rosstimothy e82eceb456 Make resolved access requests immutable (#66736) ...

Prevent access requests in APPROVED, DENIED, or PROMOTED states from
being updated through SetAccessRequestState, including same-state
updates that could otherwise mutate resolution metadata.

2026-05-28 14:11:41 +00:00

..

accessmonitoringrules/accessmonitoringrulesv1

…

accesspoint

remove workload cluster cache (#65474)

2026-05-07 16:02:12 +00:00

appauthconfig/appauthconfigv1

Remove authorization_header option from app auth config JWT (#64350)

2026-03-06 18:34:59 +00:00

authcatest

Add AppClient CA (#66273)

2026-04-30 19:05:23 +00:00

authclient

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

authtest

remove workload cluster cache (#65474)

2026-05-07 16:02:12 +00:00

autoupdate/autoupdatev1

Stop consuming global modules in auth packages (#65883)

2026-04-20 17:01:56 +00:00

clusterconfig/clusterconfigv1

[scopes] improve unpinned scoped read abstraction to prevent misuse (#66235)

2026-04-28 23:40:12 +00:00

crownjewel

…

dbobject/dbobjectv1

…

dbobjectimportrule/dbobjectimportrulev1

…

delegation/delegationv1

Add tsh delegation create-session command (#65029)

2026-05-05 16:17:50 +00:00

discoveryconfig/discoveryconfigv1

Rename DiscoveryIACToolLabel to generic IACToolTerraform (#65809)

2026-04-17 18:05:32 +00:00

dynamicwindows/dynamicwindowsv1

…

gitserver/gitserverv1

Add paginated ListAuthServers/ListProxies (#61702)

2025-12-12 21:42:28 +00:00

grpcclientconfig/grpcclientconfigv1

auth: add grpc service config discovery api (#62937)

2026-02-17 16:17:50 +00:00

healthcheckconfig/healthcheckconfigv1

Enable health checks for Kubernetes with virtual defaults (#60544)

2025-10-27 17:19:06 +00:00

integration

Stop consuming global modules in auth packages (#65883)

2026-04-20 17:01:56 +00:00

internal

Add scope support to OpenSSH nodes (#64819)

2026-05-19 18:41:29 +00:00

inventory/inventoryv1

implement inventorycache for instances (#60535)

2025-12-01 18:49:08 +00:00

issuance/v1

MWI Scopes[3]: Introduce IssuanceService (#65312)

2026-04-09 15:47:49 +00:00

join

Update error messages to remove duplicate strings (#65740)

2026-04-14 12:55:22 +00:00

keygen

Inject modules into keygen (#62843)

2026-01-16 18:52:50 +00:00

keystore

Initialize keystore sign and decrypt metrics to zero at startup and register missing decrypt metric collectors (#65857)

2026-04-23 19:19:08 +00:00

kubewaitingcontainer/kubewaitingcontainerv1

…

linuxdesktop/linuxdesktopv1

Add LinuxDesktop resource to unified resources (#63101)

2026-04-28 20:57:34 +00:00

loginrule/loginrulev1

…

machineid

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

mfa

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

mfatypes

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

migration

Inject modules into keygen (#62843)

2026-01-16 18:52:50 +00:00

mocku2f

Changes to support login loadtest agent (#62075)

2025-12-15 12:46:21 +00:00

moderation

feat: expand Session recording RBAC support (#58114)

2025-08-29 19:17:50 +00:00

notifications/notificationsv1

Deflake TestCreateAccessListReminderNotifications (#61826)

2025-12-02 16:26:08 +00:00

okta

…

presence/presencev1

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

recordingencryption

Add metadata/thumbnail generation for desktop recordings (#65381)

2026-05-07 11:23:04 +00:00

recordingmetadata

Add metadata/thumbnail generation for desktop recordings (#65381)

2026-05-07 11:23:04 +00:00

scopes

Change from compare failed error to not found (#66145)

2026-04-24 19:00:53 +00:00

secreports/secreportsv1

allow custom error for disable secreports service (#64290)

2026-03-05 18:06:02 +00:00

stableunixusers

prevent unauthorized uploads via encrypted recordings service (#66081)

