Commit Graph

  • 901692ead7 Merge pull request 'Release: backup restore, portable secret key, multi-arch image, CSRF, About dialog' (#14) from development into main main 2026.09.04.0056 gsadmin 2026-09-04 00:56:16 +00:00
  • 39b39740a3 feat(ui): replace the notifications bell with an About dialog development Alphaeus Mote 2026-09-03 20:55:27 -04:00
  • 63701dd086 feat: real restore, portable secret key, multi-arch image, real CSRF Alphaeus Mote 2026-09-03 13:57:15 -04:00
  • ba8808b6ab fix(tls): serialize Ensure/Reload Alphaeus Mote 2026-09-03 13:40:17 -04:00
  • a0c937b876 feat(tls): publish the serving leaf to the Windows My store; fix context leak Alphaeus Mote 2026-09-03 13:23:03 -04:00
  • d0437df8e6 Merge pull request 'Release: authenticated API docs + route discovery, secret-key diagnostics' (#13) from development into main 2026.09.03.1532 gsadmin 2026-09-03 15:32:33 +00:00
  • 5301b47f16 fix(crypto): explain that a decryption failure means the secret key changed Alphaeus Mote 2026-09-03 10:59:43 -04:00
  • e0b002975f feat(api-docs): require auth for docs and add filterable route discovery Alphaeus Mote 2026-09-03 10:44:54 -04:00
  • 4a7cc9b69e Merge pull request 'Release: object viewer, roles, cert/firewall automation, API key fix' (#12) from development into main gsadmin 2026-09-03 02:26:19 +00:00
  • 35d8b81c91 fix(api-keys): scan created_utc as a string in List (modernc timestamp) Alphaeus Mote 2026-09-02 22:14:26 -04:00
  • fbb308640c feat(ui): paginate long result lists Alphaeus Mote 2026-09-02 22:08:51 -04:00
  • 6587905eeb fix(ldap): decode objectGUID/objectSid and binary attributes for display Alphaeus Mote 2026-09-02 22:01:34 -04:00
  • 13b336a77e feat(connections): LDAPS port auto-flip + skip-cert default; keep 3 backups Alphaeus Mote 2026-09-02 22:01:34 -04:00
  • 2befe64a0c feat(install): idempotent Windows firewall rule; skip the blank MSI EULA Alphaeus Mote 2026-09-02 21:46:08 -04:00
  • 27ff00d75c feat(tls): install self-managed CA into the Windows trust stores Alphaeus Mote 2026-09-02 21:36:19 -04:00
  • b2218f6be4 feat(ui): Object Viewer — browse & inspect directory objects to build filters Alphaeus Mote 2026-09-02 21:32:51 -04:00
  • 6fdf9a9d54 feat(users): assign RBAC roles to users; OIDC default-role dropdown + clearer SSO config Alphaeus Mote 2026-09-02 21:25:59 -04:00
  • 069915415c feat(api): document request bodies, params, and auth in the OpenAPI spec Alphaeus Mote 2026-09-02 21:06:33 -04:00
  • 12ef83976d fix(ui): auto-list Windows store certificates when that source is selected Alphaeus Mote 2026-09-02 21:06:33 -04:00
  • d3756bce80 feat(db): store the database under data/db and auto-migrate existing files Alphaeus Mote 2026-09-02 20:41:34 -04:00
  • 2f408e3c6e Merge development into main (release) gsadmin 2026-09-02 23:03:11 +00:00
  • dc0df06b92 chore(logging): default max log file size to 5 MB Alphaeus Mote 2026-09-02 19:01:31 -04:00
  • 4f949e6d8f fix(auth): make API keys actually authenticate; add read/read-write scopes Alphaeus Mote 2026-09-02 19:01:30 -04:00
  • c74dd63281 feat(api): OpenAPI/Swagger docs generated from the router + PowerShell example Alphaeus Mote 2026-09-02 18:33:53 -04:00
