- Add support for restricting access to the platform Web UI by allowed domain
- Validate that the device access domain matches the target device ID
- Redirect requests with mismatched or invalid domains to an invalid access page
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Allow device remote access to use a different root domain from the Web UI when
running behind a reverse proxy.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Add support for the arm64 platform and update the documentation
to reflect arm64-specific installation and configuration steps.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Refine how the front-end proxy port is detected when running
behind Nginx to ensure correct redirect URL generation.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Update and clarify the documentation for reverse proxy mode, including usage guidelines and deployment considerations when running behind front-end proxies.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Introduce a reverse proxy mode to better integrate with front-end proxies such as Nginx.
In this mode, both port-based access to GLKVM Cloud and direct web access to device UIs are supported simultaneously, improving deployment flexibility behind proxies.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Fix an issue where the device description was unintentionally reset
when a device came online and updated its metadata.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Fix an issue where the device description was unintentionally reset
when a device came online and updated its metadata.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Ensure the SQLite database file is not dropped or recreated on startup,
so existing data is retained when the container restarts.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Add sorting logic to list online devices before offline ones,
while keeping alphabetical order by device ID within each group.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Add support for device online and offline status detection based on in-memory connections.
2. Enhance the device list to support updating and displaying device descriptions for easier management.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Improve the Chinese version of the installation guide by updating the Docker-based installation instructions to align with the latest deployment workflow and configuration format.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Updated the OIDC login documentation to provide clearer and more
accurate instructions for configuration and usage.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Updated the README documentation to include clearer and more complete
information about OIDC feature support.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Added whitelist functionality for subid, group, and related fields to
allow finer-grained access control and improved authentication
flexibility.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Implemented token signature verification to ensure the integrity and
authenticity of tokens before processing authentication requests.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Converted all code comments from Chinese to English to improve
readability and better support international and English-speaking
users.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Added OIDC whitelist functionality to allow specific users or domains
to bypass standard authentication checks for controlled access.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
Added support for a customizable OIDC login flow. Verified successful authentication using Google as the OIDC provider.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
- Introduced LDAP authentication configuration options in the README and Docker Compose files.
- Updated API to handle dual authentication methods (LDAP and legacy).
- Implemented LDAP authentication logic in a new ldap.go file.
- Enhanced user login flow to support username and password for LDAP.
- Added error handling for authorization and authentication failures.
- Updated UI to include username input when LDAP is enabled and provide authentication options.
- Added localization for new authentication messages in English and Chinese.
1. Added support for multi-level subdomains and certificates, such as
*.example.com, *.level1.example.com, and *.level2.level1.example.com.
2. Enabled remote device access through domains like
devId.example.com, devId.level1.example.com, and
devId.level2.level1.example.com.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Published official Docker images to Docker Hub.
2. Added docker-compose configuration template for easier deployment.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Official image has been pushed to Docker Hub.
2. Updated the docker-compose YAML file to reference the official image.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Updated the documentation for starting services with docker-compose,
making the description clearer and more accurate.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Updated the documentation for starting services with docker-compose,
making the description clearer and more accurate.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Added support for docker-compose.yml to simplify deployment and
service management.
2. Tested environment variable configurations to validate compatibility
and ensure correct behavior.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. The glkvm-cloud image has not yet been pushed to the repository and
cannot be used directly.
2. Temporarily removed the docker-compose.yml file to prevent customers
from misusing it.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Added clarification about dedicated bandwidth for self-hosted
deployments.
2. Corrected grammar errors in the English documentation.
3. Added server bandwidth configuration requirements to guide proper
deployment.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
1. Removed unnecessary emoji icons from the documentation.
2. Revised the Chinese README description for improved clarity and
professionalism.
Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
GL.iNet-Yongping.Xie