Vlad
afcdef6121
[management] add ssh authorized users to network map cache ( #5048 )
2026-01-07 15:53:18 +01:00
Misha Bragin
e586c20e36
[management, infrastructure, idp] Simplified IdP Management - Embedded IdP ( #5008 )
...
Embed Dex as a built-in IdP to simplify self-hosting setup.
Adds an embedded OIDC Identity Provider (Dex) with local user management and optional external IdP connectors (Google/GitHub/OIDC/SAML), plus device-auth flow for CLI login. Introduces instance onboarding/setup endpoints (including owner creation), field-level encryption for sensitive user data, a streamlined self-hosting provisioning script, and expanded APIs + test coverage for IdP management.
more at https://github.com/netbirdio/netbird/pull/5008#issuecomment-3718987393
2026-01-07 14:52:32 +01:00
Pascal Fischer
5393ad948f
[management] fix nil handling for extra settings ( #5049 )
2026-01-07 13:05:39 +01:00
Bethuel Mmbaga
20d6beff1b
[management] Increment network serial on peer update ( #5051 )
...
Increment the serial on peer update and prevent double serial increments and account updates when updating a user while there are peers set to expire
2026-01-07 14:59:49 +03:00
Bethuel Mmbaga
d35b7d675c
[management] Refactor integrated peer deletion ( #5042 )
2026-01-07 14:00:39 +03:00
Vlad
7142d45ef3
[management] network map builder concurrent batch processing for peer updates ( #5040 )
2026-01-06 19:25:55 +01:00
Bethuel Mmbaga
7bb4fc3450
[management] Refactor integrated peer validator ( #5035 )
2026-01-05 20:55:22 +03:00
Pascal Fischer
7ac65bf1ad
[management] Fix/delete groups without lock ( #5012 )
2025-12-31 11:53:20 +01:00
Misha Bragin
9ed1437442
Add DEX IdP Support ( #4949 )
2025-12-30 07:42:34 -05:00
Pascal Fischer
a8604ef51c
[management] filter own peer when having a group to peer policy to themself ( #4956 )
2025-12-30 10:49:43 +01:00
Pascal Fischer
1d2c7776fd
[management] apply login filter only for setup key peers ( #4943 )
2025-12-30 10:46:00 +01:00
Pascal Fischer
b6a327e0c9
[management] fix scanning authorized user on policy rule ( #5002 )
2025-12-29 15:03:16 +01:00
Zoltan Papp
67f7b2404e
[client, management] Feature/ssh fine grained access ( #4969 )
...
Add fine-grained SSH access control with authorized users/groups
2025-12-29 12:50:41 +01:00
Zoltan Papp
011cc81678
[client, management] auto-update ( #4732 )
2025-12-19 19:57:39 +01:00
Pascal Fischer
c29bb1a289
[management] use xid as request id for logging ( #4955 )
2025-12-16 14:02:37 +01:00
Bethuel Mmbaga
932c02eaab
[management] Approve all pending peers when peer approval is disabled ( #4806 )
2025-12-12 18:49:57 +03:00
Pascal Fischer
abcbde26f9
[management] remove context from store methods ( #4940 )
2025-12-11 21:45:47 +01:00
Pascal Fischer
90e3b8009f
[management] Fix sync metrics ( #4939 )
2025-12-11 20:11:12 +01:00
Pascal Fischer
94d34dc0c5
[management] monitoring updates ( #4937 )
2025-12-11 18:29:15 +01:00
Pascal Fischer
44851e06fb
[management] cleanup logs ( #4933 )
2025-12-10 19:26:51 +01:00
Bethuel Mmbaga
27dd97c9c4
[management] Add support to disable geolocation service ( #4901 )
2025-12-03 14:45:59 +03:00
Pascal Fischer
a232cf614c
[management] record pat usage metrics ( #4888 )
2025-12-02 18:31:59 +01:00
Pascal Fischer
7193bd2da7
[management] Refactor network map controller ( #4789 )
2025-12-02 12:34:28 +01:00
Bethuel Mmbaga
52948ccd61
[management] Add user created activity event ( #4893 )
2025-12-02 14:17:59 +03:00
Fahri Shihab
4b77359042
[management] Groups API with name query parameter ( #4831 )
2025-12-01 16:57:42 +01:00
Bethuel Mmbaga
f31bba87b4
[management] Preserve validator settings on account settings update ( #4862 )
2025-11-26 17:07:44 +03:00
Aziz Hasanain
ba2e9b6d88
[management] Fix SSH JWT issuer derivation for IDPs with path components ( #4844 )
2025-11-24 12:12:51 +01:00
Maycon Santos
290fe2d8b9
[client/management/signal/relay] Update go.mod to use Go 1.24.10 and upgrade x/crypto dependencies ( #4828 )
...