  • 8ee9b95cde feat(ui): make dashboard widgets drill in Alphaeus Mote 2026-09-02 18:25:15 -04:00
  • 1e38b3b99a feat(maintenance): history retention + VACUUM; robust config import Alphaeus Mote 2026-09-02 18:25:14 -04:00
  • 154cadc792 feat(ui): per-rule history dialog showing objects added/removed Alphaeus Mote 2026-09-02 17:48:28 -04:00
  • 429e8bd398 fix(rules): record last run outcome on the rule row Alphaeus Mote 2026-09-02 17:48:27 -04:00
  • 50147f357f feat(ui): show schedule + next run on the rules list Alphaeus Mote 2026-09-02 17:14:56 -04:00
  • 1f77473d8f feat(server): trust local proxies by default, seed built-in schedules Alphaeus Mote 2026-09-02 17:14:49 -04:00
  • 4c20fe1e15 feat(ui): live attribute + value pickers in the filter builder Alphaeus Mote 2026-09-02 15:58:02 -04:00
  • dc3c2c9811 feat(connections): schema attribute + distinct-value lookups for filter building Alphaeus Mote 2026-09-02 15:57:52 -04:00
  • e513687b5f feat(ui): dynamic-group rule editor Alphaeus Mote 2026-09-02 15:19:30 -04:00
  • d5b8e693df fix(repository): flatten GetByID condition loading to avoid nested cursor Alphaeus Mote 2026-09-02 15:11:28 -04:00
  • 5920b690d1 feat(rules): dynamic-group reconciliation + editor-facing APIs Alphaeus Mote 2026-09-02 14:57:30 -04:00
  • 7effc09e8a fix(connections): List must return the full connection shape Alphaeus Mote 2026-09-02 14:15:36 -04:00
  • e74cb454c8 feat(activity): add action-ledger intelligence and drill-in feed Alphaeus Mote 2026-09-02 14:09:04 -04:00
  • 6cb8e67c0c feat(ui): remove language selector from header Alphaeus Mote 2026-09-02 14:08:44 -04:00
  • dd183941dc fix(repository): parse TEXT timestamps as strings for modernc sqlite Alphaeus Mote 2026-09-02 13:55:11 -04:00
  • f0c81dfa51 feat(ui): Security page (OIDC + TLS config) and canonical name in preview Alphaeus Mote 2026-09-02 13:06:30 -04:00
  • 5674ca7849 feat(ui): dark-by-default, OrchestrAD branding, de-jarred login, SSO button Alphaeus Mote 2026-09-02 12:59:14 -04:00
  • 7be92da2e6 feat(rules): canonical->DN targets and idempotent OU-path creation Alphaeus Mote 2026-09-02 12:47:26 -04:00
  • c840ed054c feat(rules): expose operator-friendly canonical names for matched objects Alphaeus Mote 2026-09-02 12:43:09 -04:00
  • b0decfe325 test(ad): opt-in integration tests exercising rules against a real AD Alphaeus Mote 2026-09-02 12:09:45 -04:00
  • 06b1c860d4 feat(auth): OIDC/SSO login with UI-configurable, env-overriding settings Alphaeus Mote 2026-09-02 12:01:48 -04:00
  • 0e671ff34c feat(installer): wizard with install-dir + network dialogs and finish page Alphaeus Mote 2026-09-02 11:51:52 -04:00
  • 6b4cd325c9 feat(config): read installer-recorded listen address/port from the registry Alphaeus Mote 2026-09-02 11:51:52 -04:00
  • 81468b8af1 feat(tls): real Windows My-store enumeration and CNG-backed serving Alphaeus Mote 2026-09-02 11:30:48 -04:00
  • 81753395be fix(tls): include per-adapter DNS suffixes in cert SANs Alphaeus Mote 2026-09-02 11:23:20 -04:00
