18f4fe9c3a
Added relayAliasPort setting to support relay port behind reverse proxies, #4222
2022-07-04 20:20:25 -07:00
b33900dfbf
Improved DNS based web relay, #4210
2022-07-03 18:17:57 -07:00
5ba9d7e503
Added support to HTTP web relay on the main web server port with used with a specified DNS name, #4210
2022-07-03 00:44:58 -07:00
0637412d1b
Fixed Web-RDP when a default user is set and no users are logged in.
2022-06-28 15:20:05 -07:00
571a0f1c2d
More work on web relay, #4172
2022-06-24 16:53:31 -07:00
cfd8521381
Fixed server exception on older NodeJS versions, #4102
2022-06-09 09:58:02 -07:00
ea7e98b3b4
Added BREACH attack mittigation, #4084
2022-06-08 10:47:23 -07:00
9c52cc4d8c
Web-SSH fixes and improvements.
2022-05-19 14:41:32 -07:00
1571ce03f0
Added userRequiredHttpHeader support in domain section of the config.json, #4011
2022-05-18 18:01:34 -07:00
753b6c240a
SSH/RDP credentials are now stored per user account, #3995
2022-05-17 16:09:35 -07:00
5ac74635c5
Fixed HTTP handling when no user-agent header is present.
2022-05-16 16:20:50 -07:00
cee069d1df
Added Router and Assistant alternate path, #3988 .
2022-05-16 13:48:15 -07:00
68c5aae0b0
Send Permissions-Policy HTTP header only for Chrome browsers.
2022-05-16 12:51:15 -07:00
14050dd6b7
Fixed authlog, #3954
2022-05-10 19:31:21 -07:00
b28c7daf2b
Fixed account login message, #3954
2022-05-10 17:53:09 -07:00
0d297088c8
Added option to save SSH username and key without saving key password.
2022-05-10 17:44:34 -07:00
96dab9ab3e
Fixed 404 error with mstsc.html, #3927
2022-05-02 22:09:06 -07:00
41b6b6a54a
Fixed RDP/SSH use of saved credentials, #3924
2022-05-02 12:19:03 -07:00
db06ec1975
Added Web based RDP support with NLA, #3867 and #3914
2022-04-29 11:13:58 -07:00
4c3a82a552
Web socket connection error, #
2022-04-12 14:03:52 -07:00
8fce45ad76
CookieIpCheck now has none/lax/strict options, with default being lax. #3861
2022-04-09 17:12:52 -07:00
ba82a005f4
update oidc npm module
2022-04-08 11:55:54 -04:00
149573a878
swapped to working passport oidc module
2022-04-08 11:38:55 -04:00
126c1474cc
working generic oidc section
...
tested with authelia, works for me :)
2022-04-08 00:14:58 -04:00
640933fc6e
implemented passport-openidconnect
...
used passport-openidconnect to get login 90% working, i get as far as the oidc host sending me back to mesh central with a good auth but i dont get logged in, still testing
2022-04-06 12:40:42 -04:00
5a81c84d67
Improved uicustomevent security and events, #3823
2022-03-30 07:14:14 -07:00
dd11816657
Fixed server update feature when given rights but are not administrator.
2022-03-25 11:13:47 -07:00
629aba7fc8
Fixed 2fahold.aspx port number.
2022-03-24 17:08:58 -07:00
1356dae4f2
You can now limit which users can create login tokens. #3787
2022-03-24 15:05:20 -07:00
a8c100be24
Improved web page translation selection based on browser information.
2022-03-24 14:14:33 -07:00
ff65097b11
Merge pull request #3766 from tunght/master
...
Fixed email verification issue
2022-03-16 02:15:06 -07:00
306c3314fa
Fixed email verification issue
2022-03-15 20:58:44 -07:00
545290a9af
Added new allowSavingDeviceCredentials option, #3751
2022-03-15 17:00:43 -07:00
f9c6d8194c
Now putting SSO user login events in event log.
2022-03-15 15:03:58 -07:00
4252205b74
Fix for: Collapse all when using view Group-Tags #3765
2022-03-15 14:31:28 -07:00
2cf7072672
Update webserver.js
...
Resend email verification email for current user
2022-03-14 17:33:43 -07:00
f2e95317b6
Fixed bug when settings custom http headers.
