Nicolas Frati
705f87fc20
[management] fix: device redirect uri wasn't registered ( #6191 )
...
* fix: device redirect uri wasn't registered
* fix lint
2026-05-18 12:57:59 +02:00
Viktor Liu
22e2519d71
[management] Avoid peer IP reallocation when account settings update preserves the network range ( #6173 )
2026-05-16 15:51:48 +02:00
Viktor Liu
ea9fab4396
[management] Allocate and preserve IPv6 overlay addresses for embedded proxy peers ( #6132 )
2026-05-14 16:05:33 +02:00
Vlad
77b479286e
[management] fix offline statuses for public proxy clusters ( #6133 )
2026-05-14 13:27:50 +02:00
Vlad
07cbfdbede
[proxy] feature: bring your own proxy ( #5627 )
2026-05-11 14:31:38 +02:00
pascal
c948d7398f
further improve db calls
2026-05-08 20:51:46 +02:00
pascal
13d26106f8
improve db calls
2026-05-08 20:44:17 +02:00
pascal
3e83164bcd
fix affected group handling
2026-05-08 20:27:47 +02:00
pascal
6568c905c6
fix test
2026-05-08 19:54:14 +02:00
pascal
aa9a1a42f5
remove complexity
2026-05-08 19:36:21 +02:00
pascal
5ae6c25ac0
fix test
2026-05-08 19:31:59 +02:00
pascal
1d906e411d
fix test
2026-05-08 19:31:46 +02:00
pascal
3012228b91
missing files
2026-05-08 16:48:09 +02:00
pascal
85851bc477
extract submethods
2026-05-08 16:43:27 +02:00
Nicolas Frati and braginini
e89aad09f5
[management] Enable MFA for local users ( #5804 )
...
* wip: totp for local users
* fix providers not getting populated
* polished UI and fix post_login_redirect_uri
* fix: make sure logout is only prompted from oidc flow
Signed-off-by: jnfrati <nicofrati@gmail.com >
* update templates
Signed-off-by: jnfrati <nicofrati@gmail.com >
* deps: update dex dependency
Signed-off-by: jnfrati <nicofrati@gmail.com >
* fix qube issues
Signed-off-by: jnfrati <nicofrati@gmail.com >
* replace window with globalThis on home html
Signed-off-by: jnfrati <nicofrati@gmail.com >
* fixed coderabbit comments
Signed-off-by: jnfrati <nicofrati@gmail.com >
* debug
* remove unused config and rename totp issuer
* deps: update dex reference to latest
* add dashboard post logout redirect uri to embedded config
* implemented api for mfa configuration
* update docs and config parsing
* catch error on idp manager init mfa
* fix tests
* Add remember me for MFA
* Add cookie encryption and session share between tabs
* fixed logout showing non actionable error and session cookie encription key
* fixed missing mfa settings on sql query for account
* fix code index for mfa activity
---------
Signed-off-by: jnfrati <nicofrati@gmail.com >
Co-authored-by: braginini <bangvalo@gmail.com >
2026-05-08 16:31:20 +02:00
pascal
fed4f1b024
drain channel between tests
2026-05-08 14:33:31 +02:00
pascal
70e84d5228
add own peer on peer update
2026-05-07 18:07:47 +02:00
pascal
57529c7f18
linter
2026-05-07 17:50:02 +02:00
pascal
40e6ec16c6
log
2026-05-07 17:36:09 +02:00
pascal
ec476d5072
extend logging
2026-05-07 16:55:45 +02:00
pascal
550ae5558e
update after merge
2026-05-07 16:24:54 +02:00
pascal
46494bd860
bugfixes
2026-05-07 16:08:45 +02:00
pascal
3a95f39f2c
Merge branch 'main' into feature/affected-peers
...
# Conflicts:
# management/server/group.go
# management/server/peer.go
2026-05-07 12:28:51 +02:00
Viktor Liu
205ebcfda2
[management, client] Add IPv6 overlay support ( #5631 )
2026-05-07 11:33:37 +02:00
Pascal Fischer
bfeb9b19ec
[management] remove permissions from geolocations api ( #6091 )
2026-05-06 13:07:01 +02:00
Pascal Fischer
b19b7464ea
[management] fix flaky invite token test ( #6077 )
2026-05-05 18:48:51 +02:00
Pascal Fischer
97db824929
[management] fix proxy reconnect ( #6063 )
2026-05-04 20:43:25 +02:00
pascal
6b4d4076f4
extend tests
2026-05-04 15:16:59 +02:00
pascal and Claude Opus 4.6
63d2217d8a
Merge main into feature/affected-peers
...