  • a4698ee9f9 feat(tls): certificate modes (auto/provided/windows-store) + config API + richer SANs Alphaeus Mote 2026-09-02 11:21:00 -04:00
  • 300866d5cf feat(tls): auto-managed HTTPS with renewal; disable for edge termination Alphaeus Mote 2026-09-02 11:06:42 -04:00
  • f38702dae5 feat(pki): self-managed CA (root+intermediate+leaf) with PEM/DER/PFX export Alphaeus Mote 2026-09-02 11:06:42 -04:00
  • 5eae8cc102 feat(services): DB-over-env settings precedence resolver Alphaeus Mote 2026-09-02 10:56:06 -04:00
  • 07b2fe021d feat(config): default listen address 0.0.0.0:18090 Alphaeus Mote 2026-09-02 10:56:05 -04:00
  • 2a66a115b5 docs: document install/service/CI flow and add UI screenshots Alphaeus Mote 2026-09-02 10:36:21 -04:00
  • ccbe345f79 Merge pull request 'ci: build MSI on windows-host' (#10) from development into main gsadmin 2026-09-02 14:00:23 +00:00
  • ecc42b3b83 ci: build the MSI on windows-host (WiX is Windows-only) Alphaeus Mote 2026-09-02 10:00:16 -04:00
  • a8f61eef81 Merge pull request 'ci: free disk space' (#9) from development into main gsadmin 2026-09-02 13:50:20 +00:00
  • ef19487611 ci: free disk space before building Alphaeus Mote 2026-09-02 09:50:14 -04:00
  • 5d394a194f Merge pull request 'ci: install zip' (#8) from development into main gsadmin 2026-09-02 13:46:25 +00:00
  • 41e104241c ci: install zip for Windows binary packaging Alphaeus Mote 2026-09-02 09:46:19 -04:00
  • f3e863fe8c Merge pull request 'ci: pin GOROOT to active go' (#7) from development into main gsadmin 2026-09-02 13:41:39 +00:00
  • 6632ea41dd ci: pin GOROOT to the active go binary Alphaeus Mote 2026-09-02 09:41:29 -04:00
  • fee32d7520 Merge pull request 'ci: clean Go build cache' (#6) from development into main gsadmin 2026-09-02 13:38:20 +00:00
  • fd5f51dbfe ci: clean the Go build cache before building Alphaeus Mote 2026-09-02 09:38:14 -04:00
  • df06ec8035 Merge pull request 'ci: align Go toolchain to go.mod 1.25' (#5) from development into main gsadmin 2026-09-02 13:34:04 +00:00
  • 6d8d6b713b ci: align Go toolchain to go.mod (1.25) Alphaeus Mote 2026-09-02 09:33:57 -04:00
  • 8d4d32222d Merge pull request 'MSI upgrade/data preservation + service data dir + CI toolchain fixes' (#4) from development into main gsadmin 2026-09-02 13:28:07 +00:00
  • fc977c7928 ci: pin Go toolchain to local and goversioninfo to v1.7.0 Alphaeus Mote 2026-09-02 09:27:37 -04:00
  • 46ccb7a92a feat(installer): record version + install dir, preserve database on upgrade Alphaeus Mote 2026-09-02 09:27:36 -04:00
  • 72d6f84bf7 fix(cli): pin service working directory to the executable dir Alphaeus Mote 2026-09-02 09:27:35 -04:00
  • 021aec7d05 Merge pull request 'Cross-platform binaries, MSI, service mgmt, pure-Go SQLite, centralized logging' (#3) from development into main gsadmin 2026-09-02 13:13:18 +00:00
  • 164ea09f97 ci: build cross-platform binaries + MSI and attach to the release Alphaeus Mote 2026-09-02 09:11:07 -04:00
  • d3e78c0f29 build: simplify build.ps1 for pure-Go and embed the Windows icon Alphaeus Mote 2026-09-02 09:11:06 -04:00
  • 503b3f037c feat(installer): WiX MSI installing to Program Files with service Alphaeus Mote 2026-09-02 09:11:06 -04:00
