Zac Bergquist 68ce4750b1 Explicitly set the session cookie to SameSite=Lax (#50097) ...

Prior to this change, we were not explicitly setting the SameSite
mode for our session cookie, which leaves the behavior up to the
browser.

Chromium-based browsers have been defaulting to SameSite=Lax since
Chrome 80 in February 2020, so this is not a behavior change but
rather locking in today's behavior and being explicit about it.

Note that this is for Teleport's session cookie only. App session
cookies remain using SameSite=None because the proxied app may
itself be using SSO, and we need the app session cookie to make
its way through SSO redirects.

2024-12-11 22:14:32 +00:00

..

app

Complete lib/srv/app conversion to slog (#50009)

2024-12-10 16:48:09 +00:00

desktop

Convert more lib packages to slog. (#47787)

2024-10-24 11:22:36 +00:00

mfajson

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

scripts

[teleport-update] Add teleport-update to build and archive (#48839)

2024-11-13 22:03:03 +00:00

session

Explicitly set the session cookie to SameSite=Lax (#50097)

2024-12-11 22:14:32 +00:00

terminal

Reduce web SSH session log spam (#49521)

2024-12-02 13:58:34 +00:00

ui

Discover EKS: allow custom labels for Kube Server (#49420)

2024-12-11 10:05:14 +00:00

addr_test.go

…

addr.go

…

apiserver_login_test.go

Deprecate /webapi/ssh/certs + Use 2-step MFA login flow for Teleport Connect (#47153)

2024-10-04 17:57:09 +00:00

apiserver_ping_test.go

Make the proxy read from autoupdate_agent_rollout (#49380)

2024-12-05 22:21:07 +00:00

apiserver_test_utils.go

…

apiserver_test.go

Convert lib/srv/transport to use slog (#49914)

2024-12-09 19:42:15 +00:00

apiserver.go

Remove ineffective CSRF check for /webconfirm (#50098)

2024-12-11 21:51:42 +00:00

apps.go

Remove v15 fallback for SAML SP apps (#48001)

2024-10-28 23:14:35 +00:00

autoupdate_common_test.go

Fix flaky TestAutoUpdateAgentShouldUpdate (#49883)

2024-12-06 16:42:58 +00:00

autoupdate_common.go

Make the proxy read from autoupdate_agent_rollout (#49380)

2024-12-05 22:21:07 +00:00

autoupdate_rfd109.go

Make the proxy read from autoupdate_agent_rollout (#49380)

2024-12-05 22:21:07 +00:00

autoupdate_rfd184.go

Make the proxy read from autoupdate_agent_rollout (#49380)

2024-12-05 22:21:07 +00:00

cachehandler_test.go

Use ETag headers for served javascript files (#39251)

2024-03-19 18:40:44 +00:00

cachehandler.go

web: remove dead code (#47088)

2024-10-02 16:27:23 +00:00

conn_upgrade_test.go

Fixed an issue WebSocket upgrade fails with MiTM proxy that remasks the payloads (#45858)

2024-08-27 07:25:39 +00:00

conn_upgrade.go

update WebSocket logging reference (#49924)

2024-12-09 02:36:27 +00:00

connection_diagnostic.go

…

connectmycomputer_test.go

…

connectmycomputer.go

…

databases_test.go

Use default labels when deploying service into ECS and allow overwriting existing DB (web) (#45180)

2024-08-21 17:51:22 +00:00

databases.go

enforce a smaller read limit on HTTP request reads for endpoints that create or update resources (#47416)

2024-10-10 17:31:13 +00:00

desktop_playback.go

Propogate context for better span correlation of recording viewing (#49142)

2024-11-21 13:37:31 +00:00

desktop.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

device_trust_test.go

Propagate redirect_uri during device trust web auth (#47221)

2024-10-11 19:00:51 +00:00

device_trust.go

Propagate redirect_uri during device trust web auth (#47221)

2024-10-11 19:00:51 +00:00

discoveryconfig_test.go

Expose DiscoveryConfig.Status through webapi (#40312)

2024-04-10 21:40:33 +00:00

discoveryconfig.go

enforce a smaller read limit on HTTP request reads for endpoints that create or update resources (#47416)

2024-10-10 17:31:13 +00:00

features_test.go

Update proxy features (#45979)

2024-10-01 15:01:31 +00:00

features.go

Use cloud anonymization key (#46819)

2024-10-30 03:11:23 +00:00

files.go

Add host resolution support to tsh scp (#48465)

2024-11-19 18:24:29 +00:00

fuzz_test.go

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

gziphandler.go

…

headless.go

enforce a smaller read limit on HTTP request reads for endpoints that create or update resources (#47416)

2024-10-10 17:31:13 +00:00

integrations_awsoidc_test.go

AWS OIDC: add aws account id as label to AWS App (#49693)

2024-12-06 08:43:03 +00:00

integrations_awsoidc.go

Discover EKS: allow custom labels for Kube Server (#49420)

2024-12-11 10:05:14 +00:00

integrations_azureoidc_test.go

Update backend.Key to be its own distinct type (#46701)

