122 Commits

Author SHA1 Message Date
Alicia Sykes
b8d5ebe508 🥅 Some small catch blocks for unexpected shapes 2026-07-25 21:06:44 +01:00
Alicia Sykes
627cdae34e 🐛 Fixes the Netlify serverless functions for Node 24+ 2026-07-25 20:19:31 +01:00
Alicia Sykes
e85fe755c0 ️ Improve compatibility of status checks 2026-07-25 18:36:13 +01:00
Alicia Sykes
463930689b 🚚 Moves / organises service utils into sub-directories 2026-07-25 12:05:51 +01:00
Alicia Sykes
2b90a24c4f ⬆️ Big dependency bumps throughout 2026-07-22 22:12:36 +01:00
Alicia Sykes
5bec301e97 🐛 Fix updating in-memory config afer save server-side 2026-07-09 21:30:48 +01:00
Alicia Sykes
fafe9ad95d 🔒 Fail save-config early if preventWriteToDisk set 2026-07-09 21:27:19 +01:00
Alicia Sykes
87bd2f09b0 🔒 Adds optional DISABLE_PROXY_ENDPOINTS env var, to disable proxy endpoints 2026-07-09 20:46:32 +01:00
Alicia Sykes
a08491e25a 🛂 Adds option to disable server-side OIDC checks 2026-07-09 20:31:20 +01:00
Alicia Sykes
783b70ded9 🐛 Fixes using absolute path for opening conf.yml in the validator 2026-07-09 15:17:00 +01:00
Alicia Sykes
3037c25a6a 🥅 Improved error coms for OIDC renewal failures (#2217) 2026-07-02 12:50:38 +01:00
Alicia Sykes
aa8279d53f 🛂 Option for overriding allowed issuers (#2210) 2026-06-16 10:54:56 +01:00
Alicia Sykes
1406587087 🔀 Merge pull request #2209 from lissy93/feat/api
First version of REST API
2026-06-15 12:20:31 +01:00
Alicia Sykes
2bfae4dc03 📝 Adds docs and swagger spec for API 2026-06-15 11:14:22 +01:00
Alicia Sykes
c32b4a84d0 🔑 Add support for custom API keys 2026-06-15 11:13:46 +01:00
Alicia Sykes
1500839ef5 REST API for dashboard management (#2011) 2026-06-14 18:22:17 +01:00
Alicia Sykes
df63217120 🐛 Fixes OIDC is admin lookup for gitlab (#2202) 2026-06-12 10:52:01 +01:00
Alicia Sykes
8ff1c44471 🔀 Merge pull request #2193 from lissy93/sec/apply-host-blocklist-on-redirects
Re-check host blocklist on redirects and in status-check
2026-06-10 15:26:32 +01:00
Alicia Sykes
5f013449f9 🔒 Re-check host blocklist on redirects and in status-check 2026-06-10 15:03:14 +01:00
Benjamin GILLET
daa576d30c 🔀 feat: add ICMP ping check support to item (#2180)
* feat: add ICMP ping check support to item

* Replaced ping package with pingman package to be compliant with Dashy CI NodeJS version (20).
Fixed a behavior bug in status indicator component which didn't changed icon to yellow when checking.
Made otherStatusText a computed field to make it reflecting dynamically a new check request.
Added more examples to default conf.yml

* Removed a forgotten trace to console

* Made changes requested by Lissy after review of the PR.
Corrected tests using localhost which is not a valid host for pingman.
Added a Validator.js file in src/utils with function to check validity of hosts.
Reverted conf.yml file to the original version.

* Fixed a problem in configuration of pingman call after adding support of IPV6 addresses.

* Updated Dockerfile to pass Docker smoke tests in CI

* Revert to latest version of `user-data/conf.yml` from `master`

* Removed the duplicated feature line for ping check and just added `hosts` to the existing one

* Removed the unused `shouldEnabledPingCheck` function

* Add the ping system package and give rights to use to the node user so the pingman module can work in Docker container

