 Scott McKendry
|
3390debab7
|
handle edge cases
|
2026-07-30 07:20:51 +12:00 |
|
|
Scott McKendry
|
c5bccd0b7b
|
should be non-breaking now ;)
|
2026-07-30 07:06:54 +12:00 |
|
|
Scott McKendry
|
cce0eaa974
|
rework to keep regex under specific conditions
|
2026-07-28 19:53:16 +12:00 |
|
|
Scott McKendry
|
3d5ab54ab8
|
fix(acls): auth bypass via forward auth
|
2026-07-27 19:43:47 +12:00 |
|
 Stavros
|
c7077a7c84
|
fix: do not allow empty ingresses
|
2026-07-21 00:37:13 +03:00 |
|
 StavrosandGitHub
|
80bc87188e
|
refactor: rework acl fetching for kubernetes and docker (#1028)
|
2026-07-20 16:39:15 +03:00 |
|
|
StavrosandGitHub
|
0e7bdf6cd5
|
feat: experimental option to run tinyauth in oauth bridge mode (#1027)
|
2026-07-20 00:03:26 +03:00 |
|
|
StavrosandGitHub
|
f43d690320
|
refactor: rework scheme validation in oauth controller and frontend (#1026)
|
2026-07-19 00:41:28 +03:00 |
|
|
Stavros
|
50c25e4478
|
fix: fix domain validator with port but no scheme and https or http
|
2026-07-18 18:17:24 +03:00 |
|
|
Stavros
|
d6087dc45e
|
fix: allow for mismatching protocol in trusted domain check - ui warnings
|
2026-07-18 18:06:26 +03:00 |
|
|
Stavros
|
a79438d6ec
|
fix: fix typo
|
2026-07-18 16:47:53 +03:00 |
|
|
Stavros
|
286aad2e08
|
test: remove obsolete test case
|
2026-07-18 16:37:52 +03:00 |
|
|
Stavros
|
5091fc2d7a
|
fix: suppress irrelevant debugs logs in acls service
|
2026-07-18 16:30:12 +03:00 |
|
|
Stavros
|
0fc87ad58f
|
fix: support for parent trusted domain, fixes #1021
|
2026-07-18 16:30:12 +03:00 |
|
|
StavrosandGitHub
|
a7eba59a42
|
refactor: export cache package (#1017)
|
2026-07-17 02:04:34 +03:00 |
|
 tsushanthandGitHub
|
ac8703eadb
|
fix(ldap): use DN instead of uid in basicAuth GetLDAPUser call (#1015)
|
2026-07-17 01:15:48 +03:00 |
|
|
Stavros
|
04a06ec5ff
|
chore: use blue color for totp generate
|
2026-07-16 17:13:36 +03:00 |
|
|
Stavros
|
3cf3cc9090
|
fix: don't fail app on label provider init failure
|
2026-07-16 14:34:12 +03:00 |
|
|
Stavros
|
589fe22138
|
tests: add tests for abstain in oauth whitelist
|
2026-07-16 14:30:48 +03:00 |
|
 
|
1165c91fcc
|
fix: abstain when OAuth whitelist is empty (#1010)
Co-authored-by: wwhsaber <wwhsaber@foxmail.com>
|
2026-07-16 14:23:07 +03:00 |
|
|
StavrosandGitHub
|
dade1e2c8f
|
refactor: rework rate limit logic (#1008)
|
2026-07-15 15:30:57 +03:00 |
|
|
StavrosandGitHub
|
6e095fd4f2
|
refactor: rework the way trusted proxies ip work (#1007)
|
2026-07-15 15:17:55 +03:00 |
|
|
StavrosandGitHub
|
c22925c2fb
|
fix: use constant time in user checks (#1004)
|
2026-07-14 16:49:59 +03:00 |
|
|
StavrosandGitHub
|
d946926c36
|
feat: allow existing query params in oidc redirect uri (#1003)
|
2026-07-14 16:36:57 +03:00 |
|
|
StavrosandGitHub
|
e75605b2c5
|
refactor: move domain check into small helper util (#1000)
|
2026-07-14 14:20:15 +03:00 |
|
 Florian IlchandGitHub
|
79bcccbe43
|
feat: support proxy environment variables for OAuth requests (#999)
|
2026-07-14 13:18:28 +03:00 |
