Commit Graph

604 Commits

Author SHA1 Message Date
Jamil
f37087808d docs: Update docs to use service account for sync for Google Workspace (#6706)
- Updates docs to show steps for configuring service account for sync
- Minor fixes to the in-portal instructions


Fixes #6489
2024-09-16 23:47:21 +00:00
Jamil
a729d364c9 docs: Add clarified instructions regarding setting up the Internet resource (#6705)
Fixes some UX issues seen by customers.
2024-09-16 23:37:40 +00:00
Andrew Dryga
99360060ec fix(portal): Hide trial duration message after subscription becomes active (#6703) 2024-09-16 11:09:30 -06:00
Andrew Dryga
ab3e42b1b4 fix(portal): Do not show billing limits when they are empty (#6677) 2024-09-13 14:00:26 -06:00
dependabot[bot]
83b330a9f8 build(deps): Bump @fontsource/source-sans-3 from 5.0.20 to 5.1.0 in /elixir/apps/web/assets (#6687)
Bumps
[@fontsource/source-sans-3](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/source-sans-3)
from 5.0.20 to 5.1.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/fontsource/font-files/commits/HEAD/fonts/google/source-sans-3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@fontsource/source-sans-3&package-manager=npm_and_yarn&previous-version=5.0.20&new-version=5.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-13 19:01:40 +00:00
Jamil
d0b211ce5e fix(portal): Fix verified shield alignment/spacing (#6683)
Was taking screenshots for the new verification feature and noticed the
alignment / spacing was off, so decided to quickly adjust them.


# Before
<img width="269" alt="Screenshot 2024-09-13 at 9 20 39 AM"
src="https://github.com/user-attachments/assets/6b5ba98f-f38c-4acb-a762-79e89901bd1e">
<img width="785" alt="Screenshot 2024-09-13 at 9 20 15 AM"
src="https://github.com/user-attachments/assets/5ff981bd-0643-474c-8324-5a5aaa3dcb2f">


# After

<img width="293" alt="Screenshot 2024-09-13 at 9 36 58 AM"
src="https://github.com/user-attachments/assets/b5667d2a-2ada-46c3-b3b6-4e1cacde5e18">

<img width="620" alt="Screenshot 2024-09-13 at 9 31 41 AM"
src="https://github.com/user-attachments/assets/586ce7f8-eccc-4ecf-a65b-bca799eddeb6">
2024-09-13 18:48:45 +00:00
dependabot[bot]
cd58bfa941 build(deps): Bump flowbite from 2.4.1 to 2.5.1 in /elixir/apps/web/assets (#6526)
Bumps [flowbite](https://github.com/themesberg/flowbite) from 2.4.1 to
2.5.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/themesberg/flowbite/releases">flowbite's
releases</a>.</em></p>
<blockquote>
<h2>v2.5.1</h2>
<ul>
<li>fix plugin import error from the config file</li>
</ul>
<h2>v2.5.0</h2>
<ul>
<li>added new DataTable plugin and examples</li>
<li>minor bug fixes and improvements</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="362ad079dc"><code>362ad07</code></a>
chore(version): update to <code>v2.5.1</code></li>
<li><a
href="b30fd48555"><code>b30fd48</code></a>
fix(plugin): remove import</li>
<li><a
href="878ced1b62"><code>878ced1</code></a>
docs(datatables): add to readme</li>
<li><a
href="09105b8429"><code>09105b8</code></a>
chore(version): bump to <code>2.5.0</code></li>
<li><a
href="70411d572a"><code>70411d5</code></a>
docs(datatables): add docs for js init, options, and methods</li>
<li><a
href="fc26a5e4c9"><code>fc26a5e</code></a>
feat(datatables): finish coding the dropdowns for exporting</li>
<li><a
href="bab0a3317f"><code>bab0a33</code></a>
feat(datatables): inject export dropdown button inside table header</li>
<li><a
href="f842793de9"><code>f842793</code></a>
feat(datatables): add basic export files feature</li>
<li><a
href="e56f601069"><code>e56f601</code></a>
docs(datatables): finish row selection example and docs</li>
<li><a
href="ba771d4738"><code>ba771d4</code></a>
feat(datatables): add row selection example</li>
<li>Additional commits viewable in <a
href="https://github.com/themesberg/flowbite/compare/v2.4.1...v2.5.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=flowbite&package-manager=npm_and_yarn&previous-version=2.4.1&new-version=2.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-13 18:33:00 +00:00
Antoine
e30127dbff feat(portal): sync all google workspace organization units (#6649)
Currently only root OUs are synced into Firezone. An additional query
parameter is needed to list all OUs.

