Migrating
If you use domain binding with SSO and want to use the bound domain for the SSO return URL, you'll need to set the new return_url_domain option to host_header - see more at https://warpgate.null.page/sso/#domain-handling
New features
Web SSH #1943
Your users will now be able to connect to their SSH targets directly from the web browser. The terminal supports multiple tabs and single file transfers via ZMODEM.
Clicking an SSH target will open the terminal by default, but this can be changed under Config > Global parameters.
Default roles #1923
Roles can now be marked "default", which will auto-assign them to any newly created users.
Self-serve tickets #1818
If enabled under Config > Global parameters, users will be able to request ticket creation from their profile page. Admins will be able to see and approve/reject these requests on the Ticket admin page. Tickets for already allowed targets can be optionally auto-approved.
Changes
- Sectioned forms for users and targets by @Eugeny in #1961
- fixed #1975, fixed #1976 - let admin choose the default target click action by @Eugeny in #1983
- Little/max api token duration by @SteezyCougar in #1946
- fixed #1945 - make SCP recording optional by @Eugeny in #1978
- fixed #1948 - add return_url_domain SSO config option by @Eugeny in #1971
Fixes
- Make admin UI search filtering case-insensitive across list and log endpoints by @Copilot in #1922
- Ipv6 hostname parse fix by @Eugeny in #1936
- Small cleanups by @LarsSven in #1939
- fix: parse forwarded header lists by @immanuwell in #1944
- Fix Svelte sourcemap line drift by disabling preprocess-level sourcemap emission by @Copilot in #1959
- fix: display security key and browser auth URL in SSH terminal (#1960) by @xTamasu in #1970
New Contributors
- @immanuwell made their first contribution in #1944
- @xTamasu made their first contribution in #1970
Full Changelog: v0.23.4...v0.24.0