lee/pangolin
1
0 Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-10-13 07:19:38 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
8,630 Commits 9 Branches 94 Tags
dev
Commit Graph
3363 Commits
Author SHA1 Message Date
Owen 6bf4595969 Remove error language from warning 2026-10-12 17:13:48 -04:00
Owen c6b1e5311e Push client identities to newt 2026-10-12 17:03:27 -04:00
Owen b43709903d Add support for configuring load balancing strategy 2026-10-12 16:47:12 -04:00
Owen cccc2d1200 Merge branch 'mtls' into dev 2026-10-12 16:25:25 -04:00
Owen 839b82041b Merge branch 'blueprints' into dev 2026-10-12 16:25:18 -04:00
Owen 148bcd9d1b Merge branch 'machine-roles' into dev 2026-10-12 16:25:13 -04:00
Owen e461b231d5 Add labels to the integration api 2026-10-12 16:21:12 -04:00
Owen 9afcd68d68 Reduce image size by pruning stuff and things 
Ref https://github.com/orgs/fosrl/discussions/2069
 2026-10-12 15:41:50 -04:00
Owen 3d590493d6 Fix relayPort missing from list 2026-10-12 15:33:52 -04:00
Owen f82b209e69 Adjust path processing 2026-10-12 15:10:48 -04:00
Owen 5e93678122 Merge branch 'main' into dev 2026-10-12 15:06:51 -04:00
Owen Schwartz 6bab69dccb Merge pull request #3601 from shleeable/patch-15 
Fix: Update handleOlmServerInitAddPeerHandshake.ts with missing sendCancel
 2026-10-12 14:54:08 -04:00
Owen Schwartz 1bda4c5f2e Merge pull request #3892 from Tyagiquamar/fix/3862-pathmatch-redos 
fix(server): avoid exponential backtracking in isPathAllowed
 2026-10-12 14:48:17 -04:00
Owen 700f4423f9 Merge branch 'main' into dev 2026-10-12 14:28:44 -04:00
Tyagiquamar b4812066c9 fix(blueprints): allow underscores in health check hostnames 2026-10-12 18:18:14 +05:30
Tyagiquamar ee00ed5a65 fix(server): avoid exponential backtracking in isPathAllowed (#3862) 2026-10-12 18:18:07 +05:30
TiltedTeapot 91aefa67dc removed literal listenport error references 2026-10-06 18:22:13 -06:00
TiltedTeapot 3712921048 Propogated Changes. listen port is now accessed from db instead of config 2026-10-06 18:21:05 -06:00
TiltedTeapot 29fc221f59 remove TODO comment for fix made in 98a261e 2026-10-06 18:11:24 -06:00
TiltedTeapot f15f4aee17 added to db again 2026-10-06 18:11:23 -06:00
TiltedTeapot cff796fabe Added relayPort to exitNodes in db 2026-10-06 18:11:23 -06:00
ercoppa 487910487d FIX: generateGerbilConfig hardcoded the WireGuard listen port to 51820 and never sent a relay port 2026-10-06 18:11:23 -06:00
Owen Schwartz ef0ea6364d Merge pull request #3830 from mr-pmillz/fix/integration-api-delete-org 
Fix Integration API organization delete (regression of #1376)
 2026-10-04 11:00:45 -04:00
Owen 1628ab48da Add ui for assigning roles to machines 2026-10-02 12:04:08 -04:00
Owen bc2920af23 Support machine clients added to roles 2026-10-01 15:58:25 -04:00
Owen 938710147a Delete token 2026-10-01 09:30:08 -04:00
Owen Schwartz 27e0f00d65 Merge pull request #3838 from kdcokenny/fix/traefik-ipv6-targets 
fix: use formatEndpoint for local targets
 2026-10-01 09:06:18 -04:00
kdcokenny 8c3d0bd7f6 fix: use formatEndpoint for local targets 2026-09-30 20:27:27 +00:00
Owen 8ff05c0ec3 Start pulling cert at 15 days (due to cert update) 2026-09-30 14:01:17 -04:00
miloschwartz a46fc531d4 show exit nodes in resource launcher 2026-09-29 17:05:07 -04:00
Owen c0c0cfb18a Support exit-node as an alias for gateway type private resources 2026-09-29 13:59:46 -04:00
mr-pmillzandClaude Opus 5.5 4cb620f46b Fix Integration API organization delete (regression of #1376) 
DELETE /v1/org/{orgId} on the Integration API always returned
500 "An error occurred..." and left the organization in place, even for a
root API key holding the deleteOrg action. The handler looked up the
caller's ownership with req.user!.userId, but Integration API requests are
authenticated by verifyApiKey, which sets req.apiKey and never req.user,
so the lookup threw "Cannot read properties of undefined (reading
'userId')".

#1376 was fixed in f37eda47 by dropping the user-only permission check;
79cf7c84 later added the owner check to the handler shared by both
routers, reintroducing the failure for API keys.

Keep the owner check for dashboard sessions. For Integration API keys the
route is already restricted by verifyApiKeyIsRoot and
verifyApiKeyHasAction(deleteOrg), so load the organization directly. Both
paths still refuse a billing organization and return the same 404 for an
unknown organization.

Verified against a local SQLite instance with a root key: before the
change, create returned 201 and delete returned 500 with the organization
still present; after it, delete returns 200 and a repeated delete or GET
returns 404. npx tsc --noEmit passes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-09-29 11:09:18 -04:00
Owen c92b2f22ba Update version 2026-09-29 11:02:37 -04:00
Owen e3ce453155 Send disconnect messages if the session is bad 2026-09-29 10:24:59 -04:00
Owen 97e0c19276 Add migrations 2026-09-28 20:39:38 -04:00
Owen 393af877c9 Merge branch 'dev' of github.com:fosrl/pangolin into dev 2026-09-28 20:34:31 -04:00
Owen d859576835 Merge branch 'site-exit-node' into dev 2026-09-28 20:34:21 -04:00
miloschwartz fa37599819 update mac models 2026-09-28 09:24:49 -04:00
Owen 90848581a1 Push gateway updates to clients 2026-09-25 11:51:38 -04:00
Owen Schwartz 4a20a66791 Merge pull request #3811 from Fra146/feature-badger-headers-config 
Add config options and badger options injection
 2026-09-25 09:40:05 -04:00
Owen 37ed8997f2 Add fist pass of mtls support 2026-09-24 16:56:57 -04:00
Owen 6ddb1550e9 Export blueprint functionality 2026-09-24 16:31:54 -04:00
Owen e92911e7c8 Use formatEndpoint where appropriate 
Fixes fosrl/newt#454
 2026-09-24 14:34:54 -04:00
Owen ed28d34945 Support batched relay,unrelay,local,unlocal messages 2026-09-24 11:56:10 -04:00
Owen e68963b852 Add comments about not processing gateway 2026-09-24 09:49:09 -04:00
Owen 021626d382 Send gateway resources downstream like cidr resources to newt 2026-09-24 09:49:09 -04:00
Owen 118120c9ce Create gateway resources in blueprints 2026-09-24 09:49:09 -04:00
Owen 3378125f8e Can create gateway resource 2026-09-24 09:49:09 -04:00
Owen a17b870ed2 Adding gateway resources 2026-09-24 09:49:08 -04:00
Owen Schwartz 9aa2adadf6 Merge pull request #3797 from MauryaQbit/fix/ai-gateway-302-api-clients 
fix(ai-gateway): return JSON auth error instead of 302 for API clients on inference resources
 2026-09-24 09:36:52 -04:00