1025 Commits

Author SHA1 Message Date
Szymon Sypula
e89f97aaed
Fix OIDC login: ensure Passport callback is defined (#7312)
MeshCentral OIDC strategy was throwing `TypeError: done is not a function`
because the callback was not properly passed when using openid-client.

This patch wraps the OIDC callback to detect missing callback parameters,
extracts user info from the id_token if needed, and ensures `done()` is
called in all code paths, including async group fetching. This restores
functional OIDC logins for Azure AD/Keycloak.

Tested on Azure B2C OIDC

Co-authored-by: Szymon Sypula <szymon.sypula@dieboldnixdorf.com>
2025-10-24 14:03:58 +01:00
si458
bd37bb5391 fix user.links being null #7371
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-10-24 13:18:40 +01:00
TheDevRyan
c7d1c0e18f
Add advanced custom CSS/JS file support per template (#7361)
Introduces a new 'customFiles' array in the config schema for granular domain-level CSS and JavaScript customization. Updates webserver logic to inject custom CSS/JS tags based on template scope, replacing static custom.css/custom.js references in all Handlebars views. Also updates meshctrl.js to support the new config property.
2025-10-24 11:53:37 +01:00
stephannn
bd3f582b68
manageAllDeviceGroups - Added group support (members of) (#7310) 2025-09-30 09:27:07 +01:00
si458
4379eb5f33 fix manifest.json with userAllowedIP using DNS values #7283
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-09-18 10:06:13 +01:00
si458
6bcf39610a replace yubikeyotp to avoid form-data cve
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-09-09 15:38:57 +01:00
si458
4bff9f1788 fix guest sharing file download with userallowedip showing unauthorised #7261
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-09-09 10:10:15 +01:00
si458
9345ee718c fix whitespace, doh!
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-24 20:26:40 +01:00
si458
2383280736 dont record end of intel wsman in events
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-24 20:02:43 +01:00
si458
554999d07f run apf.ashx on agentport
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-14 21:37:43 +01:00
si458
d820f7aee0 fix github auth endpoints always being enabled even though not setup #7142
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-11 13:21:17 +01:00
si458
5939cf4e6c fix sitestyle url switching
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-10 14:53:55 +01:00
si458
11eee2f5eb allow fido to not ask for pin (fidopininput) #7115
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-02 16:11:36 +01:00
si458
1383df3f4e fix meshcentralrouter not being told about all 2fa options
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-07-01 16:45:42 +01:00
si458
92c2b61318 disable compression by default and dont compress webrelays #4369
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-06-20 20:18:21 +01:00
si458
95759d4022 fix webrelay timeouting too fast #7102
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-06-15 14:31:19 +01:00
si458
5ef5e9ce0e send 404 with expired/not yet valid sharing links #7062
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-05-28 12:44:53 +01:00
si458
89238303cb allow system variables in footer, loginfooter, welcometext, title2 #6634
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-05-26 14:03:55 +01:00
si458
f1c1e3bfd9 fix zh-cht/zh-chs wrong way round #7026
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-05-10 09:51:59 +01:00
si458
001cdd1aab fix Chinese Simplified/Traditional in web ui for now #7026
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-05-10 09:41:14 +01:00
si458
d9f2f869a2 fix older amt devices with custom amt certificates #6565
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-05-04 14:17:39 +01:00
si458
c6928846d0 dont log amt wsman end events
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-21 16:09:39 +01:00
Simon Smith
95e1796844
use minversion tlsv1 to fix older amt issues (#6983)
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-18 22:22:18 +01:00
si458
f029abb1f8 dont log amt wsman events and fix start/end times in recordings
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-16 20:22:21 +01:00
si458
b75f96cb1c fix duo with csp and chrome/edge
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-16 15:06:59 +01:00
si458
c249282554 add amt relay events and fixamt recordings #6652
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-13 19:11:18 +01:00
si458
41d9241625 fix messager recordings/events/downloads
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-13 01:03:16 +01:00
si458
e238aaecc1 dont compress devicefile.ashx to show file sizes
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-12 09:39:23 +01:00
si458
08430a5fa7 add missing login events to duo and pushlogin
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-04-07 15:14:53 +01:00
si458
17aff90501 fix failed 2fa port undefined in authlog
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-03-28 14:25:25 +00:00
si458
af8947e416 add Client Hints for browser detection #6899
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-03-23 15:02:09 +00:00
si458
1f83b7927a fix duo 2fa failing to add #2432
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-03-11 19:24:57 +00:00
si458
c6da201af8 fix duo 2fa redirect when session changes
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-03-05 10:37:39 +00:00
si458
18ae8bdbf4 fix relaystate for entra #6822
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-02-26 20:32:38 +00:00
PTR
c90fa55c99
Init webstate with empty object (#6788) 2025-02-18 11:35:23 +00:00
Simon Smith
5734bcc33a
UI Toggle between Classic and Modern (#6763)
* [ENH] Add toggle switch for new MeshCentral UI in settings and top header of the classic UI

* [ENH] Add toggle for new MeshCentral UI in settings and in top headbar of the modern UI

* add showModernUIToggle and store uiviewmode in db

---------

Co-authored-by: kambereBr <brunokambere@gmail.com>
2025-02-09 19:41:47 +00:00
si458
1310c57397 return more than 100 groups for azure oidc #6669
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-02-05 21:21:39 +00:00
nmmclwhitehead
3ee06abfe8
Update webserver.js - allow saml relaystate in POST request (#6685)
added check for relaystate saml and regex check

added in rest of allowed params

correct formatting on regex string - now evaluates correctly

set relaystate on get request

check for ipv6
2025-01-26 14:42:48 +00:00
KevinBK1998
64c8d2c238
include username for amt direct connect in logs 2025-01-26 14:07:37 +00:00
si458
def62075c7 fix theme switch to default bug and include google fonts in csp #6665
Signed-off-by: si458 <simonsmith5521@gmail.com>
2025-01-06 16:02:10 +00:00
Ylian Saint-Hilaire
2a274fe569 More Duo UI improvements. 2024-12-31 11:48:30 -08:00
Ylian Saint-Hilaire
f80ba62cfc Fixed Duo 2FA security. 2024-12-31 10:37:09 -08:00
si458
68ac8cf86c fix duo and theme switcher
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-12-24 11:20:58 +00:00
Ylian Saint-Hilaire
c92b88a374 Duo changes, but not yet fully tested. 2024-12-22 19:10:35 -08:00
Simon Smith
e2362a0547
add duo authentication support (#6609)
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-12-21 13:52:54 +00:00
si458
dbb5b4ba11 add webrelay to websocket and meshctrl #6484
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-11-26 16:46:14 +00:00
si458
545bf58e8d fix pwa orientation #6554
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-11-25 10:16:13 +00:00
Ylian Saint-Hilaire
c09d2fad3e Can now switch to the bootstrap ui at runtime with ?sitestyle=3 in the url. 2024-11-03 09:34:26 -08:00
Josiah Baldwin
36f1b4d5be
Added global ws error handler (#6475) 2024-10-25 11:02:53 +01:00
si458
1e565768d1 fix sitestyle for new bootstrap
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-10-19 19:28:23 +01:00