v2.3.1

What's Changed

• fix: vue assets under web base path by @richcarni in #711
• chore: update dependencies

New Contributors

• @richcarni made their first contribution in #711

Full Changelog: v2.3.0...v2.3.1

What's Changed

• chore(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by @dependabot[bot] in #712
• Fix vue assets under web base path by @richcarni in #711

New Contributors

• @richcarni made their first contribution in #711

Full Changelog: v2.3.0...v2.3.1

v2.3.0

What's Changed

• feat: improve pagination (#662) by @h44z in #663
• feat: add support for auth.oidc.allowed_user_groups by @mtupitsyn in #668
• feat: support OIDC IdP logout by @mtupitsyn in #670
• feat: add support for PKCE (#686) by @h44z in #702
• feat: sanitize external identity provider user data by @Mykhailo-Roit in #681
• feat: improved default peer handling by @h44z in #674
• feat: add Japanese (ja) translation by @ratorin in #682
• feat: add test-in-docker target to Makefile by @Mykhailo-Roit in #659
• feat: improve documentation on how to troubleshoot admin_group_regex with oidc by @nesbyte in #684
• feat: document necessary systemd-networkd configuration by @mlawren in #694
• feat: document how to retrieve OAuth/OIDC callback URL
• fix: vue and oauth redirects under web base path by @wg-daniel in #683
• fix: single-peer interface import mode by @nbk1982 in #695
• fix: fetch user info from OIDC userinfo endpoint by @kaysond in #698
• fix: pfsense backend by @kaysond in #703
• sec: add proper permission check for live traffic statistics
• chore: update dependencies in #664, #692, #699, #708

New Contributors

• @mtupitsyn made their first contribution in #668
• @ratorin made their first contribution in #682
• @nesbyte made their first contribution in #684
• @wg-daniel made their first contribution in #683
• @nbk1982 made their first contribution in #695
• @mlawren made their first contribution in #694
• @kaysond made their first contribution in #698

Full Changelog: v2.2.3...v2.3.0

v2.2.3

What's Changed

• feat: add confirmation dialog before deleting users, peers, and interfaces by @LeC-D in #654
• feat: allow encrypting user api token using gorm serializer
• fix: prevent interface address clearing during startup by @clark-ja in #651
• fix: populate "created_at" timestamp for users by @Mykhailo-Roit in #656
• chore: update frontend deps by @h44z in #657

New Contributors

• @LeC-D made their first contribution in #654

Full Changelog: v2.2.2...v2.2.3

What's Changed

• fix: prevent interface address clearing during startup by @clark-ja in #651
• feat(frontend): add confirmation dialog before deleting users, peers, and interfaces by @LeC-D in #654
• chore: update frontend deps by @h44z in #657
• fix: "created_at" for users by @Mykhailo-Roit in #656

New Contributors

• @LeC-D made their first contribution in #654

Full Changelog: v2.2.2...v2.2.3

v2.2.2

What's Changed

• feat: implement LDAP interface-specific provisioning filters by @clark-ja in #642
• feat: add user label to peer metrics by @Mykhailo-Roit in #647
• fix: configurable handshake validity interval and improved defaults by @h44z in #645
• chore: updated documentation regarding systemd-networkd by @tuimz in #640
• chore: update dependencies #635, #643 and #639

New Contributors

• @tuimz made their first contribution in #640
• @clark-ja made their first contribution in #642
• @Mykhailo-Roit made their first contribution in #647

Full Changelog: v2.2.1...v2.2.2

v2.2.1

What's Changed

• fix: ldap user creation when loggin in by @3l0w in #631
• chore: bump github.com/go-webauthn/webauthn from 0.15.0 to 0.16.0 by @dependabot[bot] in #632
• chore: bump the actions group with 2 updates by @dependabot[bot] in #633

New Contributors

• @3l0w made their first contribution in #631

Full Changelog: v2.2.0...v2.2.1

What's Changed

• fix: ldap user creation when login in by @3l0w in #631
• chore(deps): bump github.com/go-webauthn/webauthn from 0.15.0 to 0.16.0 by @dependabot[bot] in #632
• chore(deps): bump the actions group with 2 updates by @dependabot[bot] in #633

