teleport

expiry

Fix bug causing the expiry service to spin infinite loop (#63615 )

2026-02-18 14:35:58 +00:00

local

[scopes] feat: filter scoped roles by name (#65891 )

2026-04-27 23:35:37 +00:00

readonly

Database authorization resource consumption enhancements (#63878 )

2026-03-05 00:35:22 +00:00

samltest

Add alerts for expiring/expired SAML signing certs (#64504 )

2026-03-25 09:25:07 +00:00

testdata/roles

Add tests around Kubernetes CRD support in access request. (#55757 )

2025-07-31 13:08:42 +00:00

access_checker_test.go

Fix list resources when in-band MFA is required for all SSH connections (#65464 )

2026-04-16 14:57:19 +00:00

access_checker.go

Add LinuxDesktop gRPC and backend (#62974 )

2026-04-21 20:51:35 +00:00

access_graph_settings.go

[sec_scan][11] add AccessGraphSettings backend service (#44014 )

2024-07-17 15:30:27 +00:00

access_graph.go

[sec_scan][16] add methods to store/retrieve device assertion functions (#44081 )

2024-07-15 08:30:36 +00:00

access_list_test.go

feat: add scoped roles field to access list types (#63919 )

2026-03-10 23:29:33 +00:00

access_list.go

Access Lists: Add status fixing functions (#62090 )

2025-12-10 17:18:58 +00:00

access_monitoring_rules_test.go

access_monitoring_rules: Add timezone to schedules spec (#60067 )

2025-10-15 17:41:02 +00:00

access_monitoring_rules.go

access_monitoring_rules: Implement schedules conditions (#59044 )

2025-10-15 23:33:52 +00:00

access_request_cache_test.go

Modernize lib/client, lib/service, and lib/services (#55978 )

2025-06-23 01:31:21 +00:00

access_request_cache.go

Guard against nil in notifications and access request caches (#62834 )

2026-01-15 10:24:29 +00:00

access_request_test.go

Support username in role templates and expressions (#64888 )

2026-04-15 16:29:41 +00:00

access_request.go

Support username in role templates and expressions (#64888 )

2026-04-15 16:29:41 +00:00

access_test.go

…

access.go

Add Beam protobuf definition and backend service (#64863 )

2026-04-08 11:25:06 +00:00

app_test.go

fix: jwt token leak in audit event user_traits for app and mcp sessions (#66090 )

2026-04-23 23:42:30 +00:00

app.go

fix: jwt token leak in audit event user_traits for app and mcp sessions (#66090 )

2026-04-23 23:42:30 +00:00

appauthconfig_test.go

Add app auth config backend service (#61688 )

2025-12-03 23:09:01 +00:00

appauthconfig.go

Add app auth config sessions service, and implement create app session with JWT tokens (#62324 )

2026-01-13 19:51:13 +00:00

audit.go

Modernize lib/client, lib/service, and lib/services (#55978 )

2025-06-23 01:31:21 +00:00

authentication_test.go

feat: SSO MFA - Add ephemeral SSO MFA device (#46704 )

2024-10-16 22:24:07 +00:00

authentication.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

authority_test.go

Stop comparing CertAuthorityV2 with go-cmp (#64135 )

2026-02-27 23:24:02 +00:00

authority.go

Stop comparing CertAuthorityV2 with go-cmp (#64135 )

2026-02-27 23:24:02 +00:00

autoupdates.go

MWI: Generate AutoUpdateBotInstanceReport resource (#59738 )

2025-10-07 14:32:36 +00:00

backendinfo.go

Fix major version check for stateless environment (#52837 )

2025-05-05 22:51:24 +00:00

beam_test.go

Add Beam protobuf definition and backend service (#64863 )

2026-04-08 11:25:06 +00:00

beam.go

Beams service dependencies (#65524 )

2026-04-15 12:51:36 +00:00

bot_instance.go

MWI Scopes[5]: Bot Instances (#65318 )

2026-04-16 08:28:46 +00:00

cert_access_checker.go

scoped role reorg (#64973 )

2026-03-31 03:11:24 +00:00

clustername.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

configuration_test.go

Introduce modulestest package (#56721 )

2025-07-14 21:55:07 +00:00

configuration.go

adding support for static scoped tokens in the file config (#61266 )

