naiba
e816e94fca
feat: server transfer rotation
2026-05-25 10:17:34 +00:00
naiba and naiba/CloudCode
fa31ba402e
fix(rpc): allow global agent secret across server owners
...
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-05-19 01:58:53 +00:00
naiba and naiba/CloudCode
ee01a174fb
fix(rpc): verify gRPC client UUID belongs to the agent secret owner
...
Auth.Check resolved client_uuid → server.ID via UUIDToID without
checking that the resolved server's UserID matched the user that the
secret was bound to. An agent presenting one user's secret could
target a different user's server UUID and impersonate it — poisoning
monitoring state, triggering alerts, or quietly receiving tasks the
real owner expected.
Add authorizeAgentForUUID: if the UUID is unknown we still allow new
registration bound to the secret owner; if the UUID is known but
points to someone else's server we reject. The rejection message
"client UUID does not belong to the agent secret owner" also helps
operators trace which user's secret has leaked.
Note: this changes runtime behaviour after batch-move/server — the
new owner must reconfigure agents with their own secret. That is the
correct contract; the previous behaviour was a cross-user reporting
bug.
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba >
2026-05-18 15:17:37 +00:00
UUBulb
91bef2882a
refactor: simplify server & service manipulation ( #993 )
...
* refactor: simplify server & service manipulation
* update
* fix
* update for nat, ddns & notification
* chore
* update cron
* update dependencies
* use of function iterators
* update default dns servers
2025-02-21 23:08:12 +08:00
UUBulb
7e8985a599
feat: edit server config online ( #980 )
...
* feat: edit server config online
* clean
* refactor
* generate template
* fix deadlocks
* fix
2025-01-31 13:33:53 +08:00
naiba
3999d1f99a
chore: refactor
2025-01-04 12:32:29 +08:00
UUBulb
85818c2630
bug fixes ( #918 )
...
* bug fixes
* fix for backward compatibility
* fix init
* cleanup
* possible fix
* optimize permission check
* Revert "possible fix"
This reverts commit 003f1bbb2aa368aade6702e6019922b7f4871a39.
2024-12-26 23:38:40 +08:00
naiba
87e01a532e
feat: upgrade frontend
2024-12-25 21:02:54 +08:00
UUBulb
653d0cf2e9
feat: user roles ( #852 )
...
* [WIP] feat: user roles
* update
* update
* admin handler
* update
* feat: user-specific connection secret
* simplify some logics
* cleanup
* update waf
* update user api error handling
* update waf api
* fix codeql
* update waf table
* fix several problems
* add pagination for waf api
* update permission checks
* switch to runtime check
* 1
* cover?
* some changes
2024-12-22 00:05:41 +08:00
UUBulb
2234cff5eb
fix: allocate geoip on server creation ( #554 )
2024-12-05 17:07:31 +08:00
naiba
be51c5a1e6
feat: refactor grpc keepalive
2024-12-05 00:11:34 +08:00
naiba
3cce7ebf01
rename repo
2024-11-28 19:38:54 +08:00
naiba
22738b6244
improve: use stream reduce auth check time
2024-11-23 12:43:02 +08:00
naiba
58cc8aa5df
Merge branch 'dev' of github.com:naiba/nezha-v1 into dev
2024-11-22 23:57:48 +08:00
naiba
17b02640a9
feat: waf 🤡
2024-11-22 23:57:25 +08:00
UUBulb
fc98c0919f
report geoip separately, fix server creation & deletion bugs ( #14 )
...
* new geoip method
* report geoip separately, fix server creation & deletion bugs
* fix struct tag
* fix write name
* remove deleteion list
* remove rpc realip header
* Revert "remove rpc realip header"
This reverts commit 8a5f86cf2d7df87f28cfa2a3b3430f449dd6ed73.
2024-11-22 22:40:43 +08:00
naiba
d699d0ee87
feat: grpc / web get real ip
2024-11-22 00:19:36 +08:00
naiba
c4011934f7
fix agent connect
2024-10-22 23:44:50 +08:00
naiba
aa20c97312
refactor agent auth & server api
2024-10-20 23:23:04 +08:00
naiba
1c91fcffac
feat: 去除 webTerminal 的 websocket 依赖
2024-07-14 12:47:36 +08:00
naiba
1e641d1249
theme-mdui by @MikoyChinese
2022-01-09 11:54:14 +08:00
naiba
e24121bdf7
🐛 修复修改服务器导致 Agent 离线
2021-07-25 23:50:08 +08:00
naiba
169865a7e4
🔨 开启 pprof、优化 agent
2021-05-10 18:04:38 +08:00
naiba
0cdd0626f3
♻️ v4: 去掉添加 Agent ID 要求 需要更新面板 close #83
2021-01-30 17:10:51 +08:00
naiba
a41c792577
💥 v2.0 必须更新面板，新增服务监控
2021-01-16 00:45:49 +08:00
naiba
347bb7faa0
✨ feat: 展示排序 close #29
2021-01-08 21:04:50 +08:00
naiba
4083a42978
🚚 from p14yground to naiba
2020-11-11 10:07:45 +08:00
奶爸
bfe6d48927
展示服务器列表
2019-12-09 18:14:31 +08:00
奶爸
58277ba0b6
客户端授权验证
2019-12-09 16:02:49 +08:00
奶爸
d8c4364653
Web 服务
2019-12-08 16:59:58 +08:00
naiba
UUBulb