Diego Noguês
b81837a364
feat: adding traefik and proxy component to getting-started
2026-02-12 11:16:37 +01:00
mlsmaycon
6796601aa6
Generate a random nonce to ensure each OIDC request gets a unique state
2026-02-12 10:45:13 +01:00
Viktor Liu
bd47f44c63
Preload services targets
2026-02-12 16:04:55 +08:00
Viktor Liu
381260911b
Create unique token per proxy
2026-02-12 15:48:35 +08:00
Viktor Liu
38db42e7d6
Fix initial sync complete on empty service list
2026-02-12 15:48:35 +08:00
Viktor Liu
5d606d909d
Add TTL-based expiry and cleanup for PKCE verifiers to prevent unbounded memory growth
2026-02-12 15:12:41 +08:00
Viktor Liu
d689718b50
Improve logging and error handling
2026-02-12 15:12:41 +08:00
pascal
418377842e
fix tests
2026-02-12 02:00:22 +01:00
pascal
917035f8e8
fix tests
2026-02-12 01:52:30 +01:00
pascal
963e3f5457
fix linter issues
2026-02-12 01:15:36 +01:00
pascal
e20b969188
fix linter issues
2026-02-12 01:02:13 +01:00
pascal
1c7059ee67
fix some tests
2026-02-12 00:16:33 +01:00
pascal
22a3365658
fix rename errors and tests
2026-02-11 22:34:50 +01:00
pascal
08ab1e3478
rename reverse proxy to services
2026-02-11 21:39:51 +01:00
pascal
ebb1f4007d
add id to request log search
2026-02-11 19:25:23 +01:00
pascal
e020950cfd
concat host and path for search and add a status filter
2026-02-11 17:54:29 +01:00
pascal
9dba262a20
add index to access log entries
2026-02-11 17:07:15 +01:00
pascal
5bcdf36377
fix source_ip
2026-02-11 16:50:27 +01:00
pascal
1ffe8deb10
add general search filter
2026-02-11 16:38:31 +01:00
pascal
d069145bd1
add more filters
2026-02-11 16:23:52 +01:00
pascal
bf48044e5c
push filter files
2026-02-11 14:52:44 +01:00
pascal
fb4cc37a4a
add pagination for access logs
2026-02-11 14:41:52 +01:00
pascal
55b8d89a79
add rate limiting for callback endpoint
2026-02-11 13:42:54 +01:00
pascal
6968a32a5a
move to argon2id
2026-02-11 13:26:40 +01:00
pascal
cfe6753349
hash pin and password
2026-02-11 11:48:15 +01:00
pascal
b79adb706c
add services to permissions list
2026-02-11 10:38:20 +01:00
mlsmaycon
eea6120cd0
refactor: add ValidateSession gRPC and streamline test setup
...
- Add ValidateSession gRPC method for proxy-side user validation
- Move group access validation from REST callback to gRPC layer
- Capture user info in access logs via CapturedData mutable pointer
- Create validate_session_test.go for gRPC validation tests
- Simplify auth_callback_integration_test.go to create accounts
programmatically instead of using SQL file
- SQL test data file now only used by validate_session_test.go
2026-02-10 20:31:03 +01:00
pascal
0cb02bd906
fix path handling + extract targets to separate table + guard resource/peer deletion
2026-02-10 17:12:34 +01:00
mlsmaycon
b16d63643c
Add group-based access control for SSO reverse proxy authentication
...
Implement user group validation during OAuth callback to ensure users
belong to allowed distribution groups before granting access to reverse
proxies. This provides account isolation and fine-grained access control.
Key changes:
- Add ValidateUserGroupAccess to ProxyServiceServer for group membership checks
- Redirect denied users to error page with access_denied parameter
- Handle OAuth error responses in proxy middleware
- Add comprehensive integration tests for auth callback flow
2026-02-10 16:25:00 +01:00
pascal
ca9a7e11ef
continue on host lookup failure
2026-02-10 14:38:15 +01:00
pascal
a803f47685
add network map support for clustering
2026-02-10 14:29:20 +01:00
pascal
9e5fa11792
handle multiple path
2026-02-09 19:25:30 +01:00
pascal
1ff75acb31
handle default ports
2026-02-09 19:23:39 +01:00
pascal
1754160686
handle default ports
2026-02-09 19:21:43 +01:00
pascal
423f6266fb
handle default ports
2026-02-09 18:18:53 +01:00
pascal
16d1b4a14a
handle default ports
2026-02-09 18:15:26 +01:00
pascal
7c14056faf
fix resource lookup
2026-02-09 17:58:28 +01:00
pascal
62e37dc2e2
fix host resolution
2026-02-09 17:56:38 +01:00
pascal
9a67a8e427
send updates on changes
2026-02-09 17:06:04 +01:00
pascal
be5f30225a
fix embedded exception
2026-02-09 15:28:48 +01:00
pascal
7467e9fb8c
use portrange
2026-02-09 14:46:23 +01:00
pascal
2390c2e46e
change network map calc to inject proxy policies
2026-02-09 14:41:22 +01:00
mlsmaycon
778c223176
fix api handler path
2026-02-09 02:30:06 +01:00
mlsmaycon
36cd0dd85c
temp fix import cycle
2026-02-09 02:10:21 +01:00
mlsmaycon
09a1d5a02d
rename endpoint
2026-02-09 01:48:51 +01:00
mlsmaycon
7c996ac9b5
add AuthCallbackURL
2026-02-09 01:18:49 +01:00
mlsmaycon
cf9fd5d960
add AuthClientID
2026-02-08 19:41:52 +01:00
Viktor Liu
2f390e1794
Conflate default ports
2026-02-09 00:57:08 +08:00
Viktor Liu
3630ebb3ae
Add option to rewrite redirects
2026-02-09 00:44:47 +08:00
Viktor Liu
260c46df04
Fix broken auth redirect
2026-02-09 00:02:54 +08:00
Diego Noguês