3c5a653942
Merge pull request #469 from drifterza/feature/oidc-pending-approval
2026-02-26 18:03:26 -05:00
624b9ab479
list all preauth keys without user filter
...
headscale 0.28 added GET /v1/preauthkey without a user param
which returns all keys including tag-only ones. this change
adds getAllPreAuthKeys() and uses it when available, falling
back to per-user fetching on older versions.
the UI now handles keys where user is null, showing them as
Tag Only in the filter dropdown.
closes #432
Amp-Thread-ID: https://ampcode.com/threads/T-019c9861-2d45-73ef-ab94-5fce62f63670
Co-authored-by: Amp <amp@ampcode.com >
2026-02-26 00:40:31 -05:00
dde72ae4ed
Merge pull request #465 from drifterza/feature/preauth-key-tags
2026-02-26 00:04:02 -05:00
2e6b387d67
fix role assignment for users without headplane db record
2026-02-24 17:37:09 +02:00
30dd718d68
add oidc.enabled flag for helm and config generation
...
allows defining oidc config without enabling it
2026-02-24 10:43:28 +02:00
c96249f41e
add tag-only preauth keys for headscale 0.28
...
allows creating keys with acl tags but no user
2026-02-24 10:25:51 +02:00
0080cddb55
chore: fix some test issues
2026-02-08 11:11:44 -05:00
fad0c99fc9
feat: official 0.28 support possibly
2026-02-06 00:11:26 -05:00
696e08dbcc
feat: normalize node tags before leaving the api
2026-01-24 20:30:57 -05:00
403f9c9b0b
feat: add lazy retrying oidc connector
2026-01-16 00:33:10 -05:00
2618cdd9f6
fix: strengthen the proc scanner for headscale
2026-01-16 00:20:26 -05:00
62325f7c86
chore: fallback to client_secret_post for OIDC
2026-01-15 21:54:55 -05:00
0fb02d0d8b
feat: implement better token auth endpoint method heuristic for oidc
2026-01-13 22:17:17 -05:00
7b4966be02
feat: track headscale acl response changes
2025-12-13 16:34:23 -05:00
3d71049afe
fix: accept the full discovered oidc configuration
2025-12-12 21:26:35 +01:00
295dd43059
feat: add info route
2025-12-06 15:02:18 -05:00
3a3e5ca65e
feat: pkce
2025-12-04 11:37:22 -05:00
199ef46ee1
fix: correctly passthrough and handle a new OIDC redirect_uri system
2025-12-04 10:34:48 -05:00
e09c5760af
chore: random quick fixes
2025-12-04 04:11:52 -05:00
a824ea3dcf
chore: spammy log cleanup
2025-12-04 03:37:48 -05:00
ba61656fb0
feat: cleanup oidc logic and surface errors better
2025-12-04 00:44:31 -05:00
86184e3420
feat: overhaul config loading
2025-12-01 02:46:22 -05:00
d3d7c7cc0e
feat: better error handling for oidc api key
...
This also ships with a better error page
2025-11-28 17:54:52 -05:00
5ea96db816
fix(docker): bump docker api version to v1.44
2025-11-21 19:02:16 -03:00
08a251cc8c
feat: add e2e integration tests and canonical versioning
2025-11-16 18:31:09 -05:00
444b2325fb
feat: fix acl api logic to work correctly
2025-11-04 23:51:36 -05:00
c84e9ca4a8
feat: update more primitives to use the new api
2025-11-04 23:06:56 -05:00
d68737e410
feat: switch machine apis to new runtime api client
2025-11-04 22:44:58 -05:00
a68aedc297
feat: create type-safe API object for Headscale
2025-11-04 22:40:57 -05:00
b1c93512df
feat: support custom cookie options
2025-11-02 14:04:38 -05:00
ce4be73faf
feat: add a warning banner on the login page for misconfigured cookies
2025-11-02 13:54:45 -05:00
28ad1d439f
Merge branch 'main' into next
2025-10-30 23:52:35 -04:00
66b6dea068
fix: write_ahead_log in sqlite config schema
2025-10-27 21:57:52 +01:00
f66f778398
chore: add sig handlers for the server
2025-10-19 15:29:40 -04:00
eb4669498a
feat: overhaul oidc work
2025-08-28 22:55:26 -04:00
a9d5e10be9
fix: redirect admin to admin/ (regression)
2025-08-26 15:18:48 -04:00
d7b1e19985
chore: add deprecation notice for oidc user file
2025-08-21 12:37:25 -04:00
9bc8483a8f
chore: shutup the dotenvx shameless promo
2025-08-21 12:16:49 -04:00
4351e1fcb3
feat: support gravatar profile pictures for oidc
2025-08-21 12:16:18 -04:00
cd4e8f8399
chore: handle empty (already migrated) user oidc file
2025-08-21 11:49:17 -04:00
356abab90a
feat: do insane type validation for the config
2025-08-21 11:41:14 -04:00
8fc657f86a
feat: handle logging from the agent
2025-08-20 14:07:08 -04:00
d2c4f5eb2b
feat: completely overhaul the auth model
...
* Cookies are now encrypted JWTs (GHSA-wrqq-v7qw-r5w7)
* Authentication is stored in the SQLite database (auto-migrated)
* Session logic is much cleaner
2025-08-19 17:52:16 -04:00
8cb91cd45b
feat: overhaul hp_agent lifecycle handling
...
* Added backoff and liveness probes for better management
* Switched IPC to a simple text based system
* Lookups don't directly touch the agent now
* Use the database as a source of truth
2025-08-19 00:10:06 -04:00
a4a037ed68
feat: update to rolldown-vite and typescript-go
2025-08-18 16:42:29 -04:00
8a9235836a
fix: agent inherits UID/GID from the parent process
2025-08-05 13:16:02 -04:00
344901d38c
fix: debug log level when searching for a Headscale process
2025-08-05 13:16:02 -04:00
5cfd9e411b
Implement path loading
...
Got the build working
Maybe actually fix builds
Copy drizzle as well
2025-08-05 13:15:03 -04:00
f990670e86
Merge remote-tracking branch 'origin/main' into next
2025-06-22 17:59:03 -04:00
0344f17887
Proc mode: try to guess PID based on PPID when multiple found
2025-06-22 17:57:52 -04:00
Aarnav Tale