2022-03-05 10:51:41 -08:00
30e15efd8d
Added per-domain agent customizations, #3736
2022-03-05 09:35:04 -08:00
ecc27f5f20
Added 2FA to user login reports
2022-03-04 15:56:19 -08:00
8b33208b17
httpheaders now adds to existing headers, set a header to null to force remove it.
2022-03-01 11:18:42 -08:00
15e1718296
Fixed session IP check still being performed when CookieIpCheck is false.
2022-02-24 12:22:01 -08:00
e58419a6c3
Improved agent invitations, #3694
2022-02-23 16:14:32 -08:00
5f1b462af0
Updated Windows agents.
2022-02-22 00:21:39 -08:00
fb50610ca8
Added agent foreground and background color support (for future agent release)
2022-02-16 20:51:36 -08:00
f791515546
Fixed x-forwarded-host where multiple hosts are specified.
2022-02-16 13:00:36 -08:00
196eccf330
Agent invite image fixes.
2022-02-15 10:49:52 -08:00
4c0123d458
Added feature to set custom picture for AgentInvitePage for Windows Guests in config.json. In domain-section add to change picture. Else defailt will be used. "agentInviteImagePreview": "images/winagent.png",
2022-02-15 12:45:25 +01:00
79d0ea4526
Fixed layout exception.
2022-02-14 17:20:29 -08:00
47ff8ab14e
Updated express-handlebars & changed confirmation on page exit.
2022-02-14 16:33:49 -08:00
f7b2406e8d
Added server setting to force day/night mode, #3618
2022-02-08 10:13:52 -08:00
fc480539e1
Added backupcode2factor and single2factorWarning options, #3608
2022-02-07 18:06:22 -08:00
2a7b42fe3f
Fixed agent install text option.
2022-02-04 15:02:09 -08:00
1f1a80739e
Added option to turn off reset account on login screen.
2022-02-04 07:29:18 -08:00
dcc950f7de
Added option to disable mobile site.
2022-02-03 18:50:04 -08:00
8e8192a8cd
Added 2FA lock feature.
2022-02-01 09:11:11 -08:00
3aaf2f9257
Added assistantconfig options in config.json.
2022-01-31 10:21:13 -08:00
81214cd932
Fixed meshcore download.
2022-01-25 16:46:43 -08:00
18c2bf4d73
Added ?hide=x support to agent invite pages.
2022-01-24 18:23:16 -08:00
836ad768ac
Updated headers.
2022-01-23 23:21:24 -08:00
9c0e3bd4c5
Improved event translation, #3516
2022-01-23 11:03:30 -08:00
0817690eef
Fixed device notification email language translation, #3513
2022-01-23 00:34:47 -08:00
959603b4e9
Added agent logo support.
2022-01-18 13:34:10 -08:00
4d80499d8f
Include agentKey check at agent only port
2022-01-18 09:21:09 -05:00
ea12caac40
Completed work on recurring guest device sharing.
2022-01-16 18:10:56 -08:00
f79b28ac6f
Merge pull request #3469 from nzalev/handle-ldap-socket-err
...
Handle ldap on 'error'
2022-01-16 14:04:44 -08:00
b352cc8409
Added AgentKey support, #3468
2022-01-16 13:59:14 -08:00
fe6e466d11
Handle ldap on 'error'
2022-01-16 15:15:14 -05:00
cd85c66a1d
Fixed utf8 in meshcore.
2022-01-13 14:34:39 -08:00
f8e9426350
Improved MongoDB indexes.
2022-01-10 12:25:31 -08:00
ccd04ed573
Improved 404 pages to support tight Content-Security-Policy HTTP headers.
2022-01-10 01:26:45 -08:00
42a0ff960b
Speed up GetNodeRights() using 10 second caching.
2022-01-09 13:19:49 -08:00
933b9af899
Added user session destruction on logout for improved security.
2022-01-06 15:05:45 -08:00
5121295128
Added 2FA rate limiting, #3393
2022-01-03 13:12:10 -08:00
bcbfea559f
Fix for recording playback server crash, #3337
2021-12-13 13:20:04 -08:00
db3659d665
Added option to remove OTP 2FA.
2021-12-11 16:08:26 -08:00
f36f1c13c7
Improved structure of IP-KVM relay handling.
2021-12-06 03:08:54 -08:00
61e38cbe36
Started work on IP-KVM relay code.
