Paul Lorenz 5d0329bdc2 Merge commit from fork ...

backport fixes GHSA-whjr-3j94-gw3c to v1.6 constrain external jwt signer JWKS fetching

2026-08-20 15:27:56 -04:00

..

api

backport fixes GHSA-q8g9-jc4c-jp6q to v1.6 limit pre-auth request body buffering

2026-08-19 17:22:56 -04:00

api_impl

Support multi-underlay links. Fixes #3134

2025-07-11 20:56:11 -04:00

apierror

backport fixes GHSA-q8g9-jc4c-jp6q to v1.6 limit pre-auth request body buffering

2026-08-19 17:22:56 -04:00

change

Update to channel/v4

2025-04-02 15:28:59 -04:00

command

Backport raft rate limiting changes. Fxies #3772

2026-04-06 15:47:41 -04:00

config

backport fixes GHSA-whjr-3j94-gw3c to v1.6 constrain external jwt signer JWKS fetching

2026-08-20 15:22:14 -04:00

db

Copy eventual event data out of bolt memory. For #4108

2026-07-15 19:14:41 -04:00

entities

Update copyright

2022-06-30 17:45:08 -04:00

env

backport fixes GHSA-q8g9-jc4c-jp6q to v1.6 limit pre-auth request body buffering

2026-08-19 17:22:56 -04:00

event

Add edge session events for JWT edge sessions. Fixes #3225

2025-09-02 15:37:02 -04:00

events

Add edge session events for JWT edge sessions. Fixes #3225

2025-09-02 15:37:02 -04:00

fields

Add service max idle time. Fixes #1496. Add decomission router support. Fixes #1402

2023-12-08 12:48:56 -05:00

handler_ctrl

Scope terminator operations to the requesting router. Fixes #4237

2026-08-07 14:53:27 -04:00

handler_edge_ctrl

Set env on the v1 create-circuit request context. Fixes #4243

2026-08-07 15:31:51 -04:00

handler_mgmt

Update for SDK flow control changes

2025-07-18 12:42:45 -04:00

handler_peer_ctrl

Fix potential deadlock if panic while lock held

2026-04-06 15:47:41 -04:00

idgen

ids used by circuits and ingress/egress can conflict in an HA setup. Fixes #3124

2025-06-18 11:24:16 -04:00

internal

Merge commit from fork

2026-08-20 14:46:31 -04:00

ioc

Refactor xgress_edge_tunnel_v2 to make it more pluggable

2025-09-03 16:03:15 -04:00

jwtsigner

fix #3231 use root controller server certs for OIDC signing (#3236)

2025-08-26 09:29:50 -04:00

middleware

Update copyright

2022-06-30 17:45:08 -04:00

model

backport fixes GHSA-whjr-3j94-gw3c to v1.6 constrain external jwt signer JWKS fetching

2026-08-20 15:22:14 -04:00

models

Cluster operations should return 503 if there's no leader. Also add 503s for other operations where appropriate. Fixes #2738

2025-02-14 11:56:10 -05:00

network

Update deps and changelog

2025-09-19 16:47:48 -04:00

oidc_auth

backport fixes GHSA-q8g9-jc4c-jp6q to v1.6 limit pre-auth request body buffering

2026-08-19 17:22:56 -04:00

peermsg

Add more raft configuration options. Fixes openziti/fabric#597

2023-02-15 23:47:57 -05:00

raft

Verify peer leaf against full CA bundle without EKU restriction

2026-07-27 14:07:30 -04:00

response

Logging tweaks and add missing code in factory_wrapper

2025-01-08 15:48:45 -05:00

rest_client

Cluster operations should return 503 if there's no leader. Also add 503s for other operations where appropriate. Fixes #2738

2025-02-14 11:56:10 -05:00

rest_model

Support multi-underlay links. Fixes #3134

2025-07-11 20:56:11 -04:00

rest_server

Support multi-underlay links. Fixes #3134

2025-07-11 20:56:11 -04:00

rest_util

Update fabric imports

2023-09-28 23:34:28 -04:00

scripts

Move REST code into controller

2023-08-16 12:39:59 -04:00

server

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3764

2026-04-03 18:29:56 -04:00

specs

Support multi-underlay links. Fixes #3134

2025-07-11 20:56:11 -04:00

subcmd

Fix set of empty roles from CLI. Fixes #785

2024-07-11 13:19:59 -04:00

sync_strats

Fix revocation build-up in db and rdm. Fixes #3760

2026-04-03 17:26:32 -04:00

webapis

backport fixes GHSA-q8g9-jc4c-jp6q to v1.6 limit pre-auth request body buffering

2026-08-19 17:22:56 -04:00

xctrl

Update to channel/v4

2025-04-02 15:28:59 -04:00

xctrl_example

Update to channel/v4

2025-04-02 15:28:59 -04:00

xmgmt

Update to channel/v4

2025-04-02 15:28:59 -04:00

xt

HA SDK terminators test. Fixes #2217. Fixes #2533

2024-11-12 18:45:08 -05:00

xt_common

Update for PR comments

2025-03-18 15:32:44 -04:00

xt_random

Add support for sticky termininator selection on dials. Fixes #2019

2024-05-21 13:18:15 -04:00

xt_smartrouting

Change terminator failure cost crediting to be exponential based on time since last failure. Fixes #2851

2025-03-10 10:02:31 -04:00

xt_sticky

Change terminator failure cost crediting to be exponential based on time since last failure. Fixes #2851

2025-03-10 10:02:31 -04:00

xt_weighted

Change terminator failure cost crediting to be exponential based on time since last failure. Fixes #2851

2025-03-10 10:02:31 -04:00

agent.go

Ensure cluster peers are present and correct before adding. Fixes #3005

2025-05-01 16:26:45 -04:00

controller.go

Validate router certificates on typed control channel connections

2026-07-27 14:07:53 -04:00

health.go

Support multiple control channels. Fixes openziti/fabric#469

2022-09-29 12:06:41 -04:00

settings.go

Update to channel/v4

2025-04-02 15:28:59 -04:00