2026-01-28 14:09:57 +00:00

connection_diagnostic.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

crown_jewel.go

Remove superfluous DeleteAll methods (#54867 )

2025-05-16 13:46:23 +00:00

crown_jewels_test.go

Add Query field to CrownJewel specifications (#44853 )

2024-08-01 17:56:34 +00:00

database_test.go

Multiple hostnames & retries support for Oracle (#59901 )

2025-10-16 07:07:05 +00:00

database.go

Multiple hostnames & retries support for Oracle (#59901 )

2025-10-16 07:07:05 +00:00

databaseobject.go

Cache support for database objects (#41692 )

2024-05-27 11:36:58 +00:00

databaseobjectimportrule.go

Change the tctl format for database_object_import_rule resource (#39764 )

2024-04-04 11:10:40 +00:00

databaseserver.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

databaseservice_test.go

…

databaseservice.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

delegation_sessions_test.go

Add DelegationSession resource and local service (#64772 )

2026-03-26 16:55:03 +00:00

delegation_sessions.go

Add Beam protobuf definition and backend service (#64863 )

2026-04-08 11:25:06 +00:00

desktop.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

device_test.go

…

device.go

[sec_scan][16] add methods to store/retrieve device assertion functions (#44081 )

2024-07-15 08:30:36 +00:00

discoveryconfig_test.go

Discovery Config Status: add sync and end time per resource type (#64956 )

2026-04-02 13:12:31 +00:00

discoveryconfig.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

doc.go

…

dynamic_desktop.go

Remove superfluous DeleteAll methods (#54867 )

2025-05-16 13:46:23 +00:00

externalauditstorage_test.go

…

externalauditstorage.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

fanoutv2_test.go

Modernize lib/client, lib/service, and lib/services (#55978 )

2025-06-23 01:31:21 +00:00

fanoutv2.go

Modernize lib/client, lib/service, and lib/services (#55978 )

2025-06-23 01:31:21 +00:00

fuzz_test.go

Fix App public_addr allows setting a conflicting hostname with the proxy when using capital letters (#61123 )

2025-11-12 13:01:15 +00:00

git_server.go

Remove superfluous DeleteAll methods (#54867 )

2025-05-16 13:46:23 +00:00

github_test.go

Introduce modulestest package (#56721 )

2025-07-14 21:55:07 +00:00

github.go

allow OSS GitHub connector with public github endpoint (#55405 )

2025-06-09 15:19:46 +00:00

headlessauthn_test.go

Update error messages to remove duplicate strings (#65740 )

2026-04-14 12:55:22 +00:00

headlessauthn.go

Update error messages to remove duplicate strings (#65740 )

2026-04-14 12:55:22 +00:00

health_check_config_test.go

Enable health checks for Kubernetes with virtual defaults (#60544 )

2025-10-27 17:19:06 +00:00

health_check_config.go

Add health checks to Kubernetes agent and proxy (#59565 )

2025-10-07 22:18:32 +00:00

identity_test.go

[chore] clean up DELETE IN 18 comments (#55118 )

2025-05-24 17:30:24 +00:00

identity.go

Add Beam protobuf definition and backend service (#64863 )

2026-04-08 11:25:06 +00:00

identitycenter_test.go

Convert Identity Center Accounts to Apps in the UnifiedResourceCache (#54911 )

2025-05-20 20:57:52 +00:00

identitycenter.go

Remove temporary AWS IC APIs (#58519 )

2025-09-17 16:16:28 +00:00

impersonate_test.go

…

impersonate.go

Modernize lib/client, lib/service, and lib/services (#55978 )

2025-06-23 01:31:21 +00:00

installer.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

integration_test.go

…

integration.go

Adding OIDC auth functionality to the Azure integration (#51219 )

2025-01-23 18:03:16 +00:00

inventory.go

…

kube_access_checker.go

adding scope support to ListResources RPC (#65685 )

2026-04-24 00:40:55 +00:00

kubernetes_test.go

Reduce exposure of lib/cloud/gcp (#41678 )

2024-05-17 10:29:02 +00:00

kubernetes.go

[api] Add ListKubernetesClusters (#59820 )

2025-10-08 15:01:19 +00:00

kubewaitingcontainer.go

refactor common proto resource (un)marshallers into generic functions (#41562 )

