Viktor Liu
9554934b92
Validate trusted proxies in OAuth callback getClientIP
2026-02-12 22:06:29 +08:00
mlsmaycon
b16d63643c
Add group-based access control for SSO reverse proxy authentication
...
Implement user group validation during OAuth callback to ensure users
belong to allowed distribution groups before granting access to reverse
proxies. This provides account isolation and fine-grained access control.
Key changes:
- Add ValidateUserGroupAccess to ProxyServiceServer for group membership checks
- Redirect denied users to error page with access_denied parameter
- Handle OAuth error responses in proxy middleware
- Add comprehensive integration tests for auth callback flow
2026-02-10 16:25:00 +01:00
pascal
9a67a8e427
send updates on changes
2026-02-09 17:06:04 +01:00
mlsmaycon
7c996ac9b5
add AuthCallbackURL
2026-02-09 01:18:49 +01:00
mlsmaycon
cf9fd5d960
add AuthClientID
2026-02-08 19:41:52 +01:00
Viktor Liu
0a3a9f977d
Add proxy <-> management authentication
2026-02-08 14:33:27 +08:00
mlsmaycon
f65f4fc280
fix some conflicts regression
2026-02-06 20:39:17 +01:00
pascal
096d4ac529
rewrite peer creation and network map calc [WIP]
2026-02-04 20:01:00 +01:00
Alisdair MacLeod
28f3354ffa
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/boot.go
# management/internals/shared/grpc/proxy.go
# proxy/internal/auth/middleware.go
# shared/management/proto/proxy_service.pb.go
# shared/management/proto/proxy_service.proto
# shared/management/proto/proxy_service_grpc.pb.go
2026-02-04 11:56:04 +00:00
Alisdair MacLeod
562923c600
management OIDC implementation using pkce
2026-02-04 11:51:46 +00:00
pascal
bffb25bea7
add status confirmation for certs and tunnel creation
2026-02-03 16:58:14 +01:00
pascal
8e0b7b6c25
add api for access log events
2026-01-29 14:27:57 +01:00
Alisdair MacLeod
b611d4a751
pass account manager in to proxy grpc server for setup key generation
2026-01-28 08:39:09 +00:00
Alisdair MacLeod
50f42caf94
connect api to store and manager for domains
2026-01-27 15:43:54 +00:00
pascal
b7eeefc102
send proxy mapping updates
2026-01-27 16:34:00 +01:00
pascal
8dd22f3a4f
move to reverse proxy and update api
2026-01-27 15:34:01 +01:00
pascal
b71e2860cf
Merge branch 'refs/heads/main' into prototype/reverse-proxy
...
# Conflicts:
# management/server/activity/codes.go
# management/server/http/handler.go
# management/server/store/sql_store.go
# management/server/store/store.go
# shared/management/http/api/openapi.yml
# shared/management/http/api/types.gen.go
# shared/management/proto/management.pb.go
2026-01-27 15:21:55 +01:00
Alisdair MacLeod
b0b60b938a
add initial setup key provisioning
2026-01-26 16:15:24 +00:00
Alisdair MacLeod
e3a026bf1c
connect proxy grpc server to database
2026-01-26 15:28:50 +00:00
Zoltan Papp
58daa674ef
[Management/Client] Trigger debug bundle runs from API/Dashboard ( #4592 ) ( #4832 )
...
This PR adds the ability to trigger debug bundle generation remotely from the Management API/Dashboard.
2026-01-19 11:22:16 +01:00
pascal
2851e38a1f
add management API to store
2026-01-16 16:16:29 +01:00
pascal
51261fe7a9
proxy service proto
2026-01-16 14:48:33 +01:00
pascal
304321d019
put grpc endpoint on management and send test exposed service
2026-01-16 14:24:39 +01:00
Bethuel Mmbaga
067c77e49e
[management] Add custom dns zones ( #4849 )
2026-01-16 12:12:05 +03:00
Misha Bragin
e586c20e36
[management, infrastructure, idp] Simplified IdP Management - Embedded IdP ( #5008 )
...
Embed Dex as a built-in IdP to simplify self-hosting setup.
Adds an embedded OIDC Identity Provider (Dex) with local user management and optional external IdP connectors (Google/GitHub/OIDC/SAML), plus device-auth flow for CLI login. Introduces instance onboarding/setup endpoints (including owner creation), field-level encryption for sensitive user data, a streamlined self-hosting provisioning script, and expanded APIs + test coverage for IdP management.
more at https://github.com/netbirdio/netbird/pull/5008#issuecomment-3718987393
2026-01-07 14:52:32 +01:00
Pascal Fischer
c29bb1a289
[management] use xid as request id for logging ( #4955 )
2025-12-16 14:02:37 +01:00
Pascal Fischer
7193bd2da7
[management] Refactor network map controller ( #4789 )
2025-12-02 12:34:28 +01:00
Pascal Fischer
cc97cffff1
[management] move network map logic into new design ( #4774 )
2025-11-13 12:09:46 +01:00
Pascal Fischer
b3056d0937
[management] Use DI containers for server bootstrapping ( #4343 )
2025-08-15 17:14:48 +02:00