2021-12-05 20:56:57 -08:00
4fa629f825
Added user last access support, #3319
2021-12-04 13:08:17 -08:00
8f36513078
Early work on IP KVM integration.
2021-12-02 20:20:37 -08:00
3c6ccc9139
Added support for IP-KVM device groups.
2021-12-02 18:34:18 -08:00
e19dcef6d7
Fix MariaDB/MySQL power events
2021-11-29 15:40:01 -05:00
725f9923e7
Fix for login token with SSO, #3293
2021-11-25 10:09:11 -08:00
b0726e9a13
Fixed server file permissions for device groups, #3294
2021-11-25 09:26:25 -08:00
aefe4ece9f
Fixed authStrategies with multiple domains.
2021-11-24 13:32:48 -08:00
1522526512
Minor authStrategy logging fix.
2021-11-24 12:54:12 -08:00
397523e816
Fixed for server exception when uploading a file to many devices with user group account. #3259
2021-11-18 20:05:39 -08:00
a95341b171
Added Last-Modified HTTP header for agent downloads, #3281
2021-11-18 18:43:27 -08:00
bf94381a1d
Added user customized quick typing strings.
2021-11-11 17:09:12 -08:00
aab50dcbef
Fixed event dispatching bug.
2021-11-10 17:56:12 -08:00
ecd25f3eb2
More work on device self-sharing.
2021-11-10 13:21:30 -08:00
e7f51c7658
Bad login fix, #3268
2021-11-10 10:50:03 -08:00
966392b779
Added DeviceSearchBarServerAndClientName option, #3260
2021-11-08 11:04:32 -08:00
7974b43b3d
Session recording viewer can now stream.
2021-11-07 18:07:45 -08:00
f71c326231
Removed auth data from websocket connection URL.
2021-11-03 18:52:11 -07:00
6cea8c3964
Fix setting of callbackUrl on generic SAML
2021-10-27 12:32:12 +02:00
d0d85feb45
Fixed recording file name and recording icon. #3207
2021-10-20 10:33:21 -07:00
3a981970bf
Auth strategy logout fix.
2021-10-17 00:11:20 -07:00
a99790c7ec
Added auth strategy logout url.
2021-10-16 23:55:34 -07:00
8012a10fea
Added ipBlockedUserRedirect, #3189
2021-10-13 19:12:49 -07:00
8189ca0256
Added exclusion to MaxInvalidLogin. #3192
2021-10-13 17:15:26 -07:00
44dec3bf87
Lots of work on email notification of device connect/disconnect.
2021-10-10 12:43:20 -07:00
96da816a69
Fixed missing site right.
2021-10-08 20:52:22 -07:00
09b2a3bba8
Added unknownUserRootRedirect option, #3172
2021-10-08 13:24:04 -07:00
902e71a96f
Guest sharing fixes.
2021-09-12 11:17:54 -07:00
dc1c89ee93
Much shorter guest sharing URLs.
2021-09-11 22:58:44 -07:00
c0a61b4ec1
LDAP fix for #3119
2021-09-11 12:55:51 -07:00
15d8f4b027
Added loginkey support to meshctrl.js, #3115
2021-09-10 13:04:10 -07:00
8b93655638
Removed SSPI auth retrieveGroups to reduce cookie size.
2021-09-02 17:52:37 -07:00
fb6acd901b
Fixed guest sharing desktop quality.
2021-09-02 14:10:35 -07:00
36b73e13f0
Fixed guest sharing link valid for only 60 minutes.
2021-09-02 13:45:57 -07:00
254eceb7d2
Merge branch 'master' of https://github.com/Ylianst/MeshCentral
2021-08-31 13:40:39 -07:00
715f85e720
Guest device shares can now be unlimited time.
2021-08-31 13:40:03 -07:00
2cd9a56046
Update setting cleint ip in agentonly webrequest
2021-08-31 10:35:35 -04:00
bc948328cb
Added more user permissions removal. #3065
2021-08-28 09:51:03 -07:00
41ecece9a9
Completed user access rights removal feature, #3065
2021-08-27 14:42:28 -07:00
9ab6fb5a39
Fix for #3066
2021-08-26 22:04:17 -07:00
e6b6bd061e
Started work on per-user session recording. #3064
2021-08-26 12:42:09 -07:00
71a6149407
Removed all dependencies on XMLDOM module.
