Vinicius Fortuna
305f33c3ad
Add link to PR
2022-11-18 16:42:26 -06:00
Vinicius Fortuna
e0dbae7d02
Update on blocking resistance
2022-11-18 16:40:18 -06:00
dependabot[bot]
e97f698a1a
Merge pull request #1224 from Jigsaw-Code/dependabot/npm_and_yarn/loader-utils-1.4.2
2022-11-18 20:13:31 +00:00
J. Yi
8e2306a59b
chore: 🎉 release v1.13.0 for all platforms ( #1225 )
2022-11-18 13:55:05 -05:00
dependabot[bot]
f87680a3b3
chore: bump loader-utils from 1.4.1 to 1.4.2
...
Bumps [loader-utils](https://github.com/webpack/loader-utils ) from 1.4.1 to 1.4.2.
- [Release notes](https://github.com/webpack/loader-utils/releases )
- [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md )
- [Commits](https://github.com/webpack/loader-utils/compare/v1.4.1...v1.4.2 )
---
updated-dependencies:
- dependency-name: loader-utils
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-11-18 00:35:57 +00:00
dependabot[bot]
733fa52f5c
Merge pull request #1221 from Jigsaw-Code/dependabot/npm_and_yarn/socket.io-parser-4.0.5
2022-11-10 14:54:23 +00:00
dependabot[bot]
28ae41b7d0
chore: bump socket.io-parser from 4.0.4 to 4.0.5
...
Bumps [socket.io-parser](https://github.com/socketio/socket.io-parser ) from 4.0.4 to 4.0.5.
- [Release notes](https://github.com/socketio/socket.io-parser/releases )
- [Changelog](https://github.com/socketio/socket.io-parser/blob/main/CHANGELOG.md )
- [Commits](https://github.com/socketio/socket.io-parser/compare/4.0.4...4.0.5 )
---
updated-dependencies:
- dependency-name: socket.io-parser
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-11-10 01:26:05 +00:00
dependabot[bot]
7051f3fb2f
Merge pull request #1220 from Jigsaw-Code/dependabot/npm_and_yarn/loader-utils-1.4.1
2022-11-09 18:27:55 +00:00
dependabot[bot]
4e11b9dab8
chore: bump loader-utils from 1.4.0 to 1.4.1
...
Bumps [loader-utils](https://github.com/webpack/loader-utils ) from 1.4.0 to 1.4.1.
- [Release notes](https://github.com/webpack/loader-utils/releases )
- [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.1/CHANGELOG.md )
- [Commits](https://github.com/webpack/loader-utils/compare/v1.4.0...v1.4.1 )
---
updated-dependencies:
- dependency-name: loader-utils
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-11-09 06:24:45 +00:00
Daniel LaCosse
710e40f58c
feat(manager/web): chunked invite flow - phase zero ( #1198 )
...
* phase 0 init
* copy translations from internal TC
* update pr checks, change to link
* Update src/server_manager/web_app/ui_components/outline-share-dialog.ts
Co-authored-by: Vinicius Fortuna <fortuna@users.noreply.github.com>
Co-authored-by: jyyi1 <yijunyi@google.com>
Co-authored-by: Vinicius Fortuna <fortuna@users.noreply.github.com>
2022-11-01 09:23:50 -04:00
Vinicius Fortuna
cfab642862
Bump version for release ( #1214 )
2022-10-27 16:12:14 -05:00
Vinicius Fortuna
ba135267d1
chore(server): upgrades ( #1211 )
...
- Upgrade Prometheus to 2.37.1
- Upgrade outline-ss-server to 1.4.0
- Fetch Prometheus and outline-ss-server binaries on demand. Remove from repo because of file size limit
- Upgrade base node image.
2022-10-27 11:59:48 -05:00
Amir Omidi
6ea0c1d084
Add icanhazip.com as IP source ( #1207 )
...
Add icanhazip.com as an alternative. Both ipinfo and checkip are sometimes inaccessible from certain areas.
2022-10-24 15:37:55 -05:00
62w71st
7a2007b233
feat(server): add encryption method option to the access key creation API ( #1002 )
2022-10-17 16:12:43 -05:00
Jacob Ford
54017182eb
Typo in README ( #1173 )
2022-10-12 10:58:33 -04:00
Daniel LaCosse
1d5b86b20c
upgrade minor version ( #1181 )
2022-10-11 14:42:30 -04:00
J. Yi
9531932be9
build(manager/electron): 👷 add option to use GCP KMS for signing ( #1168 )
...
