teleport

accessmonitoringrules/accessmonitoringrulesv1

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

accesspoint

Remove app auth config (#69528 )

2026-08-11 16:01:44 +00:00

authcatest

Add AppClient CA (#66273 )

2026-04-30 19:05:23 +00:00

authclient

Remove client invocations/backend implementations of deprecated GetTokens RPC (#69576 )

2026-08-12 15:33:29 +00:00

authtest

Remove app auth config (#69528 )

2026-08-11 16:01:44 +00:00

autoupdate/autoupdatev1

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

clientiprestriction/clientiprestrictionv1

client-ip-restriction: resource and oss service (#67679 )

2026-07-06 13:41:52 +00:00

clusterconfig/clusterconfigv1

scoped verbs rework (#69232 )

2026-08-04 16:53:02 +00:00

crownjewel

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

dbobject/dbobjectv1

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

dbobjectimportrule/dbobjectimportrulev1

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

delegation/delegationv1

Encode Bot Scope into TLS/SSH identity (#68385 )

2026-07-06 17:27:36 +00:00

discoveryconfig/discoveryconfigv1

discovery: enforce integration on cloud-discovery-group configs in Teleport Cloud (#355 )

2026-08-25 11:35:10 -05:00

dynamicwindows/dynamicwindowsv1

Fix dynamic desktop rbac bypass when creating desktops (#68186 )

2026-07-08 08:18:29 +00:00

gitserver/gitserverv1

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

grpcclientconfig/grpcclientconfigv1

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

healthcheckconfig/healthcheckconfigv1

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

integration

Namespace application server in presence service (#68740 )

2026-07-24 20:28:32 +00:00

internal

add scope to routetoapp & require scope qualified names for app access via CLI (#68609 )

2026-07-24 18:15:44 +00:00

inventory/inventoryv1

fix instances ui bug (#69551 )

2026-08-13 20:58:27 +00:00

issuance/v1

MWI: issuance: Add UsageApp support to IssueScopedBotCerts (#69449 )

2026-08-13 08:56:17 +00:00

join

Namespace scoped tokens (#68981 )

2026-07-27 21:46:14 +00:00

keygen

Inject modules into keygen (#62843 )

2026-01-16 18:52:50 +00:00

keystore

Initialize keystore sign and decrypt metrics to zero at startup and register missing decrypt metric collectors (#65857 )

2026-04-23 19:19:08 +00:00

kubewaitingcontainer/kubewaitingcontainerv1

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

linuxdesktop/linuxdesktopv1

Linux desktop improvements (#69186 )

2026-07-31 20:44:19 +00:00

loginrule/loginrulev1

Unify naming and location of auth RPC services (#46559 )

2024-09-12 22:34:58 +00:00

machineid

Remove legacy user generation label handling (#69335 )

2026-08-11 08:46:02 +00:00

mfa

MFA service stores and propagates the device ID used to satisfy a challenge. (#69572 )

2026-08-13 15:26:48 +00:00

mfatypes

Add TLS session ID support to mfav2 service. (#68454 )

2026-07-09 17:02:09 +00:00

migration

Fix missing assignment of ctx including tracing span (#67469 )

2026-06-05 09:05:10 +00:00

mocku2f

Changes to support login loadtest agent (#62075 )

2025-12-15 12:46:21 +00:00

moderation

role: Add minimal v9 with app default-deny (#68736 )

2026-08-07 00:20:59 +00:00

notifications/notificationsv1

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

okta

Okta: Don't allow creating user_group Access Request in RO (#55420 )

2025-06-10 11:09:04 +00:00

presence/presencev1

Add Scope Namespacing support for SSH Servers (Nodes) (#69213 )

2026-08-07 22:49:04 +00:00

recordingencryption

Hook up desktop sessions to summarisation (#67714 )

2026-06-15 10:09:32 +00:00

recordingmetadata

Capture inactivity periods when processing desktop sessions (#67721 )

2026-06-19 16:40:42 +00:00

scopes

scoped verbs rework (#69232 )

2026-08-04 16:53:02 +00:00

secreports/secreportsv1

allow custom error for disable secreports service (#64290 )

2026-03-05 18:06:02 +00:00

stableunixusers

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

state

adding audit events for scoped tokens and adding scope field to (#65523 )

2026-06-29 21:53:28 +00:00

storage

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

summarizer

Add Classifier backend storage, cache, gRPC service, and tctl support (#67761 )

2026-06-16 14:47:39 +00:00

testauthority

Clean up modules TODOs (#63085 )

2026-01-26 13:49:00 +00:00

touchid

Update Go version to v1.26.4 (#67476 )

