v2.0.3

This is a patch for the major 2.0 release.
It contains a fix for an SMTP settings regression that could be introduced by version 2.0.2 in some rare edge cases (#3493).

The 2.0 was a significant step up from version 1.x, featuring:

🎨 a completely redesigned UI,
📦 a new and easy deployment approach (and component communication security),
🛠️ and some other major architectural changes.

More details with videos in this blogpost.

⬆︎ If you will be upgrading from 1.x - here you can find relevant documentation about the upgrade.
🚅 If you would like to test Defguard - we offer a quick and easy One-line install script.

⚠️ Business features require free registration.
Previously, these features were available without registration (within certain limits).
Starting from 2.0, a free Business license registration is required to use them.
👉 https://defguard.net/get-free-business/
Once registered, simply apply your license to your instance and enjoy access to Business functionality.

We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues

Other Changes

• e2e failure issue by @wojcik91 in #3404
• Install cla assistant by @kchudy in #3453
• Build source archive by @moubctez in #3465

Full Changelog: v2.0.2...v2.0.3

v2.0.2

This is a patch for the major 2.0 release. It introduces:

• SMTP OAuth configuration for Microsoft and Google
• Bulk user actions
• Synchronization of disabled Active Directory users
• LDAP integration improvements
• Synchronization of users only from specified groups in Microsoft directory synchronization
• Security improvements to the Forward Auth functionality
• Bug fixes and UX improvements

The 2.0 was a significant step up from version 1.x, featuring:

🎨 a completely redesigned UI,
📦 a new and easy deployment approach (and component communication security),
🛠️ and some other major architectural changes.

More details with videos in this blogpost.

⬆︎ If you will be upgrading from 1.x - here you can find relevant documentation about the upgrade.
🚅 If you would like to test Defguard - we offer a quick and easy One-line install script.

⚠️ Business features require free registration.
Previously, these features were available without registration (within certain limits).
Starting from 2.0, a free Business license registration is required to use them.
👉 https://defguard.net/get-free-business/
Once registered, simply apply your license to your instance and enjoy access to Business functionality.

We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues

Other Changes

• Build debs for debian 12/ubuntu 22.04 by @jakub-tldr in #2961
• add group filter for list_users endpoint by @wojcik91 in #2987
• Bulk user actions by @t-aleksander in #2995
• Add no groups filter to users overview table by @filipslezaklab in #3001
• Fix EU Jumpcloud OIDC provider by @jakub-tldr in #2990
• update ui module by @filipslezaklab in #3013
• Fix e2e tests by @t-aleksander in #3015
• Support synchronizing disabled AD users status by @t-aleksander in #3018
• adjust no_group user filter semantics by @wojcik91 in #3023
• Fix selecting predefined destinations by @t-aleksander in #3022
• Synchronize enrollment pending users from LDAP by @t-aleksander in #3024
• user table fixes by @filipslezaklab in #3029
• Change ldap authority wording, fix LDAP integration crashes on references, support nested groups for limiting synchronization by @t-aleksander in #3028
• Updated README file by @kchudy in #3032
• show enrollment modal after group assignment by @jakub-tldr in #3049
• SMTP with XOAuth2 by @moubctez in #3051
• bump version & fix CI for 2.0.2 alpha release by @wojcik91 in #3066
• Fix re-enrollment if user has password by @t-aleksander in #3065
• Add "Synchronize users only from specified groups" field to Microsoft directory synchronization options by @jakub-tldr in #3037
• Adjust APT repo testing pipeline to our new release model, other enhancements by @t-aleksander in #3069
• Xoauth2 stable web by @moubctez in #3057
• update ui by @filipslezaklab in #3091
• Fix ldap tests by @t-aleksander in #3093
• Xoauth2 exchange by @moubctez in #3095
• Improve error handling during OIDC enrollment flow (#3098) by @j-chmielewski in #3104
• Xoauth2 refine by @moubctez in #3105
• Update end-to-end tests by @moubctez in #3107
• Prepare release 2.0.2 by @moubctez in #3109
• Fix path in ova example by @t-aleksander in #3119
• split migration to avoid changing existing one by @wojcik91 in #3136
• fix MFA session validation in forward_auth by @wojcik91 in #3149
• Prepare 2.0.2 release by @moubctez in #3174
• Ignore draft releases in APT tests by @t-aleksander in #3178
• setup Renovate by @wojcik91 in #3190
• Fix m$ token expiration check by @moubctez in #3395
• Remove OpenID app scopes placeholder by @jakub-tldr in #3397

Full Changelog: v2.0.1...v2.0.2

v1.6.7

This is a patch for the major 1.6 release.

