64ef253e70
chore: bump version to 3.3.168 [version-bump]
2026-07-23 15:31:45 +00:00
cbc534f3a5
fix(users): stop username unique INSERT retry loop on Postgres ( #301 )
...
Skip mirrorCreate on shared Postgres, block 409→create recursion, COALESCE totp_secret on Go ListUsers, and return username_exists on DB unique violations.
2026-07-23 17:31:24 +02:00
c0ec373595
chore: bump version to 3.3.167 [version-bump]
2026-07-22 21:00:28 +00:00
0f93ee85c9
chore: bump version to 3.3.166 [version-bump]
2026-07-22 20:37:33 +00:00
cca56c7e4f
Merge branch 'dev' of https://github.com/UNITRONIX/BetterDesk into dev
2026-07-22 22:37:11 +02:00
ac61d3e7dc
fix(users): tolerate NULL last_login on SQLite user scans ( #292 )
...
Never-logged-in Go SQLite users no longer break ListUsers/delete/demote (500), so panel userSync can mirror instead of restoring phantom accounts on restart.
2026-07-22 22:36:54 +02:00
b7db8283c5
chore: bump version to 3.3.165 [version-bump]
2026-07-22 18:58:58 +00:00
1b81774b69
chore: bump version to 3.3.164 [version-bump]
2026-07-22 16:22:11 +00:00
ce988724c1
fix(console): share one WebSocket upgrade dispatcher ( #295 )
...
Collapse 11 per-service upgrade listeners into wsUpgradeRouter so Node no longer emits a false MaxListenersExceededWarning at panel startup.
2026-07-22 18:21:50 +02:00
840a58ca1d
chore: bump version to 3.3.163 [version-bump]
2026-07-22 16:04:17 +00:00
3067a6713d
chore: bump version to 3.3.162 [version-bump]
2026-07-22 15:58:48 +00:00
088109612d
fix(oidc): resolve IdP authorize URL server-side ( #298 )
...
Stop browser-redirecting SSO to internal BETTERDESK_API_URL (localhost).
2026-07-22 17:58:27 +02:00
121678cde1
chore: bump version to 3.3.161 [version-bump]
2026-07-22 04:47:15 +00:00
8cf8350629
fix(security): harden WSS proxy trust and exact-key initiator delivery (Refs #276 )
...
Require TRUSTED_PROXIES before honoring X-Forwarded headers, and deliver async PunchHole/RelayResponse via ip:port wsPunchConns so shared-NAT peers do not get the wrong signed PK.
2026-07-22 06:46:57 +02:00
b03e736033
chore: bump version to 3.3.160 [version-bump]
2026-07-21 15:45:25 +00:00
e6a3a5cc20
chore: bump version to 3.3.159 [version-bump]
2026-07-21 15:33:05 +00:00
0b82160592
fix(console): persist Public Client Endpoints across Docker recreate ( #291 )
...
Store PUBLIC_* on the console-data volume so panel settings survive compose recreate; keep Compose env override and .env mirror for IaC and bare-metal.
2026-07-21 17:32:43 +02:00
7a527a954b
chore: bump version to 3.3.158 [version-bump]
2026-07-21 10:52:35 +00:00
07f3964f5f
chore: bump version to 3.3.157 [version-bump]
2026-07-21 10:44:37 +00:00
9b102c6e58
fix(ci): unblock Go vet, Secret Scan, npm audit, and race flake
2026-07-21 12:08:33 +02:00
7f60fda86b
chore: bump version to 3.3.156 [version-bump]
2026-07-20 21:52:52 +00:00
14fb1d9aec
fix(security): patch Dependabot and CodeQL alerts on axios, mesh, OIDC
...
Bump axios and brace-expansion; add mesh rate limits; harden OIDC redirect and ConnLimiter clamp for static analysis.
2026-07-20 23:52:32 +02:00
1d32b34099
chore: bump version to 3.3.155 [version-bump]
2026-07-20 21:45:42 +00:00
a8a7b33831
Merge branch 'dev' of https://github.com/UNITRONIX/BetterDesk into dev
2026-07-20 23:45:24 +02:00
9d8354188a
fix(auth): improve LDAP UX and SQLite password backfill (Refs #260 )
...
Copy panel password hashes into missing Go users on SQLite dual-DB so RustDesk client login matches the console; clarify LDAP sub-tab discoverability and provider-bound hints.