2024-05-15 18:18:03 +00:00

label_expressions_test.go

Add set support in labels expressions (#65863 )

2026-04-18 14:41:24 +00:00

label_expressions.go

Add set support in labels expressions (#65863 )

2026-04-18 14:41:24 +00:00

license_test.go

chore: Bump golangci-lint to v2.7.2 (#62066 )

2025-12-09 17:59:21 +00:00

license.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

linux_desktop_test.go

Add LinuxDesktop gRPC and backend (#62974 )

2026-04-21 20:51:35 +00:00

linux_desktop.go

Add LinuxDesktop gRPC and backend (#62974 )

2026-04-21 20:51:35 +00:00

lock_test.go

MWI: Add lock targets for join token name and bot instance ID (#56021 )

2025-06-26 22:58:02 +00:00

lock.go

MWI: Add lock targets for join token name and bot instance ID (#56021 )

2025-06-26 22:58:02 +00:00

map_test.go

chore: Bump golangci-lint to v2.7.2 (#62066 )

2025-12-09 17:59:21 +00:00

matchers_test.go

Simplify Azure matchers from dynamic configs (#66219 )

2026-04-28 15:27:58 +00:00

matchers.go

Simplify Azure matchers from dynamic configs (#66219 )

2026-04-28 15:27:58 +00:00

namespace.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

networking.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

notifications_cache_test.go

Modernize lib/client, lib/service, and lib/services (#55978 )

2025-06-23 01:31:21 +00:00

notifications_cache.go

Guard against nil in notifications and access request caches (#62834 )

2026-01-15 10:24:29 +00:00

notifications_test.go

implement listing notifications for a user with matching (#39942 )

2024-05-15 19:26:58 +00:00

notifications.go

Remove superfluous DeleteAll methods (#54867 )

2025-05-16 13:46:23 +00:00

oidc_test.go

Bump golangci-lint to v2 (#54410 )

2025-05-07 22:14:51 +00:00

oidc.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

okta_test.go

…

okta.go

Okta: Add assignments Upsert/UpdateCAS methods (#65590 )

2026-04-17 13:24:18 +00:00

parser_test.go

fix: session trackers participants inconsistencies (#58853 )

2025-09-08 16:07:11 +00:00

parser.go

fix: session trackers participants inconsistencies (#58853 )

2025-09-08 16:07:11 +00:00

plugin_data.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

plugin_static_credentials_test.go

GitHub Proxy part 3.5: caching PluginStaticCredentials (#49472 )

2024-12-03 15:32:00 +00:00

plugin_static_credentials.go

Allow unknown fields when unmarshaling protojson resources (#53469 )

2025-03-27 14:35:37 +00:00

plugins_test.go

Fix Jamf plugin duration serialization (#65944 )

2026-04-24 15:10:15 +00:00

plugins.go

Add PluginsGetter to auth Cache (#60268 )

2025-10-16 22:20:51 +00:00

presence.go

Remove unused DeleteAllProxies RPC/Method (#65969 )

2026-04-22 09:44:44 +00:00

presets_test.go

add scoped role assignments to terraform (#65632 )

2026-04-27 18:13:23 +00:00

presets.go

add scoped role assignments to terraform (#65632 )

2026-04-27 18:13:23 +00:00

process_test.go

Remove unused ProcessReloadContext (#61136 )

2025-11-07 21:14:10 +00:00

process.go

Remove unused ProcessReloadContext (#61136 )

2025-11-07 21:14:10 +00:00

provisioning_test.go

fixing scoped kube token validation of service accounts (#64952 )

2026-03-27 13:45:26 +00:00

provisioning.go

Add Beam protobuf definition and backend service (#64863 )

2026-04-08 11:25:06 +00:00

provisioningstates.go

Remove temporary AWS IC APIs (#58519 )

2025-09-17 16:16:28 +00:00

reconciler_test.go

Remove services.CompareResources (#65151 )

2026-04-16 20:10:09 +00:00

reconciler.go

Add Reconciler stats (#66161 )

2026-04-28 15:29:19 +00:00

recording_encryption.go

adding new protos for rotated keys and the local service for interacting (#57576 )

2025-08-14 18:28:18 +00:00

relay_server.go

relay_server definition, CRUD api and caching (#55441 )

2025-06-17 12:04:54 +00:00

remotecluster.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

resource_constraints_test.go

[Access Requests] Support SSH node resource constraints (#64403 )