Ref:
https://developers.google.com/admin-sdk/directory/reference/rest/v1/orgunits/list
2024-09-12 12:12:43 -06:00
Antoine
7830482ab3 feat(portal): ecs metadata discovery (#6619)
This PR adds support for ECS metadata API
(https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-metadata-endpoint-v4.html)
in order to discover hostname.

It also adds jq in the runtime image

Unlike EC2 or GCP VM, ECS tasks do not have a DNS record, we can only
use their IP as RELEASE_HOSTNAME. So I use their IPv4, IPv6 only
networks are therefore not supported.
2024-09-12 12:07:28 -06:00
Antoine
9255bd5b08 fix(portal): fix dump config smtp (#6669)
This can cause issue when sockopts is ommited and tls is not used.
Tested with SMTP without and with TLS

cf #6665
2024-09-12 12:06:08 -06:00
FTB_lag
de01fdb7ef fix(portal): default email host from web url (#6655)
Fix after #6202
Variable "outbound_email_from" uses removed variable "external_url"
2024-09-12 12:05:46 -06:00
Andrew Dryga
42d9a53986 chore(portal): Bump logger_json version (#6674) 2024-09-12 12:04:34 -06:00
Andrew Dryga
a6a1da7796 chore(portal): Bump Elixir deps (#6672)
We are most interested in tzdata, which had issues due to underlying
breaking change in the timezone database.
2024-09-12 11:15:06 -06:00
Antoine
b657c18f18 feat(portal): allow dns pool libcluster (#6618)
This PR adds support for DNSPoll libcluster strategy. I've tested this
and no need to do some custom dumping of the json config.
2024-09-10 12:57:34 -06:00
Andrew Dryga
6c811796f7 fix(portal): Do not save new condition with an empty value and handle it properly if it's saved like that (#6624) 2024-09-06 10:43:21 -07:00
Jamil
03cbe660bb fix(portal): Sidebar and logo spacing fixes (#6621)
Fixes margin/sidebar spacing.
2024-09-06 09:04:54 -07:00
Andrew Dryga
f4f2b45d2b fix(portal): Reload client on updates (#6614) 2024-09-05 18:45:39 -07:00
Andrew Dryga
1524dd967c fix(portal): Expire client flows when it's verification is removed (#6613) 2024-09-05 17:14:51 -07:00
Andrew Dryga
ed42f1db9f fix(portal): Show banners when trial is about to expire or is expired (#6579)
Signed-off-by: Andrew Dryga <andrew@dryga.com>
Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
2024-09-05 17:14:29 -07:00
Andrew Dryga
e72bb05436 feat(portal): Reinit client when itself or a known group were updated (#6609)
This allows us to push a whole set of resources at once when client was
verified/unverified/updated/blocked.

Closes #6560
2024-09-05 16:51:47 -07:00
Andrew Dryga
da81fb7f41 feat(portal): Allow client verification and add a policy condition to enforce it (#6604)
<img width="1414" alt="Screenshot 2024-09-05 at 1 17 08 PM"
src="https://github.com/user-attachments/assets/f50816e5-1e16-413c-be35-15ef9153a95d">
<img width="1404" alt="Screenshot 2024-09-05 at 1 17 13 PM"
src="https://github.com/user-attachments/assets/a5e055d0-321d-417e-9fd8-78e9643498cd">
<img width="1178" alt="Screenshot 2024-09-05 at 1 17 23 PM"
src="https://github.com/user-attachments/assets/6ea45486-98fb-495f-96d9-a96eb01925dd">
<img width="678" alt="Screenshot 2024-09-05 at 1 17 31 PM"
src="https://github.com/user-attachments/assets/45b4e798-d1b8-4574-97b3-a41dec1619fd">
<img width="632" alt="Screenshot 2024-09-05 at 1 17 46 PM"
src="https://github.com/user-attachments/assets/3c7c02e0-fc78-442e-86d3-fa711c9bb77c">
2024-09-05 14:35:38 -07:00
Andrew Dryga
2cf2d447c5 chore(portal): Move Resources above Policies in the menu since they are created first (#6602) 2024-09-05 14:35:24 -07:00
Andrew Dryga
2ae5f921c8 fix(portal): Disable IP check for browser session tokens (#6598)
This PR reverts commit that moves out IPv6 address to a separate
subdomain (deploying that will cause a prod downtime) and simply removes
the check that causes redirect loops.
2024-09-05 11:07:40 -07:00
Andrew Dryga
4e08e69c84 fix(portal): Reset the rate limit when user signed in (#6582) 2024-09-04 04:42:08 +00:00
Andrew Dryga
931b81e4be chore(portal): Add session data to fields truncated by logger (#6572) 2024-09-03 14:58:03 -07:00
Andrew Dryga
812dc9190c fix(portal): Reduce the timeouts for rate limited emails (#6573)
Fixes #6108
2024-09-03 20:01:46 +00:00
Andrew Dryga
1dae0a3ed5 fix(portal): Do not send resources not connected to any sites down to clients (#6512)
This is only possible for internet resources, any other resource will
always have at least one site connected at all times.