  • 47679269f7 assets: add OrchestrAD app icon and Windows version-info manifest Alphaeus Mote 2026-09-02 08:55:34 -04:00
  • 491b5abe83 feat(cli): idempotent initialize/remove service commands Alphaeus Mote 2026-09-02 08:55:33 -04:00
  • 0debf9ab33 feat(cli): real cross-platform service management Alphaeus Mote 2026-09-02 08:49:15 -04:00
  • 25424322f1 refactor(db): switch to pure-Go modernc.org/sqlite, drop CGO Alphaeus Mote 2026-09-02 08:49:14 -04:00
  • 114ba24e05 refactor(logging): add a centralized process-wide logger Alphaeus Mote 2026-09-02 08:49:14 -04:00
  • 1a87030e42 fix(server): answer HEAD on /health so container probes pass Alphaeus Mote 2026-09-02 08:36:52 -04:00
  • 2aafbc406a build(docker): add .dockerignore to slim the build context Alphaeus Mote 2026-09-02 08:36:51 -04:00
  • 2514073812 Merge pull request 'ci: fix registry auth (use github.token + package permissions)' (#2) from development into main gsadmin 2026-09-02 11:16:42 +00:00
  • 7c6bc94f6f ci: use github.token for registry login and release, add package permissions Alphaeus Mote 2026-09-02 07:16:17 -04:00
  • effaf9dda2 Merge pull request 'Fix build/packaging + add release & container pipeline' (#1) from feat/release-pipeline into main gsadmin 2026-09-02 11:10:09 +00:00
  • 010add4642 ci: add release + container image pipeline on merge to main Alphaeus Mote 2026-09-02 00:13:38 -04:00
  • 23e70d12a6 build(docker): compile and embed the web UI in a multi-stage image Alphaeus Mote 2026-09-02 00:13:36 -04:00
  • 7f824245d3 test: add config loader and health/version smoke tests Alphaeus Mote 2026-09-02 00:13:35 -04:00
  • d09fcea54c chore: ignore local Scratch directory Alphaeus Mote 2026-09-02 00:13:17 -04:00
  • 611f736088 feat(auth): default admin/admin bootstrap with forced first-login password change GraceSolutions 2026-04-23 17:36:23 -04:00
  • 329825ce86 fix(auth): sanitize redirect, read token from storage, 301 legacy /auth/* paths GraceSolutions 2026-04-23 17:12:41 -04:00
  • 05451c4bf2 docs(spec): require auth-gate middleware, bootstrap, and origin-agnostic UI from day 1 GraceSolutions 2026-04-23 16:57:44 -04:00
  • c583a00cc1 fix(frontend): drop hardcoded localhost:8080 fallback from API client GraceSolutions 2026-04-23 16:48:25 -04:00
  • b9091db98d refactor(frontend): flatten /auth/auth1/login to /login and use same-origin API GraceSolutions 2026-04-23 16:40:48 -04:00
  • 1a24ed5276 feat(server): trusted-proxy middleware and gate admin routes behind auth GraceSolutions 2026-04-23 16:40:36 -04:00
  • 336d60926b feat(auth): seed initial admin user from env on first run GraceSolutions 2026-04-23 16:40:25 -04:00
  • f9da239a41 feat(config): env/file secrets, bootstrap password, trusted proxies, allowed origins GraceSolutions 2026-04-23 16:40:14 -04:00
  • 55eb10fedc fix(repo): scan TEXT timestamps manually; add UserRepository.List GraceSolutions 2026-04-23 16:39:51 -04:00
  • 19289170da test(crypto): round-trip HashPassword and VerifyPassword GraceSolutions 2026-04-23 16:39:51 -04:00
  • d2f9b7ba25 fix(crypto): parse Argon2id hash with strings.Split instead of Sscanf GraceSolutions 2026-04-23 16:39:39 -04:00