In this changeset:
- upgraded `jsign.jar` to version `4.2`
- add an option to leverage `gcp-hsm` certificate to sign Windows executables
- please note that [GCP does not support SHA-1](https://cloud.google.com/kms/docs/algorithms#asymmetric_signing_algorithms ), and here are the consequences of not adding SHA-1 to the binary signatures:
1. [SHA-1 is deprecated by Microsoft](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/sha-1-windows-content-to-be-retired-august-3-2020/ba-p/1544373 )
2. The only affected OSes are Windows 7 and below ([support ended already](https://www.microsoft.com/en-us/windows/end-of-support )). Windows 7 (6.1.7600) users can still upgrade to Windows 7 SP1 (6.1.7601) which supports SHA-2.
3. Users can still run our app on old Windows systems (Windows 7), despite that the following warning dialog might show up:
2022-10-11 12:42:36 -04:00
Daniel LaCosse
63ca9dacad
feat(devtools): add link to mattermost channel ( #1182 )
...
* feat(devtools): add link to mattermost channel
* Update README.md
2022-10-11 10:05:32 -04:00
Daniel LaCosse
96ffaac53c
chore(devtools): update codeowners ( #1178 )
...
* update codeowners
* Update .github/CODEOWNERS
Co-authored-by: Vinicius Fortuna <fortuna@users.noreply.github.com>
Co-authored-by: Vinicius Fortuna <fortuna@users.noreply.github.com>
2022-10-05 12:24:21 -04:00
Daniel LaCosse
6cbf4ed339
Revert "refactor(manager): replace share s3 flow with self-contained instructions ( #1133 )" ( #1166 )
...
This reverts commit f529b48c91
2022-10-05 11:12:25 -04:00
Daniel LaCosse
46923aef8c
Revert "chore: updated translations for Outline manager" ( #1169 )
...
* Revert "delete iw.json"
This reverts commit a7e4465db3ba783e7576cbf6b1cd5c
2022-10-05 11:12:16 -04:00
Cathal Garvey
75c358148c
fix(manager): specify a higher per_page for DigitalOcean API call ( #1113 )
...
* Fixes #999 . Specify a higher per_page for DigitalOcean API call to get droplets.
* Review feedback: Add TODOs for proper pagination, extend other 'droplets' DO API call to use 100 as well. 100 is the tested limit, and a sane default until proper pagination
2022-10-05 04:11:37 -04:00
Kevin Damm
1440a89de0
chore: update package.json to set version as 1.11.0
2022-09-30 09:54:39 -04:00
Kevin Damm
b09a8baab3
Update package.json
2022-09-08 18:04:17 -04:00
Kevin Damm
0d60f44154
chore: update version of Outline Manager to 1.10.1
2022-09-08 18:04:17 -04:00
Kevin Damm
a7e4465db3
delete iw.json
2022-09-07 19:44:12 -04:00
Kevin Damm
ba783e7576
delete messages.json
...
This file does not need to be tracked in github
2022-09-07 19:44:12 -04:00
Kevin Damm
cbf6b1cd5c
updated translations for Outline manager
2022-09-07 19:44:12 -04:00
dependabot[bot]
c7f7684713
chore: bump terser from 4.8.0 to 4.8.1 ( #1125 )
...
Bumps [terser](https://github.com/terser/terser ) from 4.8.0 to 4.8.1.
- [Release notes](https://github.com/terser/terser/releases )
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/terser/terser/commits )
---
updated-dependencies:
- dependency-name: terser
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-31 13:28:34 -04:00
dependabot[bot]
b04d7bebd8
Bump moment from 2.29.2 to 2.29.4 ( #1129 )
...
Bumps [moment](https://github.com/moment/moment ) from 2.29.2 to 2.29.4.
- [Release notes](https://github.com/moment/moment/releases )
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/moment/moment/compare/2.29.2...2.29.4 )
---
updated-dependencies:
- dependency-name: moment
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-31 13:27:12 -04:00
Kevin Damm
56f4a0f25a
Comment on placement of server.close for success
2022-08-29 17:54:25 -04:00
Kevin Damm
e7842d3bda
move server.close timeout to after server creation
...
