netbird

mirror of https://github.com/netbirdio/netbird.git synced 2026-08-25 00:51:28 +02:00

Files

Zoltán Papp 0738734b6e [client] Force interactive login when extending the auth session

A session extend must be answered from the account the peer is registered
under. With a silent PKCE flow (DisablePromptLogin or max_age=0) the IdP
answers from whatever session it already holds, which need not be the
peer's account when several are signed in; the token then fails the
user match in ExtendAuthSession with no way to pick another account.

Mark the PKCE flow request as a session extend so the management server
can force prompt=login for it, overriding the configured silent flow.

2026-08-15 10:33:50 +02:00

auth

[management] Handle single-string JWT group claim from IdPs (#6014 )

2026-04-28 14:48:28 +03:00

context

[management] log user agent and return request id (#6380 )

2026-06-09 15:24:26 +02:00

hash/argon2id

[management, reverse proxy] Add reverse proxy feature (#5291 )

2026-02-13 19:37:43 +01:00

llm

[management, proxy] Management-owned LLM pricing: file-backed defaults + (#6965 )