Major changes
- 863af5e: #1323 -
In-browser auth(2FA/SSO) support for PostgreSQL (#1338) #1338 - 53971dc: #1334 New in-browser auth requests will automatically show up on the Warpgate homepage if the user is logged in (#1335) #1335
- ec98c3d: Option to check and accepting SSH target's host keys from the admin UI (#1307) #1307
Changes
- Deleting an SSH target will now auto-remove its known hosts entry (#1300) #1300 (Chinmay Pai)
- Prefer SSO provider buttons will prefer
labelovernamein the login UI (Eugene) - 4533401: Warpgate will now forward HTTP basic auth credentials (if present) from an HTTP target's URL correctly (#1343) #1343
- cea7acc: #1281 - Added description fields for most objects (#1294) #1294
- 9841421: #1281 - List role members and targets in the UI (#1295) #1295
- 6b22399: Added SBOMs to release artifacts (#1289) #1289
- 74ca553: Add "getting started" hints to the UI (#1344) #1344
Fixes
- Fixed Warpgate attempting RSA key auth against a target too many times, exhausting the OpenSSH limits (#1274) #1274 (Eugene)
- 95dce41: Fix SSH Client to respond to keyboard-interactive when target has optional 2FA (#1273) (samtoxie) #1273
- 51c8937: fixed frontend crash in list pagination
- 5d3a8ac: Force the config file format to YAML (#1299) (Mice7R) #1299
- 4b74303: #1271 - modals are invisible with
prefers-reduced-motion - 0a3e444: fixed #1285 - unable to add public keys via credentials self-service
- 26a9c99: fixed #1326 - UI allowing duplicate target names (#1328) #1328
- d465586: fixed enter key handling in the "create target" form
- b4076ef: fixed #1320 - JDBC based Postgres clients not connecting
- 87b409b: SQL content of prepared Postgres queries were not logged
- 5ee29b9: fixed #1337 - automatically strip the public key comment when setting via the API
- 2381f55: fixed #972 - SSH server not offering keyboard-interactive when only OOB or SSO auth is enabled for a user
- 9bc1c9d: fixed #1346 - changing own password does not remove existing passwors
- 33803f1: fixed #1336 - correctly parse ECC certificates - no longer handle incorrect PEM header
- 331af97: fixed #1356 - generate config schema (#1357) #1357