Closes #6510
2024-08-30 14:11:48 -06:00
Andrew Dryga
282abb8534 fix(portal): Fix issue with Google Workspace sync token permissions (#6494) 2024-08-30 11:59:59 -06:00
Jamil
5acea60dc6 fix(portal): Fix flash width and hero logo on auth pages (#6482)
# Before

<img width="1131" alt="Screenshot 2024-08-29 at 8 54 21 AM"
src="https://github.com/user-attachments/assets/65aadaaa-dc92-4b2d-8fd4-a8ec776bc697">
<img width="3120" alt="Screenshot 2024-08-29 at 9 00 38 AM"
src="https://github.com/user-attachments/assets/aa9846dc-9a01-4282-b9eb-539b38e7f67d">

<img width="702" alt="Screenshot 2024-08-29 at 9 03 26 AM"
src="https://github.com/user-attachments/assets/39e30430-ed0a-46c6-84a1-f4edecacbdb3">


# After

<img width="1100" alt="Screenshot 2024-08-29 at 8 54 30 AM"
src="https://github.com/user-attachments/assets/9b5ee17a-e95f-4195-8439-f94298d6ecf9">
<img width="3120" alt="Screenshot 2024-08-29 at 9 00 54 AM"
src="https://github.com/user-attachments/assets/be962785-684f-4de1-bf60-31e3567440ca">
<img width="621" alt="Screenshot 2024-08-29 at 9 09 54 AM"
src="https://github.com/user-attachments/assets/33b6d501-b5ad-494d-8c75-faf6bf63068f">
<img width="572" alt="Screenshot 2024-08-29 at 9 14 52 AM"
src="https://github.com/user-attachments/assets/c72cfc5a-8824-49e2-9ba2-984ebd490251">
2024-08-30 16:01:22 +00:00
Andrew Dryga
2a808292d0 feat(portal): Add blocked_tx_bytes to flow activity metrics (#6487)
Closes #4787
2024-08-29 14:21:51 -06:00
Andrew Dryga
3139651db4 feat(portal): Create default site for new accounts (#6488)
Closes #5012
2024-08-29 14:21:39 -06:00
Andrew Dryga
572c5671d0 feat(portal): Use Service Accounts to sync Google Workspace directory (#6390)
We will need to update the docs for the website, some screens to show
where the settings are:
<img width="1728" alt="Screenshot 2024-08-19 at 1 04 23 PM"
src="https://github.com/user-attachments/assets/88ebb06f-241d-44c8-90fa-258d0b78905e">
<img width="1436" alt="Screenshot 2024-08-19 at 1 04 02 PM"
src="https://github.com/user-attachments/assets/5f7a1011-5a53-4348-81cb-da804ee18bed">

Related [#5959](https://github.com/firezone/firezone/issues/5959)

---------

Signed-off-by: Andrew Dryga <andrew@dryga.com>
Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
2024-08-29 13:30:34 -06:00
Andrew Dryga
4973ac9d4c fix(portal): Replace missed data-confirms with modals (#6485)
Closes #6147
2024-08-29 13:28:55 -06:00
Andrew Dryga
2fb5d6a0ac feat(portal): Allow deleting stale actors even for active providers (#6471) 2024-08-28 16:24:00 -06:00
Andrew
7c6eac6af5 Hotfix: crash while rendering internet resources for gateways 2024-08-28 10:44:13 -06:00
Andrew Dryga
835fc4c8eb chore(portal): Bump all deps related to portal (#6445) 2024-08-28 10:40:02 -06:00
Thomas Eizinger
35017537c7 feat(gateway): allow out-of-order allow_access requests (#6403)
Currently, the gateway requires a strict ordering of first receiving a
`request_connection` message, following by multiple `allow_access`
messages. Additionally, access can be granted as part of the initial
`request_connection` message too.

