Zac Bergquist de64834bf5 Fix copy-paste bug in proxy cluster dialer (#67410) ...

In the fallback path when addresses are pulled from the context,
we were incorrectly setting the destination address to the source
address, which results in incorrect auditing.

2026-06-08 15:27:31 +00:00

..

app

app: Preserve URL fragment through auth redirect (#65738)

2026-05-06 04:48:35 +00:00

desktop

Introduce logtest package (#56741)

2025-07-15 18:11:10 +00:00

mfajson

Add metadata/thumbnail generation for desktop recordings (#65381)

2026-05-07 11:23:04 +00:00

scripts

app: Consolidate app name and public_addr validation (#65728)

2026-05-20 05:04:19 +00:00

session

Set MaxAge in web cookie if time until expiry is > 0 (#58293)

2025-08-24 19:28:38 +00:00

templates

feat: GHA + K8s guide improvements (#62778)

2026-01-27 13:11:15 +00:00

terminal

Database Web UI REPL handles window resizing (#58641)

2025-09-08 20:18:53 +00:00

testdata/TestMachineIDWizard

feat: GHA + K8s guide improvements (#62778)

2026-01-27 13:11:15 +00:00

ui

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

addr_test.go

…

addr.go

…

apiserver_login_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

apiserver_ping_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

apiserver_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

apiserver.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

apps.go

Remove duplicate words in logging (#64656)

2026-03-19 20:29:05 +00:00

autoupdate_rfd109.go

Move autoupdate version resolving logic in a separate package (#59432)

2025-09-23 19:52:53 +00:00

autoupdate_rfd184.go

Move autoupdate version resolving logic in a separate package (#59432)

2025-09-23 19:52:53 +00:00

brotlihandler.go

Pre-compress web assets using Brotli (#57969)

2025-08-19 09:56:28 +00:00

browser_mfa.go

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

ca_export_test.go

Add support for JSON format to '/webapi/auth/export' endpoint (#50193)

2025-02-19 21:41:35 +00:00

ca_export.go

Add support for JSON format to '/webapi/auth/export' endpoint (#50193)

2025-02-19 21:41:35 +00:00

cachehandler_test.go

…

cachehandler.go

…

conn_upgrade_test.go

Remove legacy ALPN connection upgrade support (#63339)

2026-02-02 15:36:25 +00:00

conn_upgrade.go

Remove legacy ALPN connection upgrade support (#63339)

2026-02-02 15:36:25 +00:00

connection_diagnostic.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

connectmycomputer_test.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

connectmycomputer.go

…

databases_test.go

Database service name validation for WebUI connections (#65432)

2026-04-23 17:06:53 +00:00

databases.go

Properly escape resource names in predicate expressions (#67227)

2026-05-29 13:38:48 +00:00

desktop_playback.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

desktop_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

desktop.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

device_trust_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

device_trust.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

discoveryconfig_test.go

Migrate all tests to use lib/auth/authtest helpers (#57030)

2025-07-24 18:27:14 +00:00

discoveryconfig.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

features_test.go

Fix lib/web feature watcher panic on nil cluster features. (#66858)

2026-05-19 19:37:05 +00:00

features.go

Fix lib/web feature watcher panic on nil cluster features. (#66858)

2026-05-19 19:37:05 +00:00

files.go

Add scope support to OpenSSH nodes (#64819)

2026-05-19 18:41:29 +00:00

git_servers_test.go

GitHub proxy: web apis for enrolment (#51423)

2025-02-03 19:12:08 +00:00

git_servers.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

headless_test.go

Fix panic when rejecting a headless request (#63189)

2026-02-03 09:41:25 +00:00

headless.go

Fix panic when rejecting a headless request (#63189)

2026-02-03 09:41:25 +00:00

integrations_awsoidc_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

integrations_awsoidc.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

integrations_awsra_test.go

app: Consolidate app name and public_addr validation (#65728)

2026-05-20 05:04:19 +00:00

integrations_awsra.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

integrations_azureoidc_test.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

integrations_azureoidc.go

WebAPI: endpoint that returns the oneoff command for AWS Roles Anywhere set up (#54853)

