Commit Graph

76 Commits

Author SHA1 Message Date
miloschwartz
36c0d9aba2 add hybrid splash 2025-08-17 21:29:21 -07:00
Owen
af2088df4e Control which types of sites work and tell user 2025-08-17 18:01:36 -07:00
miloschwartz
5c04b1e14a add site targets, client resources, and auto login 2025-08-14 18:24:21 -07:00
Owen
50fc2fc74e Add newt install command 2025-08-13 11:30:21 -07:00
Owen
c244dc9c0c Add accept clients to install 2025-08-13 11:15:14 -07:00
Owen
1351fb6689 Merge branch 'feature/form-signup-improvements' of github.com:adrianeastles/pangolin into adrianeastles-feature/form-signup-improvements 2025-08-12 21:40:55 -07:00
Owen
4f3cd71e1e Merge branch 'feature/setup-token-security' of github.com:adrianeastles/pangolin into adrianeastles-feature/setup-token-security 2025-08-12 21:12:55 -07:00
Owen
e6589308dd Update readme 2025-08-07 14:53:46 -07:00
Adrian Astles
69baa6785f feat: Add setup token security for initial server setup
- Add setupTokens database table with proper schema
- Implement setup token generation on first server startup
- Add token validation endpoint and modify admin creation
- Update initial setup page to require setup token
- Add migration scripts for both SQLite and PostgreSQL
- Add internationalization support for setup token fields
- Implement proper error handling and logging
- Add CLI command for resetting user security keys

This prevents unauthorized access during initial server setup by requiring
a token that is generated and displayed in the server console.
2025-08-03 21:17:18 +08:00
miloschwartz
d38656e026 add clients to int api 2025-07-30 21:31:16 -07:00
miloschwartz
80aa7502af fix resource domain not required 2025-07-28 12:52:44 -07:00
Owen
28f8b05dbc Basic clients working 2025-07-27 10:21:27 -07:00
Adrian Astles
df31c13912 added real-time password validation to signup form. 2025-07-25 21:59:25 +08:00
Owen
15adfcca8c Add remote subnets to ui 2025-07-24 22:01:22 -07:00
Owen
1466788f77 Clients ui done 2025-07-24 21:42:44 -07:00
Owen
760fe3aca9 Create client component done 2025-07-24 21:26:02 -07:00
miloschwartz
114ce8997f add tos and pp consent 2025-07-21 16:57:21 -07:00
miloschwartz
86a4656651 fix multi level subdomain conflict bug 2025-07-19 22:54:30 -07:00
miloschwartz
2ddb4ec905 allow multi level sudomains in domain picker 2025-07-18 15:48:23 -07:00
Owen
0a2b1d9e53 Use a records for the wildcard 2025-07-17 16:17:01 -07:00
miloschwartz
d870a49381 change domain picker description and fix metadata title 2025-07-17 12:05:08 -07:00
miloschwartz
ccdcda7f1d add screenshots and minor fixes 2025-07-16 22:18:11 -07:00
miloschwartz
665ef08733 minor fixes for release 2025-07-16 18:09:17 -07:00
miloschwartz
e99905e3c9 translate domains and prevent delete config domain 2025-07-15 15:51:37 -07:00
miloschwartz
83a4677026 don't allow deleting config managed domains 2025-07-15 13:20:44 -07:00
Owen
3dc79da2fa Merge branch 'dev' into clients-pops-dev 2025-07-14 16:59:00 -07:00
miloschwartz
3505342a8d style consistency changes to add security key form 2025-07-14 15:43:33 -07:00
Owen
78661799f2 Resources working with new picker 2025-07-14 15:36:15 -07:00
Owen
753027ffc7 Translate missing translations 2025-07-14 14:45:46 -07:00
Milo Schwartz
9075ecb007 Merge branch 'dev' into feat/internal-user-passkey-support 2025-07-14 17:43:01 -04:00
Owen
69d253fba3 Create wildcard domains 2025-07-14 12:18:12 -07:00
miloschwartz
915ccdc007 server admin enforce 2fa per user 2025-07-13 21:58:37 -07:00
Owen
98a261e38c Pull up downstream changes 2025-07-13 21:57:24 -07:00
Adrian Astles
c9f5ffae42 Merge branch 'dev' into feat/internal-user-passkey-support 2025-07-14 07:20:33 +08:00
Burzhui34
08fed8fe93 Fix plural forms for Russian language
Change =1/other to one/other format to support proper grammar in Russian
2025-07-06 21:04:27 +03:00
Adrian Astles
a093c54b16 simplified security key management interface. 2025-07-06 20:41:26 +08:00
Adrian Astles
6ccc05b183 Update security key error handling and user feedback. Improve user guidance for security key interactions and Implement proper error handling for permission denials and timing issues. 2025-07-05 18:56:32 +08:00
Adrian Astles
5130071a60 improved security key management interface, also updated locales 2025-07-05 18:27:04 +08:00
Adrian Astles
f31717145f feat(passkeys): Add password verification for passkey management
- Add password verification requirement when registering passkeys
- Add password verification requirement when deleting passkeys
- Add support for 2FA verification if enabled
- Add new delete confirmation dialog with password field
- Add recommendation message when only one passkey is registered
- Improve dialog styling and user experience
- Fix type issues with WebAuthn credential descriptors

Security: This change ensures that sensitive passkey operations require
password verification, similar to 2FA management, preventing unauthorized
modifications to authentication methods.
2025-07-03 22:57:29 +08:00
Adrian Astles
db76558944 refactor: rename passkeyChallenge to webauthnChallenge
- Renamed table for consistency with webauthnCredentials
- Created migration script 1.8.1.ts for table rename
- Updated schema definitions in SQLite and PostgreSQL
- Maintains WebAuthn standard naming convention
2025-07-03 21:53:07 +08:00
miloschwartz
1e5141c27c add newt version update available to table 2025-06-30 13:59:30 -07:00
miloschwartz
4ffdd6f74f clean up a few save buttons 2025-06-30 12:28:27 -07:00
miloschwartz
a0381eb2c6 clean up ui pass 1 2025-06-30 09:34:14 -07:00
miloschwartz
809a135721 add refresh sites button 2025-06-27 16:43:14 -04:00
miloschwartz
317a15b649 Merge branch 'dev' into clients-pops 2025-06-20 16:34:49 -04:00
miloschwartz
d03f45279c remove server admin from config and add onboarding ui 2025-06-19 22:11:05 -04:00
Owen
459bc32f9d Merge branch 'dev' into clients-pops 2025-06-11 11:13:40 -04:00
Owen
8aa95db9bc Adjust button and add profile translations 2025-06-11 10:00:38 -04:00
Owen
31a41576d8 Fix translation & add space 2025-06-11 09:37:21 -04:00
Owen
3c2ea1a75f Add translation and fix ts issues 2025-06-10 18:34:04 -04:00