8 Commits

Author	SHA1	Message	Date
Aarnav Tale	0f19fdf0da	feat: rebuild browser ssh from the ground up	2026-04-09 21:56:42 -04:00
Aarnav Tale	838a2cd732	fix: store profile picture in db to prevent header overload	2026-03-30 13:58:29 -04:00
Aarnav Tale	38cf93e5ae	feat: replace onboarding for explicit user linking	2026-03-14 13:23:22 -04:00
Aarnav Tale	684a95b5e8	fix: harden user linking and session pruning ... Security: - Add unique constraint on headscale_user_id to prevent hijacking - linkHeadscaleUser now rejects already-claimed Headscale users - Onboarding dropdown filters out claimed users - onboarding-skip action redirects on rejected claims Maintenance: - Replace probabilistic session pruning with setInterval (15m) - Move pruning out of request path into server startup Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-019cce57-c9e1-7732-9709-8288127573a9	2026-03-08 17:34:55 -04:00
Aarnav Tale	0f8e192b5c	feat: initial auth rework	2026-03-07 17:10:34 -05:00
Aarnav Tale	d2c4f5eb2b	feat: completely overhaul the auth model ... * Cookies are now encrypted JWTs (GHSA-wrqq-v7qw-r5w7) * Authentication is stored in the SQLite database (auto-migrated) * Session logic is much cleaner	2025-08-19 17:52:16 -04:00
Aarnav Tale	8cb91cd45b	feat: overhaul hp_agent lifecycle handling ... * Added backoff and liveness probes for better management * Switched IPC to a simple text based system * Lookups don't directly touch the agent now * Use the database as a source of truth	2025-08-19 00:10:06 -04:00
Aarnav Tale	b18147fa82	feat: cleanup removal of old ssh plexer and logic ... we also have added the necessary logic to auto prune ephemeral nodes because headscale doesn't seem to automatically remove them. this change made use of a database which is now stored in the persistent headplane directory.	2025-06-20 00:14:00 -04:00