a4d17ac489
Added SESSION_MAX_DURATION param
...
Added created_at field to the session
2024-01-03 18:48:30 +05:00
9f527d18ac
Rename last_update to updated_at
2024-01-03 17:56:01 +05:00
38e4f5cbec
GetCookiePath util function
2023-12-29 15:08:50 +05:00
bee5c54127
Further session protections and fixes
...
Use MaxAge instead of Expires
Verify if the cookie is not too old and not from the future
Verify if the user exists and unchanged
Refresh not sooner than 24h
Do not refresh temporary sessions
Delete cookies on logout
2023-12-29 15:08:50 +05:00
6292424591
v1
...
Fixed session duration
Use HttpOnly and SameSite
Added cookie refresh on all pages
2023-12-29 15:08:50 +05:00
45849a2aee
chore: code adjustment ( #512 )
2023-12-29 10:56:37 +01:00
41bf0bc92c
Telegram support ( #488 )
2023-12-29 09:22:12 +01:00
a9be53899c
Subnet range selector, interface fixes ( #481 )
2023-12-27 09:08:55 +01:00
af7742bfb3
Update routes.go ( #475 )
...
use config file download mime type "txt/conf" to prevent downloaded configs being saved as <filename>.txt, instead of wanted <filename>.conf.
Tested on Android Firefox and Chrome
2023-12-25 20:22:42 +01:00
e2e1159ef4
add endpoint field to client ( #470 )
2023-12-25 20:21:37 +01:00
13a4c05ff5
fix: add basic server-side input validation ( #435 )
...
This mitigates possible path traversal attacks by using
e.g. "../user" as a user name.
2023-12-25 20:07:47 +01:00
364a43e3dc
Implement updating a client Pub+PSK when editing a client ( #401 )
...
This covers the normal use-case where clients generate keys
locally on their device and notify the server of their new/updated keys.
The server verifies Preshared and Public keys independently of each
other. Should a client generate a new tunnel which lacks a PSK and send
only a Public key to the server (admin) where the earlier server created
profile has a Preshared key, the server admin/user must determine the
course of action:
keep or remove the PSK.
2023-08-11 10:34:11 +02:00
cfbdae7abb
Follow-up fix for fwmark 101b5564c2 ( #372 )
...
Remove all FwMark settings from client configs (illegal) and QRcode
(also illegal).
2023-05-24 12:02:07 +02:00
4fc52b62d2
Replace go.rice with native go embedding ( #331 )
2023-03-16 08:40:04 +01:00
c8240fe157
fixed about page not showing menu items ( #343 )
2023-03-15 21:45:46 +01:00
9f20fe6c09
Show apply config button only when needed ( #292 )
2023-03-15 21:15:41 +01:00
6dd5590940
User management panel ( #289 )
2023-03-15 21:13:53 +01:00
aadf099f50
About page ( #296 )
2023-02-16 17:31:24 +01:00
cc285c5c20
Status show IP's ( #291 )
2023-02-16 17:10:11 +01:00
a866977cb0
Add favicon ( #288 )
2023-02-16 17:09:24 +01:00
e76c573b1d
Some comment fixes ( #278 )
2022-12-26 10:02:07 +01:00
86e8ad41cb
feat: update user profile ( #280 )
2022-12-21 21:52:00 +01:00
ea55b36a6f
Update readme and code comments ( #272 )
2022-12-13 22:44:11 +01:00
4b0a0d9061
Skip PresharedKey generation ( #271 )
...
Helpful for those who already have users deployed.
Enter `-` in the Preshared Key field at user creation time to skip its
creation.
The template conf takes care of the rest.
Fixes issue #235
2022-12-13 21:35:13 +01:00
a80741e748
Added checkbox FwMark in QRCode generation ( #260 )
2022-12-02 23:40:29 +01:00
2c2db61158
Add support for password hashes as an optional alternative to plaintext passwords ( #216 )
2022-09-30 10:24:54 +02:00
97652be545
Use ConstantTimeCompare to make the login more secure and not leak information about the used password ( #205 )
2022-07-14 08:35:58 +02:00
87b08a8f7c
*: allows for BASE_PATH configuration ( #183 )
2022-04-25 09:17:13 +02:00
037a6c56d3
Implement Optional Private Keys ( #161 )
2022-03-13 17:33:37 +01:00
341f9b6a42
Allow passing extra allowed subnets ( #114 )
2022-01-29 08:45:00 +01:00
bf2b74fe84
Update healthcheck ( #124 )
2021-11-21 10:31:27 +01:00
93e3e847f2
Update helper.js ( #66 )
2021-11-09 11:06:19 +01:00
c1d541b78f
Fix generating IPv6 address ( #105 )
2021-11-06 13:15:14 +01:00
b7c0990dcb
Abstracts database storage & Status page UI ( #88 )
2021-08-28 15:10:30 +02:00
1711530dda
Fixes security issue & Adds support to sent configuration via email ( #83 )
2021-08-08 19:55:59 +02:00
2aa042b919
Added UseServerDNS option for clients who do not have to use the DNS specified in the server configuration. ( #79 )
2021-08-05 19:58:01 +02:00
9dca2b7361
Login disable ( #35 )
...
Add ability to disable authentication
2020-10-09 23:33:29 +02:00
cd7f6e500a
Edit wireguard client ( #19 )
...
* Add the ability to modify an existing client
* Update client page using Ajax
2020-06-02 11:20:50 +07:00
9617425033
Add preshared key in wireguard config ( #15 )
2020-05-28 09:25:21 +07:00
9a27cc366f
Single binary build ( #10 )
...
Single binary build
Use go rice for embedding the static files and templates to the binary file
2020-05-21 15:51:24 +07:00
91f06914d4
Add download button
2020-04-25 16:58:14 +07:00
a5fbb7b58a
Add authentication
2020-04-24 18:14:54 +07:00
a78c9f3dd4
Add login page
2020-04-24 11:22:50 +07:00
5e7cfbd01f
Add Global Settings into DB initilization step
2020-04-23 23:40:44 +07:00
38c1f3a302
DB query refactoring
2020-04-23 18:01:40 +07:00
7c3cac8084
Add Apply Config button to save wireguard config file
2020-04-23 09:29:44 +07:00
43012a720c
Adjustment in the CSS to show/hide pause button
2020-04-22 21:39:35 +07:00
dbb85cb759
Adjustment to have enable/disable client on UI
2020-04-22 17:11:28 +07:00
e52ffaf686
Validate the client IP allocation
2020-04-22 00:08:48 +07:00
15703b9185
Adjustment in New Client form to have Allocation IP from suggestion API
2020-04-21 00:26:49 +07:00
0xCA
Khanh Ngo
0xCA
Michael Walter
Gabriel Soares
Marcus Wichelmann
Paul Dee
ByteDream
Arminas
itsvit-vlasov-y
Quentin Machu
Maxim Kochurov
brittondodd
Hoang Nguyen
Lukáš Kasič
Georgios Komninos
Gerwim