New Contributors

• @3l0w made their first contribution in #631

Full Changelog: v2.2.0...v2.2.1

v2.2.0

What's Changed

• [feat] allow multiple auth sources per user (#500, #477) by @h44z in #612
• [feat] allow to use custom email and web templates (#553) by @h44z in #594
• [feat] allow setting a custom base-path for the web UI and API (#583) by @h44z in #595
• [feat] add bulk actions for peers and users (#492) by @h44z in #602
• [feat] introduce "Create Default Peer" flag for interfaces (#513) by @h44z in #605
• [feat] add live traffic stats (#530) by @h44z in #616
• [feat] add experimental Pfsense backend (#551) by @rwjack in #585 (EXPERIMENTAL - use with caution)
• [fix] parity of Base64/URL encoding between frontend and backend (#609) by @cailloumajor in #611
• [fix] typo in local.go by @ShiroTohu in #613
• [fix] improve import of existing allowed-IPs (#576) by @h44z in #615
• [fix] fix minor help chart issues (#629) by @htiryaki-oe24 in #630
• [fix] email sending to peers without linked user (#620)
• [chore] update documentation by @h44z in #603
• [chore] update dependencies

New Contributors

• @rwjack made their first contribution in #585
• @cailloumajor made their first contribution in #611
• @ShiroTohu made their first contribution in #613
• @htiryaki-oe24 made their first contribution in #630

Full Changelog: v2.1.3...v2.2.0

v2.1.3

Security Update

⚠️ This update addresses a critical vulnerability that can be exploited by authenticated users.
All users are strongly advised to update. A GHSA will follow the next days.

What's Changed

• fix: improve helm chart (#630)
• sec: improve user permission validation, thanks to @gregtuc

Full Changelog: v2.1.2...v2.1.3

Full Changelog: v2.1.2...v2.1.3

v2.1.2

What's Changed

• fix: parity of Base64/URL encoding between frontend and backend (#611)
• sec: ensure that the OAuth return URL is properly validated, thanks to @coolsarne

Full Changelog: v2.1.1...v2.1.2

Full Changelog: v2.1.1...v2.1.2

v2.1.1

What's Changed

• [feat] add IPCalculator View by @tom22077 in #557
• [feat] config by environment variables by @aesy in #570
• [fix] append prerelease pattern for Helm kubeVersion check by @davidbgonz in #560
• [fix] LDAP sync initialization (#571)
• [fix] REST API documentation (enum models for user-source) (#562)
• [fix] REST API parameter handling (encoding) (#563)
• [fix] remove invalid configuration examples
• [fix] set sqlite file permissions to 0600 (#579)
• [chore] Update and pin all actions versions by @bonddim in #564, #566, #567
• [chore] update russian translation by @ornaras in #574
• [chore] update spanish translation. by @Osvaldo-Net in #568

New Contributors

• @tom22077 made their first contribution in #557
• @davidbgonz made their first contribution in #560
• @aesy made their first contribution in #570
• @ornaras made their first contribution in #574

Full Changelog: v2.1.0...v2.1.1

v2.1.0

What's Changed

• [feat] add dark mode (#482) by @h44z in #489
• [feat] add webauthn (passkey) support by @h44z in #435
• [feat] password change UI (#543) by @h44z in #548
• [feat] Mikrotik integration (#426) by @h44z in #467, #521
• [feat] option to limit peer count that a normal user can create by @sj-louw in #457
• [feat] add webhook event for peer state change (#444) by @h44z in #468
• [feat] allow to hide login form (#459) by @h44z in #470
• [feat] support for raw-wireguard and wg-quick style peer configurations (#441) by @h44z in #473
• [feat] new webhook models (#444) by @h44z in #471
• [feat] allow setting the DisplayName property in the API for newly provisioned peers (#507) by @h44z in #511
• [feat] allow disabling local admin user by @vic1707 in #515
• [feat] add spanish translation (#530) by @Osvaldo-Net in #532
• [feat] add user's display-name to peer view (#525) by @h44z in #534
• [feat] allow sending emails to peers even if they are not linked to a user
• [fix] fix multi-peer generation, fix prefix handling (#491)
• [fix] only execute interface hooks if the state has changed (#469) by @h44z in #472
• [fix] fix oauth domain check (#474) by @h44z in #476
• [fix] use website title in mail templates (#448) by @h44z in #466
• [fix] fix migration tool (#495) by @h44z in #496
• [fix] ensure hooks run after restart (#494) by @h44z in #497
• [fix] ensure that LDAP filter values are escaped by @h44z in #512
• [fix] fix peer creation if custom public key is set (#523) by @h44z in #528
• [fix] fix delayed setup of external auth providers (#529)
• [fix] add tzdata to Docker image (#531)
• [fix] ambiguity with peer endpoint & Persistent Keepalive (#537)
• [fix] display errors in the UI when email sending fails
• [chore] update dependencies
• [chore] documentation improvements by @h44z in #538
• [chore] add docker to dependabot by @HPPinata in #463
• [chore] added more debug logs and reformated by @y0rune in #490
• [chore] cleanup route handling by @h44z in #542

New Contributors

• @sj-louw made their first contribution in #457
• @y0rune made their first contribution in #490
• @vic1707 made their first contribution in #515
• @Osvaldo-Net made their first contribution in #532

Full Changelog: v2.0.5...v2.1.0