2026-07-20 23:44:58 +02:00
936c27a86b
chore: bump version to 3.3.154 [version-bump]
2026-07-20 21:30:09 +00:00
ffe907e73a
fix(web-remote): guest page 500 and cookie hijack (Refs #274 )
...
Safe EJS bootstrap for /remote/guest; panel session wins over stale guest cookie.
2026-07-20 23:29:52 +02:00
421acd2791
chore: bump version to 3.3.153 [version-bump]
2026-07-20 21:07:30 +00:00
af7d103e58
chore: bump version to 3.3.152 [version-bump]
2026-07-20 16:07:17 +00:00
755933ff7d
chore: bump version to 3.3.151 [version-bump]
2026-07-18 13:07:35 +00:00
b6d76a735c
chore: bump version to 3.3.150 [version-bump]
2026-07-18 10:37:02 +00:00
e97e9328b5
chore: bump version to 3.3.149 [version-bump]
2026-07-18 10:28:12 +00:00
fc1ded710e
feat(remote): add Guest Access Links for RdClient allowlist shares (Refs #274 )
...
Temporary opaque links give guests a minimal Web Remote UI for selected devices only, without Console inventory or add-any-ID paths. Also fix mesh_share desktop tunnel auth for unauthenticated guests.
2026-07-18 12:27:46 +02:00
915cd72f31
chore: bump version to 3.3.148 [version-bump]
2026-07-18 09:55:14 +00:00
07d99777b9
chore: bump version to 3.3.147 [version-bump]
2026-07-16 18:06:36 +00:00
ec6da61cb7
chore: bump version to 3.3.146 [version-bump]
2026-07-16 17:40:03 +00:00
9601ed04fe
Merge branch 'dev' of https://github.com/UNITRONIX/BetterDesk into dev
2026-07-16 19:39:38 +02:00
db0dfade24
fix(windows): avoid drive-root PROJECT_ROOT breaking panel updates (Refs #272 )
...
Default C:\BetterDeskConsole installs no longer treat C:\ as the project root, so installer file writes and SHA tracking succeed; NSSM Access Denied on server restart is non-critical.
2026-07-16 19:38:29 +02:00
11b25ce054
chore: bump version to 3.3.145 [version-bump]
2026-07-14 20:06:03 +00:00
2791ed4b29
chore: bump version to 3.3.144 [version-bump]
2026-07-14 20:00:11 +00:00
6f9b18771c
fix(oidc): redirect SSO session to panel URL after IdP callback ( Fixes #269 )
...
After Keycloak/IdP callback on the Go API port, the browser now lands on the
Node panel session endpoint instead of hitting Go auth middleware. Adds Panel
URL setting, return-url preservation, login error UX, and docs.
2026-07-14 21:59:47 +02:00
d519dc14df
chore: bump version to 3.3.143 [version-bump]
2026-07-14 19:43:06 +00:00
c2924e8933
chore: bump version to 3.3.142 [version-bump]
2026-07-14 16:00:48 +00:00
cb559f8594
fix: honour CAP_NET_BIND_SERVICE for native HTTPS on :443 ( #219 )
...
Node no longer pre-emptively falls back to :5443 when systemd grants bind capability. Repair HTTPS/TLS syncs PORT=80 with HTTPS_PORT=443; installer health checks and post-toggle tests surface fallback-port mismatches.
2026-07-14 18:00:25 +02:00
3fb31b4576
chore: bump version to 3.3.141 [version-bump]
2026-07-14 15:53:14 +00:00
66268947e1
Add external reverse proxy guidance and installer wizard.
...
Document Caddy/Nginx TLS termination, TRUST_PROXY, and WSS routing (#267 ).
Extend betterdesk.sh with External reverse proxy mode and snippet generation.
2026-07-14 17:52:55 +02:00
a5f43df346
chore: bump version to 3.3.140 [version-bump]
2026-07-14 15:40:40 +00:00
a820a50add
chore: bump version to 3.3.139 [version-bump]
2026-07-14 15:36:10 +00:00
ca927f89aa
chore: bump version to 3.3.138 [version-bump]
2026-07-13 15:36:13 +00:00
22a7a382e5
Merge branch 'dev' of https://github.com/UNITRONIX/BetterDesk into dev
2026-07-13 17:34:43 +02:00
github-actions[bot]