mlsmaycon 35587bdfeb [management] Split ValidateSession into named checks ...

The account status gate pushed ValidateSession to 115 lines of code, past
the 100 the quality gate allows. Session token verification and the checks
that run against a user of the service's own account move into named
helpers, and the denials raised before a user is resolved share one
constructor.

An account mismatch keeps its bare response: the user belongs to a
different account, so none of their identity belongs in an answer to this
service's proxy.

Tests assert denied reasons through the package constants, with the wire
values pinned in one place so a rename has to be deliberate.

2026-08-08 04:48:12 +00:00

..

account

[management] validate meta change against posture checks (#6510)

2026-06-22 19:42:04 +02:00

activity

[management, client] Add management-controlled client metrics push (#5886)

2026-07-01 14:50:25 +02:00

affectedpeers

[management] Affected peers for user updates (#7099)

2026-08-07 18:07:53 +02:00

auth

[management] Skip JWT group evaluation for embedded-IdP local users (#6422)

2026-06-15 12:01:54 +03:00

cache

[management] Reuse a single cache store across all management server consumers (#5889)

2026-04-16 16:04:53 +02:00

context

[management] log user agent and return request id (#6380)

2026-06-09 15:24:26 +02:00

geolocation

[management] fix panic on management reboot (#5759)

2026-04-01 12:31:30 +02:00

groups

[management] component types (#6866)

2026-07-23 11:37:09 +02:00

http

[management] Split ValidateSession into named checks

2026-08-08 04:48:12 +00:00

idp

[infrastructure] Add unified admin CLI for self-hosted helpers (#6507)

2026-07-22 18:47:19 +02:00

instance

[management] Enable PAT creation during setup (#6003)

2026-04-30 17:21:35 +02:00

integration_reference

Feature/peer validator (#1553)

2024-03-27 18:48:48 +01:00

integrations

[management] Refactor management server bootstrap (#6256)

2026-05-26 17:44:28 +03:00

job

[management] fix some concurrency potential issues (#5584)

2026-03-12 15:57:36 +01:00

metrics

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00

migration

[management, proxy] Add prompt-cache token and cost accounting to agent network usage (#6900)

2026-07-26 21:42:41 +02:00

mock_server

[management] validate meta change against posture checks (#6510)

2026-06-22 19:42:04 +02:00

networks

[management] component types (#6866)

2026-07-23 11:37:09 +02:00

peer

[management] component types (#6866)

2026-07-23 11:37:09 +02:00

permissions

[management] Resolve agent network permissions per submodule (#7030)

2026-08-03 12:45:17 +02:00

posture

[management] component types (#6866)

2026-07-23 11:37:09 +02:00

settings

[management] enrich context in permissions manager (#6286)

2026-05-29 16:36:38 +02:00

store

[management] Read reverse-proxy service and target columns in Postgres path (#6886)

2026-07-28 14:46:19 +02:00

telemetry

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

testdata

[management] scope network router update call (#6222)

2026-05-20 18:24:00 +02:00

testutil

[management] docker login on management tests (#5323)

2026-02-18 16:11:17 +01:00

types

[management] prewarm a posture check cache on network map generation (#7093)

2026-08-07 15:03:40 +02:00

users

[management, client, proxy] add expose NetBird-only services over tunnel peers (#6226)

2026-05-25 17:41:50 +02:00

util

[management] component types (#6866)

2026-07-23 11:37:09 +02:00

account_request_buffer.go

[management] revert ctx dependency in get account with backpressure (#5878)

2026-04-14 12:16:03 +02:00

account_test.go

[management] prewarm a posture check cache on network map generation (#7093)

2026-08-07 15:03:40 +02:00

account.go

[management] Affected peers for user updates (#7099)

2026-08-07 18:07:53 +02:00

affected_peers_coverage_test.go

[management] simplify affected peers ignore disabled (#6540)

2026-06-25 16:30:40 +02:00

affected_peers_jwt_test.go

[management] Affected peers for user updates (#7099)

2026-08-07 18:07:53 +02:00

affected_peers_oldstate_test.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

affected_peers_property_test.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

affected_peers_querycount_test.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

affected_peers_router_paths_test.go

[management] simplify affected peers ignore disabled (#6540)

2026-06-25 16:30:40 +02:00

affected_peers_router_test.go

[management] simplify affected peers ignore disabled (#6540)

2026-06-25 16:30:40 +02:00

affected_peers_test.go

[management] simplify affected peers ignore disabled (#6540)

2026-06-25 16:30:40 +02:00

affected_peers_user_test.go

[management] Affected peers for user updates (#7099)

2026-08-07 18:07:53 +02:00

agentnetwork_budgetrule_realstack_test.go

[management] Align agent-network API contracts for API clients (#7026)

2026-08-04 01:59:09 +02:00

agentnetwork_realstack_test.go

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00

dns_test.go

[management] remove nmap calc from login (#6449)

2026-06-17 16:37:24 +02:00

dns.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

event_test.go

[management] move network map logic into new design (#4774)

2025-11-13 12:09:46 +01:00

event.go

[management] enrich context in permissions manager (#6286)

2026-05-29 16:36:38 +02:00

group_ipv6_test.go

[management] remove nmap calc from login (#6449)

2026-06-17 16:37:24 +02:00

group_test.go

[management] Prevent deleting groups referenced by reverse proxy services (#7062)

2026-08-05 03:24:20 +09:00

group.go

[management] Prevent deleting groups referenced by reverse proxy services (#7062)

2026-08-05 03:24:20 +09:00

identity_provider_test.go

[management] Reuse a single cache store across all management server consumers (#5889)

2026-04-16 16:04:53 +02:00

identity_provider.go

[management] enrich context in permissions manager (#6286)

2026-05-29 16:36:38 +02:00

integrated_validator.go

[management] Approve all pending peers when peer approval is disabled (#4806)

2025-12-12 18:49:57 +03:00

management_proto_test.go

[management] remove nmap calc from login (#6449)

2026-06-17 16:37:24 +02:00

management_test.go

[management] Prevent JWT reuse during peer login (#6002)

2026-04-29 15:04:27 +03:00

nameserver_test.go

[management] remove nmap calc from login (#6449)

2026-06-17 16:37:24 +02:00

nameserver.go

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

peer_test.go

[management] component types (#6866)

2026-07-23 11:37:09 +02:00

peer.go

[management] component types (#6866)

2026-07-23 11:37:09 +02:00

policy_test.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

policy.go

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

posture_checks_test.go

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

posture_checks.go

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

resource.go

[client, management] Add new network concept (#3047)

2024-12-20 11:30:28 +01:00

route_test.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

route.go

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

scheduler_test.go

[management] scheduler cancel all jobs (#4158)

2025-07-24 16:25:21 +01:00

scheduler.go

[management] scheduler cancel all jobs (#4158)

2025-07-24 16:25:21 +01:00

setupkey_test.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

setupkey.go

[management] enrich context in permissions manager (#6286)

2026-05-29 16:36:38 +02:00

user_invite_test.go

Add user invite link feature for embedded IdP (#5157)

2026-01-27 09:42:20 +01:00

user_test.go

[management] explicit accountID check when deleting a user (#6944)

2026-07-28 18:34:55 +02:00

user.go

[management] Affected peers for user updates (#7099)

2026-08-07 18:07:53 +02:00