Szymon Sypula
e89f97aaed
Fix OIDC login: ensure Passport callback is defined ( #7312 )
...
MeshCentral OIDC strategy was throwing `TypeError: done is not a function`
because the callback was not properly passed when using openid-client.
This patch wraps the OIDC callback to detect missing callback parameters,
extracts user info from the id_token if needed, and ensures `done()` is
called in all code paths, including async group fetching. This restores
functional OIDC logins for Azure AD/Keycloak.
Tested on Azure B2C OIDC
Co-authored-by: Szymon Sypula <szymon.sypula@dieboldnixdorf.com>
2025-10-24 14:03:58 +01:00
si458
bd37bb5391
fix user.links being null #7371
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-10-24 13:18:40 +01:00
TheDevRyan
c7d1c0e18f
Add advanced custom CSS/JS file support per template ( #7361 )
...
Introduces a new 'customFiles' array in the config schema for granular domain-level CSS and JavaScript customization. Updates webserver logic to inject custom CSS/JS tags based on template scope, replacing static custom.css/custom.js references in all Handlebars views. Also updates meshctrl.js to support the new config property.
2025-10-24 11:53:37 +01:00
stephannn
bd3f582b68
manageAllDeviceGroups - Added group support (members of) ( #7310 )
2025-09-30 09:27:07 +01:00
si458
4379eb5f33
fix manifest.json with userAllowedIP using DNS values #7283
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-09-18 10:06:13 +01:00
si458
6bcf39610a
replace yubikeyotp to avoid form-data cve
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-09-09 15:38:57 +01:00
si458
4bff9f1788
fix guest sharing file download with userallowedip showing unauthorised #7261
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-09-09 10:10:15 +01:00
si458
9345ee718c
fix whitespace, doh!
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-24 20:26:40 +01:00
si458
2383280736
dont record end of intel wsman in events
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-24 20:02:43 +01:00
si458
554999d07f
run apf.ashx on agentport
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-14 21:37:43 +01:00
si458
d820f7aee0
fix github auth endpoints always being enabled even though not setup #7142
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-11 13:21:17 +01:00
si458
5939cf4e6c
fix sitestyle url switching
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-10 14:53:55 +01:00
si458
11eee2f5eb
allow fido to not ask for pin (fidopininput) #7115
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-02 16:11:36 +01:00
si458
1383df3f4e
fix meshcentralrouter not being told about all 2fa options
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-01 16:45:42 +01:00
si458
92c2b61318
disable compression by default and dont compress webrelays #4369
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-06-20 20:18:21 +01:00
si458
95759d4022
fix webrelay timeouting too fast #7102
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-06-15 14:31:19 +01:00
si458
5ef5e9ce0e
send 404 with expired/not yet valid sharing links #7062
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-05-28 12:44:53 +01:00
si458
89238303cb
allow system variables in footer, loginfooter, welcometext, title2 #6634
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-05-26 14:03:55 +01:00
si458
f1c1e3bfd9
fix zh-cht/zh-chs wrong way round #7026
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-05-10 09:51:59 +01:00
si458
001cdd1aab
fix Chinese Simplified/Traditional in web ui for now #7026
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-05-10 09:41:14 +01:00
si458
d9f2f869a2
fix older amt devices with custom amt certificates #6565
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-05-04 14:17:39 +01:00
si458
c6928846d0
dont log amt wsman end events
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-21 16:09:39 +01:00
Simon Smith
95e1796844
use minversion tlsv1 to fix older amt issues ( #6983 )
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-18 22:22:18 +01:00
si458
f029abb1f8
dont log amt wsman events and fix start/end times in recordings
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-16 20:22:21 +01:00
si458
b75f96cb1c
fix duo with csp and chrome/edge
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-16 15:06:59 +01:00
si458
c249282554
add amt relay events and fixamt recordings #6652
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-13 19:11:18 +01:00
si458
41d9241625
fix messager recordings/events/downloads
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-13 01:03:16 +01:00
si458
e238aaecc1
dont compress devicefile.ashx to show file sizes
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-12 09:39:23 +01:00
si458
08430a5fa7
add missing login events to duo and pushlogin
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-07 15:14:53 +01:00
si458
17aff90501
fix failed 2fa port undefined in authlog
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-03-28 14:25:25 +00:00
si458
af8947e416
add Client Hints for browser detection #6899
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-03-23 15:02:09 +00:00
si458
1f83b7927a
fix duo 2fa failing to add #2432
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-03-11 19:24:57 +00:00
si458
c6da201af8
fix duo 2fa redirect when session changes
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-03-05 10:37:39 +00:00
si458
18ae8bdbf4
fix relaystate for entra #6822
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-02-26 20:32:38 +00:00
PTR
c90fa55c99
Init webstate with empty object ( #6788 )
2025-02-18 11:35:23 +00:00
Simon Smith
5734bcc33a
UI Toggle between Classic and Modern ( #6763 )
...
* [ENH] Add toggle switch for new MeshCentral UI in settings and top header of the classic UI
* [ENH] Add toggle for new MeshCentral UI in settings and in top headbar of the modern UI
* add showModernUIToggle and store uiviewmode in db
---------
Co-authored-by: kambereBr <brunokambere@gmail.com>
2025-02-09 19:41:47 +00:00
si458
1310c57397
return more than 100 groups for azure oidc #6669
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-02-05 21:21:39 +00:00
nmmclwhitehead
3ee06abfe8
Update webserver.js - allow saml relaystate in POST request ( #6685 )
...
added check for relaystate saml and regex check
added in rest of allowed params
correct formatting on regex string - now evaluates correctly
set relaystate on get request
check for ipv6
2025-01-26 14:42:48 +00:00
KevinBK1998
64c8d2c238
include username for amt direct connect in logs
2025-01-26 14:07:37 +00:00
si458
def62075c7
fix theme switch to default bug and include google fonts in csp #6665
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-01-06 16:02:10 +00:00
Ylian Saint-Hilaire
2a274fe569
More Duo UI improvements.
2024-12-31 11:48:30 -08:00
Ylian Saint-Hilaire
f80ba62cfc
Fixed Duo 2FA security.
2024-12-31 10:37:09 -08:00
si458
68ac8cf86c
fix duo and theme switcher
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-12-24 11:20:58 +00:00
Ylian Saint-Hilaire
c92b88a374
Duo changes, but not yet fully tested.
2024-12-22 19:10:35 -08:00
Simon Smith
e2362a0547
add duo authentication support ( #6609 )
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-12-21 13:52:54 +00:00
si458
dbb5b4ba11
add webrelay to websocket and meshctrl #6484
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-11-26 16:46:14 +00:00
si458
545bf58e8d
fix pwa orientation #6554
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-11-25 10:16:13 +00:00
Ylian Saint-Hilaire
c09d2fad3e
Can now switch to the bootstrap ui at runtime with ?sitestyle=3 in the url.
2024-11-03 09:34:26 -08:00
Josiah Baldwin
36f1b4d5be
Added global ws error handler ( #6475 )
2024-10-25 11:02:53 +01:00
si458
1e565768d1
fix sitestyle for new bootstrap
...
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-10-19 19:28:23 +01:00