2021-08-20 13:05:34 -07:00
fae1101123
Added MeshAgent ZIP links when compressed version is available.
2021-08-17 15:32:58 -07:00
6798415c92
Added SSH Key support.
2021-08-12 22:52:42 -07:00
ad0b60a560
Fix for #2989 server crash due to #2986 .
2021-08-05 08:43:41 -07:00
63b52fa1f6
Handle all configured paths as potentially absolute
2021-08-04 09:29:48 +02:00
15ddd3cd00
Added autofido2fa option in PasswordRequirements, #2952
2021-07-28 10:35:33 -07:00
21aabc676d
Added 2FA timeout on login screen, default is 5 minutes.
2021-07-24 15:14:21 -07:00
7766e1ca07
Fixed MeshCMD AMT DNS suffix on Linux.
2021-07-24 10:12:21 -07:00
af32310da7
Added MeshCMD AmtInfoJSON --post [url] option.
2021-07-19 15:42:29 -07:00
3599021a66
Completed remote desktop server view only option.
2021-07-17 23:03:44 -07:00
c9129a2d2f
Started work on viewonly remote desktop server option.
2021-07-17 22:16:57 -07:00
dffafae46e
Added option to remove clipboard get/set support.
2021-07-15 13:58:30 -07:00
b2df4de649
Added option to disable local record/screenshot options, #2901 .
2021-07-14 09:54:09 -07:00
1b9f398a4f
Fixed root cert link when using multi-domains, #2883 .
2021-07-10 13:23:27 -07:00
d4ecae73d9
MeshCentral can now remember RDP credentials.
2021-06-29 17:13:18 -07:00
ac38176828
Fixed power state time localization, #2817
2021-06-28 18:40:44 -07:00
23b434d915
Strict-Transport-Security improvements.
2021-06-28 17:01:12 -07:00
065bf14e26
Set strict-transport-security only when trusted cert is in use.
2021-06-28 13:58:40 -07:00
d68afe9d79
Fixed device sharing with ' in device name.
2021-06-25 16:46:58 -07:00
657c4c2939
Added Strict-Transport-Security HTTP header by default.
2021-06-25 13:11:16 -07:00
e4c08dedf8
Bugfix: accessing user before declaration
2021-06-22 22:18:20 -04:00
8b3f24b5dc
Updated computer power state timeline export to ISO format, added local browser time.
2021-06-16 14:23:58 -07:00
db60c35a72
Improved batch upload command information.
2021-06-15 13:10:07 -07:00
8a098bdcbf
Fix for #2774
2021-06-15 08:12:45 -07:00
5e7669e6d8
Fix for server exception when connecting tools.
2021-06-14 17:48:55 -07:00
b926196d0a
Fix for #2773 .
2021-06-14 14:36:00 -07:00
8668a4449c
Partial fix for #2772 .
2021-06-14 14:19:02 -07:00
4783a653de
Removed device group name in file when Assistant is monitoring only.
2021-06-08 13:31:46 -07:00
d70ae152fa
Added option to download Assistant without built-in agent.
2021-06-08 12:53:42 -07:00
26f289aba7
Tools not allowed to connect when account twas notools site rights, #2726
2021-06-04 12:46:41 -07:00
563ffcd6e4
More Assistant customizations and update changes.
2021-06-03 20:18:38 -07:00
dc3f21e1dd
Added Assistant Customization.
2021-06-03 17:35:49 -07:00
b81e405193
More work on autoconnect support.
2021-05-26 17:23:32 -07:00
f73c5d2a12
Improved MeshCmd error messages.
2021-05-25 22:30:33 -07:00
b9f34381e9
Fix for #2686
2021-05-25 11:17:23 -07:00
ded4d61f85
Partial SSH file support for local device group.
2021-05-24 15:26:54 -07:00
98e0801c8c
Fix for #2675 , added HTTPS redirect when x-forwarded-proto:http
2021-05-23 00:02:13 -07:00
6cde080ec9
Fix for #2673
2021-05-22 23:51:56 -07:00
2416545aa4
SSH remember credentials.
2021-05-21 13:43:32 -07:00
29e30504f0
Fix for #2663 . Invitation codes are removed for deleted device groups.
