with unified integer based
ConnStatus field and exported gomobile friendly constants.
Changes:
> PeerInfo.ConnStatus: changed from string to int
> Export three constants: ConnStatusIdle, ConnStatusConnecting,ConnStatusConnected (mapped to peer.ConnStatus enum values)
> Updated PeersList() to convert peer enum directly to int
Benefits:
> Simpler API surface with single ConnStatus field
> Better gomobile compatibility for cross-platform usage
> Type-safe integer constants across language boundaries
* test: add All group to setupTestAccount fixture
The setupTestAccount() test helper was missing the required "All" group,
causing "failed to get group all: no group ALL found" errors during
test execution. Add the All group with all test peers to match the
expected account structure.
Fixes the failing account and types package tests when GetGroupAll()
is called in test scenarios.
2026-03-30 17:55:01 +02:00
Viktor Liu
0765352c99
[management] Persist proxy capabilities to database ( #5720 )
2026-03-30 13:03:42 +02:00
Pascal Fischer
be6fd119d8
[management] no events for temporary peers ( #5719 )
2026-03-30 10:08:02 +02:00
Pascal Fischer
ec96c5ecaf
[management] Extend blackbox tests ( #5699 )
2026-03-26 16:59:49 +01:00
Pascal Fischer
7e1cce4b9f
[management] add terminated field to service ( #5700 )
2026-03-26 16:59:08 +01:00
Bethuel Mmbaga
7be8752a00
[management] Add notification endpoints ( #5590 )
2026-03-26 18:26:33 +03:00
Bethuel Mmbaga
0af5a0441f
[management] Fix DNS label uniqueness check on peer rename ( #5679 )
2026-03-24 20:25:29 +03:00
Viktor Liu
0fc63ea0ba
[management] Allow multiple header auths with same header name ( #5678 )
2026-03-24 16:18:21 +01:00
Bethuel Mmbaga
0b329f7881
[management] Replace JumpCloud SDK with direct HTTP calls ( #5591 )
2026-03-24 13:21:42 +03:00
Viktor Liu
5b85edb753
[management] Omit proxy_protocol from API response when false ( #5656 )
...
The internal Target model uses a plain bool for ProxyProtocol,
which was always serialized to the API response as false even
when not configured. Only set the API field when true so it
gets omitted via omitempty when unset.
2026-03-23 17:53:17 +01:00
Viktor Liu
b550a2face
[management, proxy] Add require_subdomain capability for proxy clusters ( #5628 )
2026-03-20 11:29:50 +01:00
Pascal Fischer
a1858a9cb7
[management] recover proxies after cleanup if heartbeat is still running ( #5617 )
2026-03-18 11:48:38 +01:00
Viktor Liu
212b34f639
[management] Add GET /reverse-proxies/clusters endpoint ( #5611 )
2026-03-18 11:15:56 +08:00
Viktor Liu
f0eed50678
[management] Accept domain target type for L4 reverse proxy services ( #5612 )
2026-03-17 16:29:03 +01:00
Viktor Liu
387e374e4b
[proxy, management] Add header auth, access restrictions, and session idle timeout ( #5587 )
2026-03-16 15:22:00 +01:00
Viktor Liu
3e6baea405
[management,proxy,client] Add L4 capabilities (TLS/TCP/UDP) ( #5530 )
2026-03-13 18:36:44 +01:00