|
|
StavrosandGitHub
|
b62bb2d37a
|
refactor: generate mdx docs with tabs for each config option (#996)
|
2026-07-13 18:07:47 +03:00 |
|
|
StavrosandGitHub
|
0bd2821a9b
|
refactor: use tailscale api for user checking instead of tsnet (#978)
|
2026-07-09 01:56:09 +03:00 |
|
 nv6andGitHub
|
364175adc0
|
feat: try anonymous bind when bind credentials are empty (#979)
|
2026-07-08 17:11:30 +03:00 |
|
|
StavrosandGitHub
|
73cc4808bc
|
feat: improve binary size with build tags (#976)
|
2026-07-06 23:49:55 +03:00 |
|
|
StavrosandGitHub
|
4aa05aeb79
|
refactor: use some colors in CLI output (#962)
|
2026-07-03 16:40:22 +03:00 |
|
|
StavrosandGitHub
|
440a3a3ef5
|
chore: cleanup codegen (#965)
|
2026-07-02 23:35:34 +03:00 |
|
|
StavrosandGitHub
|
a3c4d6ac83
|
chore: move tailscale to experimental config (#964)
|
2026-07-02 23:17:03 +03:00 |
|
|
Stavros
|
04b93fa107
|
fix: remove shutdown from serve error path
|
2026-07-02 15:07:04 +03:00 |
|
|
StavrosandGitHub
|
a6c716c4e2
|
fix: ensure data paths are set correctly in docker, fixes #958 (#959)
|
2026-07-01 16:12:46 +03:00 |
|
|
StavrosandGitHub
|
ffafb5bff5
|
feat: add a reconnect to the initial ldap connection (#928)
|
2026-06-30 15:57:41 +03:00 |
|
|
StavrosandGitHub
|
09ec40cb76
|
feat: show provider in quick actions (#955)
|
2026-06-28 17:58:11 +03:00 |
|
|
Stavros
|
08af4557fd
|
fix: use client ip instead of remote addr in tailscale whois lookups
|
2026-06-23 21:06:55 +03:00 |
|
|
StavrosandGitHub
|
69f4206f65
|
refactor: remove concurrent listeners and rework cookie logic (#950)
|
2026-06-23 13:35:29 +03:00 |
|
|
StavrosandGitHub
|
efe373084f
|
feat: support for oidc max age (#949)
|
2026-06-20 00:21:22 +03:00 |
|
|
StavrosandGitHub
|
7f18b45e21
|
feat: support for the prompt parameter in the oidc flow (#948)
|
2026-06-20 00:04:41 +03:00 |
|
|
StavrosandGitHub
|
6ccc894570
|
tests: improve test coverage for controllers (#946)
|
2026-06-19 11:59:16 +03:00 |
|
|
StavrosandGitHub
|
53af1b99c0
|
tests: don't use _test suffix in service and controller tests (#944)
|
2026-06-17 17:03:30 +03:00 |
|
|
StavrosandGitHub
|
654b5cc436
|
fix: use better limits in lockdown to limit dos attack window (#943)
|
2026-06-17 13:10:58 +03:00 |
|
|
Stavros
|
f7d7f1c4f0
|
feat: add psl checks to the oauth controller is safe redirect check
|
2026-06-17 13:05:42 +03:00 |
|
|
Stavros
|
e7d26f497d
|
fix: use runtime trusted uris in oauth controller
|
2026-06-17 12:33:09 +03:00 |
|
|
Stavros
|
a9face749d
|
chore: remove leftover debug log line from tailscale service
|
2026-06-17 12:15:51 +03:00 |
|
|
StavrosandGitHub
|
c825d81b2d
|
feat: add support for webfinger (#941)
|
2026-06-16 15:05:11 +03:00 |
|
|
StavrosandGitHub
|
f404c2ef16
|
feat: use dig for di in services and controllers (#936)
|
2026-06-16 13:00:48 +03:00 |
|
|
a0e74cd5f2
|
refactor: move oidc handling to backend and add support for oidc post (#923)
Co-authored-by: Claude <noreply@anthropic.com>
|
2026-06-13 16:45:12 +03:00 |
|