mrhid6
e5363a64ee
fix(server): per-org settings and ESO read token
...
The settings collection was a single global document, so every org
shared one SMTP config, alert config, retention policy and ESO read
token. GetSecretGroupDecryptedAny then flattened every org's secrets
for a group into one map, meaning any tenant's token read every
tenant's secrets.
- settings gains org_id; GetSettings/SaveSettings/RotateSecretsReadToken/
GetWorkflowLogRetentionDays all take orgID
- VerifySecretsReadToken replaced by ResolveSecretsReadToken, which
resolves the org from the presented token's hash; the ESO endpoint
derives its org from the token rather than a session, since it is
called machine-to-machine
- GetSecretGroupDecryptedAny deleted in favour of the org-scoped variant
- settings and token-rotation routes now require owner/admin
- offline sweep and log retention resolve org per server / per run
- migration 0002 stamps the legacy settings doc with the default org
Note: /api/settings now 403s for members; the web settings page needs a
matching role check.
2026-07-22 09:35:47 +01:00
mrhid6
a8771a6e4d
style(models): gofmt org_id field alignment
2026-07-21 16:24:16 +01:00
mrhid6
502045d3af
feat(models): add org/user/org_oidc models and org_id on scoped collections
2026-07-21 16:23:14 +01:00
mrhid6
0464c540b2
feat: edit monitors + notification channels; HTTP monitor insecure-TLS option
Server Deploy / deploy (push) Successful in 2m9s
Agent Release / build (push) Successful in 10m39s
Agent Release / msi (push) Successful in 35s
2026-07-21 14:55:41 +01:00
mrhid6
8f3a27100f
feat(server): multi-channel monitor notifications
Server Deploy / deploy (push) Successful in 1m16s
2026-07-21 14:22:55 +01:00
mrhid6
e019493087
feat(server): monitor model + checker package
Server Deploy / deploy (push) Successful in 53s
2026-07-21 14:10:46 +01:00
mrhid6
03e2c3c50d
feat(proto): add ReportInventory RPC and inventory model
Server Deploy / deploy (push) Successful in 2m38s
2026-07-21 14:04:28 +01:00
mrhid6
434f14ae3a
feat(server): inline step ref + workflow validation
2026-07-21 10:15:52 +01:00
mrhid6
d905c99d32
feat(server): stream step logs to files, drop log bodies from run docs
2026-07-20 15:18:35 +01:00
mrhid6
85e1baf59a
feat(server): workflow log-writer registry, retention setting, sweeper
2026-07-20 15:18:35 +01:00
mrhid6
05cd8e154b
feat(workflows): step input params model + cascade step delete
2026-07-20 14:34:50 +01:00
mrhid6
47690c58d9
fix: Fixed workflow id
Server Deploy / deploy (push) Successful in 1m14s
2026-07-20 12:49:43 +01:00
mrhid6
4872a26786
feat(models): add workflow, step, and run models
2026-07-20 11:31:37 +01:00
mrhid6
a9d602d021
feat: harden console sessions + complete protocol support
...
Server Deploy / deploy (push) Failing after 1m9s
Agent Release / build (push) Successful in 1m52s
Agent Release / msi (push) Failing after 52s
- single-use session tokens (atomic ConsumeSessionToken) + user-bound tunnel (actor must match session opener)
- wire VNC end-to-end (stash/consume password, connect+tunnel, frontend password field)
- passphrase-protected SSH keys: passphrase_enc on Key model, capture on upload, decrypt + pass to guacd
2026-07-17 12:19:07 +01:00
mrhid6
1ad5b5d6db
fix: send ssh username to guacd (default root) for console SSH
2026-07-17 11:54:33 +01:00
mrhid6
332c7760ca
fix: keep RDP creds out of tunnel URL/logs via single-use encrypted stash
2026-07-17 11:28:00 +01:00
mrhid6
257e4fa89d
feat: add ConsoleSession model
2026-07-17 11:14:46 +01:00
mrhid6
d69ab709b2
feat: add console fields to Server model
2026-07-17 11:09:13 +01:00
domrichardson
19596ff2a3
feat: Secret management
Server Deploy / deploy (push) Successful in 1m33s
2026-07-03 10:37:43 +01:00
domrichardson
c3c16083f7
feat: Audit and settings
Server Deploy / deploy (push) Successful in 1m26s
2026-06-25 11:30:26 +01:00
domrichardson
5c91db0d4c
feat: Added package management
Server Deploy / deploy (push) Successful in 3m44s
Agent Release / build (push) Successful in 10m21s
2026-06-24 16:31:51 +01:00
domrichardson
aff6736b18
feat: update agent button on server page
Server Deploy / deploy (push) Successful in 1m39s
Agent Release / build (push) Successful in 2m10s
2026-06-24 14:33:17 +01:00
domrichardson
407a610cfb
updates
Server Deploy / deploy (push) Successful in 1m25s
2026-06-16 11:07:18 +01:00
domrichardson
c9868b2108
first commit
Agent Release / build (push) Has been cancelled
Server Deploy / deploy (push) Has been cancelled
2026-06-15 13:58:45 +01:00
mrhid6
domrichardson