Alexey Sviridov and GitHub
7441443134
feat(client): verify server certificates against the system root store ( #5546 )
...
transport.tls.trustedCaFile is installed as RootCAs, and omitting it sets
InsecureSkipVerify, so system-root verification cannot be selected directly.
Add an opt-in transport.tls.useSystemRoots that enables certificate
verification with RootCAs nil when no trusted CA file is set, allowing Go to
use system roots and native verification on macOS and Windows. Defaults are
unchanged.
2026-10-18 14:08:05 +08:00
fatedier and GitHub
da04e1e07a
log: improve prefix handling ( #5489 )
2026-08-12 23:56:00 +08:00
fatedier and GitHub
a6a782bed4
config: reject case-insensitive subdomain domains ( #5474 )
2026-08-09 22:52:30 +08:00
fatedier and GitHub
1a3a872bd2
fix(frpc): respect feature gates in verify ( #5465 )
2026-08-04 12:53:10 +08:00
fatedier and GitHub
1ab59e763c
server: validate control pool counts ( #5459 )
2026-07-30 23:30:16 +08:00
fatedier and GitHub
a88e0e9a49
refactor: clean up code ( #5308 )
2026-05-12 11:13:50 +08:00
fatedier and GitHub
e9464919d1
protocol: add v2 wire protocol with binary framing and capability negotiation ( #5294 )
2026-04-27 00:17:00 +08:00
fatedier and GitHub
ff4ad2f907
auth/oidc: fix eager token fetch at startup, add validation and e2e tests ( #5234 )
2026-03-15 22:29:45 +08:00
fatedier and GitHub
d0347325fc
pkg/config: fix custom domain validation to prevent false matches with subdomain host ( #5178 )
2026-02-13 14:10:18 +08:00
fatedier and GitHub
7526d7a69a
refactor: separate auth config from runtime and defer token resolution ( #5105 )
2025-12-25 00:53:08 +08:00
fatedier and GitHub
0fe8f7a0b6
refactor: reorganize security policy into dedicated packag ( #5088 )
2025-12-05 16:26:09 +08:00
fatedier and GitHub
15fd19a16d
fix lint ( #5068 )
2025-11-18 01:11:44 +08:00
Krzysztof Bogacki and GitHub
66973a03db
Add exec value source type ( #5050 )
...
* config: introduce ExecSource value source
* auth: introduce OidcTokenSourceAuthProvider
* auth: use OidcTokenSourceAuthProvider if tokenSource config is present on the client
* cmd: allow exec token source only if CLI flag was passed
2025-11-18 00:20:21 +08:00
fatedier and GitHub
f9065a6a78
add tokenSource support for auth configuration ( #4865 )
2025-07-03 13:17:21 +08:00
fatedier and GitHub
a78814a2e9
virtual-net: initial ( #4751 )
2025-04-16 16:05:54 +08:00
fatedier and GitHub
69cc422edf
client plugin: added plugin tls2raw ( #4341 )
2024-07-25 14:28:17 +08:00
fatedier and GitHub
3e0c78233a
use std slices package ( #4008 )
2024-02-20 12:01:41 +08:00
fatedier and GitHub
3529158f31
proxy supports configuring annotations, which will be displayed in the frps dashboard ( #4000 )
2024-02-19 16:28:27 +08:00
fatedier and GitHub
69ae2b0b69
optimize some code ( #3801 )
2023-11-27 15:47:49 +08:00
fatedier and GitHub
5e70d5bee0
code optimization ( #3625 )
2023-09-20 15:18:50 +08:00
fatedier and GitHub
bae0b4d7c0
optimize the code of the command line ( #3614 )
2023-09-15 10:33:32 +08:00
fatedier and GitHub
74255f711e
config: add some validations ( #3610 )
2023-09-13 18:59:51 +08:00
fatedier and GitHub
7cd02f5bd8
add e2e tests for v1 config ( #3608 )
2023-09-13 16:32:39 +08:00
fatedier and GitHub
c95311d1a0
support yaml/json/toml configuration format, make ini deprecated ( #3599 )
2023-09-06 10:18:02 +08:00
Alexey SviridovandGitHub
fatedierandGitHub
Krzysztof BogackiandGitHub