- Add support for restricting access to the platform Web UI by allowed domain
- Validate that the device access domain matches the target device ID
- Redirect requests with mismatched or invalid domains to an invalid access page
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Allow device remote access to use a different root domain from the Web UI when
running behind a reverse proxy.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Introduce a reverse proxy mode to better integrate with front-end proxies such as Nginx.
In this mode, both port-based access to GLKVM Cloud and direct web access to device UIs are supported simultaneously, improving deployment flexibility behind proxies.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Updated the README documentation to include clearer and more complete
information about OIDC feature support.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Added whitelist functionality for subid, group, and related fields to
allow finer-grained access control and improved authentication
flexibility.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Implemented token signature verification to ensure the integrity and
authenticity of tokens before processing authentication requests.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Added OIDC whitelist functionality to allow specific users or domains
to bypass standard authentication checks for controlled access.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Added support for a customizable OIDC login flow. Verified successful authentication using Google as the OIDC provider.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
- Introduced LDAP authentication configuration options in the README and Docker Compose files.
- Updated API to handle dual authentication methods (LDAP and legacy).
- Implemented LDAP authentication logic in a new ldap.go file.
- Enhanced user login flow to support username and password for LDAP.
- Added error handling for authorization and authentication failures.
- Updated UI to include username input when LDAP is enabled and provide authentication options.
- Added localization for new authentication messages in English and Chinese.
1. Official image has been pushed to Docker Hub.
2. Updated the docker-compose YAML file to reference the official image.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Added support for docker-compose.yml to simplify deployment and
service management.
2. Tested environment variable configurations to validate compatibility
and ensure correct behavior.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
GL.iNet-Yongping.Xie