20 Commits

Author SHA1 Message Date
Alicia Sykes
2b90a24c4f ⬆️ Big dependency bumps throughout 2026-07-22 22:12:36 +01:00
Alicia Sykes
a08491e25a 🛂 Adds option to disable server-side OIDC checks 2026-07-09 20:31:20 +01:00
Alicia Sykes
aa8279d53f 🛂 Option for overriding allowed issuers (#2210) 2026-06-16 10:54:56 +01:00
Alicia Sykes
1406587087 🔀 Merge pull request #2209 from lissy93/feat/api
First version of REST API
2026-06-15 12:20:31 +01:00
Alicia Sykes
1500839ef5 REST API for dashboard management (#2011) 2026-06-14 18:22:17 +01:00
Alicia Sykes
265685dfc4 🧪 Tests for OIDC admin lookup (#2202) 2026-06-12 11:05:28 +01:00
Alicia Sykes
8ff1c44471 🔀 Merge pull request #2193 from lissy93/sec/apply-host-blocklist-on-redirects
Re-check host blocklist on redirects and in status-check
2026-06-10 15:26:32 +01:00
Alicia Sykes
5f013449f9 🔒 Re-check host blocklist on redirects and in status-check 2026-06-10 15:03:14 +01:00
Benjamin GILLET
daa576d30c 🔀 feat: add ICMP ping check support to item (#2180)
* feat: add ICMP ping check support to item

* Replaced ping package with pingman package to be compliant with Dashy CI NodeJS version (20).
Fixed a behavior bug in status indicator component which didn't changed icon to yellow when checking.
Made otherStatusText a computed field to make it reflecting dynamically a new check request.
Added more examples to default conf.yml

* Removed a forgotten trace to console

* Made changes requested by Lissy after review of the PR.
Corrected tests using localhost which is not a valid host for pingman.
Added a Validator.js file in src/utils with function to check validity of hosts.
Reverted conf.yml file to the original version.

* Fixed a problem in configuration of pingman call after adding support of IPV6 addresses.

* Updated Dockerfile to pass Docker smoke tests in CI

* Revert to latest version of `user-data/conf.yml` from `master`

* Removed the duplicated feature line for ping check and just added `hosts` to the existing one

* Removed the unused `shouldEnabledPingCheck` function

* Add the ping system package and give rights to use to the node user so the pingman module can work in Docker container

* Remove `src/utils/Validator.js` file. Rely on `pingman` internal validation of hostname instead to avoid command injection.
2026-06-06 12:54:17 +01:00
Alicia Sykes
f34b7fb650 🛂 Server protects yaml as well as yml 2026-06-04 10:07:16 +01:00
Alicia Sykes
702e884418 🛂 Skip 401 for root config OIDC, return empty instead 2026-05-21 21:34:08 +01:00
Alicia Sykes
9218ab5822 🧪 Tests the bootstrap config has the flag 2026-05-21 20:58:38 +01:00
Alicia Sykes
85e1ce73a6 🛂 Stricter config access for OIDC/Keycloak 2026-05-18 12:55:58 +01:00
Alicia Sykes
93f7633a7d 🔐 Applies server-side authentication to all internal routes when OIDC/KC enabled 2026-05-15 13:50:56 +01:00
Alicia Sykes
19bd665d2a 🩺 Updates healthz endpoint usage 2026-05-02 19:10:05 +01:00
Alicia Sykes
5fdf50ceb5 🥅 Catch + pass down any upstream/API errors 2026-04-29 17:10:46 +01:00
Alicia Sykes
31a1cbf278 🦖 Adds env var parsing for backward compatibility widget tokens 2026-04-26 15:36:40 +01:00
Alicia Sykes
ee099aa3a7 💥 Removes all in-app rebuild functionality 2026-04-26 14:33:16 +01:00
Alicia Sykes
ba0c967c01 🚚 Updates util imports 2026-04-19 12:21:48 +01:00
Alicia Sykes
999bc97ac4 🧪 Tests for all the node endpoints 2026-04-12 19:21:40 +01:00