2026-04-01 21:31:16 +00:00

resource_constraints.go

[Access Requests] Support SSH node resource constraints (#64403 )

2026-04-01 21:31:16 +00:00

resource_test.go

Register ValidatedMFAChallenge resource to cache. Add generic watcher for leaf cluster replication. (#65437 )

2026-04-13 18:45:16 +00:00

resource.go

sessionsearch[17]: Add tctl recordings TUI for browsing session summaries (#66016 )

2026-04-27 21:46:54 +00:00

restrictions.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

role_test.go

Support username in role templates and expressions (#64888 )

2026-04-15 16:29:41 +00:00

role.go

Prevent teleport built-in roles from accessing audit log and sessions (#66079 )

2026-04-24 16:41:58 +00:00

saml_idp_service_provider_test.go

move acs_url and relay_state input validation to rpc create and update methods (#46833 )

2024-09-20 23:59:16 +00:00

saml_idp_service_provider.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

saml_test.go

Add APIs for handling Entra ID groups overage on SAML connectors (#65653 )

2026-04-21 13:32:53 +00:00

saml.go

Add APIs for handling Entra ID groups overage on SAML connectors (#65653 )

2026-04-21 13:32:53 +00:00

scim.go

Add SCIM PATCH Proto (#61427 )

2025-11-21 14:25:54 +00:00

scoped_access_checker_context.go

MWI Scopes[1]: Bot resource and RPCs (#64551 )

2026-04-09 10:16:31 +00:00

scoped_access_checker.go

adding scope support to ListResources RPC (#65685 )

2026-04-24 00:40:55 +00:00

scoped_tokens.go

MWI Scopes[4]: Scoped bot joining and bound keypair support (#65366 )

2026-04-16 02:06:24 +00:00

scoped.go

relax scoped resource write validation (#65333 )

2026-04-07 17:28:11 +00:00

secreports_test.go

…

secreports.go

Convert security reports to new in memory cache collection (#54391 )

2025-05-23 16:31:56 +00:00

semaphore_test.go

…

semaphore.go

Update the semaphore expiry in AcquireSemaphoreWithRetry (#59372 )

2025-09-22 08:15:23 +00:00

server_info.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

server.go

adding immutable labels to scoped tokens and host certificates (#62941 )

2026-02-06 20:57:03 +00:00

servers_test.go

adding immutable labels to scoped tokens and host certificates (#62941 )

2026-02-06 20:57:03 +00:00

services_test.go

Introduce logtest package (#56741 )

2025-07-15 18:11:10 +00:00

services.go

Eliminate services.Services interface and XXXClient() methods on auth.Services (#45058 )

2024-08-06 17:41:52 +00:00

session_recording_test.go

extend session RBAC for SearchSessionEvents (#58409 )

2025-09-01 13:41:15 +00:00

session_recording.go

extend session RBAC for SearchSessionEvents (#58409 )

2025-09-01 13:41:15 +00:00

session.go

[api] Add ListWebTokens (#59895 )

2025-10-15 09:57:26 +00:00

sessionrecording_test.go

Add missing handling for recording encryption configs and keys (#57279 )

2025-08-13 15:14:20 +00:00

sessionrecording.go

Add missing handling for recording encryption configs and keys (#57279 )

2025-08-13 15:14:20 +00:00

sessiontracker.go

fix: session trackers participants inconsistencies (#58853 )

2025-09-08 16:07:11 +00:00

sigstore_policies_test.go

Workload Identity: SigstorePolicy validation improvements (#54484 )

2025-05-06 10:38:01 +00:00

sigstore_policies.go

Workload Identity: SigstorePolicy validation improvements (#54484 )

2025-05-06 10:38:01 +00:00

spiffe_federations_test.go

Modernize lib/client, lib/service, and lib/services (#55978 )

2025-06-23 01:31:21 +00:00

spiffe_federations.go

Workload Identity: SPIFFE Federation Syncer (#45586 )

2024-08-30 10:04:34 +00:00

ssh_access_checker_test.go

Scoped role options (#65340 )

2026-04-08 22:24:55 +00:00

ssh_access_checker.go

Scoped role options (#65340 )

2026-04-08 22:24:55 +00:00

sso_mfa.go

[Browser MFA] Add Browser MFA to challenge request flow (#63936 )