Resolve conflicts keeping affected-peers logic while adopting
UpdateReason parameter from main for UpdateAccountPeers and
BufferUpdateAccountPeers signatures.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-05-04 12:22:13 +02:00
Bethuel Mmbaga
6262b0d841
[management] Track pending approval in peer event metadata ( #6040 )
2026-05-04 12:47:13 +03:00
Viktor Liu
057d651d2e
[client, proxy] Add packet capture to debug bundle and CLI ( #5891 )
2026-05-04 11:28:56 +02:00
Misha Bragin
c4b2da4c92
[management] Add public connection ipv4 and ipv6 posture check ( #6038 )
...
This change enables admins to configure posture checks for connecting public IPs of their peers.
It changes the behavior of the check as well and now the evaluation is if the received network is part of the configured network.
2026-04-30 18:36:50 +02:00
Nicolas Frati
dcd1db42ef
[management] Enable PAT creation during setup ( #6003 )
...
* enable pat creation on setup
* remove logic from handler towards setup service
* fix lint issue
* fix rollback on account id returning empty
* fix coderabbit comments
* fix setup PAT rollback behavior
2026-04-30 17:21:35 +02:00
pascal
0bfccd65d2
add to networks modules
2026-04-30 16:20:41 +02:00
Pascal Fischer
f29f5a0978
[management] add monitoring for nmap update source ( #6036 )
2026-04-30 14:52:54 +02:00
Bethuel Mmbaga
df197d5001
[management] Prevent JWT reuse during peer login ( #6002 )
2026-04-29 15:04:27 +03:00
Bethuel Mmbaga
db44848e2d
[management] Drop netmap calculation on peer read ( #6006 )
2026-04-28 18:25:56 +03:00
pascal
26d778374b
clean comments
2026-04-28 16:56:34 +02:00
pascal
5ec8bebfa5
add tests
2026-04-28 16:27:44 +02:00
pascal
cefb37e920
affected filtering on peers update
2026-04-28 13:48:01 +02:00
Bethuel Mmbaga
f8745723fc
[management] Add Microsoft AD FS support for embedded Dex identity providers ( #6008 )
2026-04-28 12:42:19 +03:00
pascal
5a16c812fd
use buffering affected peers
2026-04-27 18:18:29 +02:00
pascal
285bbc5ffb
calculate affected peers
2026-04-27 17:49:12 +02:00
Vlad
154b81645a
[management] removed legacy network map code ( #5565 )
2026-04-27 16:02:54 +02:00
Zoltan Papp
f732b01a05
[management] unify peer-update test timeout via constant ( #5952 )
...
peerShouldReceiveUpdate waited 500ms for the expected update message,
and every outer wrapper across the management/server test suite paired
it with a 1s goroutine-drain timeout. Both were too tight for slower
CI runners (MySQL, FreeBSD, loaded sqlite), producing intermittent
"Timed out waiting for update message" failures in tests like
TestDNSAccountPeersUpdate, TestPeerAccountPeersUpdate, and
TestNameServerAccountPeersUpdate.
Introduce peerUpdateTimeout (5s) next to the helper and use it both in
the helper and in every outer wrapper so the two timeouts stay in sync.
Only runs down on failure; passing tests return as soon as the channel
delivers, so there is no slowdown on green runs.
2026-04-23 21:19:21 +02:00
Pascal Fischer
fa0d58d093
[management] exclude peers for expiration job that have already been marked expired ( #5970 )
2026-04-23 16:01:54 +02:00
Vlad
b6038e8acd
[management] refactor: changeable pat rate limiting ( #5946 )
2026-04-23 15:13:22 +02:00
Bethuel Mmbaga
57b23c5b25
[management] Propagate context changes to upstream middleware ( #5956 )
2026-04-21 23:06:52 +03:00
Vlad
eb3aa96257
[management] check policy for changes before actual db update ( #5405 )
2026-04-21 18:37:04 +02:00
Nicolas Frati
8ae8f2098f
[management] chores: fix lint error on google workspace ( #5907 )
...
* chores: fix lint error on google workspace
* chores: updated google api dependency
* update google golang api sdk to latest
2026-04-16 20:02:09 +02:00
Nicolas Frati