2026-06-08 14:28:40 +00:00

trust/trustv1

scoped verbs rework (#69232 )

2026-08-04 16:53:02 +00:00

userloginstate

[scopes] support nested list ownership including scoped access lists (#68031 )

2026-07-13 19:37:46 +00:00

userpreferences/userpreferencesv1

Backend support for scoped login on web (#68884 )

2026-07-30 18:12:43 +00:00

userprovisioning/userprovisioningv2

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

users/usersv1

scoped verbs rework (#69232 )

2026-08-04 16:53:02 +00:00

usertasks/usertasksv1

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

vnetconfig/vnetconfigv1

scoped verbs rework (#69232 )

2026-08-04 16:53:02 +00:00

webauthn

kube: reuse one MFA ceremony across tsh proxy kube issuances (2/4) (#68522 )

2026-08-11 18:34:30 +00:00

webauthncli

Bump golangci-lint to v2 (#54410 )

2025-05-07 22:14:51 +00:00

webauthntypes

Migrate MFA service from v1 to v2 (#66820 )

2026-05-22 18:49:20 +00:00

webauthnwin

fix: Set the security-key hint when using cross-platform mode on Windows (#62105 )

2025-12-10 13:10:49 +00:00

workloadcluster/workloadclusterv1

feat(lib/services): remove workload cluster backend support (#67630 )

2026-06-22 16:57:36 +00:00

access_request_test.go

Search Access Requests by Requester Display Values (#68120 )

2026-07-27 17:55:35 +00:00

access_request.go

Resolve Access Request User Displays Server-Side for Dry-Run Creates (#68604 )

2026-07-16 21:16:15 +00:00

access_test.go

Remove (auth.Server) SetClock (#60526 )

2025-10-29 15:19:44 +00:00

access.go

Adds Conditional Update support for Access Lists with members (#60309 )

2025-10-28 23:37:02 +00:00

accountrecovery_test.go

Inject modules into the auth server (#62858 )

2026-04-09 20:54:27 +00:00

accountrecovery.go

Inject modules into the auth server (#62858 )

2026-04-09 20:54:27 +00:00

apiserver_test.go

Port over UpsertNode RPC to support scoped openssh access (#68351 )

2026-07-08 03:01:21 +00:00

apiserver.go

Port over UpsertNode RPC to support scoped openssh access (#68351 )

2026-07-08 03:01:21 +00:00

app_access_aws_credentials.go

Move auth.certRequest into internal package so it can be used in sub-packages (#64783 )

2026-03-19 18:49:04 +00:00

audit_fallback_grpc_test.go

On Auth: don't enqueue events that originate from agents (#67696 )

2026-07-28 19:09:14 +00:00

auth_iamjoin_organizations_test.go

Add support for filtering by Organizational Units in IAM Join (implementation) (#66242 )

2026-05-28 15:18:10 +00:00

auth_login_test.go

Validate MFA challenge scopes provided by the client (#69028 )

2026-07-28 19:11:34 +00:00

auth_test.go

Fix TestNewWebSessionScopedTrustedDeviceRequirement flakiness (#69506 )

2026-08-13 08:18:51 +00:00

auth_with_roles_okta_rbac_test.go

Run auth tests in parallel (#64066 )

2026-03-02 14:01:09 +00:00

auth_with_roles_test.go

waiting for kube server to land in unified resource cache before proceeding with test cases (#69619 )

2026-08-12 23:46:31 +00:00

auth_with_roles_watch_authz_test.go

Add Scope Namespacing support for SSH Servers (Nodes) (#69213 )

2026-08-07 22:49:04 +00:00

auth_with_roles.go

Remove dead HeartbeatV1 code for v19 (server-side) (#502 )

2026-08-25 11:35:10 -05:00

auth.go

Implement tctl observability (#67904 )

2026-08-12 22:23:22 +00:00

autoupdate_agent_version_report_test.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

autoupdate_agent_version_report.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

autoupdate_rollout_test.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

autoupdate_rollout.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

bot_test.go

Remove legacy user generation label handling (#69335 )

2026-08-11 08:46:02 +00:00

bot.go

Remove legacy user generation label handling (#69335 )

2026-08-11 08:46:02 +00:00

bound_keypair_tokens.go

Bound Keypair: Initialize status field when creating token with --apply-on-startup (#68727 )

2026-07-22 19:40:38 +00:00

browser_mfa_test.go

Return typed error for expired reusable SSO/browser MFA responses (#68930 )

2026-07-26 20:18:10 +00:00

browser_mfa.go

Return typed error for expired reusable SSO/browser MFA responses (#68930 )