Also add a constant definition for the timeout duration.
2022-08-29 17:54:25 -04:00
Kevin Damm
46a4d65fc6
Update digitalocean_oauth.ts
2022-08-29 17:54:25 -04:00
Kevin Damm
500fdfc7fa
fix: Don't close the oauth callback server on bad requests.
...
Changes the behavior of the local server for receiving oauth callbacks
from Digital Ocean by not closing it on invalid requests. This avoids
the problem where a malicious actor prematurely closes the
callback-handling server (a DoS of the authentication flow).
Also added a timeout to close the server after 30 seconds.
2022-08-29 17:54:25 -04:00
Daniel LaCosse
baf9ad0039
fix(devtools): only run the size label on internal PRs ( #1153 )
...
* fix(ci): only run the size label on internal PRs
* better
* there
* ?
* hm
* test opposite case
* great it works
2022-08-25 16:05:33 -04:00
Vinicius Fortuna
9fc83859c2
chore(manager): clean up Manager errors ( #1151 )
...
Move errors to more appropriate places.
2022-08-23 20:19:05 -04:00
Vinicius Fortuna
27931733d5
feat(manager): upgrade DigitalOcean image ( #1148 )
...
* Upgrade DO image to Ubuntu 20
* Install droplet agent for web console after server is ready
2022-08-22 15:00:16 -04:00
Daniel LaCosse
3b0e6154b8
fix(manager): removes special case for manager connection key ( #1138 )
...
* seems to work
* remove additional assets
* put back getConnectedHelpBubble
* lil tweak
2022-08-16 10:05:31 -04:00
Daniel LaCosse
f529b48c91
refactor(manager): replace share s3 flow with self-contained instructions ( #1133 )
...
* initial commit - need to test
* update en.json
* update messages
* revert my access key event rerouting
* type errors
* add message descriptions
* good enough
* just one block o' text
* almost there
* put back pre-wrap
* switch to <br>
* line break to master messages
2022-08-04 15:21:22 -04:00
J. Yi
46dc821f92
refactor(manager): ♻️ change electron-updater's url to S3 ( #1135 )
...
In this PR, I switched `electron-updater`'s checking-update-url to Amazon S3, so [`outline-releases` GitHub repository](https://github.com/Jigsaw-Code/outline-releases/tree/master/manager ) can be deprecated (but we still need to update the yaml files for backward compatibility).
2022-08-03 12:54:23 -04:00
Vinicius Fortuna
19ddaa2b15
Merge pull request #1134 from Jigsaw-Code/fortuna-key
...
feat(server): increase TLS key size
2022-08-03 12:45:56 -04:00
Vinicius Fortuna
3d6752c048
Increase size of TLS key
2022-08-02 21:45:41 +00:00
Vinicius Fortuna
bf4f4af734
Fix integration test
2022-08-02 21:45:30 +00:00
Kevin Damm
16b627cfc6
Avoid malicious path traversal in manager's Electron method.
...
There is an Electron IPC event 'open-image' that accepts any path,
including relative paths that would expose system filenames such as
/etc/passwd. This change resolves all paths to be rooted at the base
directory for ...server_manager/web_app.
2022-08-02 11:56:26 -04:00
Daniel LaCosse
8d2791e006
remove dev tools ( #1130 )
2022-07-28 15:05:54 -04:00
J. Yi
3a25236bb8
chore(manager): 🌐 add translations for DO messages ( #1126 )
2022-07-28 12:26:59 -04:00
Daniel LaCosse
b9a0f30add
chore: update electron notarize ( #1128 )
...
* ...
* apple password, apple team id
2022-07-28 11:39:09 -04:00
Daniel LaCosse
84f978d9e0
inflation ( #1118 )
2022-07-12 17:09:06 -04:00
J. Yi
5624202861
fix(manager): 🌐 update some translation texts ( #1120 )
2022-07-06 17:27:24 -04:00
Daniel LaCosse
97cabe60a9
fix: remove outdated RELEASES_REPOSITORY ( #1119 )
...
* remove releases repository
* make github explicit
* remove ci docs
* generic = raw url download
2022-07-01 16:51:27 -05:00
