pascal
9a67a8e427
send updates on changes
2026-02-09 17:06:04 +01:00
pascal
2390c2e46e
change network map calc to inject proxy policies
2026-02-09 14:41:22 +01:00
mlsmaycon
7c996ac9b5
add AuthCallbackURL
2026-02-09 01:18:49 +01:00
mlsmaycon
cf9fd5d960
add AuthClientID
2026-02-08 19:41:52 +01:00
Viktor Liu
dc26a5a436
Merge branch 'main' into prototype/reverse-proxy
2026-02-08 17:50:16 +08:00
Viktor Liu
0a3a9f977d
Add proxy <-> management authentication
2026-02-08 14:33:27 +08:00
mlsmaycon
f65f4fc280
fix some conflicts regression
2026-02-06 20:39:17 +01:00
pascal
0e00f1c8f7
Merge remote-tracking branch 'origin/prototype/reverse-proxy-clusters' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/manager/manager.go
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/modules.go
# management/internals/shared/grpc/proxy.go
# management/server/http/handler.go
# management/server/http/testing/testing_tools/channel/channel.go
2026-02-05 15:19:57 +01:00
mlsmaycon
5ccce1ab3f
add debug logging for proxy connections and domain resolution
...
- Log proxy address and cluster info when proxy connects
- Log connected proxy URLs when GetConnectedProxyURLs is called
- Log proxy allow list when GetDomains is called
- Helps debug issues with free domains not appearing in API response
2026-02-05 02:18:38 +01:00
pascal
096d4ac529
rewrite peer creation and network map calc [WIP]
2026-02-04 20:01:00 +01:00
Alisdair MacLeod
28f3354ffa
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/boot.go
# management/internals/shared/grpc/proxy.go
# proxy/internal/auth/middleware.go
# shared/management/proto/proxy_service.pb.go
# shared/management/proto/proxy_service.proto
# shared/management/proto/proxy_service_grpc.pb.go
2026-02-04 11:56:04 +00:00
Alisdair MacLeod
562923c600
management OIDC implementation using pkce
2026-02-04 11:51:46 +00:00
mlsmaycon
4d89ae27ef
add clusters logic
2026-02-04 02:16:57 +01:00
pascal
bffb25bea7
add status confirmation for certs and tunnel creation
2026-02-03 16:58:14 +01:00
Alisdair MacLeod
30572fe1b8
add domain validation using values from proxies
2026-02-02 09:53:49 +00:00
Misha Bragin
3a0cf230a1
Disable local users for a smooth single-idp mode ( #5226 )
...
Add LocalAuthDisabled option to embedded IdP configuration
This adds the ability to disable local (email/password) authentication when using the embedded Dex identity provider. When disabled, users can only authenticate via external
identity providers (Google, OIDC, etc.).
This simplifies user login when there is only one external IdP configured. The login page will redirect directly to the IdP login page.
Key changes:
Added LocalAuthDisabled field to EmbeddedIdPConfig
Added methods to check and toggle local auth: IsLocalAuthEnabled, HasNonLocalConnectors, DisableLocalAuth, EnableLocalAuth
Validation prevents disabling local auth if no external connectors are configured
Existing local users are preserved when disabled and can login again when re-enabled
Operations are idempotent (disabling already disabled is a no-op)
2026-02-01 14:26:22 +01:00
pascal
8e0b7b6c25
add api for access log events
2026-01-29 14:27:57 +01:00
Alisdair MacLeod
b611d4a751
pass account manager in to proxy grpc server for setup key generation
2026-01-28 08:39:09 +00:00
Alisdair MacLeod
50f42caf94
connect api to store and manager for domains
2026-01-27 15:43:54 +00:00
pascal
b7eeefc102
send proxy mapping updates
2026-01-27 16:34:00 +01:00
pascal
8dd22f3a4f
move to reverse proxy and update api
2026-01-27 15:34:01 +01:00
pascal
b71e2860cf
Merge branch 'refs/heads/main' into prototype/reverse-proxy
...