2021-05-21 09:01:06 -07:00
066b15f80c
Fix for broken MeshCMD link.
2021-05-20 15:18:21 -07:00
e8a3ceb558
Added Assistant as agent download.
2021-05-17 21:41:20 -07:00
e012e1427e
HTTP cookie session size reduction.
2021-05-12 10:34:04 -07:00
3d84509d33
Updated MeshCentral Router.
2021-05-10 12:19:53 -07:00
c1635ef8a2
Fix for #2606
2021-05-08 19:42:18 -07:00
9b85a51f67
Added SSH support in terminal tab for local devices.
2021-05-08 18:09:49 -07:00
56d0f2aafc
Added traffic delta functions.
2021-05-05 14:15:26 -07:00
03becc3f0f
Added HTTP traffic accounting.
2021-05-05 11:37:26 -07:00
3590290020
Added CIRA+LMS traffic counters
2021-05-05 10:59:47 -07:00
bc72a553e2
Fix for #2588 + Unused files cleanup.
2021-05-05 10:40:10 -07:00
82dc7a456f
Added agent control channel data accounting.
2021-05-05 02:30:23 -07:00
b6e3b51be2
Started work on traffic accounting.
2021-05-05 02:24:23 -07:00
ec1bea57b2
Web-SSH link now only shows up when SSH is enabled.
2021-04-29 23:49:17 -07:00
1b32966c76
First working web-based SSH.
2021-04-29 22:31:01 -07:00
abbb6be431
More work on web based SSH support.
2021-04-29 15:51:06 -07:00
110195d8c6
Started work on web-based SSH support.
2021-04-28 23:22:54 -07:00
699f46c319
First working version with local device relay.
2021-04-27 23:22:55 -07:00
5d11173f10
Added certificate expiration warning.
2021-04-23 14:17:13 -07:00
e38bd251d2
Fixed image import.
2021-04-21 17:13:52 -07:00
bb1b3787ec
Additional login token checking.
2021-04-16 23:15:57 -07:00
8ce24152f4
Completed login token support.
2021-04-16 18:55:03 -07:00
6c3e010ce9
More work on login tokens.
2021-04-16 12:42:54 -07:00
4231f4071b
More work on login tokens.
2021-04-16 11:16:03 -07:00
0f73af9534
Removed from Google's FLoC Network
2021-04-15 21:28:56 -07:00
56ba656bd4
Fixed for typing issue #2416
2021-04-15 15:38:07 -07:00
69fd9dffe2
More work on device 2FA.
2021-04-14 14:06:31 -07:00
48d5abca40
More work on device 2FA.
2021-04-14 13:28:51 -07:00
24cfc89522
Fixed for HTTP session with reverse proxies.
2021-04-14 00:09:00 -07:00
c74a207606
More work on mobile 2FA.
2021-04-13 23:23:09 -07:00
5cdfd7e0b9
Partial work on mobile device 2FA.
2021-04-13 19:59:10 -07:00
0ad256610c
Completed improved device guest sharing.
2021-04-09 13:27:21 -07:00
9bf2e211ab
Started work on improved device guest sharing.
2021-04-09 00:28:02 -07:00
6ddf4bd151
MeshCMD inner auth 2FA fixes.
2021-04-02 22:35:11 -07:00
fc23237fe4
User inner authentication improvements.
2021-04-02 17:26:17 -07:00
72799f0346
Added support for user inner server authentication.
2021-04-02 17:20:36 -07:00
a53b030345
Added personal notes.
2021-03-25 13:28:33 -07:00
da44d6f4d5
Version 0.7.95
2021-03-23 14:48:57 -07:00
a3f9ffc68b
More work on Intel AMT One Click Recovery.
2021-03-22 23:36:05 -07:00
d750077f45
Click once work, UI fixes.
2021-03-22 20:04:43 -07:00
1c47f13090
More work on Intel AMT Click Once Recovery.
2021-03-22 19:00:50 -07:00
a3f85bd042
Started work on Intel AMT Click Once Recovery.
2021-03-22 18:45:07 -07:00
de96c4f065
Completed first version of account picture support.
2021-03-19 14:49:40 -07:00
bfb2472862
Started work on account pictures.
2021-03-19 04:12:45 -07:00
Ylian Saint-Hilaire
mstrhakr
tunght
JSuenram
Noah Zalev
Linus Heckemann