0439175e73
feat(auth): support role sync on re-login
2026-06-22 16:40:29 -04:00
10055541cc
feat(config): simplify required headscale config
2026-06-22 16:40:29 -04:00
dc32427cff
feat(config): use minimal headscale config
2026-06-22 16:40:28 -04:00
e29221e5f7
feat: add support for headscale 0.29+
2026-06-20 18:03:14 -04:00
0c4d175eb7
feat(auth): support deriving roles from the IDP
...
Closes HP-352.
2026-06-20 11:53:09 -04:00
96f2721272
feat(auth): support reverse-proxy driven proxy auth
...
Closes HP-353.
2026-06-20 11:41:44 -04:00
3252482e0b
feat: switch logging to pino
...
Closes HP-279
2026-06-17 15:58:48 -04:00
57c8046f99
feat(ui): add support for showing existing tag options
2026-06-17 11:35:38 -04:00
21806caa05
fix(oidc): correctly handle client_secret_basic fallback
2026-06-17 11:13:46 -04:00
d7f1d665a4
feat: bump headscale minimum to 0.27
2026-05-30 17:32:00 -04:00
7901f37002
fix: correctly handle user id passthrough on headscale actions
2026-05-30 17:14:28 -04:00
7a62359b6a
chore: add a resilience test
2026-05-30 16:25:00 -04:00
56c5e5ac8c
feat: make api calls more resilient and stuff
2026-05-25 17:14:26 -04:00
0512565f8e
feat: replace openapi hashing system with /version
...
Apparently I didn't use my brain cells and rely on the /version
endpoint that Headscale has exposed since 0.26 (our lowest supported
version). Switching to that significantly simplifies the API surface.
2026-05-25 11:51:02 -04:00
1e0ff7ead6
fix: encode headscale rename path segments
...
(cherry picked from commit 623e7c03f1
2026-05-14 13:47:04 -04:00
5a2098eea5
chore: format everything with oxfmt
2026-04-26 20:38:45 -04:00
b961b339bb
feat: add support for OIDC logouts
...
Closes HP-407.
2026-04-26 20:36:52 -04:00
9e5e5a613a
fix: harden OIDC weak RSA fallback
2026-04-22 00:07:47 +08:00
d110dd2bcb
feat: add OIDC subject claim fallbacks
2026-04-16 18:07:57 +08:00
addef55f30
Add weak RSA OIDC verification fallback
2026-04-16 18:04:48 +08:00
d5f76637f5
refactor: extract isNoExpiry utility for zero-time handling
...
Go's time.Time{} serialises to '0001-01-01T00:00:00Z' which headscale
may return instead of null for tagged nodes (juanfont/headscale#3170 ).
Commit extracts the the existing inline check into a shared function for reuse.
No behavior change — mapNodes() already handled both variants.
2026-04-11 00:00:37 +01:00
10278d0cc9
fix: correctly expire pre-auth-keys in 0.28.0+
2026-04-07 00:24:50 -04:00
4b47b1bbed
chore: update auth-service to not be class based
2026-04-03 16:57:39 -04:00
1259642f8a
feat: replace openid-client with clean-room oidc system
2026-04-03 16:36:27 -04:00
dfda629b12
test: add some unit tests for auth methods
2026-03-19 14:11:17 -04:00
246bb90ef0
test: add docker and proc e2e testing
2026-03-19 12:35:25 -04:00
5f2cbebbcd
chore: condense/cleanup bad tests
2026-03-07 15:11:15 -05:00
da3132323c
Merge pull request #480 from drifterza/fix/issue-266-owner-assignment
2026-03-07 14:52:02 -05:00
cb97b73abd
Merge pull request #477 from drifterza/fix/issue-427-hostinfo-update-frequency
2026-03-07 14:51:15 -05:00
432cd29cd0
Merge pull request #478 from drifterza/fix/issue-453-self-service-preauth-keys
2026-03-07 14:50:12 -05:00
64edd2041b
fix first user owner assignment on OIDC login
2026-02-27 13:56:15 +02:00
1462016a39
Add self-service pre-auth keys for auditor role
...
Closes #453
2026-02-27 12:21:16 +02:00
779103147d
add refresh interval tests
2026-02-27 11:30:19 +02:00
787f8decbc
fix: return login errors to form instead of throwing ( #474 )
...
Throwing data() in React Router v7 actions goes to ErrorBoundary instead
of returning to the component. Changed validation errors to return
directly so the login form can display them properly.
2026-02-27 10:55:42 +02:00
3c5a653942
Merge pull request #469 from drifterza/feature/oidc-pending-approval
2026-02-26 18:03:26 -05:00
2e5bb791e8
use LiveDataProvider auto-refresh for pending approval page
...
Replaces manual refresh button with automatic 3-second polling.
Adds unit tests for the live data hook behavior.
2026-02-27 00:55:55 +02:00
624b9ab479
list all preauth keys without user filter
...
headscale 0.28 added GET /v1/preauthkey without a user param
which returns all keys including tag-only ones. this change
adds getAllPreAuthKeys() and uses it when available, falling
back to per-user fetching on older versions.
the UI now handles keys where user is null, showing them as
Tag Only in the filter dropdown.
closes #432
Amp-Thread-ID: https://ampcode.com/threads/T-019c9861-2d45-73ef-ab94-5fce62f63670
Co-authored-by: Amp <amp@ampcode.com >
2026-02-26 00:40:31 -05:00
dde72ae4ed
Merge pull request #465 from drifterza/feature/preauth-key-tags
2026-02-26 00:04:02 -05:00
4cb231deb1
Merge pull request #463 from drifterza/feature/oidc-enabled-flag
2026-02-25 20:33:34 -05:00
4f59f4c77b
Add user utility functions and tests for OIDC user filtering
2026-02-24 19:05:45 +02:00
7c39f8f3a8
add tests for role assignment upsert behavior
2026-02-24 17:39:42 +02:00
a6b25b3ba3
add pending approval page for OIDC users without ui_access
2026-02-24 15:32:34 +02:00
30dd718d68
add oidc.enabled flag for helm and config generation
...
allows defining oidc config without enabling it
2026-02-24 10:43:28 +02:00
c96249f41e
add tag-only preauth keys for headscale 0.28
...
allows creating keys with acl tags but no user
2026-02-24 10:25:51 +02:00
0080cddb55
chore: fix some test issues
2026-02-08 11:11:44 -05:00
b38b733e9f
Conditionally skip node reassignment test where version >= 0.28.0
2026-02-06 15:17:28 -05:00
fad0c99fc9
feat: official 0.28 support possibly
2026-02-06 00:11:26 -05:00
696e08dbcc
feat: normalize node tags before leaving the api
2026-01-24 20:30:57 -05:00
034ba25ce3
feat: switch to oxc linting/formatting
2026-01-15 22:09:58 -05:00
d363ed5486
chore: add tests for nodes
2025-12-03 19:05:54 -05:00
Aarnav Tale