ravicious 3e0a3f76fc Device Trust web: Ensure query params of redirect URL are not lost (#62389) ...

* Device Trust: Append query params to the processed redirect_uri

* teleterm: Do not construct query params by hand

This messes up the encoding. When interpolating redirect_uri within a
string, the URL is simply not going to get encoded. This means that if
redirect_uri is something like "https://example.com/hello?foo=1&bar=2",
"bar=2" is going to be interpreted as one of the query param of the
returned URL, not as one of the query params of redirect_uri.

* makeDeepLinkWithSafeInput: Use URLSearchParams to construct query params

This is not quite necessary, the previous code was good enough. But just
to be safe, instead of constructing query params manually we can just
delegate it to URLSearchParams.

* teleterm deep links: Add tests for redirect_uri with query params

2026-01-07 14:31:29 +00:00

..

app

implement app server watcher (#62128)

2025-12-31 16:08:38 +00:00

desktop

Introduce logtest package (#56741)

2025-07-15 18:11:10 +00:00

mfajson

Add SSO MFA prompt for WebUI MFA flows (#49794)

2024-12-20 03:51:12 +00:00

scripts

Node autodiscover command: add support for HTTP_PROXY (#60757)

2025-11-03 16:31:03 +00:00

session

Set MaxAge in web cookie if time until expiry is > 0 (#58293)

2025-08-24 19:28:38 +00:00

templates

Add endpoint for MWI GitHub + Kubernetes wizard (#61768)

2025-12-08 11:00:21 +00:00

terminal

Database Web UI REPL handles window resizing (#58641)

2025-09-08 20:18:53 +00:00

testdata/TestMachineIDWizard

Add endpoint for MWI GitHub + Kubernetes wizard (#61768)

2025-12-08 11:00:21 +00:00

ui

Add IaC label and usertasks to integration stats (#62518)

2026-01-06 19:37:18 +00:00

addr_test.go

…

addr.go

Convert lib/web to use slog (#50407)

2024-12-19 21:35:18 +00:00

apiserver_login_test.go

Migrate all tests to use lib/auth/authtest helpers (#57030)

2025-07-24 18:27:14 +00:00

apiserver_ping_test.go

feat(webapi): Add GET /webapi/sites/:site/workload-identity (#58917)

2025-09-19 16:22:00 +00:00

apiserver_test.go

keystore: add active health checker (#61962)

2026-01-05 15:35:08 +00:00

apiserver.go

implement app server watcher (#62128)

2025-12-31 16:08:38 +00:00

apps.go

implement app server watcher (#62128)

2025-12-31 16:08:38 +00:00

autoupdate_rfd109.go

Move autoupdate version resolving logic in a separate package (#59432)

2025-09-23 19:52:53 +00:00

autoupdate_rfd184.go

Move autoupdate version resolving logic in a separate package (#59432)

2025-09-23 19:52:53 +00:00

brotlihandler.go

Pre-compress web assets using Brotli (#57969)

2025-08-19 09:56:28 +00:00

ca_export_test.go

Add support for JSON format to '/webapi/auth/export' endpoint (#50193)

2025-02-19 21:41:35 +00:00

ca_export.go

Add support for JSON format to '/webapi/auth/export' endpoint (#50193)

2025-02-19 21:41:35 +00:00

cachehandler_test.go

…

cachehandler.go

web: remove dead code (#47088)

2024-10-02 16:27:23 +00:00

conn_upgrade_test.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

conn_upgrade.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

connection_diagnostic.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

connectmycomputer_test.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

connectmycomputer.go

…

databases_test.go

Database Web UI REPL handles window resizing (#58641)

2025-09-08 20:18:53 +00:00

databases.go

Add paginated ListAuthServers/ListProxies (#61702)

2025-12-12 21:42:28 +00:00

desktop_playback.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

desktop.go

Refactor Desktop Connection Proxy / Improve Error Handling on Teardown (#58986)

2025-12-12 20:33:28 +00:00

device_trust_test.go

Device Trust web: Ensure query params of redirect URL are not lost (#62389)

2026-01-07 14:31:29 +00:00

device_trust.go

Device Trust web: Ensure query params of redirect URL are not lost (#62389)

2026-01-07 14:31:29 +00:00

discoveryconfig_test.go

Migrate all tests to use lib/auth/authtest helpers (#57030)

2025-07-24 18:27:14 +00:00

discoveryconfig.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

features_test.go

Deflake TestFeaturesWatcher (#60159)

2025-10-10 20:17:26 +00:00

features.go

Drop cloud anon key from auth proto (#53970)

2025-04-15 21:39:09 +00:00

files.go

Use conn address as destination address for moderated SFTP (#62184)

2025-12-15 23:20:37 +00:00

fuzz_test.go

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

git_servers_test.go

GitHub proxy: web apis for enrolment (#51423)

2025-02-03 19:12:08 +00:00

git_servers.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

headless.go

Enable SSO MFA for headless (#53741)

2025-04-07 19:26:21 +00:00

integrations_awsoidc_test.go

accessgraph sync: Add AWS IAM role for EKS audit logs (#61364)

2025-11-17 22:51:56 +00:00

integrations_awsoidc.go

accessgraph sync: Add AWS IAM role for EKS audit logs (#61364)

2025-11-17 22:51:56 +00:00

integrations_awsra_test.go

AWS Roles Anywhere: endpoint to validate name (#57887)

2025-08-22 11:07:15 +00:00

integrations_awsra.go

Improve resource name validation for AWS Roles Anywhere and AWS OIDC generate command (#61024)

