mlsmaycon
b16d63643c
Add group-based access control for SSO reverse proxy authentication
...
Implement user group validation during OAuth callback to ensure users
belong to allowed distribution groups before granting access to reverse
proxies. This provides account isolation and fine-grained access control.
Key changes:
- Add ValidateUserGroupAccess to ProxyServiceServer for group membership checks
- Redirect denied users to error page with access_denied parameter
- Handle OAuth error responses in proxy middleware
- Add comprehensive integration tests for auth callback flow
2026-02-10 16:25:00 +01:00
pascal
a803f47685
add network map support for clustering
2026-02-10 14:29:20 +01:00
pascal
9a67a8e427
send updates on changes
2026-02-09 17:06:04 +01:00
Viktor Liu
0a3a9f977d
Add proxy <-> management authentication
2026-02-08 14:33:27 +08:00
pascal
0e00f1c8f7
Merge remote-tracking branch 'origin/prototype/reverse-proxy-clusters' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/manager/manager.go
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/modules.go
# management/internals/shared/grpc/proxy.go
# management/server/http/handler.go
# management/server/http/testing/testing_tools/channel/channel.go
2026-02-05 15:19:57 +01:00
mlsmaycon
5ccce1ab3f
add debug logging for proxy connections and domain resolution
...
- Log proxy address and cluster info when proxy connects
- Log connected proxy URLs when GetConnectedProxyURLs is called
- Log proxy allow list when GetDomains is called
- Helps debug issues with free domains not appearing in API response
2026-02-05 02:18:38 +01:00
pascal
096d4ac529
rewrite peer creation and network map calc [WIP]
2026-02-04 20:01:00 +01:00
Alisdair MacLeod
694ae13418
add stateless proxy sessions
2026-02-04 16:52:35 +00:00
Alisdair MacLeod
a0005a604e
fix minor potential security issues with OIDC
2026-02-04 12:25:19 +00:00
Alisdair MacLeod
28f3354ffa
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/boot.go
# management/internals/shared/grpc/proxy.go
# proxy/internal/auth/middleware.go
# shared/management/proto/proxy_service.pb.go
# shared/management/proto/proxy_service.proto
# shared/management/proto/proxy_service_grpc.pb.go
2026-02-04 11:56:04 +00:00
Alisdair MacLeod
562923c600
management OIDC implementation using pkce
2026-02-04 11:51:46 +00:00
mlsmaycon
4d89ae27ef
add clusters logic
2026-02-04 02:16:57 +01:00
pascal
bffb25bea7
add status confirmation for certs and tunnel creation
2026-02-03 16:58:14 +01:00
Alisdair MacLeod
76a39c1dcb
Revert "add management side of OIDC authentication"
...
This reverts commit 02ce918114
2026-02-03 10:03:38 +00:00
Alisdair MacLeod
02ce918114
add management side of OIDC authentication
2026-02-03 09:42:40 +00:00
Alisdair MacLeod
30572fe1b8
add domain validation using values from proxies
2026-02-02 09:53:49 +00:00
Alisdair MacLeod
3a6f364b03
use a defined logger
...
this should avoid issues with the embedded
client also attempting to use the same global logger
2026-01-30 16:31:32 +00:00
Alisdair MacLeod
e95cfa1a00
add support for some basic authentication methods
2026-01-29 16:34:52 +00:00
pascal
8e0b7b6c25
add api for access log events
2026-01-29 14:27:57 +01:00
Alisdair MacLeod
f204da0d68
fix management reverseproxy proto mapping
2026-01-29 12:29:21 +00:00
Alisdair MacLeod
f4ca36ed7e
fix non-nil path assignment
2026-01-29 08:40:03 +00:00
mlsmaycon
717da8c7b7
fix nil path
2026-01-28 22:40:39 +01:00
mlsmaycon
a0a61d4f47
add extra debug logs
2026-01-28 21:26:57 +01:00
Alisdair MacLeod
5b1fced872
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-01-28 16:55:12 +00:00
Alisdair MacLeod
c98dcf5ef9
get all proxy endpoints when a proxy connects
2026-01-28 16:55:05 +00:00
pascal
57cb6bfccb
add log on broadcasting update
2026-01-28 17:52:38 +01:00
Alisdair MacLeod
b611d4a751
pass account manager in to proxy grpc server for setup key generation
2026-01-28 08:39:09 +00:00
pascal
b7eeefc102
send proxy mapping updates
2026-01-27 16:34:00 +01:00
pascal
8dd22f3a4f
move to reverse proxy and update api
2026-01-27 15:34:01 +01:00
Alisdair MacLeod
b0b60b938a
add initial setup key provisioning
2026-01-26 16:15:24 +00:00
Alisdair MacLeod
e3a026bf1c
connect proxy grpc server to database
2026-01-26 15:28:50 +00:00
Alisdair MacLeod
94503465ee
stub out management proxy server database connection
2026-01-26 14:47:49 +00:00
Alisdair MacLeod
8d959b0abc
update management proxy gRPC server
2026-01-26 14:02:27 +00:00
