Viktor Liu
b87aa0bc15
Address linter issues
2026-02-12 18:41:20 +08:00
Maycon Santos
69d4b5d821
[misc] Update sign pipeline version ( #5296 )
2026-02-12 11:31:49 +01:00
Viktor Liu
f1a65d732d
Add proxy to license boundary check
2026-02-12 18:31:18 +08:00
Viktor Liu
a3c0ea3e71
Add proxy unit test workflow
2026-02-12 18:31:18 +08:00
Viktor Liu
abaf061c2a
Skip nil client for health
2026-02-12 18:31:18 +08:00
pascal
e531fb54b1
ignore error
2026-02-12 11:20:22 +01:00
mlsmaycon
5fcfed5b16
add proxy tests
2026-02-12 11:19:10 +01:00
pascal
5f43449f67
move linter exceptions
2026-02-12 10:45:21 +01:00
mlsmaycon
6796601aa6
Generate a random nonce to ensure each OIDC request gets a unique state
2026-02-12 10:45:13 +01:00
pascal
1fc25c301b
move linter exceptions
2026-02-12 10:11:49 +01:00
Viktor Liu
08ae281b2d
Fix network monitor restarting the client in netstack mode
2026-02-12 16:48:31 +08:00
Viktor Liu
3dfa97dcbd
[client] Fix stale entries in nftables with no handle ( #5272 )
2026-02-12 09:15:57 +01:00
Viktor Liu
1ddc9ce2bf
[client] Fix nil pointer panic in device and engine code ( #5287 )
2026-02-12 09:15:42 +01:00
Viktor Liu
bd47f44c63
Preload services targets
2026-02-12 16:04:55 +08:00
Viktor Liu
381260911b
Create unique token per proxy
2026-02-12 15:48:35 +08:00
Viktor Liu
38db42e7d6
Fix initial sync complete on empty service list
2026-02-12 15:48:35 +08:00
Viktor Liu
5d606d909d
Add TTL-based expiry and cleanup for PKCE verifiers to prevent unbounded memory growth
2026-02-12 15:12:41 +08:00
Viktor Liu
d689718b50
Improve logging and error handling
2026-02-12 15:12:41 +08:00
pascal
54a73c6649
move linter exceptions
2026-02-12 02:10:00 +01:00
pascal
418377842e
fix tests
2026-02-12 02:00:22 +01:00
pascal
15ef56e03d
fix typos
2026-02-12 01:54:14 +01:00
pascal
917035f8e8
fix tests
2026-02-12 01:52:30 +01:00
pascal
963e3f5457
fix linter issues
2026-02-12 01:15:36 +01:00
pascal
e20b969188
fix linter issues
2026-02-12 01:02:13 +01:00
pascal
1c7059ee67
fix some tests
2026-02-12 00:16:33 +01:00
pascal
22a3365658
fix rename errors and tests
2026-02-11 22:34:50 +01:00
Maycon Santos
2de1949018
[client] Check if login is required on foreground mode ( #5295 )
2026-02-11 21:42:36 +01:00
pascal
08ab1e3478
rename reverse proxy to services
2026-02-11 21:39:51 +01:00
pascal
ebb1f4007d
add id to request log search
2026-02-11 19:25:23 +01:00
pascal
acb53ece93
Merge branch 'prototype/reverse-proxy-logs-pagination' into prototype/reverse-proxy
2026-02-11 18:51:28 +01:00
pascal
e020950cfd
concat host and path for search and add a status filter
2026-02-11 17:54:29 +01:00
pascal
9dba262a20
add index to access log entries
2026-02-11 17:07:15 +01:00
pascal
5bcdf36377
fix source_ip
2026-02-11 16:50:27 +01:00
pascal
1ffe8deb10
add general search filter
2026-02-11 16:38:31 +01:00
pascal
d069145bd1
add more filters
2026-02-11 16:23:52 +01:00
Alisdair MacLeod
f3493ee042
add basic metrics for stress testing
2026-02-11 14:56:39 +00:00
pascal
bf48044e5c
push filter files
2026-02-11 14:52:44 +01:00
pascal
fb4cc37a4a
add pagination for access logs
2026-02-11 14:41:52 +01:00
pascal
55b8d89a79
add rate limiting for callback endpoint
2026-02-11 13:42:54 +01:00
pascal
6968a32a5a
move to argon2id
2026-02-11 13:26:40 +01:00
pascal
cfe6753349
hash pin and password
2026-02-11 11:48:15 +01:00
Alisdair MacLeod
5ae15b3af3
add hotpath proxy and roundtripper benchmarks
2026-02-11 09:47:40 +00:00
pascal
b79adb706c
add services to permissions list
2026-02-11 10:38:20 +01:00
mlsmaycon
f22497d5da
remove query parameters on refresh
2026-02-10 21:53:18 +01:00
mlsmaycon
95d672c9df
fix: capture auth method in access logs for failed authentication
...
- Add wasCredentialSubmitted helper to detect when credentials were
submitted but authentication failed
- Set auth method in CapturedData when wrong PIN/password is entered
- Set auth method for OAuth callback errors and token validation errors
- Add tests for failed auth method capture
2026-02-10 21:33:15 +01:00
mlsmaycon
7d08a609e6
fix: capture account/service/user IDs in access logs for auth requests
...
- Add accountID and serviceID to auth middleware DomainConfig
- Set account/service IDs in CapturedData when domain is matched
- Update AddDomain to accept accountID and serviceID parameters
- Skip access logging for internal proxy assets (/__netbird__/*)
- Return validationResult struct from validateSessionToken to preserve
user ID even when access is denied
- Capture user ID and auth method in access logs for denied requests
2026-02-10 20:55:07 +01:00
mlsmaycon
eea6120cd0
refactor: add ValidateSession gRPC and streamline test setup
...
- Add ValidateSession gRPC method for proxy-side user validation
- Move group access validation from REST callback to gRPC layer
- Capture user info in access logs via CapturedData mutable pointer
- Create validate_session_test.go for gRPC validation tests
- Simplify auth_callback_integration_test.go to create accounts
programmatically instead of using SQL file
- SQL test data file now only used by validate_session_test.go
2026-02-10 20:31:03 +01:00
Vlad
fc88399c23
[management] fixed ischild check ( #5279 )
2026-02-10 20:31:15 +03:00
pascal
0cb02bd906
fix path handling + extract targets to separate table + guard resource/peer deletion
2026-02-10 17:12:34 +01:00
mlsmaycon
08d3867f41
update error page
2026-02-10 16:54:05 +01:00
