Nicolas Frati e89aad09f5 [management] Enable MFA for local users (#5804) ...

* wip: totp for local users

* fix providers not getting populated

* polished UI and fix post_login_redirect_uri

* fix: make sure logout is only prompted from oidc flow

Signed-off-by: jnfrati <nicofrati@gmail.com>

* update templates

Signed-off-by: jnfrati <nicofrati@gmail.com>

* deps: update dex dependency

Signed-off-by: jnfrati <nicofrati@gmail.com>

* fix qube issues

Signed-off-by: jnfrati <nicofrati@gmail.com>

* replace window with globalThis on home html

Signed-off-by: jnfrati <nicofrati@gmail.com>

* fixed coderabbit comments

Signed-off-by: jnfrati <nicofrati@gmail.com>

* debug

* remove unused config and rename totp issuer

* deps: update dex reference to latest

* add dashboard post logout redirect uri to embedded config

* implemented api for mfa configuration

* update docs and config parsing

* catch error on idp manager init mfa

* fix tests

* Add remember me  for MFA

* Add cookie encryption and session share between tabs

* fixed logout showing non actionable error and session cookie encription key

* fixed missing mfa settings on sql query for account

* fix code index for mfa activity

---------

Signed-off-by: jnfrati <nicofrati@gmail.com>
Co-authored-by: braginini <bangvalo@gmail.com>

2026-05-08 16:31:20 +02:00

..

account

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

activity

[management] Enable MFA for local users (#5804)

2026-05-08 16:31:20 +02:00

auth

[management] Prevent JWT reuse during peer login (#6002)

2026-04-29 15:04:27 +03:00

cache

[management] Reuse a single cache store across all management server consumers (#5889)

2026-04-16 16:04:53 +02:00

context

[client,management] Rewrite the SSH feature (#4015)

2025-11-17 17:10:41 +01:00

geolocation

[management] fix panic on management reboot (#5759)

2026-04-01 12:31:30 +02:00

groups

[management] Enable flow groups (#4230)

2025-08-13 00:00:40 +03:00

http

[management] Enable MFA for local users (#5804)

2026-05-08 16:31:20 +02:00

idp

[management] Enable MFA for local users (#5804)

2026-05-08 16:31:20 +02:00

instance

[management] Enable PAT creation during setup (#6003)

2026-04-30 17:21:35 +02:00

integration_reference

Feature/peer validator (#1553)

2024-03-27 18:48:48 +01:00

integrations

[management] Approve all pending peers when peer approval is disabled (#4806)

2025-12-12 18:49:57 +03:00

job

[management] fix some concurrency potential issues (#5584)

2026-03-12 15:57:36 +01:00

metrics

[management,proxy,client] Add L4 capabilities (TLS/TCP/UDP) (#5530)

2026-03-13 18:36:44 +01:00

migration

[management] add domain and service cleanup migration (#5850)

2026-04-11 12:00:40 +02:00

mock_server

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

networks

[management] add monitoring for nmap update source (#6036)

2026-04-30 14:52:54 +02:00

peer

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

permissions

[management, reverse proxy] Add reverse proxy feature (#5291)

2026-02-13 19:37:43 +01:00

posture

[management] Add public connection ipv4 and ipv6 posture check (#6038)

2026-04-30 18:36:50 +02:00

settings

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

store

[management] Enable MFA for local users (#5804)

2026-05-08 16:31:20 +02:00

telemetry

[management] add monitoring for nmap update source (#6036)

2026-04-30 14:52:54 +02:00

testdata

[management] exclude peers for expiration job that have already been marked expired (#5970)

2026-04-23 16:01:54 +02:00

testutil

[management] docker login on management tests (#5323)

2026-02-18 16:11:17 +01:00

types

[management] Enable MFA for local users (#5804)

2026-05-08 16:31:20 +02:00

users

[management] Rework DB locks (#4291)

2025-08-06 18:55:14 +02:00

util

[management, reverse proxy] Add reverse proxy feature (#5291)

2026-02-13 19:37:43 +01:00

account_request_buffer.go

[management] revert ctx dependency in get account with backpressure (#5878)

2026-04-14 12:16:03 +02:00

account_test.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

account.go

[management] Enable MFA for local users (#5804)

2026-05-08 16:31:20 +02:00

dns_test.go

[management] unify peer-update test timeout via constant (#5952)

2026-04-23 21:19:21 +02:00

dns.go

[management] add monitoring for nmap update source (#6036)

2026-04-30 14:52:54 +02:00

event_test.go

[management] move network map logic into new design (#4774)

2025-11-13 12:09:46 +01:00

event.go

[management] Rework DB locks (#4291)

2025-08-06 18:55:14 +02:00

group_ipv6_test.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

group_test.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

group.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

identity_provider_test.go

[management] Reuse a single cache store across all management server consumers (#5889)

2026-04-16 16:04:53 +02:00

identity_provider.go

[management] Add Microsoft AD FS support for embedded Dex identity providers (#6008)

2026-04-28 12:42:19 +03:00

integrated_validator.go

[management] Approve all pending peers when peer approval is disabled (#4806)

2025-12-12 18:49:57 +03:00

management_proto_test.go

[management] Prevent JWT reuse during peer login (#6002)

2026-04-29 15:04:27 +03:00

management_test.go

[management] Prevent JWT reuse during peer login (#6002)

2026-04-29 15:04:27 +03:00

nameserver_test.go

[management] unify peer-update test timeout via constant (#5952)

2026-04-23 21:19:21 +02:00

nameserver.go

[management] add monitoring for nmap update source (#6036)

2026-04-30 14:52:54 +02:00

peer_test.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

peer.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

policy_test.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

policy.go

[management] add monitoring for nmap update source (#6036)

2026-04-30 14:52:54 +02:00

posture_checks_test.go

[management] unify peer-update test timeout via constant (#5952)

2026-04-23 21:19:21 +02:00

posture_checks.go

[management] add monitoring for nmap update source (#6036)

2026-04-30 14:52:54 +02:00

resource.go

[client, management] Add new network concept (#3047)

2024-12-20 11:30:28 +01:00

route_test.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

route.go

[management] add monitoring for nmap update source (#6036)

2026-04-30 14:52:54 +02:00

scheduler_test.go

[management] scheduler cancel all jobs (#4158)

2025-07-24 16:25:21 +01:00

scheduler.go

[management] scheduler cancel all jobs (#4158)

2025-07-24 16:25:21 +01:00

setupkey_test.go

[management, infrastructure, idp] Simplified IdP Management - Embedded IdP (#5008)

2026-01-07 14:52:32 +01:00

setupkey.go

[management] Remove Store Locks 2 (#4385)

2025-08-21 12:23:49 +02:00

user_invite_test.go

Add user invite link feature for embedded IdP (#5157)

2026-01-27 09:42:20 +01:00

user_test.go

[management] unify peer-update test timeout via constant (#5952)

2026-04-23 21:19:21 +02:00

user.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00