Commit Graph

846 Commits

Author SHA1 Message Date
Ylian Saint-Hilaire
acb9a5bb6e Fixed Web-RDP when used with non-default domain (#4271) 2022-07-14 15:18:41 -07:00
Ylian Saint-Hilaire
66b0315624 Browser session security improvements. 2022-07-12 17:45:19 -07:00
Ylian Saint-Hilaire
04fb1f2bf0 Added CAPTCHA option when creating new accounts on login screen. 2022-07-11 14:35:05 -07:00
Ylian Saint-Hilaire
4382899468 Clean up cookie-session instance. 2022-07-11 11:19:04 -07:00
Ylian Saint-Hilaire
626c490771 Switch browser cookie signature from SHA1 to SHA384. 2022-07-11 11:11:03 -07:00
Ylian Saint-Hilaire
a151dcbfe6 Web relay can now handle connection:close responses. 2022-07-10 13:08:28 -07:00
Ylian Saint-Hilaire
5eca4eecee Completed support for web relay with multiple DNS names. 2022-07-10 11:32:59 -07:00
Ylian Saint-Hilaire
1a72126c4f Added DELETE and OPTIONS as supported web relay methods, #4241 2022-07-10 10:50:57 -07:00
Ylian Saint-Hilaire
a0ea6ead09 Put in the groundwork for web relay with multiple relay DNS names. 2022-07-10 01:32:11 -07:00
Ylian Saint-Hilaire
bd9739e106 Changed the web relay system to correctly with multiple DNS names, #4242 2022-07-09 13:32:55 -07:00
Ylian Saint-Hilaire
9dac8b7807 Web relay improvements, #4240 2022-07-08 18:00:15 -07:00
Ylian Saint-Hilaire
40bc91b6f3 Many CrowdSec improvements. 2022-07-07 21:51:09 -07:00
Simon Smith
e72614296c
fix dns relay and samesite lax 2022-07-07 14:57:48 +01:00
Ylian Saint-Hilaire
695e3068de Fixed server exception when using agent installation invite codes, #4233 2022-07-06 23:39:36 -07:00
Ylian Saint-Hilaire
947d9094cb Added support for Crowdsec, an open-source and collaborative IPS (Intrusion Prevention System) 2022-07-06 20:34:04 -07:00
Ylian Saint-Hilaire
e89effac46 Added options to remove the SSH Connect and SFTP connect from the terminal and files tab when other options exist, #4214 2022-07-05 14:25:38 -07:00
Ylian Saint-Hilaire
568097597c Web relay with DNS now uses the main HTTPS alias port when set, #4210. 2022-07-05 13:21:14 -07:00
Simon Smith
d16523af7b
fix backup code visibility 2022-07-05 18:42:00 +01:00
Ylian Saint-Hilaire
18f4fe9c3a Added relayAliasPort setting to support relay port behind reverse proxies, #4222 2022-07-04 20:20:25 -07:00
Ylian Saint-Hilaire
b33900dfbf Improved DNS based web relay, #4210 2022-07-03 18:17:57 -07:00
Ylian Saint-Hilaire
5ba9d7e503 Added support to HTTP web relay on the main web server port with used with a specified DNS name, #4210 2022-07-03 00:44:58 -07:00
Ylian Saint-Hilaire
0637412d1b Fixed Web-RDP when a default user is set and no users are logged in. 2022-06-28 15:20:05 -07:00
Ylian Saint-Hilaire
571a0f1c2d More work on web relay, #4172 2022-06-24 16:53:31 -07:00
Ylian Saint-Hilaire
cfd8521381 Fixed server exception on older NodeJS versions, #4102 2022-06-09 09:58:02 -07:00
Ylian Saint-Hilaire
ea7e98b3b4 Added BREACH attack mittigation, #4084 2022-06-08 10:47:23 -07:00
Ylian Saint-Hilaire
9c52cc4d8c Web-SSH fixes and improvements. 2022-05-19 14:41:32 -07:00
Ylian Saint-Hilaire
1571ce03f0 Added userRequiredHttpHeader support in domain section of the config.json, #4011 2022-05-18 18:01:34 -07:00
Ylian Saint-Hilaire
753b6c240a SSH/RDP credentials are now stored per user account, #3995 2022-05-17 16:09:35 -07:00
Ylian Saint-Hilaire
5ac74635c5 Fixed HTTP handling when no user-agent header is present. 2022-05-16 16:20:50 -07:00
Ylian Saint-Hilaire
cee069d1df Added Router and Assistant alternate path, #3988. 2022-05-16 13:48:15 -07:00
Ylian Saint-Hilaire
68c5aae0b0 Send Permissions-Policy HTTP header only for Chrome browsers. 2022-05-16 12:51:15 -07:00
Ylian Saint-Hilaire
14050dd6b7 Fixed authlog, #3954 2022-05-10 19:31:21 -07:00
Ylian Saint-Hilaire
b28c7daf2b Fixed account login message, #3954 2022-05-10 17:53:09 -07:00
Ylian Saint-Hilaire
0d297088c8 Added option to save SSH username and key without saving key password. 2022-05-10 17:44:34 -07:00
Ylian Saint-Hilaire
96dab9ab3e Fixed 404 error with mstsc.html, #3927 2022-05-02 22:09:06 -07:00
Ylian Saint-Hilaire
41b6b6a54a Fixed RDP/SSH use of saved credentials, #3924 2022-05-02 12:19:03 -07:00
Ylian Saint-Hilaire
db06ec1975 Added Web based RDP support with NLA, #3867 and #3914 2022-04-29 11:13:58 -07:00
Ylian Saint-Hilaire
4c3a82a552 Web socket connection error, # 2022-04-12 14:03:52 -07:00
Ylian Saint-Hilaire
8fce45ad76 CookieIpCheck now has none/lax/strict options, with default being lax. #3861 2022-04-09 17:12:52 -07:00
mstrhakr
ba82a005f4 update oidc npm module 2022-04-08 11:55:54 -04:00
mstrhakr
149573a878 swapped to working passport oidc module 2022-04-08 11:38:55 -04:00
mstrhakr
126c1474cc working generic oidc section
tested with authelia, works for me :)
2022-04-08 00:14:58 -04:00
mstrhakr
640933fc6e implemented passport-openidconnect
used passport-openidconnect to get login 90% working, i get as far as the oidc host sending me back to mesh central with a good auth but i dont get logged in, still testing
2022-04-06 12:40:42 -04:00
Ylian Saint-Hilaire
5a81c84d67 Improved uicustomevent security and events, #3823 2022-03-30 07:14:14 -07:00
Ylian Saint-Hilaire
dd11816657 Fixed server update feature when given rights but are not administrator. 2022-03-25 11:13:47 -07:00
Ylian Saint-Hilaire
629aba7fc8 Fixed 2fahold.aspx port number. 2022-03-24 17:08:58 -07:00
Ylian Saint-Hilaire
1356dae4f2 You can now limit which users can create login tokens. #3787 2022-03-24 15:05:20 -07:00
Ylian Saint-Hilaire
a8c100be24 Improved web page translation selection based on browser information. 2022-03-24 14:14:33 -07:00
Ylian Saint-Hilaire
ff65097b11
Merge pull request #3766 from tunght/master
Fixed email verification issue
2022-03-16 02:15:06 -07:00
tunght
306c3314fa
Fixed email verification issue 2022-03-15 20:58:44 -07:00