wg-easy

Commit Graph

Author	SHA1	Message	Date
Bernd Storath	8daaea9e8c	unique index on oauth	1 month ago
Bernd Storath	748ce1c9a2	move password login route move password login route from /api/session to /api/auth/password align with oauth	1 month ago
Bernd Storath	de54d3650e	add ability to set password for oidc users this allows oidc users to add password login cant be removed after	1 month ago
Bernd Storath	dfb6df3df8	support generic oidc	1 month ago
Bernd Storath	5aff3be745	nullable password, prevent timing attack this prevents timing attacks by always checking hash even if there is none prevents using basic auth if 2fa is enabled	1 month ago
Bernd Storath	1f22aaa147	adjust github logo with theme	1 month ago
Bernd Storath	c0dc6719d3	github login flow	1 month ago
Bernd Storath	2ad1c9a737	fix type import	1 month ago
Bernd Storath	e00e1aafe6	properly allow multiple providers	1 month ago
Bernd Storath	b936d75c93	wip make oauth more generic	1 month ago
Bernd Storath	7648b90510	add openid client	1 month ago
Daniel Molenda	8a3f945057	feat: add Google OAuth login support (#2625 ) * 🔧 Add login via google * 🔧 Update code style and docs * Add fix for db migrate * 🔧 Update docker-compose * 🔧 Fix sqlite" * 🔧 Update docker-compose * ⚰️ Remove environments * 🔧 Fix: remove ensureGoogleIdColumn workaround from sqlite.ts * 🔧 Remove space	1 month ago
Bernd Storath	e03d743307	update packages	4 weeks ago
Ankit Agarwal	c41ae0d4c5	Add Hindi translation (#2632 )	1 month ago
ふぁ	66f8bde206	Add Japanese translation (#2642 )	1 month ago
Bernd Storath	b3afb9ac1b	update packages	1 month ago
HackingAll	a52da67b38	Adding new translated lines (#2624 )	1 month ago
Bernd Storath	2dc8ba7792	Bump version to 15.3.0	1 month ago
Bernd Storath	4e8cccb4c7	replace debug with obug (#2619 ) * patch unenv * replaces debug with obug reverts unenv patch	1 month ago
Bernd Storath	e57b0977d3	update packages	1 month ago
Bernd Storath	0794413191	update packages	2 months ago
Bernd Storath	261b0d6b8f	Bump version to 15.3.0-beta.3	2 months ago
Ming Mak	f656d57d20	Translation: update Traditional Chinese (zh-HK) localization (#2603 ) * Update Chinese (HK) translations for clarity and completion * Fix spacing * Update zh-HK.json Taking reference from zh_TW, making awg clearer * Remove duplicate 'search' entry in zh-HK.json * Fix translation typos in zh-HK locale Replaced "户" with "戶".	2 months ago
Bernd Storath	46074fea1c	update packages	2 months ago
Felipe Cordova Huenupil	05c655ede9	fix(ui):Error pops up when enabling disabled client (#2594 ) * fix(ui):Error pops up when enabling disabled client Action is prevented and a clear message is displayed in Web UI * fix formatting * fix type issue * fix formatting --------- Co-authored-by: Bernd Storath <[email protected]>	2 months ago
Evgeniy	be8d24e492	Fix: Add trailing newline to Prometheus metrics output (#2573 ) Fix prometheus metrics	2 months ago
Bernd Storath	9682dedea7	update packages	2 months ago
Bernd Storath	5eb80fe3c1	update packages	3 months ago
Bernd Storath	15111ecd62	update packages	3 months ago
Bernd Storath	e3e4049f8e	update packages	3 months ago
Bernd Storath	3fb9adbf6f	Bump version to 15.3.0-beta.2	3 months ago
Bernd Storath	cd9db1563d	fix: mobile UI (#2569 ) * improve mobile ui * general cleanup * cleanup, improvements * fix hydration mismatch	3 months ago
wuys	b5c30f5dbe	i18n: add Vietnamese language support (#2568 ) * i18n: add Vietnamese translation * i18n: fix lint * i18n: import fix --------- Co-authored-by: meow <[email protected]>	3 months ago
adi82bdg	1eb9527175	Update Polish translations for various terms (#2566 )	3 months ago
Nikolas	cd890c1f0f	Update uk.json (#2559 )	3 months ago
Chiahong	9a843087c3	i18n(zh-tw): Update Traditional Chinese translation (#2558 )	3 months ago
Bernd Storath	483b63bba6	update packages	4 months ago
Alexis-Loskoutoff	13942c97b2	i18n(fr): Update French translation (#2544 )	4 months ago
MeCias	82c64e506e	Lang(de): Added missing translations (#2543 ) * Update de.json Lang(de): Added missing translations * Lang(de): Added missing translations and Comma * Lang(de): Added missing translations and Comma and identations	4 months ago
Aarón Rosa Díaz	9b3d919168	i18n(es): Updated Spanish translation (#2540 ) Updated Spanish translations for various UI elements Updated and completed all remaining Spanish translations, including support for AmneziaWG 2.0. Following: https://wg-easy.github.io/wg-easy/v15.2/contributing/translation/	4 months ago
杨黄林	3eaf0d01dc	i18n: improve Simplified Chinese translation (#2541 ) * Fix zh-CN translate * i18n: improve Simplified Chinese translation --------- Co-authored-by: yanghuanglin <[email protected]>	4 months ago
Bernd Storath	414e9a114b	Bump version to 15.3.0-beta.1	4 months ago
