This release fixes actions failing with "Bad Request" or "Unexpected Server Error" when Headplane runs behind a reverse proxy that terminates HTTPS. If you made proxy rules rewriting the Origin header as a workaround, it's safe to remove them now.
Fixes
- Fixed several broken actions (such as creating auth keys) that began failing with "Bad Request" or "Unexpected Server Error" after Headplane 0.8.0 when sitting behind a reverse proxy that terminates TLS. If you added a proxy rule rewriting the
Originheader as a workaround, it's safe to remove (closes #657, #658). - Fixed a bug where the Add nameserver dialog would not show the Restrict to domain switch in the correct state when closing and reopening the dialog after adding or canceling a split DNS nameserver (closes #635).
- Single sign-on no longer fails with "Unexpected Server Error" when
server.base_urlis missing. Headplane now logs a warning at startup and turns off single sign-on untilserver.base_urlis set to Headplane's public URL (closes #585). - Logs now explain why a request to Headscale failed, such as Headscale being unreachable or rejecting the API key, instead of printing
[object Object]. This covers signing in with an API key, linking an account after single sign-on, and agent syncs (closes #587, #600). - Deleting a Headscale user that's linked to a Headplane account now unlinks the account. Previously the account kept pointing at the deleted user, showed its raw single sign-on ID instead of a name, and wasn't marked as Not linked (closes #625).