Commit graph

  • 408d167d4b
    Merge dd18130ece into 4399fe2a85 Abdalrahman 2026-05-13 17:05:19 +02:00
  • dd18130ece
    Merge branch 'main' into fix/node-tag-unique-scope Sanaei 2026-05-13 17:05:17 +02:00
  • 4399fe2a85
    add log rotate to 3xui.log file to avoid disk space consumption (#4277) main Amirmohammad Sadat Shokouhi 2026-05-13 18:33:56 +03:30
  • c4c458314a
    fix MHSanaei 2026-05-13 17:00:28 +02:00
  • 4828455cf1
    Merge branch 'main' into log-rotate Sanaei 2026-05-13 16:55:02 +02:00
  • 6c6b40e063
    fix(outbound): accept JSON-only configs and sync JSON to basic form on tab switch MHSanaei 2026-05-13 16:48:16 +02:00
  • b97ff40ad6
    feat(api-tokens): manage multiple named tokens; add tab/section anchor URLs MHSanaei 2026-05-13 16:34:31 +02:00
  • 46b6f8c66c
    feat(routing): drag-reorder rules, split balancer column, mobile card layout MHSanaei 2026-05-13 15:28:21 +02:00
  • 41faaa2b25
    Merge branch 'main' into fix/node-tag-unique-scope Sanaei 2026-05-13 15:07:12 +02:00
  • 102df7a290
    style(api-docs): redesign TOC, section icons, endpoint rows, and code blocks with ultra-dark support (#4332) Abdalrahman 2026-05-13 16:05:23 +03:00
  • 75eee9efb2
    docs(api): add missing POST /panel/api/inbounds/:id/resetTraffic entry MHSanaei 2026-05-13 15:03:35 +02:00
  • 17b04df091
    style(api-docs): rename visibleSections to visibleEndpoints, drop dead toc-stuck CSS MHSanaei 2026-05-13 15:02:00 +02:00
  • 29609378dd
    Merge branch 'main' into beautify-api-docs Sanaei 2026-05-13 14:50:25 +02:00
  • f29c8a5e29
    fix: single inbound traffic reset resets all inbounds (#4334) (#4338) Abdalrahman 2026-05-13 15:49:54 +03:00
  • ad81649c16
    fix: strip main-panel TLS cert file paths when sending inbound to remote node (#4339) Abdalrahman 2026-05-13 15:47:09 +03:00
  • b47f794ed0
    fix: reality random target/sni buttons not working (#4337) (#4340) Abdalrahman 2026-05-13 15:42:20 +03:00
  • 1ae7360b81
    Merge f415f41b53 into 4e1b597914 Fedor Batonogov 2026-05-13 08:25:05 -04:00
  • 5f95c0099e
    Merge 93784b8afc into 4e1b597914 Vladislav Kasperov 2026-05-13 08:25:04 -04:00
  • 4e1b597914
    feat(ui): use the host as the browser tab title prefix MHSanaei 2026-05-13 14:23:45 +02:00
  • bbefe91011
    fix(auth): invalidate sessions when 2FA is enabled, fix dev 401 loop MHSanaei 2026-05-13 14:08:16 +02:00
  • e40554a7d5
    fix(inbound): require email when adding or updating a client MHSanaei 2026-05-13 13:45:31 +02:00
  • 3569b1be73
    ci(codeql): run on push to main MHSanaei 2026-05-13 13:39:32 +02:00
  • 38da210ded
    fix(security): SSRF-guard node and remote HTTP clients MHSanaei 2026-05-13 13:33:53 +02:00
  • 9fc47b3d41
    ci: gate workflows on relevant source paths MHSanaei 2026-05-13 13:21:26 +02:00
  • 210c25cf13
    Bump Go module dependency versions MHSanaei 2026-05-13 13:04:44 +02:00
  • 5dd7e44594
    build(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 (#4345) dependabot[bot] 2026-05-13 13:00:02 +02:00
  • ed79661f23
    Merge branch 'main' into dependabot/go_modules/golang.org/x/text-0.37.0 Sanaei 2026-05-13 12:59:51 +02:00
  • 4e4a8e9ff7
    build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (#4344) dependabot[bot] 2026-05-13 12:58:42 +02:00
  • e989e5fb99
    Merge branch 'main' into dependabot/go_modules/golang.org/x/crypto-0.51.0 Sanaei 2026-05-13 12:58:24 +02:00
  • 23970e72a7
    build(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 (#4343) dependabot[bot] 2026-05-13 12:57:07 +02:00
  • 8bdb093d6e
    build(deps): bump actions/setup-node from 5 to 6 (#4342) dependabot[bot] 2026-05-13 12:56:51 +02:00
  • f27c3f1a6c
    Merge branch 'main' into dependabot/github_actions/actions/setup-node-6 Sanaei 2026-05-13 12:56:38 +02:00
  • 3b0bcb910e
    build(deps): bump actions/checkout from 5 to 6 (#4341) dependabot[bot] 2026-05-13 12:56:08 +02:00
  • cc48663237
