21806caa05
fix(oidc): correctly handle client_secret_basic fallback
2026-06-17 11:13:46 -04:00
d7f1d665a4
feat: bump headscale minimum to 0.27
2026-05-30 17:32:00 -04:00
7901f37002
fix: correctly handle user id passthrough on headscale actions
2026-05-30 17:14:28 -04:00
7a62359b6a
chore: add a resilience test
2026-05-30 16:25:00 -04:00
0512565f8e
feat: replace openapi hashing system with /version
...
Apparently I didn't use my brain cells and rely on the /version
endpoint that Headscale has exposed since 0.26 (our lowest supported
version). Switching to that significantly simplifies the API surface.
2026-05-25 11:51:02 -04:00
1e0ff7ead6
fix: encode headscale rename path segments
...
(cherry picked from commit 623e7c03f1
2026-05-14 13:47:04 -04:00
5a2098eea5
chore: format everything with oxfmt
2026-04-26 20:38:45 -04:00
b961b339bb
feat: add support for OIDC logouts
...
Closes HP-407.
2026-04-26 20:36:52 -04:00
9e5e5a613a
fix: harden OIDC weak RSA fallback
2026-04-22 00:07:47 +08:00
d110dd2bcb
feat: add OIDC subject claim fallbacks
2026-04-16 18:07:57 +08:00
addef55f30
Add weak RSA OIDC verification fallback
2026-04-16 18:04:48 +08:00
d5f76637f5
refactor: extract isNoExpiry utility for zero-time handling
...
Go's time.Time{} serialises to '0001-01-01T00:00:00Z' which headscale
may return instead of null for tagged nodes (juanfont/headscale#3170 ).
Commit extracts the the existing inline check into a shared function for reuse.
No behavior change — mapNodes() already handled both variants.
2026-04-11 00:00:37 +01:00
4b47b1bbed
chore: update auth-service to not be class based
2026-04-03 16:57:39 -04:00
1259642f8a
feat: replace openid-client with clean-room oidc system
2026-04-03 16:36:27 -04:00
dfda629b12
test: add some unit tests for auth methods
2026-03-19 14:11:17 -04:00
5f2cbebbcd
chore: condense/cleanup bad tests
2026-03-07 15:11:15 -05:00
da3132323c
Merge pull request #480 from drifterza/fix/issue-266-owner-assignment
2026-03-07 14:52:02 -05:00
cb97b73abd
Merge pull request #477 from drifterza/fix/issue-427-hostinfo-update-frequency
2026-03-07 14:51:15 -05:00
432cd29cd0
Merge pull request #478 from drifterza/fix/issue-453-self-service-preauth-keys
2026-03-07 14:50:12 -05:00
64edd2041b
fix first user owner assignment on OIDC login
2026-02-27 13:56:15 +02:00
1462016a39
Add self-service pre-auth keys for auditor role
...
Closes #453
2026-02-27 12:21:16 +02:00
779103147d
add refresh interval tests
2026-02-27 11:30:19 +02:00
787f8decbc
fix: return login errors to form instead of throwing ( #474 )
...
Throwing data() in React Router v7 actions goes to ErrorBoundary instead
of returning to the component. Changed validation errors to return
directly so the login form can display them properly.
2026-02-27 10:55:42 +02:00
3c5a653942
Merge pull request #469 from drifterza/feature/oidc-pending-approval
2026-02-26 18:03:26 -05:00
2e5bb791e8
use LiveDataProvider auto-refresh for pending approval page
...
Replaces manual refresh button with automatic 3-second polling.
Adds unit tests for the live data hook behavior.
2026-02-27 00:55:55 +02:00
4cb231deb1
Merge pull request #463 from drifterza/feature/oidc-enabled-flag
2026-02-25 20:33:34 -05:00
4f59f4c77b
Add user utility functions and tests for OIDC user filtering
2026-02-24 19:05:45 +02:00
7c39f8f3a8
add tests for role assignment upsert behavior
2026-02-24 17:39:42 +02:00
a6b25b3ba3
add pending approval page for OIDC users without ui_access
2026-02-24 15:32:34 +02:00
30dd718d68
add oidc.enabled flag for helm and config generation
...
allows defining oidc config without enabling it
2026-02-24 10:43:28 +02:00
034ba25ce3
feat: switch to oxc linting/formatting
2026-01-15 22:09:58 -05:00
86184e3420
feat: overhaul config loading
2025-12-01 02:46:22 -05:00
cc533f1b72
fix: shut up vitest
2025-11-20 18:16:53 -05:00
3d9b6370bf
chore: refactor unit tests
2025-11-18 02:11:53 -05:00
Aarnav Tale