pascal
beee14b9bf
fix merge conflicts
2026-03-27 14:47:06 +01:00
pascal
3013c98ab5
Merge branch 'main' into refactor/permissions-manager
...
# Conflicts:
# management/internals/modules/reverseproxy/service/manager/api.go
# management/server/http/testing/testing_tools/channel/channel.go
2026-03-27 14:37:29 +01:00
Pascal Fischer
7e1cce4b9f
[management] add terminated field to service ( #5700 )
2026-03-26 16:59:08 +01:00
Viktor Liu
b550a2face
[management, proxy] Add require_subdomain capability for proxy clusters ( #5628 )
2026-03-20 11:29:50 +01:00
Viktor Liu
212b34f639
[management] Add GET /reverse-proxies/clusters endpoint ( #5611 )
2026-03-18 11:15:56 +08:00
Viktor Liu
f0eed50678
[management] Accept domain target type for L4 reverse proxy services ( #5612 )
2026-03-17 16:29:03 +01:00
pascal
3741eb46dd
Merge remote-tracking branch 'origin/main' into refactor/permissions-manager
...
# Conflicts:
# management/internals/modules/reverseproxy/domain/manager/manager.go
# management/internals/modules/reverseproxy/service/manager/api.go
# management/internals/server/modules.go
# management/server/http/testing/testing_tools/channel/channel.go
2026-03-17 12:38:08 +01:00
Viktor Liu
387e374e4b
[proxy, management] Add header auth, access restrictions, and session idle timeout ( #5587 )
2026-03-16 15:22:00 +01:00
Viktor Liu
3e6baea405
[management,proxy,client] Add L4 capabilities (TLS/TCP/UDP) ( #5530 )
2026-03-13 18:36:44 +01:00
Pascal Fischer
e50e124e70
[proxy] Fix domain switching update ( #5585 )
2026-03-12 17:12:26 +01:00
Pascal Fischer
30c02ab78c
[management] use the cache for the pkce state ( #5516 )
2026-03-09 12:23:06 +01:00
Pascal Fischer
5c20f13c48
[management] fix domain uniqueness ( #5529 )
2026-03-07 10:46:37 +01:00
pascal
d85ee0b5a2
remove old permissions management
2026-03-06 18:19:33 +01:00
pascal
b0ce0048b4
Merge branch 'refs/heads/main' into refactor/permissions-manager
...
# Conflicts:
# management/internals/modules/reverseproxy/service/manager/api.go
# management/server/http/handler.go
2026-03-06 11:37:53 +01:00
Viktor Liu
e601278117
[management,proxy] Add per-target options to reverse proxy ( #5501 )
2026-03-05 10:03:26 +01:00
Maycon Santos
8e7b016be2
[management] Replace in-memory expose tracker with SQL-backed operations ( #5494 )
...
The expose tracker used sync.Map for in-memory TTL tracking of active expose sessions, which broke and lost all sessions on restart.
Replace with SQL-backed operations that reuse the existing meta_last_renewed_at column:
- Add store methods: RenewEphemeralService, GetExpiredEphemeralServices, CountEphemeralServicesByPeer, EphemeralServiceExists
- Move duplicate/limit checks inside a transaction with row-level locking (SELECT ... FOR UPDATE) to prevent concurrent bypass
- Reaper re-checks expiry under row lock to avoid deleting a just-renewed service and prevent duplicate event emission
- Add composite index on (source, source_peer) for efficient queries
- Batch-limit and column-select the reaper query to avoid DB/GC spikes
- Filter out malformed rows with empty source_peer
2026-03-04 18:15:13 +01:00
Pascal Fischer
d7c8e37ff4
[management] Store connected proxies in DB ( #5472 )
...
Co-authored-by: mlsmaycon <mlsmaycon@gmail.com >
2026-03-03 18:39:46 +01:00