2026-07-26 20:18:10 +00:00

ca_override.go

Refactor duplicated CA override logic into lib/subca (#67023 )

2026-05-27 14:32:19 +00:00

client_tls_config_generator.go

Try to avoid capturing stack traces when checking system roles (#68808 )

2026-07-21 13:00:54 +00:00

connector_monitor_test.go

Add alerts for expiring/expired SAML signing certs (#64504 )

2026-03-25 09:25:07 +00:00

connector_monitor.go

Update docs link for SAML cert expiry alert (#65264 )

2026-04-02 13:47:50 +00:00

db_test.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

db.go

Refactor duplicated CA override logic into lib/subca (#67023 )

2026-05-27 14:32:19 +00:00

dbsc.go

Add Device Bound Session Credentials to App Access (#65431 )

2026-04-28 22:35:47 +00:00

desktop_test.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

desktop.go

Refactor duplicated CA override logic into lib/subca (#67023 )

2026-05-27 14:32:19 +00:00

export_test.go

role: Add minimal v9 with app default-deny (#68736 )

2026-08-07 00:20:59 +00:00

externalauditstorage.go

Fix EAS Token generation (#40154 )

2024-04-05 13:06:03 +00:00

github_test.go

Allow GitHub login for users whose roles come exclusively from access lists (#63829 )

2026-07-27 14:51:41 +00:00

github.go

Allow GitHub login for users whose roles come exclusively from access lists (#63829 )

2026-07-27 14:51:41 +00:00

grpcserver_downgrade_property_test.go

auth: Add v9 downgrade property tests (#68916 )

2026-08-13 01:39:25 +00:00

grpcserver_eventstream_test.go

Deny watchers for cert_authority_override on OSS Auth (#66644 )

2026-05-15 20:56:52 +00:00

grpcserver_test.go

types: Declare all app_resources fields (#69500 )

2026-08-12 05:19:01 +00:00

grpcserver.go

Remove dead HeartbeatV1 code for v19 (server-side) (#502 )

2026-08-25 11:35:10 -05:00

init_test.go

Bound Keypair: Initialize status field when creating token with --apply-on-startup (#68727 )

2026-07-22 19:40:38 +00:00

init_windows_ca_test.go

Create the WindowsCA on cluster startup (#62877 )

2026-01-16 18:18:14 +00:00

init_windows_ca.go

Create the WindowsCA on cluster startup (#62877 )

2026-01-16 18:18:14 +00:00

init.go

Remove app auth config (#69528 )

2026-08-11 16:01:44 +00:00

join_azure_devops.go

azure devops support in new join service (#61545 )

2025-11-21 17:13:10 +00:00

join_azure_legacy.go

adding audit events for scoped tokens and adding scope field to (#65523 )

2026-06-29 21:53:28 +00:00

join_bitbucket.go

Port bitbucket join method to the new join service (#61082 )

2025-11-08 00:50:04 +00:00

join_bound_keypair_adapter.go

feat: bound keypair support in new join service (#58963 )

2025-10-01 19:48:51 +00:00

join_bound_keypair_test.go

Remove legacy user generation label handling (#69335 )

2026-08-11 08:46:02 +00:00

join_circleci.go

Port circleci join method to new join service (#61130 )

2025-11-18 02:42:24 +00:00

join_ec2.go

feat: EC2 method support in new join service (#60385 )

2025-10-23 21:58:20 +00:00

join_env0.go

Add Env0 join method (#60386 )

2025-10-27 23:02:20 +00:00

join_gcp.go

Port gcp join method to new join service (#61205 )

2025-11-18 00:46:04 +00:00

join_generic_oidc.go

Add generic_oidc join method (#67991 )

2026-07-11 00:03:17 +00:00

join_github.go

Update tests to inject modules instead of relying on modulestest.SetTestModules (#65976 )

2026-04-22 17:38:51 +00:00

join_gitlab.go

Port gitlab join method to new join service (#61203 )

2025-11-13 02:12:57 +00:00

join_iam.go

adding audit events for scoped tokens and adding scope field to (#65523 )

2026-06-29 21:53:28 +00:00

join_kubernetes.go

Port kubernetes join method family to new join service (#61464 )

2025-12-02 00:57:53 +00:00

join_oracle_test.go

Inject modules into keygen (#62843 )

2026-01-16 18:52:50 +00:00

join_oracle.go

adding audit events for scoped tokens and adding scope field to (#65523 )

2026-06-29 21:53:28 +00:00

join_spacelift.go

Update tests to inject modules instead of relying on modulestest.SetTestModules (#65976 )

