Viktor Liu
6e05a2ebe9
Fix CodeRabbit review issues from IPv6 overlay PR ( #5839 )
2026-04-10 09:12:35 +08:00
Viktor Liu
f484835292
Use net.JoinHostPort and net.SplitHostPort for IPv6-safe host:port handling ( #5836 )
2026-04-10 09:10:57 +08:00
Viktor Liu
ac816a8382
Merge remote-tracking branch 'origin/main' into proto-ipv6-overlay
2026-04-09 11:58:06 +02:00
Viktor Liu
dc160aff36
[client] Fix SSH proxy stripping shell quoting from forwarded commands ( #5669 )
2026-04-08 10:25:57 +02:00
Viktor Liu
9592de1aac
Merge remote-tracking branch 'origin/main' into proto-ipv6-overlay
...
# Conflicts:
# client/android/client.go
# client/ssh/server/server.go
# shared/management/proto/management.pb.go
2026-04-07 18:35:13 +02:00
Viktor Liu
1d920d700c
[client] Fix SSH server Stop() deadlock when sessions are active ( #5717 )
2026-04-07 17:56:54 +02:00
Viktor Liu
d81cd5d154
Add IPv6 support to SSH server, client config, and netflow logger
2026-03-25 09:57:58 +01:00
Viktor Liu
529c0314f8
[client] Fall back to getent/id for SSH user lookup in static builds ( #5510 )
2026-03-13 15:22:02 +01:00
hbzhost
cfc7ec8bb9
[client] Fix SSH JWT auth failure with Azure Entra ID iat backdating ( #5471 )
...
Increase DefaultJWTMaxTokenAge from 5 to 10 minutes to accommodate
identity providers like Azure Entra ID that backdate the iat claim
by up to 5 minutes, causing tokens to be immediately rejected.
Fixes #5449
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-04 14:11:14 +01:00
Viktor Liu
06966da012
[client] Support non-PTY no-command interactive SSH sessions ( #5093 )
2026-01-27 11:05:04 +01:00
Viktor Liu
074df56c3d
[client] Fix flaky JWT SSH test ( #5181 )
2026-01-26 09:30:00 +01:00
Misha Bragin
daf1449174
[client] Remove duplicate audiences check ( #5117 )
2026-01-16 14:25:02 +02:00
Misha Bragin
1ff7abe909
[management, client] Fix SSH server audience validator ( #5105 )
...
* **New Features**
* SSH server JWT validation now accepts multiple audiences with backward-compatible handling of the previous single-audience setting and a guard ensuring at least one audience is configured.
* **Tests**
* Test suites updated and new tests added to cover multiple-audience scenarios and compatibility with existing behavior.
* **Other**
* Startup logging enhanced to report configured audiences for JWT auth.
2026-01-16 12:28:17 +01:00
Zoltan Papp
9c9d8e17d7
Revert "Revert "[relay] Update GO version and QUIC version ( #4736 )" ( #5055 )" ( #5071 )
...
This reverts commit 24df442198
2026-01-08 18:58:22 +01:00
Maycon Santos
24df442198
Revert "[relay] Update GO version and QUIC version ( #4736 )" ( #5055 )
...
This reverts commit 8722b79799
2026-01-07 19:02:20 +01:00
Zoltan Papp
8722b79799
[relay] Update GO version and QUIC version ( #4736 )
...
- Go 1.25.5
- QUIC 0.55.0
2026-01-07 16:30:29 +01:00
Zoltan Papp
6ff9aa0366
Refactor SSH server to manage listener lifecycle and expose active address via Addr method. ( #5036 )
2026-01-07 15:34:26 +01:00
Viktor Liu
f012fb8592
[client] Add port forwarding to ssh proxy ( #5031 )
...
* Implement port forwarding for the ssh proxy
* Allow user switching for port forwarding
2026-01-07 12:18:04 +08:00
Zoltan Papp
67f7b2404e
[client, management] Feature/ssh fine grained access ( #4969 )
...
Add fine-grained SSH access control with authorized users/groups
2025-12-29 12:50:41 +01:00
Viktor Liu
f538e6e9ae
[client] Use setsid to avoid the parent process from being killed via HUP by login ( #4900 )
2025-12-05 03:29:27 +01:00
Viktor Liu
1311364397
[client] Increase ssh detection timeout ( #4827 )
2025-11-20 17:09:22 +01:00
Viktor Liu
d71a82769c
[client,management] Rewrite the SSH feature ( #4015 )
2025-11-17 17:10:41 +01:00
