Coturn image defaults to nobody and cannot read the bind-mounted
entrypoint on stricter hosts (e.g. NAS), causing Permission denied.
The allowed-peer-ip=0.0.0.0/0 CIDR is rejected by coturn as well.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
- Commented out the deprecated configuration line in `docker-compose/.env.example`
- Removed the associated service from Docker Compose files as it is no longer required
- Add support for restricting access to the platform Web UI by allowed domain
- Validate that the device access domain matches the target device ID
- Redirect requests with mismatched or invalid domains to an invalid access page
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Allow device remote access to use a different root domain from the Web UI when
running behind a reverse proxy.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Add support for the arm64 platform and update the documentation
to reflect arm64-specific installation and configuration steps.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Update and clarify the documentation for reverse proxy mode, including usage guidelines and deployment considerations when running behind front-end proxies.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Introduce a reverse proxy mode to better integrate with front-end proxies such as Nginx.
In this mode, both port-based access to GLKVM Cloud and direct web access to device UIs are supported simultaneously, improving deployment flexibility behind proxies.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Add support for device online and offline status detection based on in-memory connections.
2. Enhance the device list to support updating and displaying device descriptions for easier management.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Improve the Chinese version of the installation guide by updating the Docker-based installation instructions to align with the latest deployment workflow and configuration format.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Updated the OIDC login documentation to provide clearer and more
accurate instructions for configuration and usage.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Updated the README documentation to include clearer and more complete
information about OIDC feature support.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Added whitelist functionality for subid, group, and related fields to
allow finer-grained access control and improved authentication
flexibility.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Implemented token signature verification to ensure the integrity and
authenticity of tokens before processing authentication requests.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Added OIDC whitelist functionality to allow specific users or domains
to bypass standard authentication checks for controlled access.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Added support for a customizable OIDC login flow. Verified successful authentication using Google as the OIDC provider.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
- Introduced LDAP authentication configuration options in the README and Docker Compose files.
- Updated API to handle dual authentication methods (LDAP and legacy).
- Implemented LDAP authentication logic in a new ldap.go file.
- Enhanced user login flow to support username and password for LDAP.
- Added error handling for authorization and authentication failures.
- Updated UI to include username input when LDAP is enabled and provide authentication options.
- Added localization for new authentication messages in English and Chinese.
1. Published official Docker images to Docker Hub.
2. Added docker-compose configuration template for easier deployment.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Official image has been pushed to Docker Hub.
2. Updated the docker-compose YAML file to reference the official image.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Updated the documentation for starting services with docker-compose,
making the description clearer and more accurate.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Updated the documentation for starting services with docker-compose,
making the description clearer and more accurate.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Added support for docker-compose.yml to simplify deployment and
service management.
2. Tested environment variable configurations to validate compatibility
and ensure correct behavior.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>