Viktor Liu
07e59b2708
Add reverse proxy header security and forwarding
...
- Rewrite Host header to backend target (configurable via pass_host_header per mapping)
- Strip and set X-Forwarded-For/X-Real-IP from direct connection (trust boundary)
- Set X-Forwarded-Host and X-Forwarded-Proto headers
- Strip nb_session cookie and session_token query param before forwarding
- Add --forwarded-proto flag (auto/http/https) for proto detection
- Fix OIDC redirect hardcoded https scheme
- Add pass_host_header to proto, API, and management model
2026-02-08 15:00:35 +08:00
pascal
096d4ac529
rewrite peer creation and network map calc [WIP]
2026-02-04 20:01:00 +01:00
Alisdair MacLeod
694ae13418
add stateless proxy sessions
2026-02-04 16:52:35 +00:00
Alisdair MacLeod
28f3354ffa
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/boot.go
# management/internals/shared/grpc/proxy.go
# proxy/internal/auth/middleware.go
# shared/management/proto/proxy_service.pb.go
# shared/management/proto/proxy_service.proto
# shared/management/proto/proxy_service_grpc.pb.go
2026-02-04 11:56:04 +00:00
Alisdair MacLeod
562923c600
management OIDC implementation using pkce
2026-02-04 11:51:46 +00:00
pascal
bffb25bea7
add status confirmation for certs and tunnel creation
2026-02-03 16:58:14 +01:00
Alisdair MacLeod
5243481316
get OIDC configuration from proxy flags/env
2026-02-03 12:10:23 +00:00
Alisdair MacLeod
30cfc22cb6
correct proto and proxy authentication for oidc
2026-02-03 09:01:39 +00:00
Alisdair MacLeod
30572fe1b8
add domain validation using values from proxies
2026-02-02 09:53:49 +00:00
Alisdair MacLeod
e95cfa1a00
add support for some basic authentication methods
2026-01-29 16:34:52 +00:00
pascal
8e0b7b6c25
add api for access log events
2026-01-29 14:27:57 +01:00
pascal
b7eeefc102
send proxy mapping updates
2026-01-27 16:34:00 +01:00
Alisdair MacLeod
1d8390b935
refactor layout and structure
2026-01-26 09:28:46 +00:00
pascal
51261fe7a9
proxy service proto
2026-01-16 14:48:33 +01:00