2026-04-27 09:40:39 +00:00

state

Set Teleport version in SSH clients (#65004)

2026-04-07 18:06:00 +00:00

storage

Add basic support for bound_keypair joining for standard agent types (#63962)

2026-04-09 23:56:39 +00:00

summarizer

Expose a flag that tells if session summarizer is enabled (#57992)

2025-08-20 17:04:12 +00:00

testauthority

Clean up modules TODOs (#63085)

2026-01-26 13:49:00 +00:00

touchid

…

trust/trustv1

[scopes] improve unpinned scoped read abstraction to prevent misuse (#66235)

2026-04-28 23:40:12 +00:00

userloginstate

Stop consuming global modules in auth packages (#65883)

2026-04-20 17:01:56 +00:00

userpreferences/userpreferencesv1

…

userprovisioning/userprovisioningv2

Remove duplicate words in logging (#64656)

2026-03-19 20:29:05 +00:00

users/usersv1

Add traits matching logic for users (#66020)

2026-05-05 23:42:31 +00:00

usertasks/usertasksv1

Initialize usage reporting via plugin registry after auth server setup (#64265)

2026-03-26 11:46:12 +00:00

vnetconfig/vnetconfigv1

[scopes] scope-aware authz in vnetconfig service (#66268)

2026-05-06 23:43:09 +00:00

webauthn

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

webauthncli

…

webauthntypes

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

webauthnwin

fix: Set the security-key hint when using cross-platform mode on Windows (#62105)

2025-12-10 13:10:49 +00:00

workloadcluster/workloadclusterv1

Add workload cluster service (#62865)

2026-01-28 16:35:22 +00:00

access_request_test.go

Make resolved access requests immutable (#66736)

2026-05-28 14:11:41 +00:00

access_test.go

Remove (auth.Server) SetClock (#60526)

2025-10-29 15:19:44 +00:00

access.go

Adds Conditional Update support for Access Lists with members (#60309)

2025-10-28 23:37:02 +00:00

accountrecovery_test.go

Inject modules into the auth server (#62858)

2026-04-09 20:54:27 +00:00

accountrecovery.go

Inject modules into the auth server (#62858)

2026-04-09 20:54:27 +00:00

apiserver_test.go

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

apiserver.go

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

app_access_aws_credentials.go

Move auth.certRequest into internal package so it can be used in sub-packages (#64783)

2026-03-19 18:49:04 +00:00

auth_iamjoin_organizations_test.go

Inject modules into the auth server (#62858)

2026-04-09 20:54:27 +00:00

auth_login_test.go

Fix headless login when in-band MFA is required (#66168)

2026-05-08 17:25:55 +00:00

auth_test.go

Add scope support to OpenSSH nodes (#64819)

2026-05-19 18:41:29 +00:00

auth_with_roles_okta_rbac_test.go

Run auth tests in parallel (#64066)

2026-03-02 14:01:09 +00:00

auth_with_roles_test.go

Prevent users from creating apps for the beam app service (#66937)

2026-05-22 17:26:19 +00:00

auth_with_roles.go

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

auth.go

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

autoupdate_agent_version_report_test.go

Run auth tests in parallel (#64066)

2026-03-02 14:01:09 +00:00

autoupdate_agent_version_report.go

…

autoupdate_rollout_test.go

Run auth tests in parallel (#64066)

2026-03-02 14:01:09 +00:00

autoupdate_rollout.go

Fix autoupdate canary sampling for the catch-all group (#57035)

2025-07-22 16:36:39 +00:00

bot_test.go

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

bot.go

MWI Scopes[5]: Bot Instances (#65318)

2026-04-16 08:28:46 +00:00

bound_keypair_tokens.go

feat: bound keypair support in new join service (#58963)

2025-10-01 19:48:51 +00:00

browser_mfa_test.go

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

browser_mfa.go

[Browser MFA] Add browser MFA path to MFA finish flow (#64523)

2026-03-28 11:36:18 +00:00

ca_override.go

Refactor duplicated CA override logic into lib/subca (#67023)