2025-11-14 17:06:39 +00:00

integrations_azureoidc_test.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

integrations_azureoidc.go

WebAPI: endpoint that returns the oneoff command for AWS Roles Anywhere set up (#54853)

2025-05-28 08:30:03 +00:00

integrations_samlidp.go

WebAPI: endpoint that returns the oneoff command for AWS Roles Anywhere set up (#54853)

2025-05-28 08:30:03 +00:00

integrations_test.go

Add IaC label and usertasks to integration stats (#62518)

2026-01-06 19:37:18 +00:00

integrations.go

Add IaC label and usertasks to integration stats (#62518)

2026-01-06 19:37:18 +00:00

inventory_test.go

expose instance inventory to client and add web endpoint (#61657)

2025-12-19 17:48:54 +00:00

inventory.go

expose instance inventory to client and add web endpoint (#61657)

2025-12-19 17:48:54 +00:00

join_tokens_test.go

ui: indicate which join tokens are managed by Teleport Cloud (#62535)

2025-12-30 21:21:32 +00:00

join_tokens.go

feat: Create/Edit GitLab tokens from the Web UI (#60469)

2025-10-28 09:25:32 +00:00

jwt.go

Expose /.well-known/jwks-okta for Okta API services type App (#50040)

2024-12-12 15:43:06 +00:00

kube.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

latency.go

Add latency detector for desktop sessions (#52827)

2025-05-07 08:26:04 +00:00

login_helper_test.go

Remove CSRF checking middleware (#50358)

2024-12-18 22:08:17 +00:00

machineid_test.go

MWI: Add /webapi/.../machine-id/bot-instance/metrics endpoint (#59896)

2025-10-08 09:47:34 +00:00

machineid.go

feat: Add filtering and sort to tctl bots instances ls (#60273)

2025-10-20 11:48:16 +00:00

mfa_codec.go

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

mfa.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

mwi_wizards_test.go

Add endpoint for MWI GitHub + Kubernetes wizard (#61768)

2025-12-08 11:00:21 +00:00

mwi_wizards.go

Add endpoint for MWI GitHub + Kubernetes wizard (#61768)

2025-12-08 11:00:21 +00:00

notifications_test.go

Bump golangci-lint to v2 (#54410)

2025-05-07 22:14:51 +00:00

oidcidp_test.go

Fix HTTPS thumbprint lookup test (#51152)

2025-01-17 11:47:58 +00:00

oidcidp.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

okta_test.go

Expose /.well-known/jwks-okta for Okta API services type App (#50040)

2024-12-12 15:43:06 +00:00

okta.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

password.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

proxy_settings.go

Prefer net.JoinHostPort over fmt.Sprintf (#56967)

2025-07-23 14:59:41 +00:00

recordingmetadata.go

Upload thumbnails for session recordings as they're generated (#60313)

2025-10-23 03:10:27 +00:00

recordingplayback_protocol_test.go

Add a new API for session recording playback (#58116)

2025-09-08 15:55:04 +00:00

recordingplayback_protocol.go

Add a new API for session recording playback (#58116)

2025-09-08 15:55:04 +00:00

recordingplayback_test.go

Fix session recording seeking in long inactive periods (#59637)

2025-09-29 15:09:27 +00:00

recordingplayback.go

Fix session recording seeking in long inactive periods (#59637)

2025-09-29 15:09:27 +00:00

resources_test.go

Web: support listing system roles when requested (#61122)

2025-11-21 01:49:05 +00:00

resources.go

Web: support listing system roles when requested (#61122)

2025-11-21 01:49:05 +00:00

scripts.go

Move autoupdate version resolving logic in a separate package (#59432)

2025-09-23 19:52:53 +00:00

server.go

Convert lib/web to use slog (#50407)

2024-12-19 21:35:18 +00:00

servers_test.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

servers.go

Add UI for Kubernetes health checks (#59929)

2025-10-10 23:17:38 +00:00

sessions_test.go

Remove (auth.Server) SetClock (#60526)

2025-10-29 15:19:44 +00:00

sessions.go

Coordinate session ID with Node in Proxy recording mode (#59850)

2025-11-13 01:13:25 +00:00

sign.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

spiffe_test.go

Migrate GetClusterName to gRPC (#53164)

2025-03-20 10:07:02 +00:00

spiffe.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

terminal_test.go

Provide accurate error to clients trying to join a node in proxy recording mode (#61202)

2025-11-17 23:19:41 +00:00

terminal.go

scoped ssh routing (#62171)

2025-12-12 00:03:37 +00:00

tty_playback_test.go

…

tty_playback.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

user_groups.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

userevent.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

userpreferences.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

users_test.go

add serverside pagination for users (#56932)

2025-08-07 12:30:06 +00:00

users.go

[clientutils] preserve pagesize between page calls (#61844)

2025-11-28 15:10:57 +00:00

usertasks_test.go

Migrate all tests to use lib/auth/authtest helpers (#57030)

2025-07-24 18:27:14 +00:00

usertasks.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

workload_identity_test.go

feat(webapi): Add GET /webapi/sites/:site/workload-identity (#58917)

2025-09-19 16:22:00 +00:00

workload_identity.go

feat(webapi): Add GET /webapi/sites/:site/workload-identity (#58917)

2025-09-19 16:22:00 +00:00

ws_io.go

Add WebSocket handler for WebUI database sessions (#49749)

2024-12-14 02:16:29 +00:00

yaml_test.go

feat(join-tokens): [44794] API changes for managing GitHub Join Tokens (#54374)

2025-05-01 13:28:43 +00:00

yaml.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00