It fixes IP assignment performance issues and improves the security of the Forward Auth functionality.

What's Changed

• Tag docker images with major version by @j-chmielewski in #3133
• fix MFA session validation in forward_auth by @wojcik91 in #3151
• port IP assignment optimization from 2.x branch by @wojcik91 in #3157
• fix failing e2e tests by @wojcik91 in #3176

Full Changelog: v1.6.6...v1.6.7

v2.1.0-alpha1

🎉 Welcome to Defguard 2.1 Alpha 1 🎉

First of all, this is an actual alpha, not meant for production, but a technology preview of what’s to come.

2.1 brings exciting new features:

• Device Posture Verification

• Generate Allowed IPs from Firewall Rules

• Completely redesigned Desktop Client - try it out by installing the package for your OS from the client release assets

🚀 Here you can find a quick tutorial on how to quickly launch 2.1α using one-line-script in pre-relase mode.

We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues

What's Changed

• policy components update by @filipslezaklab in #2889
• implement Device Posture data model & management API by @wojcik91 in #2899
• Cleanup posture code by @moubctez in #2901
• Code clippification by @t-aleksander in #2905
• Report pre-release info by @t-aleksander in #2888
• Posture check list by @t-aleksander in #2907
• Posture check wizard by @t-aleksander in #2918
• Evaluate posture checks during client connection by @j-chmielewski in #2906
• add version badge to navbar by @wojcik91 in #2935
• Merge stable/2.x -> dev by @t-aleksander in #2920
• Posture check assigining from the locations view by @t-aleksander in #2927
• Assign locations, delete posture check actions by @t-aleksander in #2945
• Edit posture checks menu by @t-aleksander in #2946
• Implement posture checks by @j-chmielewski in #2936
• generate AllowedIPs from ACL Rules by @wojcik91 in #2942
• Fix minor visual posture checks issues / report last system update by @t-aleksander in #2952
• Build debs for debian 12/ubuntu 22.04 by @jakub-tldr in #2961
• GatewayEvent refactor by @wojcik91 in #2965
• Hide disk encryption posture check for macOS by @moubctez in #2976
• add activity log filtering by @wojcik91 in #2962
• add group filter for list_users endpoint by @wojcik91 in #2987
• decouple business logic modules in defguard_core from WebError by @wojcik91 in #2984
• add option to generate Allowed IPs from ACL rules by @wojcik91 in #2992
• Device posture check activity log by @moubctez in #2999
• Bulk user actions by @t-aleksander in #2995
• decouple AppState from non-API modules by @wojcik91 in #3003
• Trim client version list and remove Android integrity check option by @j-chmielewski in #3004
• Add no groups filter to users overview table by @filipslezaklab in #3001
• Fix EU Jumpcloud OIDC provider by @jakub-tldr in #2990
• fix failing e2e test by @wojcik91 in #3007
• update ui module by @filipslezaklab in #3013
• Fix e2e tests by @t-aleksander in #3015
• Add posture check sidebar (drawer) by @t-aleksander in #2977
• remove event router service by @wojcik91 in #3019
• Support synchronizing disabled AD users status by @t-aleksander in #3018
• adjust no_group user filter semantics by @wojcik91 in #3023
• Fix selecting predefined destinations by @t-aleksander in #3022
• Synchronize enrollment pending users from LDAP by @t-aleksander in #3024
• Duplicate posture check by @j-chmielewski in #3006
• Configure steps mfa UI components by @filipslezaklab in #3027
• user table fixes by @filipslezaklab in #3029
• Change ldap authority wording, fix LDAP integration crashes on references, support nested groups for limiting synchronization by @t-aleksander in #3028
• Stable to dev by @t-aleksander in #3031
• Location wizard posture by @j-chmielewski in #3026
• XOAUTH2 for SMTP by @moubctez in #3025
• Tweak edit posture check form spacings by @j-chmielewski in #3036
• Prevent wizard from querying postures endpoint if no license is present by @j-chmielewski in #3056
• Migrate LDAP library by @t-aleksander in #3035
• Posture tooltip dark by @j-chmielewski in #3071
• Allow prerelease below min_client_version by @j-chmielewski in #3084
• add comment by @j-chmielewski in #3085
• Update UI dev by @filipslezaklab in #3092
• Improve error handling during OIDC enrollment flow by @j-chmielewski in #3098
• Add "Any version" options to all posture version inputs by @j-chmielewski in #3100
• Filter out posture enabled locations for clients that don't support them by @t-aleksander in #3086
• Activity log posture module by @j-chmielewski in #3106
• control Edge UI by Core settings by @wojcik91 in #3108
• Feature flags by @t-aleksander in #3111
• Posture assigned to by @j-chmielewski in #3125
• Add LDAP sync activity log events by @j-chmielewski in #3112
• Android security patch level posture check by @filipslezaklab in #3126
• return pre-release versions in app_info endpoint by @wojcik91 in #3137
• disable manual WireGuard config option for users without access to non-MFA locations by @wojcik91 in #3140
• merge stable/2.x -> dev by @wojcik91 in #3141
• add missing awaits in e2e test for generating TOTP codes by @wojcik91 in #3143
• allow disabling password management for users synced from external IdP by @wojcik91 in #3139
• fix e2e selectors by @wojcik91 in #3145
• fix MFA session validation in forward_auth by @wojcik91 in #3150