Maksim M.	2d28d87c5c	i18n(ru): Update Russian Lang (#2538 ) * i18n(ru): Add firewall and download options - Updated translation, added and translated all missing values from en.json * i18n(ru): Minor changes - Minor edits that don't change the translation * i18n(ru): Terminology changes - "Интерфейс" (Interface) has been renamed to "Сетевой интерфейс" (Network Interface) to avoid confusion with the Web UI, which is often referred to simply as "interface" in Russian.	4 months ago
Stephan Paternotte	abedf9f38e	Dutch translation updated (#2535 ) * Dutch translation updated Update nl.json updated re. "copy & download qr code as png" * Update nl.json Couple of trailing comma's added. Valid json now.	4 months ago
Kayhan	25f3fa3c0f	Update Turkish localization strings (#2523 ) * Update Turkish localization strings * Update src/i18n/locales/tr.json Co-authored-by: Copilot <[email protected]> * Update src/i18n/locales/tr.json Co-authored-by: Copilot <[email protected]> * Update src/i18n/locales/tr.json Co-authored-by: Copilot <[email protected]> * Update src/i18n/locales/tr.json Co-authored-by: Copilot <[email protected]> * Update src/i18n/locales/tr.json Co-authored-by: Copilot <[email protected]> * Update src/i18n/locales/tr.json Co-authored-by: Copilot <[email protected]> --------- Co-authored-by: Copilot <[email protected]>	4 months ago
Bernd Storath	c3c51f8088	update packages	4 months ago
Bernd Storath	8ea2b635c1	feat: change hooks to textareas (#2522 ) * hooks are now textareas * remove newlines in client config	4 months ago
Bernd Storath	bc4dfd03df	feat: copy & download qr code as png (#2521 ) * copy & download qr code as png * i18n, accessibility * improve error handling	4 months ago
Bernd Storath	5228734c98	feat(cli): add command to show qr code (#2518 ) * refactor cli, add commands * add docs * improve * fix ec mode order	4 months ago
Ian Foster	47f81dd66a	Feature/client firewall filtering (#2418 ) * Add per-client firewall filtering Implement server-side firewall rules to restrict client network access, allowing administrators to enforce security policies that cannot be bypassed by clients modifying their local configuration. This feature addresses the limitation where "Allowed IPs" only controls client-side routing but doesn't prevent clients from accessing networks they shouldn't reach. The firewall rules are enforced on the server using iptables/ip6tables and provide true access control. Features: - Opt-in via "Enable Per-Client Firewall" toggle in admin interface - Per-client "Firewall Allowed IPs" field for granular control - Support for IPs, CIDRs, and port-based filtering - Protocol specification: TCP, UDP, or both (default) - IPv4 and IPv6 dual-stack support - Falls back to client's allowedIps when firewallIps is empty - Clean separation of routing (allowedIps) from security (firewallIps) Supported formats: - 10.10.0.3 (single IP) - 10.10.0.0/24 (CIDR range) - 192.168.1.5:443 (IP with port, both TCP+UDP) - 192.168.1.5:443/tcp (IP with specific protocol) - [2001:db8::1]:443 (IPv6 with port) Implementation: - New database columns: firewall_enabled (interfaces), firewall_ips (clients) - Migration 0003_add_firewall_filtering for schema updates - firewall.ts utility for iptables chain management (WG_CLIENTS chain) - Integration into WireGuard.ts for automatic rule application - UI components with conditional rendering based on firewall toggle Technical details: - Uses custom WG_CLIENTS iptables chain for isolation - Rebuild strategy: flush and recreate all rules on config save - Mutex protection via rebuildInProgress/rebuildQueued flags - Graceful cleanup when firewall is disabled - No new dependencies (uses existing is-ip, is-cidr packages) * added Comprehensive documentation in README and docs/ for firewall filtering * validate firewall IPs * check for iptables before enabling the firewall and inform the user if it is missing * updated firewall docs * fix imports * remove extra import * Document all allowed IP/cidr/port/proto combinations that are allowed and check on save * add note on firewall being experimental and how to opt a single client out of the firewall. * cleanup more imports * add tests * Fix firewall IPv6 validation and test expectations Updated validation to correctly handle plain and bracketed IPv6 addresses, and fixed test to expect string from schema instead of object. * added comments to firewall rules and updated tests * fix auto-import * fix typescript errors * recreate sql migrations and rebase * improve tests, typechecking, documentation * fix formatting, fix types * improve type * added note for including host's IP in client firewall * updated language to include cidr and protocol options * another language update * refer to docs for firewall allowed IPs --------- Co-authored-by: Bernd Storath <[email protected]>	4 months ago

1 2 3 4 5 ...

751 Commits (8daaea9e8cb485617803582c2de3f8bdd53b351b)