Upgrade Go toolchain and golang.org/x/* deps to 1.24.10, standardize GitHub Actions to derive Go version from go.mod and adjust checkout ordering, raise WASM size limit to 55 MB, update FreeBSD tarball and gomobile refs, fix a few format-string/logging calls, treat usernames ending with $ as system accounts, and add Windows tests.
2025-11-22 10:10:18 +01:00
Vlad
7fb1a2fe31
[management] removed TestBufferUpdateAccountPeers because it was incorrect ( #4839 )
2025-11-22 01:23:33 +01:00
Maycon Santos
68f56b797d
[management] Add native ssh port rule on 22 ( #4810 )
...
Implements feature-aware firewall rule expansion: derives peer-supported features (native SSH, portRanges) from peer version, prefers explicit Ports over PortRanges when expanding, conditionally appends a native SSH (22022) rule when policy and peer support allow, and adds helpers plus tests for SSH expansion behavior.
2025-11-19 13:16:47 +01:00
Pascal Fischer
3351b38434
[management] pass config to controller ( #4807 )
2025-11-19 11:52:18 +01:00
Pascal Fischer
05cbead39b
[management] Fix direct peer networks route ( #4802 )
2025-11-18 17:15:57 +01:00
Vlad
4eeb2d8deb
[management] added exception on not appending route firewall rules if we have all wildcard ( #4801 )
2025-11-17 18:20:30 +01:00
Viktor Liu
d71a82769c
[client,management] Rewrite the SSH feature ( #4015 )
2025-11-17 17:10:41 +01:00
Pascal Fischer
6fb568728f
[management] Removed policy posture checks on original peer ( #4779 )
...
Co-authored-by: crn4 <vladimir@netbird.io >
2025-11-13 12:51:03 +01:00
Pascal Fischer
cc97cffff1
[management] move network map logic into new design ( #4774 )
2025-11-13 12:09:46 +01:00
Vlad
56f169eede
[management] fix pg db deadlock after app panic ( #4772 )
2025-11-10 23:43:08 +01:00
Pascal Fischer
7df49e249d
[management ] remove timing logs ( #4761 )
2025-11-07 20:14:52 +01:00
Pascal Fischer
dbfc8a52c9
[management] remove GLOBAL when disabling foreign keys on mysql ( #4615 )
2025-11-07 16:03:14 +01:00
Vlad
98ddac07bf
[management] remove toAll firewall rule ( #4725 )
2025-11-07 15:50:58 +01:00
Pascal Fischer
48475ddc05
[management] add pat rate limiting ( #4741 )
2025-11-07 15:50:18 +01:00
Vlad
6aa4ba7af4
[management] incremental network map builder ( #4753 )
2025-11-07 10:44:46 +01:00
Pascal Fischer
5c29d395b2
[management] activity events on group updates ( #4750 )
2025-11-06 12:51:14 +01:00
Pascal Fischer
719283c792
[management] update db connection lifecycle configuration ( #4740 )
2025-11-03 17:40:12 +01:00
Viktor Liu
404cab90ba
[client] Redirect dns forwarder port 5353 to new listening port 22054 ( #4707 )
...
- Port dnat changes from https://github.com/netbirdio/netbird/pull/4015 (nftables/iptables/userspace)
- For userspace: rewrite the original port to the target port
- Remember original destination port in conntrack
- Rewrite the source port back to the original port for replies
- Redirect incoming port 5353 to 22054 (tcp/udp)
- Revert port changes based on the network map received from management
- Adjust tracer to show NAT stages
2025-10-28 15:12:53 +01:00
Pascal Fischer
4545ab9a52
[management] rewire account manager to permissions manager ( #4673 )
2025-10-27 22:59:35 +01:00
Bethuel Mmbaga
7f08983207
Include expired and routing peers in DNS record filtering ( #4708 )
2025-10-27 22:16:17 +03:00
Bethuel Mmbaga
d80d47a469
[management] Add peer disapproval reason ( #4468 )
2025-10-22 12:46:22 +03:00
John Conley
bb37dc89ce
[management] feat: Basic PocketID IDP integration ( #4529 )
2025-10-16 10:46:29 +02:00
Pascal Fischer
5151f19d29
[management] pass temporary flag to validator ( #4599 )
2025-10-10 16:15:51 +02:00
