2e6b387d67
fix role assignment for users without headplane db record
2026-02-24 17:37:09 +02:00
403f9c9b0b
feat: add lazy retrying oidc connector
2026-01-16 00:33:10 -05:00
62325f7c86
chore: fallback to client_secret_post for OIDC
2026-01-15 21:54:55 -05:00
0fb02d0d8b
feat: implement better token auth endpoint method heuristic for oidc
2026-01-13 22:17:17 -05:00
3d71049afe
fix: accept the full discovered oidc configuration
2025-12-12 21:26:35 +01:00
3a3e5ca65e
feat: pkce
2025-12-04 11:37:22 -05:00
199ef46ee1
fix: correctly passthrough and handle a new OIDC redirect_uri system
2025-12-04 10:34:48 -05:00
a824ea3dcf
chore: spammy log cleanup
2025-12-04 03:37:48 -05:00
ba61656fb0
feat: cleanup oidc logic and surface errors better
2025-12-04 00:44:31 -05:00
d3d7c7cc0e
feat: better error handling for oidc api key
...
This also ships with a better error page
2025-11-28 17:54:52 -05:00
b1c93512df
feat: support custom cookie options
2025-11-02 14:04:38 -05:00
eb4669498a
feat: overhaul oidc work
2025-08-28 22:55:26 -04:00
d7b1e19985
chore: add deprecation notice for oidc user file
2025-08-21 12:37:25 -04:00
cd4e8f8399
chore: handle empty (already migrated) user oidc file
2025-08-21 11:49:17 -04:00
d2c4f5eb2b
feat: completely overhaul the auth model
...
* Cookies are now encrypted JWTs (GHSA-wrqq-v7qw-r5w7)
* Authentication is stored in the SQLite database (auto-migrated)
* Session logic is much cleaner
2025-08-19 17:52:16 -04:00
8cb91cd45b
feat: overhaul hp_agent lifecycle handling
...
* Added backoff and liveness probes for better management
* Switched IPC to a simple text based system
* Lookups don't directly touch the agent now
* Use the database as a source of truth
2025-08-19 00:10:06 -04:00
8a9235836a
fix: agent inherits UID/GID from the parent process
2025-08-05 13:16:02 -04:00
b18147fa82
feat: cleanup removal of old ssh plexer and logic
...
we also have added the necessary logic to auto prune ephemeral nodes because
headscale doesn't seem to automatically remove them. this change made use of a database
which is now stored in the persistent headplane directory.
2025-06-20 00:14:00 -04:00
7dfcbef774
feat: initial webssh tooling
2025-06-16 11:44:59 -04:00
0276a500c7
fix: attempt to auto create agent work_dir if missing
2025-05-25 11:02:19 -04:00
662c38ea44
fix: handle newlines in provided secret paths
2025-05-25 11:02:19 -04:00
39d6602263
fix: use descriptive error messages
2025-05-25 11:02:19 -04:00
8c01fcfe89
fix: only return queried machines from an agent
2025-05-25 11:02:19 -04:00
c5e6a6c407
feat: switch away from websocket to stdout messaging for agent
2025-05-25 11:02:19 -04:00
169a7b14d0
feat: support oidc restriction management in the settings
2025-05-25 11:02:19 -04:00
3a5ab68432
chore: defer the path based config loading till 0.6.1. ( #223 )
2025-05-23 10:46:14 -04:00
8ea8c7195f
Implement path-based secret loading
2025-05-19 16:38:35 -04:00
69c6fc4847
chore: v0.5.8
2025-04-03 13:11:33 -04:00
6a94e815f2
feat: improve error returning and parsing logic
2025-04-03 12:57:06 -04:00
d5fb8a2966
feat: support skipping onboarding
2025-04-03 12:57:06 -04:00
7d61ad50c4
feat: oops commit the user role change page
2025-04-03 12:57:06 -04:00
d698cf5478
fix: open file in a+ to avoid read issues
2025-04-02 13:40:01 -04:00
80c987f383
feat: implement onboarding for non-registered users
2025-04-02 13:26:58 -04:00
bf02015dc7
feat: begin working on user auth
2025-03-29 14:12:15 -04:00
73ea35980d
feat: switch agent fetching to the server side
...
this brings the benefit of fitting in the revalidator lifecycle we have
created via the useLiveData hook.
2025-03-24 16:15:38 -04:00
9a1051b9af
feat: reimplement websocket to use hono
2025-03-24 16:15:38 -04:00
34cfee7cff
feat: reach an initial working stage
2025-03-24 16:15:38 -04:00
cbbd64e91a
feat: initial server side systems
2025-03-24 16:15:38 -04:00
drifterza