# Conflicts:
# management/server/activity/codes.go
# management/server/http/handler.go
# management/server/store/sql_store.go
# management/server/store/store.go
# shared/management/http/api/openapi.yml
# shared/management/http/api/types.gen.go
# shared/management/proto/management.pb.go
2026-01-27 15:21:55 +01:00
Alisdair MacLeod
b0b60b938a
add initial setup key provisioning
2026-01-26 16:15:24 +00:00
Alisdair MacLeod
e3a026bf1c
connect proxy grpc server to database
2026-01-26 15:28:50 +00:00
Zoltan Papp
58daa674ef
[Management/Client] Trigger debug bundle runs from API/Dashboard ( #4592 ) ( #4832 )
...
This PR adds the ability to trigger debug bundle generation remotely from the Management API/Dashboard.
2026-01-19 11:22:16 +01:00
pascal
2851e38a1f
add management API to store
2026-01-16 16:16:29 +01:00
pascal
51261fe7a9
proxy service proto
2026-01-16 14:48:33 +01:00
pascal
304321d019
put grpc endpoint on management and send test exposed service
2026-01-16 14:24:39 +01:00
Bethuel Mmbaga
067c77e49e
[management] Add custom dns zones ( #4849 )
2026-01-16 12:12:05 +03:00
Misha Bragin
f7967f9ae3
Feature/resolve local jwks keys ( #5073 )
2026-01-09 09:41:27 -05:00
Maycon Santos
9c5b2575e3
[misc] add embedded provider support metrics
...
count local vs idp users if embedded
2026-01-08 12:12:19 +01:00
Misha Bragin
cf535f8c61
[management] Fix role change in transaction and update readme ( #5060 )
2026-01-08 12:07:59 +01:00
Misha Bragin
e586c20e36
[management, infrastructure, idp] Simplified IdP Management - Embedded IdP ( #5008 )
...
Embed Dex as a built-in IdP to simplify self-hosting setup.
Adds an embedded OIDC Identity Provider (Dex) with local user management and optional external IdP connectors (Google/GitHub/OIDC/SAML), plus device-auth flow for CLI login. Introduces instance onboarding/setup endpoints (including owner creation), field-level encryption for sensitive user data, a streamlined self-hosting provisioning script, and expanded APIs + test coverage for IdP management.
more at https://github.com/netbirdio/netbird/pull/5008#issuecomment-3718987393
2026-01-07 14:52:32 +01:00
Zoltan Papp
011cc81678
[client, management] auto-update ( #4732 )
2025-12-19 19:57:39 +01:00
Pascal Fischer
c29bb1a289
[management] use xid as request id for logging ( #4955 )
2025-12-16 14:02:37 +01:00
Bethuel Mmbaga
27dd97c9c4
[management] Add support to disable geolocation service ( #4901 )
2025-12-03 14:45:59 +03:00
Pascal Fischer
7193bd2da7
[management] Refactor network map controller ( #4789 )
2025-12-02 12:34:28 +01:00
Pascal Fischer
3351b38434
[management] pass config to controller ( #4807 )
2025-11-19 11:52:18 +01:00
Viktor Liu
d71a82769c
[client,management] Rewrite the SSH feature ( #4015 )
2025-11-17 17:10:41 +01:00
Pascal Fischer
cc97cffff1
[management] move network map logic into new design ( #4774 )
2025-11-13 12:09:46 +01:00
Pascal Fischer
4545ab9a52
[management] rewire account manager to permissions manager ( #4673 )
2025-10-27 22:59:35 +01:00
Viktor Liu
954f40991f
[client,management,signal] Handle grpc from ws proxy internally instead of via tcp ( #4593 )
2025-10-06 21:22:19 +02:00
Viktor Liu
4d7e59f199
[client,signal,management] Adjust browser client ws proxy paths ( #4565 )
2025-10-02 00:10:47 +02:00
Viktor Liu
b5daec3b51
[client,signal,management] Add browser client support ( #4415 )
2025-10-01 20:10:11 +02:00
Bethuel Mmbaga
5113c70943
[management] Extends integration and peers manager ( #4450 )
2025-09-06 13:13:49 +03:00
Bethuel Mmbaga
a8dcff69c2
[management] Add peers manager to integrations ( #4405 )
2025-09-04 23:07:03 +03:00
Pascal Fischer
0e62325d46
[management] fail on geo location init failure ( #4362 )
2025-08-18 10:53:55 +02:00
Pascal Fischer
b3056d0937
[management] Use DI containers for server bootstrapping ( #4343 )
2025-08-15 17:14:48 +02:00
