1107 Commits

Author	SHA1	Message	Date
Viktor Liu	d689718b50	Improve logging and error handling	2026-02-12 15:12:41 +08:00
pascal	418377842e	fix tests	2026-02-12 02:00:22 +01:00
pascal	917035f8e8	fix tests	2026-02-12 01:52:30 +01:00
pascal	963e3f5457	fix linter issues	2026-02-12 01:15:36 +01:00
pascal	e20b969188	fix linter issues	2026-02-12 01:02:13 +01:00
pascal	1c7059ee67	fix some tests	2026-02-12 00:16:33 +01:00
pascal	22a3365658	fix rename errors and tests	2026-02-11 22:34:50 +01:00
pascal	08ab1e3478	rename reverse proxy to services	2026-02-11 21:39:51 +01:00
pascal	ebb1f4007d	add id to request log search	2026-02-11 19:25:23 +01:00
pascal	e020950cfd	concat host and path for search and add a status filter	2026-02-11 17:54:29 +01:00
pascal	9dba262a20	add index to access log entries	2026-02-11 17:07:15 +01:00
pascal	5bcdf36377	fix source_ip	2026-02-11 16:50:27 +01:00
pascal	1ffe8deb10	add general search filter	2026-02-11 16:38:31 +01:00
pascal	d069145bd1	add more filters	2026-02-11 16:23:52 +01:00
pascal	bf48044e5c	push filter files	2026-02-11 14:52:44 +01:00
pascal	fb4cc37a4a	add pagination for access logs	2026-02-11 14:41:52 +01:00
pascal	55b8d89a79	add rate limiting for callback endpoint	2026-02-11 13:42:54 +01:00
pascal	6968a32a5a	move to argon2id	2026-02-11 13:26:40 +01:00
pascal	cfe6753349	hash pin and password	2026-02-11 11:48:15 +01:00
pascal	b79adb706c	add services to permissions list	2026-02-11 10:38:20 +01:00
mlsmaycon	eea6120cd0	refactor: add ValidateSession gRPC and streamline test setup ... - Add ValidateSession gRPC method for proxy-side user validation - Move group access validation from REST callback to gRPC layer - Capture user info in access logs via CapturedData mutable pointer - Create validate_session_test.go for gRPC validation tests - Simplify auth_callback_integration_test.go to create accounts programmatically instead of using SQL file - SQL test data file now only used by validate_session_test.go	2026-02-10 20:31:03 +01:00
pascal	0cb02bd906	fix path handling + extract targets to separate table + guard resource/peer deletion	2026-02-10 17:12:34 +01:00
mlsmaycon	b16d63643c	Add group-based access control for SSO reverse proxy authentication ... Implement user group validation during OAuth callback to ensure users belong to allowed distribution groups before granting access to reverse proxies. This provides account isolation and fine-grained access control. Key changes: - Add ValidateUserGroupAccess to ProxyServiceServer for group membership checks - Redirect denied users to error page with access_denied parameter - Handle OAuth error responses in proxy middleware - Add comprehensive integration tests for auth callback flow	2026-02-10 16:25:00 +01:00
pascal	ca9a7e11ef	continue on host lookup failure	2026-02-10 14:38:15 +01:00
pascal	a803f47685	add network map support for clustering	2026-02-10 14:29:20 +01:00
pascal	9e5fa11792	handle multiple path	2026-02-09 19:25:30 +01:00
pascal	1ff75acb31	handle default ports	2026-02-09 19:23:39 +01:00
pascal	1754160686	handle default ports	2026-02-09 19:21:43 +01:00
pascal	423f6266fb	handle default ports	2026-02-09 18:18:53 +01:00
pascal	16d1b4a14a	handle default ports	2026-02-09 18:15:26 +01:00
pascal	7c14056faf	fix resource lookup	2026-02-09 17:58:28 +01:00
pascal	62e37dc2e2	fix host resolution	2026-02-09 17:56:38 +01:00
pascal	9a67a8e427	send updates on changes	2026-02-09 17:06:04 +01:00
pascal	be5f30225a	fix embedded exception	2026-02-09 15:28:48 +01:00
pascal	7467e9fb8c	use portrange	2026-02-09 14:46:23 +01:00
pascal	2390c2e46e	change network map calc to inject proxy policies	2026-02-09 14:41:22 +01:00
mlsmaycon	778c223176	fix api handler path	2026-02-09 02:30:06 +01:00
mlsmaycon	36cd0dd85c	temp fix import cycle	2026-02-09 02:10:21 +01:00
mlsmaycon	09a1d5a02d	rename endpoint	2026-02-09 01:48:51 +01:00
mlsmaycon	7c996ac9b5	add AuthCallbackURL	2026-02-09 01:18:49 +01:00
mlsmaycon	cf9fd5d960	add AuthClientID	2026-02-08 19:41:52 +01:00
Viktor Liu	2f390e1794	Conflate default ports	2026-02-09 00:57:08 +08:00
Viktor Liu	3630ebb3ae	Add option to rewrite redirects	2026-02-09 00:44:47 +08:00
Viktor Liu	260c46df04	Fix broken auth redirect	2026-02-09 00:02:54 +08:00
Viktor Liu	7f11e3205d	Validate target id	2026-02-08 23:44:31 +08:00
Viktor Liu	1c8f92a96f	Fix management nil pointer	2026-02-08 23:29:16 +08:00
Viktor Liu	2cf00dba58	Fix missing route	2026-02-08 21:36:55 +08:00
Viktor Liu	d2a7f3ae36	Fix pass host header	2026-02-08 21:33:48 +08:00
Viktor Liu	dc26a5a436	Merge branch 'main' into prototype/reverse-proxy	2026-02-08 17:50:16 +08:00
Viktor Liu	7c647dd160	Add peer firewall to the receiving peer	2026-02-08 17:49:03 +08:00