Commit graph

83 commits

Author SHA1 Message Date
Pallavi
78f464f6ca Show/allow unicode domain name 2025-08-31 17:53:35 +05:30
Owen
9455adf61f
Add list invitations to integration api
Fixes #1364
2025-08-30 21:18:22 -07:00
miloschwartz
970ab9818a
translate managed page 2025-08-30 16:51:44 -07:00
Owen
218a6642a2
Merge branch 'dev' into geoip 2025-08-25 21:07:17 -07:00
Owen
29fb5735e2
Add missing api endpoints to integration
Fixes #1344
2025-08-25 16:23:22 -07:00
Owen
78d3861382
Add pass rule 2025-08-24 22:20:09 -07:00
Owen
21743e5a23
Clarify site address 2025-08-19 11:26:37 -07:00
miloschwartz
36c0d9aba2
add hybrid splash 2025-08-17 21:29:21 -07:00
Owen
af2088df4e
Control which types of sites work and tell user 2025-08-17 18:01:36 -07:00
miloschwartz
5c04b1e14a
add site targets, client resources, and auto login 2025-08-14 18:24:21 -07:00
Owen
50fc2fc74e
Add newt install command 2025-08-13 11:30:21 -07:00
Owen
c244dc9c0c
Add accept clients to install 2025-08-13 11:15:14 -07:00
Owen
1351fb6689
Merge branch 'feature/form-signup-improvements' of github.com:adrianeastles/pangolin into adrianeastles-feature/form-signup-improvements 2025-08-12 21:40:55 -07:00
Owen
4f3cd71e1e
Merge branch 'feature/setup-token-security' of github.com:adrianeastles/pangolin into adrianeastles-feature/setup-token-security 2025-08-12 21:12:55 -07:00
Owen
e6589308dd
Update readme 2025-08-07 14:53:46 -07:00
Adrian Astles
69baa6785f feat: Add setup token security for initial server setup
- Add setupTokens database table with proper schema
- Implement setup token generation on first server startup
- Add token validation endpoint and modify admin creation
- Update initial setup page to require setup token
- Add migration scripts for both SQLite and PostgreSQL
- Add internationalization support for setup token fields
- Implement proper error handling and logging
- Add CLI command for resetting user security keys

This prevents unauthorized access during initial server setup by requiring
a token that is generated and displayed in the server console.
2025-08-03 21:17:18 +08:00
miloschwartz
d38656e026
add clients to int api 2025-07-30 21:31:16 -07:00
miloschwartz
80aa7502af
fix resource domain not required 2025-07-28 12:52:44 -07:00
Owen
28f8b05dbc
Basic clients working 2025-07-27 10:21:27 -07:00
Adrian Astles
df31c13912 added real-time password validation to signup form. 2025-07-25 21:59:25 +08:00
Owen
15adfcca8c
Add remote subnets to ui 2025-07-24 22:01:22 -07:00
Owen
1466788f77
Clients ui done 2025-07-24 21:42:44 -07:00
Owen
760fe3aca9
Create client component done 2025-07-24 21:26:02 -07:00
miloschwartz
114ce8997f
add tos and pp consent 2025-07-21 16:57:21 -07:00
miloschwartz
86a4656651
fix multi level subdomain conflict bug 2025-07-19 22:54:30 -07:00
miloschwartz
2ddb4ec905
allow multi level sudomains in domain picker 2025-07-18 15:48:23 -07:00
Owen
0a2b1d9e53
Use a records for the wildcard 2025-07-17 16:17:01 -07:00
miloschwartz
d870a49381
change domain picker description and fix metadata title 2025-07-17 12:05:08 -07:00
miloschwartz
ccdcda7f1d
add screenshots and minor fixes 2025-07-16 22:18:11 -07:00
miloschwartz
665ef08733
minor fixes for release 2025-07-16 18:09:17 -07:00
miloschwartz
e99905e3c9
translate domains and prevent delete config domain 2025-07-15 15:51:37 -07:00
miloschwartz
83a4677026
don't allow deleting config managed domains 2025-07-15 13:20:44 -07:00
Owen
3dc79da2fa
Merge branch 'dev' into clients-pops-dev 2025-07-14 16:59:00 -07:00
miloschwartz
3505342a8d
style consistency changes to add security key form 2025-07-14 15:43:33 -07:00
Owen
78661799f2
Resources working with new picker 2025-07-14 15:36:15 -07:00
Owen
753027ffc7
Translate missing translations 2025-07-14 14:45:46 -07:00
Milo Schwartz
9075ecb007
Merge branch 'dev' into feat/internal-user-passkey-support 2025-07-14 17:43:01 -04:00
Owen
69d253fba3
Create wildcard domains 2025-07-14 12:18:12 -07:00
miloschwartz
915ccdc007
server admin enforce 2fa per user 2025-07-13 21:58:37 -07:00
Owen
98a261e38c
Pull up downstream changes 2025-07-13 21:57:24 -07:00
Adrian Astles
c9f5ffae42
Merge branch 'dev' into feat/internal-user-passkey-support 2025-07-14 07:20:33 +08:00
Burzhui34
08fed8fe93
Fix plural forms for Russian language
Change =1/other to one/other format to support proper grammar in Russian
2025-07-06 21:04:27 +03:00
Adrian Astles
a093c54b16 simplified security key management interface. 2025-07-06 20:41:26 +08:00
Adrian Astles
6ccc05b183 Update security key error handling and user feedback. Improve user guidance for security key interactions and Implement proper error handling for permission denials and timing issues. 2025-07-05 18:56:32 +08:00
Adrian Astles
5130071a60 improved security key management interface, also updated locales 2025-07-05 18:27:04 +08:00
Adrian Astles
f31717145f feat(passkeys): Add password verification for passkey management
- Add password verification requirement when registering passkeys
- Add password verification requirement when deleting passkeys
- Add support for 2FA verification if enabled
- Add new delete confirmation dialog with password field
- Add recommendation message when only one passkey is registered
- Improve dialog styling and user experience
- Fix type issues with WebAuthn credential descriptors

Security: This change ensures that sensitive passkey operations require
password verification, similar to 2FA management, preventing unauthorized
modifications to authentication methods.
2025-07-03 22:57:29 +08:00
Adrian Astles
db76558944 refactor: rename passkeyChallenge to webauthnChallenge
- Renamed table for consistency with webauthnCredentials
- Created migration script 1.8.1.ts for table rename
- Updated schema definitions in SQLite and PostgreSQL
- Maintains WebAuthn standard naming convention
2025-07-03 21:53:07 +08:00
miloschwartz
1e5141c27c
add newt version update available to table 2025-06-30 13:59:30 -07:00
miloschwartz
4ffdd6f74f
clean up a few save buttons 2025-06-30 12:28:27 -07:00
miloschwartz
a0381eb2c6
clean up ui pass 1 2025-06-30 09:34:14 -07:00