2026-05-27 14:32:19 +00:00

client_tls_config_generator.go

…

connector_monitor_test.go

Add alerts for expiring/expired SAML signing certs (#64504)

2026-03-25 09:25:07 +00:00

connector_monitor.go

Update docs link for SAML cert expiry alert (#65264)

2026-04-02 13:47:50 +00:00

db_test.go

Remove the subca.Enabled() feature guard (#66916)

2026-05-27 13:43:58 +00:00

db.go

Refactor duplicated CA override logic into lib/subca (#67023)

2026-05-27 14:32:19 +00:00

dbsc.go

Add Device Bound Session Credentials to App Access (#65431)

2026-04-28 22:35:47 +00:00

desktop_test.go

Remove the subca.Enabled() feature guard (#66916)

2026-05-27 13:43:58 +00:00

desktop.go

Refactor duplicated CA override logic into lib/subca (#67023)

2026-05-27 14:32:19 +00:00

export_test.go

Remove the subca.Enabled() feature guard (#66916)

2026-05-27 13:43:58 +00:00

externalauditstorage.go

…

github_test.go

Inject modules into the auth server (#62858)

2026-04-09 20:54:27 +00:00

github.go

Support username in role templates and expressions (#64888)

2026-04-15 16:29:41 +00:00

grpcserver_eventstream_test.go

Deny watchers for cert_authority_override on OSS Auth (#66644)

2026-05-15 20:56:52 +00:00

grpcserver_test.go

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

grpcserver.go

Add an optional unstable rate limit for ResolveSSHTarget (#66952)

2026-05-22 23:03:52 +00:00

init_test.go

Add preset role "access-plugin-with-review" (#66678)

2026-05-14 21:47:34 +00:00

init_windows_ca_test.go

Create the WindowsCA on cluster startup (#62877)

2026-01-16 18:18:14 +00:00

init_windows_ca.go

Create the WindowsCA on cluster startup (#62877)

2026-01-16 18:18:14 +00:00

init.go

Add preset role "access-plugin-with-review" (#66678)

2026-05-14 21:47:34 +00:00

join_azure_devops.go

azure devops support in new join service (#61545)

2025-11-21 17:13:10 +00:00

join_azure_legacy.go

Azure method support in new join service (#61129)

2025-12-10 18:40:33 +00:00

join_bitbucket.go

Port bitbucket join method to the new join service (#61082)

2025-11-08 00:50:04 +00:00

join_bound_keypair_adapter.go

feat: bound keypair support in new join service (#58963)

2025-10-01 19:48:51 +00:00

join_bound_keypair_test.go

Support verifying standard agent UUIDs for bound keypair joining (#64351)

2026-04-02 01:48:29 +00:00

join_circleci.go

Port circleci join method to new join service (#61130)

2025-11-18 02:42:24 +00:00

join_ec2.go

feat: EC2 method support in new join service (#60385)

2025-10-23 21:58:20 +00:00

join_env0.go

Add Env0 join method (#60386)

2025-10-27 23:02:20 +00:00

join_gcp.go

Port gcp join method to new join service (#61205)

2025-11-18 00:46:04 +00:00

join_github.go

Update tests to inject modules instead of relying on modulestest.SetTestModules (#65976)

2026-04-22 17:38:51 +00:00

join_gitlab.go

Port gitlab join method to new join service (#61203)

2025-11-13 02:12:57 +00:00

join_iam.go

IAM Joins by organization with support for integration credentials (#62405)

2026-01-15 18:51:55 +00:00

join_kubernetes.go

Port kubernetes join method family to new join service (#61464)

2025-12-02 00:57:53 +00:00

join_oracle_test.go

Inject modules into keygen (#62843)

2026-01-16 18:52:50 +00:00

join_oracle.go

feat: new oracle join method (#60601)

2025-11-03 17:52:06 +00:00

join_spacelift.go

Update tests to inject modules instead of relying on modulestest.SetTestModules (#65976)

2026-04-22 17:38:51 +00:00

join_terraformcloud.go

Update tests to inject modules instead of relying on modulestest.SetTestModules (#65976)