Full Changelog: v2.0.2...v2.1.0-alpha1

v2.0.2-alpha1

This is a patch for the major 2.0 release. It includes bug fixes and usability improvements suggested by early adopters, like:

• Bulk user actions,
• Support synchronisation of disabled Active Directory user status.

The 2.0 was a significant step up from version 1.x, featuring:

🎨 a completely redesigned UI,
📦 a new and easy deployment approach (and component communication security),
🛠️ and some other major architectural changes.

More details with videos in this blogpost.

⬆︎ If you will be upgrading from 1.x - here you can find relevant documentation about the upgrade.
🚅 If you would like to test Defguard - we offer a quick and easy One-line install script.

⚠️ Business features require free registration.
Previously, these features were available without registration (within certain limits).
Starting from 2.0, a free Business license registration is required to use them.
👉 https://defguard.net/get-free-business/
Once registered, simply apply your license to your instance and enjoy access to Business functionality.

We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues

What's Changed

• Build debs for debian 12/ubuntu 22.04 by @jakub-tldr in #2961
• add group filter for list_users endpoint by @wojcik91 in #2987
• Bulk user actions by @t-aleksander in #2995
• Add no groups filter to users overview table by @filipslezaklab in #3001
• Fix EU Jumpcloud OIDC provider by @jakub-tldr in #2990
• update ui module by @filipslezaklab in #3013
• Fix e2e tests by @t-aleksander in #3015
• Support synchronizing disabled AD users status by @t-aleksander in #3018
• adjust no_group user filter semantics by @wojcik91 in #3023
• Fix selecting predefined destinations by @t-aleksander in #3022
• Synchronize enrollment pending users from LDAP by @t-aleksander in #3024
• user table fixes by @filipslezaklab in #3029
• Change ldap authority wording, fix LDAP integration crashes on references, support nested groups for limiting synchronization by @t-aleksander in #3028
• Updated README file by @kchudy in #3032
• show enrollment modal after group assignment by @jakub-tldr in #3049
• SMTP with XOAuth2 by @moubctez in #3051
• bump version & fix CI for 2.0.2 alpha release by @wojcik91 in #3066
• Fix re-enrollment if user has password by @t-aleksander in #3065

Full Changelog: v2.0.1...v2.0.2-alpha1

v2.0.1

This is a patch for the major 2.0 release. It includes security improvements identified through our regular penetration testing activities, as well as fixes for issues reported by early adopters.

Learn more about the latest penetration testing report on our website.

The 2.0 was a significant step up from version 1.x, featuring:

🎨 a completely redesigned UI,
📦 a new and easy deployment approach (and component communication security),
🛠️ and some other major architectural changes.

More details with videos in this blogpost.

⬆︎ If you will be upgrading from 1.x - here you can find relevant documentation about the upgrade.
🚅 If you would like to test Defguard - we offer a quick and easy One-line install script.