    build(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 dependabot[bot] 2026-05-13 10:53:56 +00:00
  • 08afb0956a
    build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 dependabot[bot] 2026-05-13 10:53:52 +00:00
  • b16e395f09
    build(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 dependabot[bot] 2026-05-13 10:53:46 +00:00
  • 3721ff99aa
    build(deps): bump actions/setup-node from 5 to 6 dependabot[bot] 2026-05-13 10:53:40 +00:00
  • 839071bc2b
    build(deps): bump actions/checkout from 5 to 6 dependabot[bot] 2026-05-13 10:53:31 +00:00
  • 428f1333ac
    Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275) Farhad H. P. Shirvan 2026-05-13 12:52:52 +02:00
  • 42e2a91b92
    fix(auth): invalidate other sessions when credentials change MHSanaei 2026-05-13 12:48:13 +02:00
  • f69cdd3841
    fix(settings): POST /logout after credential change MHSanaei 2026-05-13 12:41:55 +02:00
  • 4e7687e2fe
    fix(auth): make logout POST+CSRF and propagate session loss to other tabs MHSanaei 2026-05-13 12:24:05 +02:00
  • 2c12a36877
    Merge 89f904b976 into 406cb6dbc0 Vadim Reznichenko 2026-05-13 12:53:06 +03:00
  • de6be04119
    Merge 8f4579215e into 406cb6dbc0 Abdalrahman 2026-05-13 17:39:36 +08:00
  • 364c5a35e3
    Merge branch 'main' into fix/farhadh/security-hardening-2 Sanaei 2026-05-13 11:32:16 +02:00
  • 406cb6dbc0
    fix(api-docs): resolve no-useless-escape lint errors MHSanaei 2026-05-13 11:31:34 +02:00
  • ae3dc626f8 fix: reality random target/sni buttons not working (#4337) abdulrahman 2026-05-13 12:30:40 +03:00
  • 7c4b0d038c fix: strip main-panel TLS cert file paths when sending inbound to remote node abdulrahman 2026-05-13 12:24:01 +03:00
  • d028d390eb
    Revert "feat(auth): block panel with default admin/admin credentials and guide credential change" MHSanaei 2026-05-13 11:17:29 +02:00
  • a7dbbb18a9 fix: single inbound traffic reset resets all inbounds (#4334) abdulrahman 2026-05-13 12:11:16 +03:00
  • 28513a51e3 style(api-docs): redesign TOC, section icons, endpoint rows, and code blocks with ultra-dark support abdulrahman 2026-05-13 09:39:44 +03:00
  • 5fb36d34c9
    fix(fail2ban): escape percent signs in 3x-ipl datepattern (#4328) Aleksandr 2026-05-13 02:49:09 +03:00
  • 4884a2972a
    fix(graphs): increase y-axis paddingLeft from 32 to 56 to prevent clipped labels (#4309) Abdalrahman 2026-05-13 02:47:54 +03:00
  • 6e12329d9d
    feat(api-docs): enhance in-panel API documentation (#4312) Abdalrahman 2026-05-13 02:47:09 +03:00
  • 26246ee810
    fix MHSanaei 2026-05-13 01:46:03 +02:00
  • 9f7e8178d4
    fix: delete button missing after searching for a user (#4315) Abdalrahman 2026-05-13 02:27:10 +03:00
  • 60e6b12f4c
    fix(hysteria2): restore missing masquerade config in inbound form (#4316) Abdalrahman 2026-05-13 02:25:00 +03:00
  • 525fcf2a5a
    fix MHSanaei 2026-05-13 01:23:51 +02:00
  • 0dbadf82c0
    fix: auto-renew must re-enable client in inbound settings JSON (#4317) Abdalrahman 2026-05-13 02:15:52 +03:00
  • fa1ae0d95b
    Update x-ui.sh Aleksandr 2026-05-13 02:13:52 +03:00
  • da97eef65c
    Update DockerEntrypoint.sh Aleksandr 2026-05-13 02:13:11 +03:00
  • 48e90bba51
    fix: show UDP tag for Hysteria and fix client count spacing (#4318) Abdalrahman 2026-05-13 02:12:25 +03:00
  • 6de9b24229
    fix: preserve space between date and time in log modal (#4326) Abdalrahman 2026-05-13 02:02:48 +03:00
  • 34ea51f7b4 fix(api-docs): use ClipboardManager.copyText instead of copy to fix API token copy button abdulrahman 2026-05-12 20:49:22 +03:00
  • 8e30a23a5f feat(api-docs): add request body examples, error responses, WebSocket message types, and subscription response headers abdulrahman 2026-05-13 01:01:30 +03:00
  • 29fa28bf75 fix(tgbot): resolve client creation race conditions and localization bugs Aleksei Sidorenko 2026-05-13 00:25:35 +03:00
  • b0c5cc0c0d fix: preserve space between date and time in log modal abdulrahman 2026-05-12 23:04:52 +03:00
