tale/headplane v0.6.2-beta.4

on GitHub

Hey all, Headplane 0.6.2-beta.4 is now available and adds a couple more features and smaller bug fixes like some CSS mobile layout fixes, a docker health check, better OIDC heuristics for detecting the correct token auth endpoint method, etc. This is probably the last beta before a full release. The full release will ship with support for Headscale 0.28 if it releases before.

Specifically for OIDC, oidc.redirect_uri has been deprecated and server.base_url will need to be supplied. Starting in Headplane 0.7.0, you will receive errors if it is not set. See the OIDC configuration docs for more information. Also, PKCE has now been turned into an option, so you'll need to set oidc.use_pkce to true if you get code verifier errors when authenticating with your OIDC provider.

Changes

• Added support for Headscale 0.27.0 and 0.27.1
• Bundle all node_modules aside from native ones to reduce bundle and container size (closes #331).
• Allow conditionally compiling the SSH WASM integration when building (closes #337).
• Implemented the ability to customize the build with a custom script (see ./build.sh --help for more information).
• Attempt to warn against misconfigured cookie settings on the login page.
• Made server.cookie_max_age and server.cookie_domain configurable (closes #348).
• Re-worked the configuration loading system with several enhancements:
  • It is now possible to skip a configuration file and only use environment variables (closes #150).
  • Secret path loading has been reworked from the ground up to be more reliable (closes #334).
  • Added better testing and validation for configuration loading
• Re-worked the OIDC integration to adhere to the correct standards and surface more errors to the user.
  • Deprecated oidc.redirect_uri and automated callback URL detection in favor of setting server.base_url correctly.
  • Explicitly added oidc.use_pkce to correctly determine PKCE configuration.
• Removed several unnecessarily verbose or spammy log messages.
• Updated the minimum Docker API used to support the latest Docker versions (via #370).
• Enhanced the node tag dialog to show a dropdown of assignable tags (via #362).
• Fixed an issue where the website favicon would not load correctly (closes #323).
• Correctly handle invalid ACL policy inserts on Headscale 0.27+ (closes #383).
• Prevent a machine from changing its owner to itself (closes #373).
• Added an /admin/api/info route that can expose sensitive information if server.info_secret is set in the configuration (closes #324).
• Correctly apply Gravatar profile pictures on the user page if applicable (closes #405).
• Machine key registration no longer works if the key isn't 24 characters long (closes #415).
• Fixed some mobile CSS issues across the application (closes #401).
• Added a Docker healthcheck to the container (closes #411).

Full Changelog: v0.6.2-beta.3...v0.6.2-beta.4