⚠️ Business features require free registration.
Previously, these features were available without registration (within certain limits).
Starting from 2.0, a free Business license registration is required to use them.
👉 https://defguard.net/get-free-business/
Once registered, simply apply your license to your instance and enjoy access to Business functionality.

We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues

What's Changed

• DG26-4: Extending the number of locations by @jakub-tldr in #2849
• DG26-10: API key creation inconsistency by @jakub-tldr in #2850
• DG26-9: Activity log does not log misuse of recovery code by @jakub-tldr in #2851
• DG26-6: Incorrect scope parsing in oAuth applications by @wojcik91 in #2856
• DG26-11: Gateway setup - Lack of server-side data validation by @wojcik91 in #2857
• DG26-7: oAuth state parameter parsing violates RFC-6749 by @wojcik91 in #2886
• DG26-8: HTML Injection - API tokens by @jakub-tldr in #2887
• Update group endpoint OpenAPI documentation by @jakub-tldr in #2890
• Fix destination/aliases list by @jakub-tldr in #2895
• Better client IP address detection by @moubctez in #2897
• Migrate empty allowed groups from 1.6.x by @jakub-tldr in #2902
• Prevent deleting groups used in locations by @jakub-tldr in #2908
• update openssl crate by @wojcik91 in #2957

Full Changelog: v2.0.0...v2.0.1

v2.0.0

🎉 Welcome to Defguard 2.0 🎉

It’s a significant step up from version 1.x, featuring:

🎨 a completely redesigned UI,
📦 a new and easy deployment approach (and component communication security),
🛠️ and some other major architectural changes.

More details with videos in this blogpost.

⬆︎ If you will be upgrading from 1.x - here you can find relevant documentation about the upgrade.
🚅 If you would like to test Defguard - we offer a quick and easy One-line install script.

⚠️ Business features require free registration.
Previously, these features were available without registration (within certain limits).
Starting from 2.0, a free Business license registration is required to use them.
👉 https://defguard.net/get-free-business/
Once registered, simply apply your license to your instance and enjoy access to Business functionality.