  • 821e50da51 fix(inbound): prevent shared client_traffic row deletion when sibling inbound is deleted abdulrahman 2026-05-12 23:21:44 +03:00
  • 89f904b976
    Preserve clients' IP history Vadim Reznichenko 2026-05-12 20:54:36 +03:00
  • 8f4579215e feat: add API token to install output abdulrahman 2026-05-12 20:42:28 +03:00
  • 441b5b5fc8
    Preserve historical client IPs Vadim Reznichenko 2026-05-12 20:13:38 +03:00
  • 99a5314075 fix: show UDP tag for Hysteria and fix client count spacing abdulrahman 2026-05-12 20:11:39 +03:00
  • c7e838c95a fix(hysteria2): restore missing masquerade config in inbound form abdulrahman 2026-05-12 20:03:06 +03:00
  • c61dbdd3e0 fix: auto-renew must re-enable client in inbound settings JSON abdulrahman 2026-05-12 20:02:41 +03:00
  • cdeb14468e fix: delete button missing after searching for a user abdulrahman 2026-05-12 19:50:14 +03:00
  • 73b2d64247 fix(multi-node): scope tag and email unique constraints per node abdulrahman 2026-05-12 10:54:49 +03:00
  • 53b05931d4 fix(graphs): increase y-axis paddingLeft from 32 to 56 to prevent clipped labels abdulrahman 2026-05-12 17:53:13 +03:00
  • 2aeaaa9052 fix(api-docs): use distinct colors for JSON syntax highlighting (green strings, amber numbers) abdulrahman 2026-05-12 18:38:13 +03:00
  • 14604e0c51 feat(api-docs): add JSON syntax highlighting and top-right copy button to code blocks abdulrahman 2026-05-12 18:22:46 +03:00
  • a141b4f457 feat(api-docs): enhance API documentation with missing endpoints, search, collapse, and route sync test abdulrahman 2026-05-12 18:08:47 +03:00
  • 5a156f48c2 fix(graphs): increase y-axis paddingLeft from 32 to 56 to prevent clipped labels abdulrahman 2026-05-12 17:53:13 +03:00
  • 07bc74a521
    feat(nodes): blur address column with eye-toggle, mirroring IndexPage IP card MHSanaei 2026-05-12 12:38:38 +02:00
  • f570b991e7
    fix(api-docs): copy API token button MHSanaei 2026-05-12 12:34:22 +02:00
  • 80031e67cc
    feat(inbounds): restore copy-clients-between-inbounds modal MHSanaei 2026-05-12 12:30:07 +02:00
  • bfc16e3d07
    Merge branch 'main' into log-rotate Sanaei 2026-05-12 12:17:49 +02:00
  • 11db4f0d29
    Merge branch 'main' into fix/farhadh/security-hardening-2 Sanaei 2026-05-12 11:51:54 +02:00
  • fdaa65ad7e
    Feat: clarify VLESS encryption auth selection (#4271) Farhad H. P. Shirvan 2026-05-12 11:39:28 +02:00
  • d86e87ed30
    Fix: traffic writer restart freeze (#4265) Farhad H. P. Shirvan 2026-05-12 11:36:05 +02:00
  • 89a8f549f2
    feat: sortable inbounds table columns (#4300) Abdalrahman 2026-05-12 12:29:32 +03:00
  • 71e1d11c8b feat: sortable inbounds table columns abdulrahman 2026-05-12 12:03:30 +03:00
  • 686ca1f637 fix(multi-node): scope tag and email unique constraints per node abdulrahman 2026-05-12 10:54:49 +03:00
  • 93784b8afc Add possibility to remove client email from sub Vladislav Kobzev 2026-05-12 10:43:52 +03:00
  • 63a7931862 Merge remote and finalize PR #3882 adaptation to v3.0+ Aleksei Sidorenko 2026-05-12 03:55:48 +03:00
  • 2f6743340c Merge upstream/main and adapt PR #3882 features (Sub ID, Flow) to v3.0+ architecture Aleksei Sidorenko 2026-05-12 03:52:02 +03:00
  • 355bb4c9c0
    feat(panel): xray metrics dashboard with observatory probe history MHSanaei 2026-05-12 02:17:45 +02:00
  • 9feeccffc0
    fix(node): normalize base path during probe so missing trailing slash doesn't break status checks MHSanaei 2026-05-12 00:27:49 +02:00
  • f72a40271b add log rotate to 3xui.log file to avoid disk space consumption seyed amir mohammad sadat shokouhi 2026-05-11 23:54:48 +03:30
  • d8e05c12a6
    chore(ui): remove health-strip bar from dashboard top farhadh 2026-05-11 21:28:22 +02:00
  • 55502070e6
    fix(ci): stub web/dist before go list to satisfy go:embed at compile time farhadh 2026-05-11 21:25:35 +02:00
  • 11629fba80
    chore: frontend UX improvements, CI pipeline, and dev tooling farhadh 2026-05-11 21:10:58 +02:00