2712 Commits

Author	SHA1	Message	Date
kshitijshresth	b136bd2246	Escape regex metacharacters in PATH rule wildcard matching ... isValidUrlGlobPattern accepts characters like ( ) [ ] { } | . + ^ $ in PATH rule values, but isPathAllowed converted wildcard segments to regex without escaping them. A rule value such as /(api* produced an invalid regex and threw on every request to the resource, surfacing as a 500 from verifySession. Literal characters like . and + also changed matching semantics. isPathAllowed is extracted to server/lib/pathMatch.ts as a pure module, metacharacters are escaped before wildcard substitution, compiled segment regexes are cached, and the test suite now imports the real implementation instead of a stale copy, with added coverage for special characters.	2026-06-12 11:21:21 +03:00
Owen	935593885a	Adjust 1.19 and add 1.19.1 to ensure sso not null	2026-06-11 22:01:20 -07:00
miloschwartz	b82b41ed26	fix migration	2026-06-11 15:02:29 -07:00
Owen	5baf0c3c09	Use ssh like mode host	2026-06-11 11:11:50 -07:00
Owen	71273e1b1c	Try to fix large query problem	2026-06-10 21:41:34 -07:00
Owen	b1d52ad1a3	Update tiers	2026-06-10 16:27:25 -07:00
Owen	bc156c715d	24 hour requirement for updates	2026-06-10 15:50:43 -07:00
Owen	d47449b082	Add notes about inline policy to api endpoints	2026-06-10 10:24:31 -07:00
Owen	665806dfe8	Add some documentation; pull the override values	2026-06-10 10:03:16 -07:00
Owen	dd1fba4e45	Also clear the roles and users	2026-06-09 21:59:30 -07:00
miloschwartz	a1ab8d8f35	standardize client titles	2026-06-09 21:47:15 -07:00
Owen	d870b9ff49	Drop the not null on resource columns	2026-06-09 21:36:27 -07:00
miloschwartz	9c09019ddb	add protocol filter	2026-06-09 21:33:56 -07:00
Owen	9d88683fc5	Reset resource info when on inline policy	2026-06-09 21:28:25 -07:00
miloschwartz	dd2c9f2a02	check resource policy in verifyResourceAccess middleware	2026-06-09 17:52:31 -07:00
Owen	96a54fc9cc	Fix import issue in migrations	2026-06-09 16:51:55 -07:00
Owen	3a485f74f1	Move session migration out of the loop	2026-06-09 16:16:14 -07:00
Owen	f186e7e99e	Dont allow asn or country without having maxmind	2026-06-09 16:02:52 -07:00
Owen	c85a7f6ac5	Migrate unkown openapi response from string to {}	2026-06-09 15:35:08 -07:00
Owen	dd54be523f	Dont need to check user exists for the whitelist	2026-06-09 15:26:35 -07:00
Owen	d57f064d4c	Fix spelling	2026-06-09 15:26:35 -07:00
miloschwartz	a3a45b4239	add safe read	2026-06-09 14:09:36 -07:00
Owen	1089cfbacc	Update query to be more efficient	2026-06-09 11:54:46 -07:00
Owen	f28571629f	Make sure the pamMode is push for host resources	2026-06-08 21:54:06 -07:00
Owen	5a575c916b	Handle backward compatability	2026-06-08 21:11:57 -07:00
Owen	42974d1739	Make sure the skip to idp is pulled	2026-06-08 17:41:59 -07:00
Owen	1b7c1ffa70	Set the target port from the resource	2026-06-08 15:39:26 -07:00
Owen	74fdcceace	Reconnect newts when a exit node comes back online	2026-06-08 12:02:12 -07:00
Owen	7dec8ba998	Add exit node if the sites dont have one	2026-06-08 12:02:12 -07:00
miloschwartz	c9dc6affe7	Merge branch 'dev' into resource-policies-restyle	2026-06-08 12:00:08 -07:00
miloschwartz	8fe45ba78c	prevent duplicate label names	2026-06-08 11:59:15 -07:00
miloschwartz	fae258b145	add labels to user-resources query	2026-06-08 10:55:24 -07:00
miloschwartz	9f224f655f	Merge branch 'resource-policies-restyle' into dev	2026-06-08 10:38:13 -07:00
miloschwartz	3b675f7de1	policies and policy on resource structure in a good place	2026-06-07 12:19:33 -07:00
Owen	8daf7c2872	Rename and add browser target update	2026-06-07 12:07:08 -07:00
Owen	c394490473	Update browser targets	2026-06-07 10:43:16 -07:00
Owen	3b6b78b3e1	Update traefik config	2026-06-06 16:14:20 -07:00
Owen	d1af7a153f	Enforece some more things on the types	2026-06-05 16:57:53 -07:00
Owen	69bd61c308	Update migrations	2026-06-05 16:02:28 -07:00
Owen	7b7ff51289	Add target mode and auth token	2026-06-05 15:37:21 -07:00
Owen	772ac8af73	Remove browser gateway targets for regular targets	2026-06-05 15:30:42 -07:00
Owen	8e5d9e94a9	Fix delete site only working on newt site	2026-06-05 14:37:44 -07:00
Owen	c9cb28af45	Rename to public-policies	2026-06-05 14:30:36 -07:00
Owen	f2b5cff3f9	Fix resource protection status showing wrong	2026-06-05 12:12:27 -07:00
Owen	ad0e800d8d	Fix validation error and bring alias back to table	2026-06-05 12:12:27 -07:00
miloschwartz	253ba554a2	fix resources cell styling	2026-06-05 11:46:30 -07:00
Owen	84fef5f1d6	Resource policy api backward compatability	2026-06-04 22:02:42 -07:00
Owen	67b08ca61e	Properly do disable enterprise features this time	2026-06-04 21:18:04 -07:00
Owen	614df75880	Add policy to blueprints	2026-06-04 21:18:04 -07:00
Owen	676cf37ee2	Make sure things are paywalled in the blueprints	2026-06-04 21:18:04 -07:00