Alexey Sviridov and GitHub
7441443134
feat(client): verify server certificates against the system root store ( #5546 )
...
transport.tls.trustedCaFile is installed as RootCAs, and omitting it sets
InsecureSkipVerify, so system-root verification cannot be selected directly.
Add an opt-in transport.tls.useSystemRoots that enables certificate
verification with RootCAs nil when no trusted CA file is set, allowing Go to
use system roots and native verification on macOS and Windows. Defaults are
unchanged.
2026-10-18 14:08:05 +08:00
fatedier and GitHub
4cd4747525
fix: use Go 1.26 new expressions for pointer initialization ( #5559 )
2026-10-08 22:28:31 +08:00
fatedier and GitHub
e9464919d1
protocol: add v2 wire protocol with binary framing and capability negotiation ( #5294 )
2026-04-27 00:17:00 +08:00
fatedier and GitHub
01997deb98
add persistent proxy/visitor store with CRUD API and web UI ( #5188 )
2026-03-02 01:09:59 +08:00
fatedier and GitHub
36718d88e4
server: add client registry with dashboard support ( #5115 )
2026-01-08 20:07:14 +08:00
fatedier and GitHub
7526d7a69a
refactor: separate auth config from runtime and defer token resolution ( #5105 )
2025-12-25 00:53:08 +08:00
fatedier and GitHub
0fe8f7a0b6
refactor: reorganize security policy into dedicated packag ( #5088 )
2025-12-05 16:26:09 +08:00
fatedier and GitHub
15fd19a16d
fix lint ( #5068 )
2025-11-18 01:11:44 +08:00
Krzysztof Bogacki and GitHub
66973a03db
Add exec value source type ( #5050 )
...
* config: introduce ExecSource value source
* auth: introduce OidcTokenSourceAuthProvider
* auth: use OidcTokenSourceAuthProvider if tokenSource config is present on the client
* cmd: allow exec token source only if CLI flag was passed
2025-11-18 00:20:21 +08:00
fatedier and GitHub
abf4942e8a
auth: enhance OIDC client with TLS and proxy configuration options ( #4990 )
2025-09-25 10:19:19 +08:00
fatedier and GitHub
f9065a6a78
add tokenSource support for auth configuration ( #4865 )
2025-07-03 13:17:21 +08:00
fatedier and GitHub
a78814a2e9
virtual-net: initial ( #4751 )
2025-04-16 16:05:54 +08:00
fatedier and GitHub
301515d2e8
update the default value of transport.tcpMuxKeepaliveInterval ( #4231 )
2024-05-21 12:00:35 +08:00
fatedier and GitHub
ee3892798d
change default value of heartbeat interval and timeout when tcpmux enabled ( #4186 )
2024-04-28 20:48:44 +08:00
Aarni Koskela and GitHub
f5d5a00eef
Fix various typos ( #3783 )
2023-11-22 14:30:22 +08:00
fatedier and GitHub
b9c24e9b69
natHoleSTUNServer set default value ( #3664 )
2023-10-11 15:46:22 +08:00
fatedier and GitHub
5e70d5bee0
code optimization ( #3625 )
2023-09-20 15:18:50 +08:00
fatedier and GitHub
7cd02f5bd8
add e2e tests for v1 config ( #3608 )
2023-09-13 16:32:39 +08:00
fatedier and GitHub
c95311d1a0
support yaml/json/toml configuration format, make ini deprecated ( #3599 )
2023-09-06 10:18:02 +08:00