Aarnav Tale
dde72ae4ed
Merge pull request #465 from drifterza/feature/preauth-key-tags
2026-02-26 00:04:02 -05:00
drifterza
30dd718d68
add oidc.enabled flag for helm and config generation
...
allows defining oidc config without enabling it
2026-02-24 10:43:28 +02:00
drifterza
c96249f41e
add tag-only preauth keys for headscale 0.28
...
allows creating keys with acl tags but no user
2026-02-24 10:25:51 +02:00
Aarnav Tale
0080cddb55
chore: fix some test issues
2026-02-08 11:11:44 -05:00
Aarnav Tale
fad0c99fc9
feat: official 0.28 support possibly
2026-02-06 00:11:26 -05:00
Aarnav Tale
696e08dbcc
feat: normalize node tags before leaving the api
2026-01-24 20:30:57 -05:00
Aarnav Tale
403f9c9b0b
feat: add lazy retrying oidc connector
2026-01-16 00:33:10 -05:00
Aarnav Tale
2618cdd9f6
fix: strengthen the proc scanner for headscale
2026-01-16 00:20:26 -05:00
Aarnav Tale
62325f7c86
chore: fallback to client_secret_post for OIDC
2026-01-15 21:54:55 -05:00
Aarnav Tale
0fb02d0d8b
feat: implement better token auth endpoint method heuristic for oidc
2026-01-13 22:17:17 -05:00
Aarnav Tale
7b4966be02
feat: track headscale acl response changes
2025-12-13 16:34:23 -05:00
lapinot
3d71049afe
fix: accept the full discovered oidc configuration
2025-12-12 21:26:35 +01:00
Aarnav Tale
295dd43059
feat: add info route
2025-12-06 15:02:18 -05:00
Aarnav Tale
3a3e5ca65e
feat: pkce
2025-12-04 11:37:22 -05:00
Aarnav Tale
199ef46ee1
fix: correctly passthrough and handle a new OIDC redirect_uri system
2025-12-04 10:34:48 -05:00
Aarnav Tale
e09c5760af
chore: random quick fixes
2025-12-04 04:11:52 -05:00
Aarnav Tale
a824ea3dcf
chore: spammy log cleanup
2025-12-04 03:37:48 -05:00
Aarnav Tale
ba61656fb0
feat: cleanup oidc logic and surface errors better
2025-12-04 00:44:31 -05:00
Aarnav Tale
86184e3420
feat: overhaul config loading
2025-12-01 02:46:22 -05:00
Aarnav Tale
d3d7c7cc0e
feat: better error handling for oidc api key
...
This also ships with a better error page
2025-11-28 17:54:52 -05:00
Luiz Fernando Oliveira dos Santos
5ea96db816
fix(docker): bump docker api version to v1.44
2025-11-21 19:02:16 -03:00
Aarnav Tale
08a251cc8c
feat: add e2e integration tests and canonical versioning
2025-11-16 18:31:09 -05:00
Aarnav Tale
444b2325fb
feat: fix acl api logic to work correctly
2025-11-04 23:51:36 -05:00
Aarnav Tale
c84e9ca4a8
feat: update more primitives to use the new api
2025-11-04 23:06:56 -05:00
Aarnav Tale
d68737e410
feat: switch machine apis to new runtime api client
2025-11-04 22:44:58 -05:00
Aarnav Tale
a68aedc297
feat: create type-safe API object for Headscale
2025-11-04 22:40:57 -05:00
Aarnav Tale
b1c93512df
feat: support custom cookie options
2025-11-02 14:04:38 -05:00
Aarnav Tale
ce4be73faf
feat: add a warning banner on the login page for misconfigured cookies
2025-11-02 13:54:45 -05:00
Aarnav Tale
28ad1d439f
Merge branch 'main' into next
2025-10-30 23:52:35 -04:00
tituspijean
66b6dea068
fix: write_ahead_log in sqlite config schema
2025-10-27 21:57:52 +01:00
Aarnav Tale
f66f778398
chore: add sig handlers for the server
2025-10-19 15:29:40 -04:00
Aarnav Tale
eb4669498a
feat: overhaul oidc work
2025-08-28 22:55:26 -04:00
Aarnav Tale
a9d5e10be9
fix: redirect admin to admin/ (regression)
2025-08-26 15:18:48 -04:00
Aarnav Tale
d7b1e19985
chore: add deprecation notice for oidc user file
2025-08-21 12:37:25 -04:00
Aarnav Tale
9bc8483a8f
chore: shutup the dotenvx shameless promo
2025-08-21 12:16:49 -04:00
Aarnav Tale
4351e1fcb3
feat: support gravatar profile pictures for oidc
2025-08-21 12:16:18 -04:00
Aarnav Tale
cd4e8f8399
chore: handle empty (already migrated) user oidc file
2025-08-21 11:49:17 -04:00
Aarnav Tale
356abab90a
feat: do insane type validation for the config
2025-08-21 11:41:14 -04:00
Aarnav Tale
8fc657f86a
feat: handle logging from the agent
2025-08-20 14:07:08 -04:00
Aarnav Tale
d2c4f5eb2b
feat: completely overhaul the auth model
...
* Cookies are now encrypted JWTs (GHSA-wrqq-v7qw-r5w7)
* Authentication is stored in the SQLite database (auto-migrated)
* Session logic is much cleaner
2025-08-19 17:52:16 -04:00
Aarnav Tale
8cb91cd45b
feat: overhaul hp_agent lifecycle handling
...
* Added backoff and liveness probes for better management
* Switched IPC to a simple text based system
* Lookups don't directly touch the agent now
* Use the database as a source of truth
2025-08-19 00:10:06 -04:00
Aarnav Tale
a4a037ed68
feat: update to rolldown-vite and typescript-go
2025-08-18 16:42:29 -04:00
Igor Ramazanov
8a9235836a
fix: agent inherits UID/GID from the parent process
2025-08-05 13:16:02 -04:00
Igor Ramazanov
344901d38c
fix: debug log level when searching for a Headscale process
2025-08-05 13:16:02 -04:00
Erik Parawell
5cfd9e411b
Implement path loading
...
Got the build working
Maybe actually fix builds
Copy drizzle as well
2025-08-05 13:15:03 -04:00
Aarnav Tale
f990670e86
Merge remote-tracking branch 'origin/main' into next
2025-06-22 17:59:03 -04:00
Peder 'hayer' Husom
0344f17887
Proc mode: try to guess PID based on PPID when multiple found
2025-06-22 17:57:52 -04:00
Aarnav Tale
87b8d64bcc
feat: reintroduce missing local dns override ( fixes #236 )
2025-06-21 13:54:33 -04:00
Aarnav Tale
1150d1616e
fix: support user input when not specified for ssh
2025-06-20 20:09:28 -04:00
Aarnav Tale
73f0a0d273
fix: use distroless and fix build
2025-06-20 11:32:27 -04:00