2026-04-22 17:38:51 +00:00

join_terraformcloud.go

Update tests to inject modules instead of relying on modulestest.SetTestModules (#65976 )

2026-04-22 17:38:51 +00:00

join_test.go

adding audit events for scoped tokens and adding scope field to (#65523 )

2026-06-29 21:53:28 +00:00

join_tpm.go

adding audit events for scoped tokens and adding scope field to (#65523 )

2026-06-29 21:53:28 +00:00

join.go

Deprecate recording of join metadata into bot instance record (#69571 )

2026-08-13 08:15:04 +00:00

methods_test.go

Run auth tests in parallel (#64066 )

2026-03-02 14:01:09 +00:00

methods.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

middleware_test.go

Run auth tests in parallel (#64066 )

2026-03-02 14:01:09 +00:00

middleware.go

fixing issues with determining primary system role, disabling health (#67680 )

2026-06-16 17:18:09 +00:00

moderated_sessions_test.go

Inject modules into the auth server (#62858 )

2026-04-09 20:54:27 +00:00

notification_test.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

oidc.go

Convert lib/auth to use slog (#50577 )

2025-01-06 21:31:53 +00:00

password_test.go

fix: apply Access List grants in ChangeUserAuthentication (#65724 )

2026-04-21 23:27:45 +00:00

password.go

fix: apply Access List grants in ChangeUserAuthentication (#65724 )

2026-04-21 23:27:45 +00:00

periodic_test.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

periodic.go

Add status label to teleport_upgrader_counts metrics (#60119 )

2025-10-16 18:16:09 +00:00

recording_authorizer_test.go

Prefer authtest.AuthServer in tests that don't make API calls (#64065 )

2026-03-02 22:05:12 +00:00

recording_authorizer.go

scoped api level authz rework (#67133 )

2026-06-09 23:58:10 +00:00

recovery_codes_test.go

Improve performance of recovery code generation (#64063 )

2026-03-02 15:04:35 +00:00

register.go

adding immutable labels to scoped tokens and host certificates (#62941 )

2026-02-06 20:57:03 +00:00

requestable_roles_test.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

rotate.go

Inject modules into the auth server (#62858 )

2026-04-09 20:54:27 +00:00

saml.go

Relax validation of connector role-mapping on read paths (#69323 )

2026-08-05 13:40:08 +00:00

server_info_test.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

server_info.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

server_monitor.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

services.go

Remove app auth config (#69528 )

2026-08-11 16:01:44 +00:00

sessions_test.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

sessions.go

Remove app auth config (#69528 )

2026-08-11 16:01:44 +00:00

sso_diag_context_test.go

Run auth tests in parallel (#64066 )

2026-03-02 14:01:09 +00:00

sso_diag_context.go

Convert lib/auth to use slog (#50577 )

2025-01-06 21:31:53 +00:00

sso_mfa_test.go

Return typed error for expired reusable SSO/browser MFA responses (#68930 )

2026-07-26 20:18:10 +00:00

sso_mfa.go

Return typed error for expired reusable SSO/browser MFA responses (#68930 )

2026-07-26 20:18:10 +00:00

tls_test.go

Remove client invocations/backend implementations of deprecated GetTokens RPC (#69576 )

2026-08-12 15:33:29 +00:00

transport_credentials_test.go

Run auth tests in parallel (#64066 )

2026-03-02 14:01:09 +00:00

transport_credentials.go

scoped ssh access core (#60629 )

2025-11-18 00:26:12 +00:00

trustedcluster_test.go

Migrate Delete and UpsertTunnelConnection RPCs from HTTP to gRPC (#65935 )

2026-06-04 09:14:30 +00:00

trustedcluster.go

Migrate GetTunnelConnections/GetAllTunnelConnections to gRPC (#66066 )

2026-06-11 12:44:50 +00:00

usage_test.go

Inject modules into the auth server (#62858 )

2026-04-09 20:54:27 +00:00

user_login_state.go

Export GeneratePureULS for use in e (#68993 )

2026-07-29 14:57:55 +00:00

user.go

Convert lib/auth to use slog (#50577 )

2025-01-06 21:31:53 +00:00

usertoken_test.go

Prefer authtest.AuthServer in tests that don't make API calls (#64065 )

2026-03-02 22:05:12 +00:00

usertoken.go

Add paginated ListAuthServers/ListProxies (#61702 )

2025-12-12 21:42:28 +00:00

version.go

Initial migration to the Opaque API (#67279 )

2026-06-05 14:52:58 +00:00

windows-configure-ad.ps1

Refactor lib/auth/windows package (#54963 )

2025-05-23 23:21:20 +00:00