We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues

What's Changed

• Release 1.6 alpha merger by @wojcik91 in #1711
• Finialize moving most important DB models to a common crate by @wojcik91 in #1713
• Merge main->dev before 1.6 by @j-chmielewski in #1756
• Implement multiple proxy handling by @j-chmielewski in #1743
• Reverse gateway grpc take two merger by @moubctez in #1767
• Gateway REST by @moubctez in #1775
• Allow domain names location DNS by @moubctez in #1786
• Add MTU and FwMark to WireGuardNetwork by @moubctez in #1788
• Disable APT repository signing/uploads by @jakub-tldr in #1799
• Disable APT repository signing/uploads by @jakub-tldr in #1800
• Core certificate authority, part 1: Proxy by @t-aleksander in #1790
• UI table update by @filipslezaklab in #1808
• Update APT repository on full release/pre-release by @jakub-tldr in #1807
• Merge main -> dev after 1.6.1 release by @wojcik91 in #1844
• PUT for OpenIDProvider by @moubctez in #1801
• Multiproxy private cookies by @j-chmielewski in #1809
• components update 1 by @filipslezaklab in #1848
• OpenID tests by @jakub-tldr in #1852
• Add MTU and FwMark to web interface by @moubctez in #1849
• Core certificate authority, part 2: Gateway by @t-aleksander in #1846
• Extend OpenAPI docs with OpenID providers by @moubctez in #1860
• OpenID provider kind by @moubctez in #1871
• VPN client session manager pt2 by @wojcik91 in #1802
• Activity log streaming page by @jakub-tldr in #1876
• add VPN sessions & stats generator by @wojcik91 in #1885
• send cookie keys via protos by @j-chmielewski in #1881
• Log streaming page tweaks by @jakub-tldr in #1892
• VPN stats generator pt2 by @wojcik91 in #1891
• Destination, part 1 by @moubctez in #1895
• MTU and FwMark are not optional by @moubctez in #1907
• session manager VPN client events by @wojcik91 in #1911
• fix docker build by @wojcik91 in #1914
• Implement proxy wizard by @t-aleksander in #1910
• Implement remote MFA with new, separate RPC message by @j-chmielewski in #1912
• Include component version in support data by @jakub-tldr in #1920
• Gateway wizard by @t-aleksander in #1919
• handle multiple gateways in session manager by @wojcik91 in #1917
• Any for aliases by @moubctez in #1918
• Initiate self-enrolment from users list by @jakub-tldr in #1935
• Separate API for Alias and Destination by @moubctez in #1938
• Use functions for ApiResponse by @moubctez in #1942
• Activity log streaming certificate file upload by @jakub-tldr in #1941
• Edge edit form by @j-chmielewski in #1940
• Support VPN client MFA connect/disconnect process within the session manager by @wojcik91 in #1939
• periodic VPN session & stats purge by @wojcik91 in #1954
• Fetch AclAlias by kind by @moubctez in #1953
• drop legacy stats tables by @wojcik91 in #1957
• Edge delete by @j-chmielewski in #1960
• New instance setup wizard by @t-aleksander in #1961
• VPN sessions handling fixes by @wojcik91 in #1964
• Fix connecting to proxy after completing initial wizard by @t-aleksander in #1971
• Initial wizard fixes by @t-aleksander in #1987
• Fix wizard routing by @t-aleksander in #1991
• change from root guard to route specific guards by @filipslezaklab in #1993
• fix(mfa): preserve preshared key when creating new session by @j-chmielewski in #1995
• Edge list by @j-chmielewski in #1992
• Update ACL -> firewall rule translation to handle new toggles by @wojcik91 in #1994
• Restore init dev env by @t-aleksander in #2010
• Allow admins to delete a specific MFA method for a user by @jakub-tldr in #2012
• Block adding MFA for user as admin by @jakub-tldr in #2013
• pre-alpha ACL UI fixes by @wojcik91 in #2024
• fix acl queries by @filipslezaklab in #2032
• Persist initial setup wizard state by @t-aleksander in #2033
• fix querykey conflict by @filipslezaklab in #2039
• Restore minimal LDAP compose by @t-aleksander in #2043
• Crl by @j-chmielewski in #2041
• New mail templates by @moubctez in #1997
• Check limits when creating users / locations by @filipslezaklab in #2048
• New mail templates part 2 by @moubctez in #2053
• Lack of SMTP configuration information for user by @jakub-tldr in #2054
• Wizard design tweaks by @t-aleksander in #2063
• Fix typos by @moubctez in #2066
• Gateway TLS verification by @j-chmielewski in #2049
• Use binary licence key by @moubctez in #2069
• Deleting a location cascade-deletes gateways by @j-chmielewski in #2075
• Static IP assignment from user list by @t-aleksander in #2077
• update location stats API to reflect new design by @wojcik91 in #2081
• Device IP management for single device by @t-aleksander in #2084
• "Add new device" option for admins by @jakub-tldr in #2079
• fix keepalive interval input by @j-chmielewski in #2099
• add gateway list page by @wojcik91 in #2100
• Add enabled to MailContext by @moubctez in #2107
• add edit gateway page by @wojcik91 in #2108
• Disabled SMTP badge in "Initiate self-enrollment" button by @jakub-tldr in #2114
• Fix welcom...

v2.0.0-beta2

🎉 Welcome to Defguard 2.0 Beta 2 🎉

This is the final beta before the stable release. Our primary focus has been on stabilising the platform and ensuring everything is ready for a smooth, production-grade launch.

📖 A comprehensive list of the changes implemented since Alpha 2 is documented in detail here: https://defguard.net/blog/defguard-2-0-release-beta-1/.

🛠️ We highly recommend previewing it yourself. We prepared a guide explaining how to run the alpha2 before. To run the beta2 just use 2.0.0-beta2 image tags instead of 2.0.0-alpha2.

⚠️ Important notice for beta1 early adopters: beta2 introduces a breaking change that requires removing and re-adding the Edge and Gateway components.