2026-03-26 12:24:12 +00:00

stableunixusers.go

Stable UNIX users: storage and auth API (#51102 )

2025-01-28 17:08:20 +00:00

statichostuser_test.go

Add StaticHostUserV2 (#46038 )

2024-09-04 21:16:11 +00:00

statichostuser.go

Bump golangci-lint to v2 (#54410 )

2025-05-07 22:14:51 +00:00

statictokens.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

status.go

Delete StatusInternal which is unused (#63226 )

2026-01-28 17:28:36 +00:00

subca_test.go

Add dynamic marshalers for CertAuthorityOverride (#65858 )

2026-04-17 14:44:02 +00:00

subca.go

Implement SubCAServiceGetter in lib/auth/authclient.ClientI (#65759 )

2026-04-16 13:40:52 +00:00

summarizer_test.go

Fix inference policy filter validation (#58722 )

2025-09-08 16:07:06 +00:00

summarizer.go

sessionsearch[3]: wire summarizer resources into the cache layer (#64560 )

2026-04-13 11:59:46 +00:00

traits_test.go

…

traits.go

Convert lib/services to use slog (#50348 )

2024-12-21 02:06:10 +00:00

trust.go

Remove unused DeleteAllTunnelConnections & DeleteTunnelConnections RPCs (#65932 )

2026-04-20 15:01:12 +00:00

trustedcluster.go

Adds services for pruning roles when requesting remote resources. (#57227 )

2025-09-10 04:03:19 +00:00

tunnel_test.go

Modernize lib/client, lib/service, and lib/services (#55978 )

2025-06-23 01:31:21 +00:00

tunnel.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

tunnelconn.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

ui_config.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

unified_resource_test.go

Deflake TestUnifiedResourceCacheIteration (#64857 )

2026-03-19 19:37:36 +00:00

unified_resource.go

Add LLM inference endpoint configuration (#65688 )

2026-04-16 21:58:45 +00:00

user_login_state_test.go

…

user_login_state.go

Extend user_login_state with SAML connector info and grants (#58581 )

2025-12-10 17:20:55 +00:00

user_task_test.go

User Tasks: add discover-ec2 task type (#47062 )

2024-10-04 11:05:27 +00:00

user_task.go

Remove superfluous DeleteAll methods (#54867 )

2025-05-16 13:46:23 +00:00

user_test.go

fix: session trackers participants inconsistencies (#58853 )

2025-09-08 16:07:11 +00:00

user.go

Stop comparing Users with go-cmp (#64127 )

2026-03-12 20:45:35 +00:00

useracl_test.go

Add inference resource access controls to UserACL (#63136 )

2026-01-27 12:53:21 +00:00

useracl.go

implement managed updates UI (#62985 )

2026-01-29 22:43:22 +00:00

usergroup_test.go

…

usergroup.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

userpreferences.go

…

usertoken_test.go

…

usertoken.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

usertokensecrets.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

vnet_config.go

[vnet] leaf cluster support (#42600 )

2024-06-11 10:10:13 +00:00

watcher_test.go

Fix OktaAssignment and AccessRequest watcher write race (#65241 )

2026-04-01 11:33:30 +00:00

watcher.go

fix: allow joining with CA pin when any lock is in force (#65992 )

2026-04-22 23:15:43 +00:00

workload_identity_test.go

Modernize lib/client, lib/service, and lib/services (#55978 )

2025-06-23 01:31:21 +00:00

workload_identity_x509_overrides.go

SPIFFE X.509 issuer override: issuance (#53145 )

2025-04-11 13:50:38 +00:00

workload_identity_x509_revocation_test.go

Modernize lib/client, lib/service, and lib/services (#55978 )

2025-06-23 01:31:21 +00:00

workload_identity_x509_revocation.go

Add backend WorkloadIdentityX509Revocations service (#51997 )

2025-02-12 11:06:53 +00:00

workload_identity.go

Add Beam protobuf definition and backend service (#64863 )

2026-04-08 11:25:06 +00:00

workloadcluster_test.go

Add workload cluster service (#62865 )

2026-01-28 16:35:22 +00:00

workloadcluster.go

Add workload cluster service (#62865 )

2026-01-28 16:35:22 +00:00

wrappers_test.go

…