This isn't an ideal design. Setting up a new connection is infallible,
all we need to do is send our ICE credentials back to the client.
However, untangling that will require a bit more effort.

Starting with #6335, following this strict order on the client is a more
difficult. Whilst we can send them in order, it is harder to maintain
those ordering guarantees across all our systems.

To avoid this, we change the gateway to perform an upsert for its local
ACLs for a client. In case that an `allow_access` call would somehow get
to the gateway earlier, we can simply already create the `Peer` and only
set up the actual connection later.

---------

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>
Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
2024-08-28 13:10:06 +00:00
Andrew Dryga
2d083379c6 feat(portal): Internet resources (#6299)
They will be sent in the API for connlib 1.3 and above.

I think in future we can make a whole menu section called "Internet
Security" which will be a specialized UI for the new resource type (and
now show it in Resources list) to improve the user experience around it.

Closes #5852

---------

Signed-off-by: Andrew Dryga <andrew@dryga.com>
Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
2024-08-27 23:11:17 +00:00
Brian Manifold
5d3fc7d0c4 feat(portal): Update Client index page to search all columns (#6377)
Why:

* Currently, when searching on the Client index page in the portal, the
only field being searched is the Client name. This commit adds the
ability to search either the Client name or the Actor name.

Closes: #5738
2024-08-26 21:57:41 +00:00
Andrew Dryga
43dc6c2053 fix(portal): Preload provider on pubsub events for the policy (#6444) 2024-08-26 15:32:13 -06:00
Andrew Dryga
9a3c2d714b fix(portal): Do not crash clustering process when Compute API is not available (#6443) 2024-08-26 15:32:01 -06:00
Andrew Dryga
8e4a4a7b05 feat(portal): Pre-check constraint conformation on client connect (#6431)
Closes #6216
2024-08-26 15:30:46 -06:00
Andrew Dryga
5b93860ddb fix(portal): Prevent wildcard abuse in DNS resources (#6430)
Now most common TLDs can't have `*` or `?` on the 2nd level, and TLD
can't have matching in itself either.

Closes #6357
Closes #6415
2024-08-26 15:30:09 -06:00
Jamil
c3d5a2a2d7 fix(ux/portal): conditions ux tweaks (#6417)
fixes #6367 

<img width="720" alt="Screenshot 2024-08-22 at 1 58 20 PM"
src="https://github.com/user-attachments/assets/806e4393-17a4-4bdf-9c6c-c1cfad641d78">

---------

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>
2024-08-23 05:15:02 +00:00
Jamil
17c48c8b05 fix(ux/portal): Clarify note about IPv4/6 upstreams (#6407)
Closes #5115 

<img width="1155" alt="Screenshot 2024-08-22 at 1 10 56 AM"
src="https://github.com/user-attachments/assets/3138e055-28c5-47cc-a9db-9f78d36e0d40">
2024-08-22 16:18:28 +00:00
Andrew Dryga
25a22b4780 chore(portal): Test that we only render resources once in WS API (#6394) 2024-08-21 17:16:19 -06:00
Brian Manifold
95ec1871e7 feat(portal): Allow Policies to be searched by Resource/Group (#6286)
Why:

* When using the Portal UI, it can be difficult to find a given Policy
as only 10 are shown on the page at a time. It was also difficult to
determine which Resources a Group had access to and vice versa what
Groups were allowed to access a given Resource. This change allows
searching by either Resource or Group to filter what Policies are shown.

Closes: #5624
2024-08-20 21:13:22 +00:00
Andrew Dryga
a5342256c3 feat(portal): Allow bulk-deleting synced actors (#6352)
Closes #6301
Closes #6217

<img width="1728" alt="Screenshot 2024-08-19 at 12 19 16 PM"
src="https://github.com/user-attachments/assets/0c1b570d-9ea9-413a-a8b5-febcd6d37072">
2024-08-20 13:05:19 -06:00
Jamil
c67cbfad08 fix(portal): Fix helptext grammar for DNS resource (#6306)
Minor helptext fix for the DNS resource helptext.
2024-08-15 22:03:19 +00:00
Jamil
b1b9b552c2 fix(portal): Clarify how synced users count against billing (#6285)
Fixes #6155 

One question we get with almost each new customer is "if I enable sync,
won't that count towards my bill?". This PR aims to answer that question
right when they create the provider.

I will also make sure to update Enterprise accounts in Stripe with
`monthly_active_users_acount` so that they can view this metric on the
Billing page.

---------

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>
2024-08-14 19:04:25 +00:00