2026-04-22 17:38:51 +00:00

join_test.go

Run auth tests in parallel (#64066)

2026-03-02 14:01:09 +00:00

join_tpm.go

Update tests to inject modules instead of relying on modulestest.SetTestModules (#65976)

2026-04-22 17:38:51 +00:00

join.go

Enforce join token locks for agents (#65818)

2026-04-20 22:57:58 +00:00

methods_test.go

Run auth tests in parallel (#64066)

2026-03-02 14:01:09 +00:00

methods.go

Fix headless login when in-band MFA is required (#66168)

2026-05-08 17:25:55 +00:00

middleware_test.go

Run auth tests in parallel (#64066)

2026-03-02 14:01:09 +00:00

middleware.go

limiter: Fix custom rate bucket clobbering (#64828)

2026-03-31 01:37:58 +00:00

moderated_sessions_test.go

Inject modules into the auth server (#62858)

2026-04-09 20:54:27 +00:00

notification_test.go

Close auth servers in tests (#62051)

2025-12-14 20:48:53 +00:00

oidc.go

…

password_test.go

fix: apply Access List grants in ChangeUserAuthentication (#65724)

2026-04-21 23:27:45 +00:00

password.go

fix: apply Access List grants in ChangeUserAuthentication (#65724)

2026-04-21 23:27:45 +00:00

periodic_test.go

Run auth tests in parallel (#64066)

2026-03-02 14:01:09 +00:00

periodic.go

Add status label to teleport_upgrader_counts metrics (#60119)

2025-10-16 18:16:09 +00:00

recording_authorizer_test.go

Prefer authtest.AuthServer in tests that don't make API calls (#64065)

2026-03-02 22:05:12 +00:00

recording_authorizer.go

Implement the session recording metadata service (#58031)

2025-08-19 16:32:19 +00:00

recovery_codes_test.go

Improve performance of recovery code generation (#64063)

2026-03-02 15:04:35 +00:00

register.go

adding immutable labels to scoped tokens and host certificates (#62941)

2026-02-06 20:57:03 +00:00

requestable_roles_test.go

Run auth tests in parallel (#64066)

2026-03-02 14:01:09 +00:00

rotate.go

Inject modules into the auth server (#62858)

2026-04-09 20:54:27 +00:00

saml.go

Add APIs for handling Entra ID groups overage on SAML connectors (#65653)

2026-04-21 13:32:53 +00:00

server_info_test.go

…

server_info.go

…

server_monitor.go

…

services.go

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

sessions_test.go

Fix Access Graph API sessions expiring at bearer-token TTL instead of session TTL (#66019)

2026-04-23 17:35:58 +00:00

sessions.go

Fix Access Graph API sessions expiring at bearer-token TTL instead of session TTL (#66019)

2026-04-23 17:35:58 +00:00

sso_diag_context_test.go

Run auth tests in parallel (#64066)

2026-03-02 14:01:09 +00:00

sso_diag_context.go

…

sso_mfa_test.go

[Browser MFA] Add browser MFA path to MFA finish flow (#64523)

2026-03-28 11:36:18 +00:00

sso_mfa.go

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

tls_test.go

Convert (Upsert/Delete)Proxy RPC from HTTP to gRPC (#66124)

2026-05-28 07:59:00 +00:00

transport_credentials_test.go

Run auth tests in parallel (#64066)

2026-03-02 14:01:09 +00:00

transport_credentials.go

scoped ssh access core (#60629)

2025-11-18 00:26:12 +00:00

trustedcluster_test.go

Inject modules into the auth server (#62858)

2026-04-09 20:54:27 +00:00

trustedcluster.go

Clean up unused symbols (#64445)

2026-03-09 22:07:12 +00:00

usage_test.go

Inject modules into the auth server (#62858)

2026-04-09 20:54:27 +00:00

user.go

…

usertoken_test.go

Prefer authtest.AuthServer in tests that don't make API calls (#64065)

2026-03-02 22:05:12 +00:00

usertoken.go

Add paginated ListAuthServers/ListProxies (#61702)

2025-12-12 21:42:28 +00:00

version.go

…

windows-configure-ad.ps1

…