We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues

What's Changed

• Rules & OpenID provider form fixes by @jakub-tldr in #2680
• Disable Back button after Edge adoption in migration wizard by @moubctez in #2678
• Cleanup Wizard by @moubctez in #2677
• Fix migrator login by @t-aleksander in #2688
• actually store updated ip and port in migration wizard by @wojcik91 in #2692
• Certificate settings tweaks by @j-chmielewski in #2694
• add missing non-default table sorting functions by @wojcik91 in #2693
• Get rid of cross-rs by @moubctez in #2700
• Fix E2E tests, make them 8x faster by @t-aleksander in #2722
• Update core/edge url when changing cert configuration by @j-chmielewski in #2725
• Update environmental variables by @jakub-tldr in #2721
• Update dev instance when updating branch "release/**" by @jakub-tldr in #2732
• Make unit tests 8x faster by @t-aleksander in #2723
• Use AWS ecr repo for e2e postgres image by @t-aleksander in #2738
• Always restart defguard service by @moubctez in #2729
• add missing API endpoint for fetching user device WireGuard configs by @wojcik91 in #2739
• Bulk assign / users table empty state fix by @jakub-tldr in #2747
• Fix PersistentKeepalive in WireGuard config by @moubctez in #2750
• validate duplicate Gateway/Edge names in forms by @wojcik91 in #2741
• Save version after migration/wizard by @t-aleksander in #2734
• Cert expiry by @moubctez in #2744
• Automatic Letsencrypt certificate refresh by @j-chmielewski in #2730
• Preserve old package versions on APT repository by @jakub-tldr in #2761
• Step-aware wizard video tutorial section by @j-chmielewski in #2749
• Rename migrations by @t-aleksander in #2763
• Don’t fail for email errors during the enrolment by @moubctez in #2764
• Render markdown in emails by @t-aleksander in #2760
• add mTLS for gateway & proxy communication by @wojcik91 in #2726
• Sanitize LDAP errors (2.0) by @t-aleksander in #2682
• update final gw wizard step text according to the new design by @filipslezaklab in #2769
• LDAP: escape critical characters in DN by @moubctez in #2768
• add missing handlers in wizard API by @wojcik91 in #2773
• show contextual help on settings pages by @wojcik91 in #2766
• New json schema by @j-chmielewski in #2765
• Use RSA keys for openid token signing by @j-chmielewski in #2777
• fix network capacity validator function by @wojcik91 in #2780
• Fix cert settings by @j-chmielewski in #2784
• improve baseline HTTP security for no-reverse proxy deployment scenarios by @wojcik91 in #2782
• Remaining wizard e2e tests by @t-aleksander in #2776
• Better package by @moubctez in #2783
• adjust rate limiter config by @wojcik91 in #2787
• make rate limiter opt-in by @wojcik91 in #2792

Full Changelog: v2.0.0-beta1...v2.0.0-beta2

v1.6.6

This is a patch for the major 1.6 release.

It fixes issues with AD login and PersistentKeepalive field in generated WireGuard configs.

What's Changed

Other Changes

• Sanitize LDAP strings, fix issues with AD crashing during login, graceful activity log restart (1.6) in #2683
• Fix PersistentKeepalive in WireGuard config in #2751

Full Changelog: v1.6.5...v1.6.6

v2.0.0-beta1

🎉 Welcome to Defguard 2.0 Beta 1 🎉

📖 A comprehensive list of the changes implemented since Alpha 2 is documented in detail here: https://defguard.net/blog/defguard-2-0-release-beta-1/

🛠️ We highly recommend previewing it yourself. We prepared a guide explaining how to run the alpha2 before. To run the beta1 just use 2.0.0-beta1 image tags instead of 2.0.0-alpha2.

We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues

Known issues

Migration wizard (triggered when upgrading from an older version) will fail on the login screen. Before migrating (upgrading), make sure to be logged in to Defguard, as this issue doesn't happen to logged in accounts.

