Thomas Wilde
8d2955475b
Add ASN-based resource rule matching
...
- Add MaxMind ASN database integration
- Implement ASN lookup and matching in resource rule verification
- Add curated list of 100+ major ASNs (cloud, ISP, CDN, mobile carriers)
- Add ASN dropdown selector in resource rules UI with search functionality
- Support custom ASN input for unlisted ASNs
- Add 'ALL ASNs' special case handling (AS0)
- Cache ASN lookups with 5-minute TTL for performance
- Update validation schemas to support ASN match type
This allows administrators to create resource access rules based on
Autonomous System Numbers, similar to existing country-based rules.
Useful for restricting access by ISP, cloud provider, or mobile carrier.
2025-12-20 12:16:00 -05:00
Owen
f9b03943c3
Format all files
2025-12-09 10:56:14 -05:00
Owen
e24a13fb11
Implement previous year delete
2025-12-06 20:49:53 -05:00
miloschwartz
d7e06161a8
use niceId for client routes
2025-12-06 20:31:20 -05:00
Owen
58177f4a02
Add niceid
2025-12-06 17:24:00 -05:00
Owen
dab795e94a
Merge branch 'main' into dev
2025-12-06 11:45:46 -05:00
Owen
313d3c72da
Fix query logging
2025-12-05 18:30:43 -05:00
Owen
c8ec94c307
Fix session test for olm and show proper alert for ee
2025-12-05 18:30:43 -05:00
miloschwartz
a3b852ef45
Merge branch 'dev' into clients-user
2025-12-05 15:17:32 -05:00
Owen
b1b0702886
Make query optional
2025-12-04 22:07:48 -05:00
miloschwartz
761ed1de9a
ensure unique niceId for site resources and normal resources
2025-12-04 21:07:14 -05:00
Owen
9b372780bd
Merge branch 'dev' of github.com:fosrl/pangolin into dev
2025-12-04 11:59:53 -05:00
miloschwartz
a746ef36a8
Merge branch 'dev' into clients-user
2025-12-04 11:38:05 -05:00
Varun Narravula
bd3d339905
feat(schema): add TLS server name column to target healthcheck tables
2025-12-04 10:18:20 -05:00
Owen
8eec122114
Fixing holepunching and other bugs
2025-12-03 20:31:37 -05:00
Fred KISSIE
3870ced635
Merge branch 'clients-user' into refactor/separate-tables
2025-12-03 17:01:50 +01:00
Fred KISSIE
3d400b2321
♻️ ignore hydrateSaas script and exit(0) on PG migrations
2025-12-02 16:06:10 +01:00
Owen
a623604e96
Improve holepunching
2025-12-01 13:54:30 -05:00
Marc Schäfer
fbbab60956
Potential fix for code scanning alert no. 7: Insecure randomness
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-11-29 23:39:41 +01:00
miloschwartz
5bd31f87f0
only allow one device auth per session
2025-11-26 15:48:49 -05:00
Owen
73b0411e1c
Add alias config
2025-11-24 20:43:26 -05:00
Fred KISSIE
5fd64596eb
✨ add top countries list
2025-11-21 02:00:47 +01:00
Owen
3750c36aa7
Working on orchestration
2025-11-20 10:31:09 -05:00
Owen
937b36e756
Build client site resource associations and send messages
2025-11-19 18:05:42 -05:00
Owen
7dcf4d5192
Remove remote subnet
2025-11-17 10:22:22 -05:00
Owen
f98b4baa73
Add remote subnets back based on resources
2025-11-08 12:17:33 -08:00
miloschwartz
e51fca1f61
add clients to resource
2025-11-07 16:33:17 -08:00
miloschwartz
85892c30b2
add site resource modes and alias
2025-11-05 15:24:07 -08:00
miloschwartz
e51b6b545e
add users and roles to site resources
2025-11-05 12:24:50 -08:00
miloschwartz
f628a76223
add them back
2025-11-04 16:56:56 -08:00
miloschwartz
8088e30e06
remove userClients and roleClients
2025-11-04 16:53:00 -08:00
miloschwartz
801cdec7f3
add deviceWebAuthCodes table to pg schema
2025-11-04 16:51:31 -08:00
miloschwartz
847479b639
Merge branch 'cli-web-auth' into clients-user
2025-11-03 17:14:12 -08:00
Owen
2c488baa80
Add name and lock client to specific olm
2025-11-03 16:16:19 -08:00
Owen
d30743a428
Update schmea; create client when registering
2025-11-03 15:42:22 -08:00
miloschwartz
e888b76747
complete web device auth flow
2025-11-03 11:10:17 -08:00
miloschwartz
cc62cd4add
remove sqlite driver logger
2025-10-30 21:23:05 -07:00
Owen
32f20ed984
Bugfixes for remote nodes
2025-10-30 21:01:45 -07:00
Fred KISSIE
39b3b4ef9d
🐛 add missing orgId to blueprints table
2025-10-29 14:39:42 +01:00
Fred KISSIE
c7df70143e
♻️ log only in DEV
2025-10-29 03:50:36 +01:00
Fred KISSIE
02330a0756
Merge branch 'dev' into feat-blueprint-ui-on-dashboard
2025-10-29 03:31:51 +01:00
Owen
bd5cc790d6
Fixing various things
2025-10-27 17:52:39 -07:00
Owen
b59a6b82ef
Merge branch 'dev' into user-compliance
2025-10-27 10:37:53 -07:00
Owen Schwartz
77ba568c36
Merge pull request #1755 from fosrl/audit-logs
...
Request, action, and access logs
2025-10-27 10:10:57 -07:00
Owen
c04d9eda6b
Merge branch 'dev' into audit-logs
2025-10-27 10:02:32 -07:00
miloschwartz
43e6b7de07
remove delete on cascade for skipToIdp on resource closes #1654
2025-10-27 09:46:26 -07:00
Owen
560974f7d2
Merge branch 'feat/add-proxy-protocol-support' into dev
2025-10-26 18:16:38 -07:00
miloschwartz
44316731c0
enforce resource session length
2025-10-26 16:52:15 -07:00
Owen
c85e367ded
Merge branch 'feat/cert-resolver-through-UI' of github.com:Pallavikumarimdb/pangolin into Pallavikumarimdb-feat/cert-resolver-through-UI
2025-10-25 16:25:42 -07:00
Fred KISSIE
4dd741cc3f
🔊 log all SQL queries
2025-10-25 02:55:19 +02:00