31 Commits

Include renames

Author	SHA1	Message	Date
h44zandGitHub	72cfd1d8a9	feat: add support for PKCE (#686) (#702)	2026-05-28 20:49:13 +02:00
Aram AkhavanandGitHub	1517041363	fix: fetch user info from OIDC userinfo endpoint (#698) ... The OIDC client was only extracting claims from the ID token, but many OIDC providers (like Authelia) don't include all user information in the ID token. Fields like 'preferred_username' are typically only available via the userinfo endpoint. This fix fetches additional user information from the provider's userinfo endpoint and merges it with the ID token claims, ensuring that all required user fields are available for user registration and login. Fixes #697 Signed-off-by: Aram Akhavan <1147328+kaysond@users.noreply.github.com>	2026-05-28 20:48:37 +02:00
3 people	958dcb8fa9	feat: sanitize external identity provider user data (#681) ... * feat: sanitize external user data * remove config option to disable Sanitization: sanitize_external_user_data * cleanup --------- Co-authored-by: Christoph Haas <christoph.h@sprinternet.at>	2026-05-18 22:28:27 +02:00
3 people	71806455dd	OIDC - support IdP logout (#670) ... * OIDC - support IdP logout Signed-off-by: Michael Tupitsyn <michael.tupitsyn@gmail.com> * Add support of logout_idp_session parameter Signed-off-by: Michael Tupitsyn <michael.tupitsyn@gmail.com> * Fix merge conflict issue Signed-off-by: Michael Tupitsyn <michael.tupitsyn@gmail.com> * Restore original package-lock.json Signed-off-by: Michael Tupitsyn <michael.tupitsyn@gmail.com> * Cleanup --------- Signed-off-by: Michael Tupitsyn <michael.tupitsyn@gmail.com> Co-authored-by: Christoph Haas <christoph.h@sprinternet.at>	2026-04-12 13:18:04 +02:00
Michael TupitsynandGitHub	9b437205b1	Add support for auth.oidc.allowed_user_groups (#667) (#668) ... Signed-off-by: Michael Tupitsyn <michael.tupitsyn@gmail.com>	2026-04-11 18:24:18 +02:00
Gwilherm FolliotandGitHub	9770471a62	fix: ldap user creation when login in (#631) ... Signed-off-by: Gwilherm Folliot <fl0w@3l0w.fr>	2026-03-01 22:18:13 +01:00
h44zandGitHub	e0f6c1d04b	feat: allow multiple auth sources per user (#500,#477) (#612) ... * feat: allow multiple auth sources per user (#500,#477) * only override isAdmin flag if it is provided by the authentication source	2026-01-21 22:22:22 +01:00
h44zandGitHub	0a88fe745f	allow setting a base-path for the web UI and API (#583) (#595)	2025-12-20 15:30:55 +01:00
Christoph Haas	907bb0599a	fix race condition during ldap initialization (#571)	2025-11-20 18:28:20 +01:00
Christoph Haas	f53d0b3d7f	add the possibility to debug oauth or oidc login issues (#541)	2025-10-12 15:09:40 +02:00
Christoph Haas	cc2d1f53c4	improve logging of LDAP login process even more (#529)	2025-09-24 18:39:45 +02:00
Christoph Haas	ea26e56994	fix delayed setup of external auth providers (#529)	2025-09-21 21:16:12 +02:00
Christoph Haas	afb38b685c	improve logging of LDAP login process (#529)	2025-09-17 22:33:54 +02:00
h44zandGitHub	0cbca61c15	ensure that LDAP filter values are escaped (#512)	2025-09-03 19:37:34 +02:00
Christoph Haas	1794b8653a	add retry handling for auth provider setup (#484)	2025-07-19 23:29:05 +02:00
h44zandGitHub	f286840964	fix oauth domain check (#474) (#476)	2025-06-29 20:00:15 +02:00
Christoph Haas	1394be2341	add webauthn (passkey) support	2025-05-12 22:53:43 +02:00
Vladimir DombrovskiandGitHub	3eb84f0ee9	Enable allowed_domains in oauth and oidc providers (#416) ... * Enable allowed_domains in oauth and oidc providers Signed-off-by: Vladimir DOMBROVSKI <vladimir.dombrovski@bso.co> * Domain check code cleanup * Run gofmt on domain validation code --------- Signed-off-by: Vladimir DOMBROVSKI <vladimir.dombrovski@bso.co>	2025-05-05 18:26:19 +02:00
Christoph Haas	6cbccf6d43	feat: add simple audit ui	2025-03-29 16:42:31 +01:00
Christoph Haas	7d0da4e7ad	chore: use interfaces for all other services	2025-03-23 23:09:47 +01:00
Christoph Haas	7473132932	chore: replace logrus with standard lib log/slog	2025-03-02 08:51:13 +01:00
Christoph Haas	e24acfa57d	chore: cleanup code formatting	2025-02-28 08:37:55 +01:00
Christoph Haas	f7d7038829	chore: update to Go 1.24, improve oauth admin mapping tests	2025-02-27 22:32:11 +01:00
Christoph Haas	a04eaa4bfb	fix user group parsing for OAuth login (#317)	2025-01-21 17:33:01 +01:00
Christoph Haas	c73ce0288e	fix disabling of missing ldap users (#344) and allow deletion of all user types	2025-01-18 17:39:18 +01:00
Christoph Haas	662e9c0549	Improve admin privilege handling for OAuth. Update documentation.	2025-01-18 11:55:56 +01:00
Christoph Haas	26d3257516	update userdata after OAuth login (#317, #160)	2025-01-11 18:55:23 +01:00
Christoph Haas	6d86f15ff8	implement/fix peer and user disable event (#337, #273)	2025-01-05 10:06:34 +01:00
Christoph Haas	62dbdfe0f9	fix plain oauth login (#317)	2025-01-04 14:25:13 +01:00
Christoph Haas	1b4b5ff161	fix REST API permission checks (#209)	2024-01-31 21:14:36 +01:00
3 people	8b820a5adf	V2 alpha - initial version (#172) ... Initial alpha codebase for version 2 of WireGuard Portal. This version is considered unstable and incomplete (for example, no public REST API)! Use with care! Fixes/Implements the following issues: - OAuth support #154, #1 - New Web UI with internationalisation support #98, #107, #89, #62 - Postgres Support #49 - Improved Email handling #47, #119 - DNS Search Domain support #46 - Bugfixes #94, #48 --------- Co-authored-by: Fabian Wechselberger <wechselbergerf@hotmail.com>	2023-08-04 13:34:18 +02:00