What's Changed

• Adoption logs UI tweaks by @j-chmielewski in #2289
• Change icon to text & add sorting by @jakub-tldr in #2292
• Show error in form on incorrect current password by @jakub-tldr in #2293
• Remove placeholder, add variable to Webhook by @jakub-tldr in #2297
• Add network device & openid deletion confirmation modals by @jakub-tldr in #2296
• fix cache invalidation for client behavior settings page by @j-chmielewski in #2294
• Require current password for self-edit, skip for admin non-self edits by @jakub-tldr in #2301
• Allow admin for editing users credentials by @jakub-tldr in #2302
• Fix spacing on restrictions section by @jakub-tldr in #2305
• change FormInput to FormTextarea to handle \n by @jakub-tldr in #2310
• fix app crash when clicking initiate enrollment button by @wojcik91 in #2312
• Change labels in migration one liner wizard by @jakub-tldr in #2313
• Implement UI fixes and improvements by @filipslezaklab in #2315
• Duplicate authentication keys / name checking by @jakub-tldr in #2318
• add confirm action modal by @filipslezaklab in #2308
• Add user device delete confirmation by @jakub-tldr in #2322
• Check for duplicate pubkey & check for duplicates during renaming auth keys by @jakub-tldr in #2324
• extend session manager test suite by @wojcik91 in #2325
• tables update 3 by @filipslezaklab in #2331
• Remove unnecessary toggle by @wojcik91 in #2339
• add missing images to license modals and welcome wizard screens by @filipslezaklab in #2341
• Allowed groups by @moubctez in #2332
• Add more tests for initial/migration/auto-adoption wizards by @t-aleksander in #2340
• Block adding device when there is no space in at least one subnet by @jakub-tldr in #2338
• Add missing variables to tests by @jakub-tldr in #2344
• Disable Submit when user has no devices to re-address by @moubctez in #2346
• fix modal scroll by @filipslezaklab in #2347
• Remove rp id from settings and derive it from defguard_url by @j-chmielewski in #2326
• fix modals on profile general tab by @filipslezaklab in #2349
• restore Disable MFA action in users table by @wojcik91 in #2350
• alias badge display fix by @wojcik91 in #2352
• add missing actions for rules table by @filipslezaklab in #2355
• Require both parameters for auto adoption wizard (adopt-edge adopt-gateway) by @t-aleksander in #2354
• Bug fixes by @moubctez in #2360
• Fix initial wizard always redirecting to vpn overview by @t-aleksander in #2358
• use qr-card component instead of plain qrcanvas by @filipslezaklab in #2364
• Info about licence limits by @moubctez in #2363
• Block adding network device when there are no available locations by @jakub-tldr in #2366
• add missing disconnect threshold input by @wojcik91 in #2365
• Cache invalidation fixes by @j-chmielewski in #2370
• Migrate defguard_url from config by @j-chmielewski in #2369
• add theme switch to top bar element by @filipslezaklab in #2386
• Update migration UI by @filipslezaklab in #2385
• Fix ACL form validation errors by @j-chmielewski in #2378
• Validate location address by @moubctez in #2388
• Update deployment helps by @t-aleksander in #2383
• make IP optional in activity log by @wojcik91 in #2394
• add 404 and migration auth error pages by @filipslezaklab in #2397
• Fix cache invalidation after MFA method setup by @j-chmielewski in #2396
• fix missing MFA session events by @wojcik91 in #2371
• Change label when creating device in full network by @jakub-tldr in #2399
• Send Gateway reconnect email by @moubctez in #2398
• Add missing delete confirmations by @jakub-tldr in #2403
• Add missing disable confirmations by @jakub-tldr in #2404
• add preshared key to VPN session model by @wojcik91 in #2402
• add user & device "online" indicator by @wojcik91 in #2409
• adoption form default ports & helpers by @j-chmielewski in #2410
• Use new validators by @jakub-tldr in #2408
• License upsell section by @j-chmielewski in #2401
• activity log event order fix by @wojcik91 in #2413
• Pagination by @moubctez in #2406
• extend ACL test coverage for new flags by @wojcik91 in #2411
• Limited pagination by @moubctez in #2417
• Autoadoption logs by @j-chmielewski in #2416
• Frontend validators tests by @jakub-tldr in #2429
• Adjust E2E tests to the new initial wizard and fix existing tests by @jakub-tldr in #2428
• use secret_key field from Settings to generate JWTs by @wojcik91 in #2434
• restore core gRPC server tests & add testing framework for gateway handlers by @wojcik91 in #2381
• fix API tokens page license handling by @wojcik91 in #2431
• remove gRPC Auth service by @wojcik91 in #2437
• update ACL rules table columns by @wojcik91 in #2441
• Mail templates by @moubctez in #2430
• Ensure settings are initialized before running wizards by @j-chmielewski in #2447
• Prevent creating network which can't contain already existing devices & Hostname validator tweak by @jakub-tldr in #2444
• fix last connected IP column value in Users table by @wojcik91 in #2443
• Plain text mail by @moubctez in #2451
• Enrollment settings by @j-chmielewski in #2433
• New support page by @jakub-tldr in #2452
• Fix license upsell sections spacing by @j-chmielewski in #2456
• ACL rule generator by @moubctez in #2459
• Squash migrations by @j-chmielewski in #2229
• New version notification by @jakub-tldr in #2460
• Change text in Support page / Make field nullable in LDAP form by @jakub-tldr in https://github.co...