2024-10-04 14:02:00 +00:00

integrations_azureoidc.go

Workload Identity: JWT SVID OIDC compatability (#47079)

2024-10-08 07:25:38 +00:00

integrations_samlidp.go

update aws oidc success message to mention Teleport Web UI (#45923)

2024-08-29 19:15:23 +00:00

integrations_test.go

Integration Discovery Rules: endpoint that returns all the rules (#49514)

2024-12-06 09:00:30 +00:00

integrations.go

Integration Discovery Rules: endpoint that returns all the rules (#49514)

2024-12-06 09:00:30 +00:00

join_tokens_test.go

Add initial JoinTokens ui (#43766)

2024-07-10 04:25:01 +00:00

join_tokens.go

enforce a smaller read limit on HTTP request reads for endpoints that create or update resources (#47416)

2024-10-10 17:31:13 +00:00

kube.go

Remove SolveAuthenticateChallenge from MFA Ceremony in favor of PromptConstructor (#47650)

2024-10-21 18:38:50 +00:00

login_helper_test.go

Move lib/web tests to new web login MFA helpers (#38811)

2024-03-05 16:28:59 +00:00

machineid_test.go

Improvements to Bot resource (additional validation and label propagation) (#38013)

2024-02-13 17:06:55 +00:00

machineid.go

enforce a smaller read limit on HTTP request reads for endpoints that create or update resources (#47416)

2024-10-10 17:31:13 +00:00

mfa_codec.go

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

mfa.go

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

notifications_test.go

add notifications web endpoints and frontend logic (#41321)

2024-05-15 21:37:16 +00:00

oidcidp_test.go

revert OIDC IdP CA to use RSA keys in new suites (#46792)

2024-09-20 05:27:16 +00:00

oidcidp.go

Workload Identity: JWT SVID OIDC compatability (#47079)

2024-10-08 07:25:38 +00:00

password.go

enforce a smaller read limit on HTTP request reads for endpoints that create or update resources (#47416)

2024-10-10 17:31:13 +00:00

proxy_settings.go

Allow a custom SSH dial timeout to be set cluster wide (#45507)

2024-08-20 13:11:46 +00:00

resources_test.go

adding more granular port forwarding access controls that allow for (#49417)

2024-12-10 16:35:16 +00:00

resources.go

enforce a smaller read limit on HTTP request reads for endpoints that create or update resources (#47416)

2024-10-10 17:31:13 +00:00

server.go

fix web server shutdown panic (#43488)

2024-06-25 17:13:49 +00:00

servers_test.go

Teleterm: Add listing kube resources endpoint (#46753)

2024-10-08 20:44:53 +00:00

servers.go

Clean up user and login enrichment code for v17 (#47459)

2024-10-10 21:33:49 +00:00

sessions_test.go

feat: configurable key algorithms for web sessions (#44109)

2024-07-16 05:08:56 +00:00

sessions.go

support split SSH/TLS keys in /webapi/mfa/login/finish (#45683)

2024-08-23 20:25:34 +00:00

sign.go

split database CA into server/client CAs (#35949)

2024-01-14 23:53:24 +00:00

spiffe_test.go

Workload Identity: JWT SVID OIDC compatability (#47079)

2024-10-08 07:25:38 +00:00

spiffe.go

Workload Identity: JWT SVID OIDC compatability (#47079)

2024-10-08 07:25:38 +00:00

terminal_test.go

Reduce tsh binary size (#41743)

2024-05-21 19:42:27 +00:00

terminal.go

Reduce web SSH session log spam (#49521)

2024-12-02 13:58:34 +00:00

tty_playback_test.go

tty_playback: Fix handlePlaybackAction panic on unit16 overflow (#36409)

2024-01-08 18:56:45 +00:00

tty_playback.go

Propogate context for better span correlation of recording viewing (#49142)

2024-11-21 13:37:31 +00:00

user_groups.go

…

userevent.go

…

userpreferences.go

add sticky mode support to sidenav (#48326)

2024-11-13 00:35:50 +00:00

users_test.go

User traits editor UI (#42620)

2024-06-14 02:07:19 +00:00

users.go

enforce a smaller read limit on HTTP request reads for endpoints that create or update resources (#47416)

2024-10-10 17:31:13 +00:00

usertasks_test.go

Create DiscoverEC2 User Tasks when Auto Discover fails on EC2 instances (#47064)

2024-10-16 10:15:09 +00:00

usertasks.go

WebAPI: list User Tasks and mark as resolved (#47329)

2024-10-09 11:09:00 +00:00

web.go

Replace constants from trace with equivalents defined in teleport (#39307)

2024-03-14 13:04:29 +00:00

ws_io.go

Reduce tsh binary size (#41743)

2024-05-21 19:42:27 +00:00

yaml_test.go

Add yaml parsing and yamilfying access monitoring rule in webapi (#40936)

2024-05-01 17:50:57 +00:00

yaml.go

enforce a smaller read limit on HTTP request reads for endpoints that create or update resources (#47416)

2024-10-10 17:31:13 +00:00