0c4d175eb7
feat(auth): support deriving roles from the IDP
...
Closes HP-352.
2026-06-20 11:53:09 -04:00
96f2721272
feat(auth): support reverse-proxy driven proxy auth
...
Closes HP-353.
2026-06-20 11:41:44 -04:00
ea27c846e2
feat: add support for https
2026-05-30 19:39:02 -04:00
56c5e5ac8c
feat: make api calls more resilient and stuff
2026-05-25 17:14:26 -04:00
0512565f8e
feat: replace openapi hashing system with /version
...
Apparently I didn't use my brain cells and rely on the /version
endpoint that Headscale has exposed since 0.26 (our lowest supported
version). Switching to that significantly simplifies the API surface.
2026-05-25 11:51:02 -04:00
5a2098eea5
chore: format everything with oxfmt
2026-04-26 20:38:45 -04:00
b961b339bb
feat: add support for OIDC logouts
...
Closes HP-407.
2026-04-26 20:36:52 -04:00
9e5e5a613a
fix: harden OIDC weak RSA fallback
2026-04-22 00:07:47 +08:00
d110dd2bcb
feat: add OIDC subject claim fallbacks
2026-04-16 18:07:57 +08:00
2c57187628
feat: switch to a generalized api key config
2026-03-27 13:32:59 -04:00
0741567754
fix: validate required Docker API version
2026-03-15 02:08:07 +01:00
45984ec639
chore: remove deprecated oidc.user_storage_file option
...
The flat-file user store has been deprecated for several versions.
All user data now lives in the SQL database. Removes the config field,
nix option, docs, and migration logic.
Co-authored-by: Amp <amp@ampcode.com >
Amp-Thread-ID: https://ampcode.com/threads/T-019cce57-c9e1-7732-9709-8288127573a9
2026-03-08 17:34:49 -04:00
30dd718d68
add oidc.enabled flag for helm and config generation
...
allows defining oidc config without enabling it
2026-02-24 10:43:28 +02:00
2618cdd9f6
fix: strengthen the proc scanner for headscale
2026-01-16 00:20:26 -05:00
0fb02d0d8b
feat: implement better token auth endpoint method heuristic for oidc
2026-01-13 22:17:17 -05:00
295dd43059
feat: add info route
2025-12-06 15:02:18 -05:00
3a3e5ca65e
feat: pkce
2025-12-04 11:37:22 -05:00
199ef46ee1
fix: correctly passthrough and handle a new OIDC redirect_uri system
2025-12-04 10:34:48 -05:00
ba61656fb0
feat: cleanup oidc logic and surface errors better
2025-12-04 00:44:31 -05:00
86184e3420
feat: overhaul config loading
2025-12-01 02:46:22 -05:00
5ea96db816
fix(docker): bump docker api version to v1.44
2025-11-21 19:02:16 -03:00
444b2325fb
feat: fix acl api logic to work correctly
2025-11-04 23:51:36 -05:00
b1c93512df
feat: support custom cookie options
2025-11-02 14:04:38 -05:00
eb4669498a
feat: overhaul oidc work
2025-08-28 22:55:26 -04:00
d7b1e19985
chore: add deprecation notice for oidc user file
2025-08-21 12:37:25 -04:00
9bc8483a8f
chore: shutup the dotenvx shameless promo
2025-08-21 12:16:49 -04:00
4351e1fcb3
feat: support gravatar profile pictures for oidc
2025-08-21 12:16:18 -04:00
356abab90a
feat: do insane type validation for the config
2025-08-21 11:41:14 -04:00
344901d38c
fix: debug log level when searching for a Headscale process
2025-08-05 13:16:02 -04:00
5cfd9e411b
Implement path loading
...
Got the build working
Maybe actually fix builds
Copy drizzle as well
2025-08-05 13:15:03 -04:00
f990670e86
Merge remote-tracking branch 'origin/main' into next
2025-06-22 17:59:03 -04:00
0344f17887
Proc mode: try to guess PID based on PPID when multiple found
2025-06-22 17:57:52 -04:00
b18147fa82
feat: cleanup removal of old ssh plexer and logic
...
we also have added the necessary logic to auto prune ephemeral nodes because
headscale doesn't seem to automatically remove them. this change made use of a database
which is now stored in the persistent headplane directory.
2025-06-20 00:14:00 -04:00
2f316176c8
fix: use /proc/pid/comm to check commands
2025-05-29 12:05:30 -04:00
59525b7b63
feat: upgrade to kubernetes client 1.x
2025-05-29 11:55:30 -04:00
cc0c7fa61d
fix: i am stupid
2025-05-25 11:02:19 -04:00
d25e5fd883
fix: properly support default/fallback in arktype
2025-05-25 11:02:19 -04:00
59b32c0842
fix: resolve kubernetes import issue
2025-05-25 11:02:19 -04:00
f56d4e9d9f
chore: tighten pid logic
2025-05-25 11:02:19 -04:00
602e55a94d
fix: indentation
2025-05-25 11:02:19 -04:00
5e60ac1208
fix: improve headscale proc detection
...
Check if command line also includes 'serve'.
Move command line processing logic into a helper function.
2025-05-25 11:02:19 -04:00
b1da29b2fb
chore: use single string docker labels
2025-05-25 11:02:19 -04:00
021ecabd3c
feat: add support for extra_records_path in hs config
2025-05-25 11:02:19 -04:00
c9874966d2
fix: make docker container name optional
2025-05-25 11:02:19 -04:00
c5e6a6c407
feat: switch away from websocket to stdout messaging for agent
2025-05-25 11:02:19 -04:00
3a5ab68432
chore: defer the path based config loading till 0.6.1. ( #223 )
2025-05-23 10:46:14 -04:00
8ea8c7195f
Implement path-based secret loading
2025-05-19 16:38:35 -04:00
faa61b0f1d
feat: add filtering by container label for Docker integration ( #194 )
2025-04-24 19:03:33 -04:00
1fb084451d
fix: fix integrations not loading
2025-04-03 12:57:06 -04:00
5e5c7c4c7a
fix: remove unreleased feature and ignore invalid keys in config
2025-04-02 10:16:34 -04:00
Aarnav Tale