* Remove `src/utils/Validator.js` file. Rely on `pingman` internal validation of hostname instead to avoid command injection.
2026-06-06 12:54:17 +01:00
Alicia Sykes
31d7204b89 Allows enableAuthProxyCompat in OIDC mode 2026-06-05 14:29:19 +01:00
Alicia Sykes
f34b7fb650 🛂 Server protects yaml as well as yml 2026-06-04 10:07:16 +01:00
Alicia Sykes
702e884418 🛂 Skip 401 for root config OIDC, return empty instead 2026-05-21 21:34:08 +01:00
Alicia Sykes
aee40537e6 🐛 Fixes re-authentication on expired OIDC sessions (#2159) 2026-05-21 20:52:35 +01:00
Alicia Sykes
85e1ce73a6 🛂 Stricter config access for OIDC/Keycloak 2026-05-18 12:55:58 +01:00
Alicia Sykes
93f7633a7d 🔐 Applies server-side authentication to all internal routes when OIDC/KC enabled 2026-05-15 13:50:56 +01:00
Alicia Sykes
19bd665d2a 🩺 Updates healthz endpoint usage 2026-05-02 19:10:05 +01:00
Alicia Sykes
5fdf50ceb5 🥅 Catch + pass down any upstream/API errors 2026-04-29 17:10:46 +01:00
Alicia Sykes
c43712550a Adds option to disable config backups on save
By default, everything functions the same. But if the `DISABLE_CONFIG_BACKUPS` env var is set, then when the user saves the config to disk (via UI, calling the save-config endpoint), then the previous config will not get coppied/backedup to the BACKUP_DIR (user-data/config-backups) anymore. Also added docs for this change. This option might be useful on file systems with restricted permissions (if /app/user-data/config-backups doesn't have create/write access), or when the user just doesn't want a ton of backup files for every single litttle config change.
2026-04-29 07:51:10 +01:00
Alicia Sykes
31a1cbf278 🦖 Adds env var parsing for backward compatibility widget tokens 2026-04-26 15:36:40 +01:00
Alicia Sykes
ee099aa3a7 💥 Removes all in-app rebuild functionality 2026-04-26 14:33:16 +01:00
Alicia Sykes
acbb069b2a 🩹 Semver fix for update checker 2026-04-25 17:51:05 +01:00
Alicia Sykes
381dcf7410 Removes connect-history-api-fallback dep 2026-04-25 00:01:51 +01:00
Alicia Sykes
ba0c967c01 🚚 Updates util imports 2026-04-19 12:21:48 +01:00
Alicia Sykes
201d83fb3c 🎨 Resolves style regressions 2026-04-17 21:13:59 +01:00
Alicia Sykes
8bf2f8e02d 🔄️ Merge branch 'master' of github.com:lissy93/dashy into migration/vue3-upgrade 2026-04-13 14:52:49 +01:00
Alicia Sykes
aceb4ee47e 🩹 Small fix to prevent harmless error when no user 2026-04-12 19:07:00 +01:00
Alicia Sykes
6d1ad131cd 🔐 Implements max response size safeguard 2026-04-12 19:05:57 +01:00
Alicia Sykes
2bbac3be69 🚚 Move express app out of server.js 2026-04-12 19:02:49 +01:00
Alicia Sykes
92aa1ba00b Adds timeout to status check 2026-04-12 17:02:20 +01:00
Alicia Sykes
0c09a81245 🔐 Restrict host and prototocol for cors proxy 2026-04-12 09:47:02 +01:00
Alicia Sykes
be9b6b1269 Robustness improvments to cors-proxy
Adds a timeout to prevent ever lasting requests, surrounds JSON parse with try catch when header missing uses a 400 status code instead of 500 and fixes the error messaging for this
2026-04-11 20:52:16 +01:00
Alicia Sykes
21491bbe22 ️ Robustness improvments for save-config endpoint
Deeper path validation, collision protection for backups, fixes missing
config field crash, adds check for file size, improved security of
filename allow regex
2026-04-11 20:35:02 +01:00
Alicia Sykes
0509269e1e 🐛 Fixes container crash on save-config (#1935, #1945) 2026-04-11 20:35:02 +01:00
Alicia Sykes
f1f5718dd2 🥅 Properly catch/handle server errs, without circular crash 2026-04-10 16:10:28 +01:00
Alicia Sykes
a4af19ffcb 🐛 Fixes CORS proxy crash when error json has circular dependency 2026-04-09 21:00:00 +01:00
Alicia Sykes
d56b045e6d 🔀 Merge pull request #1827 from dintho/patch-1
Adjusting SSL Portion of HealthCheck
2026-04-08 09:26:31 +01:00
Alicia Sykes
a85fd0ab45 🔂 Merge branch 'master' of github.com:lissy93/dashy into migration/vue3-upgrade 2026-04-07 10:55:22 +01:00
Alicia Sykes
c07f3dc810 🥅 Handle null headers 2026-03-31 22:20:29 +01:00
Alicia Sykes
63952fb030 🚚 Replace instances of Axios with new request handlers across everywhere 2026-03-31 21:31:57 +01:00