2025-05-28 08:30:03 +00:00

integrations_samlidp.go

WebAPI: endpoint that returns the oneoff command for AWS Roles Anywhere set up (#54853)

2025-05-28 08:30:03 +00:00

integrations_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

integrations.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

inventory_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

inventory.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

join_tokens_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

join_tokens.go

Add support for Azure tenant ID join rules (#65866)

2026-04-21 17:26:50 +00:00

jwt.go

…

kube.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

latency.go

Add latency detector for desktop sessions (#52827)

2025-05-07 08:26:04 +00:00

login_helper_test.go

…

machineid_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

machineid.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

managed_updates_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

managed_updates.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

mfa_codec.go

Implement TDPB Support for Proxy (#62591)

2026-01-26 15:00:24 +00:00

mfa.go

[Browser MFA] Add tsh callback handling for webauthn response (#64461)

2026-03-27 07:38:58 +00:00

mwi_wizards_test.go

feat: GHA + K8s guide improvements (#62778)

2026-01-27 13:11:15 +00:00

mwi_wizards.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

notifications_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

oidcidp_test.go

Inject insecure mode instead of relying on global variable (#63825)

2026-03-05 16:31:10 +00:00

oidcidp.go

Inject insecure mode instead of relying on global variable (#63825)

2026-03-05 16:31:10 +00:00

okta_test.go

…

okta.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

parse.go

Integration brief summaries returned by web listIntegrations. Updated integrations list issues and details to use the new fields (#62777)

2026-01-22 22:27:50 +00:00

password.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

proxy_settings.go

Rework scopes feature flags (#67073)

2026-05-29 13:37:25 +00:00

recordingmetadata.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

recordingplayback_protocol_test.go

Add a new API for session recording playback (#58116)

2025-09-08 15:55:04 +00:00

recordingplayback_protocol.go

Add a new API for session recording playback (#58116)

2025-09-08 15:55:04 +00:00

recordingplayback_test.go

Protect recording metadata/thumbnail generation from panics (#66078)

2026-06-03 10:54:39 +00:00

recordingplayback.go

Protect recording metadata/thumbnail generation from panics (#66078)

2026-06-03 10:54:39 +00:00

resources_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

resources.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

scripts.go

fips: Rename IsBoringBinary to IsFIPSBuild throughout (#66346)

2026-05-02 10:58:23 +00:00

server.go

…

servers_test.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

servers.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

sessions_test.go

Fix copy-paste bug in proxy cluster dialer (#67410)

2026-06-08 15:27:31 +00:00

sessions.go

Fix copy-paste bug in proxy cluster dialer (#67410)

2026-06-08 15:27:31 +00:00

sign.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

spiffe_test.go

Migrate GetClusterName to gRPC (#53164)

2025-03-20 10:07:02 +00:00

spiffe.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

terminal_test.go

Provide accurate error to clients trying to join a node in proxy recording mode (#61202)

2025-11-17 23:19:41 +00:00

terminal.go

Properly escape resource names in predicate expressions (#67227)

2026-05-29 13:38:48 +00:00

tty_playback_test.go

…

tty_playback.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

unified_resource_principals_test.go

[Access Requests] Support SSH node resource constraints (#64403)

2026-04-01 21:31:16 +00:00

unified_resource_principals.go

[Access Requests] Support SSH node resource constraints (#64403)

2026-04-01 21:31:16 +00:00

user_groups.go

Rename reversetunnelclient.RemoteSite (#57611)

2025-08-08 14:26:18 +00:00

userevent.go

Modernize lib/web and lib/tbot (#55899)

2025-06-19 17:29:30 +00:00

userpreferences.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

users_test.go

add serverside pagination for users (#56932)

2025-08-07 12:30:06 +00:00

users.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

usertasks_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

usertasks.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

workload_identity_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

workload_identity.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

ws_io.go

…

yaml_test.go

Initial migration to the Opaque API (#67279)

2026-06-05 14:52:58 +00:00

yaml.go

Reject unknown fields in role yaml at create/edit time (#66098)

2026-05-01 16:42:25 +00:00