Chris Thach 9a77c5b3ce Fix headless login when in-band MFA is required (#66168) ...

* Fix headless login when in-band MFA is required.

* Set HeadlessAuthenticationID in headless cert and allow bypass of in-band MFA if set.

Signed-off-by: Chris Thach <[email protected]>

* Update proto to fix test.

Signed-off-by: Chris Thach <[email protected]>

* Delete useless assert.

Signed-off-by: Chris Thach <[email protected]>

---------

Signed-off-by: Chris Thach <[email protected]>

2026-05-08 17:25:55 +00:00

..

accesslists

Update tests to inject modules instead of relying on modulestest.SetTestModules (#65976)

2026-04-22 17:38:51 +00:00

accessmonitoring

Revise predicate language docs and add contains(set, item) (#64864)

2026-04-01 19:11:15 +00:00

agentless

Rename NewSoftwarePrivateKey to NewPrivateKey (#53598)

2025-04-09 23:34:15 +00:00

asciitable

tsh request search, add support for --format flag (#62015)

2025-12-09 14:49:29 +00:00

auth

Fix headless login when in-band MFA is required (#66168)

2026-05-08 17:25:55 +00:00

authz

Watch and publish CA override CRLs to LDAP (#66487)

2026-05-07 20:42:53 +00:00

automaticupgrades

chore: Bump golangci-lint to v2.7.2 (#62066)

2025-12-09 17:59:21 +00:00

autoupdate

fips: Rename IsBoringBinary to IsFIPSBuild throughout (#66346)

2026-05-02 10:58:23 +00:00

aws

Add "tsh aws-profile" cmd to Generate AWS Profiles from AWS Identity Center Integration (#63032)

2026-03-05 18:12:06 +00:00

backend

Add DeleteBatch scaffolding and tests (#66258)

2026-05-04 11:39:25 +00:00

benchmark

pgx migration: all places outside engine + test server (#65596)

2026-04-13 14:31:23 +00:00

boundkeypair

MWI Scopes[4]: Scoped bot joining and bound keypair support (#65366)

2026-04-16 02:06:24 +00:00

bpf

Fix unreadable Enhanced Session Recording events (#64581)

2026-05-04 12:25:25 +00:00

cache

Watch and publish CA override CRLs to LDAP (#66487)

2026-05-07 20:42:53 +00:00

cgroup

use the audit login session ID to track sessions when using Enhanced Sesssion Recording (#63050)

2026-02-19 18:20:18 +00:00

client

Add metadata/thumbnail generation for desktop recordings (#65381)

2026-05-07 11:23:04 +00:00

cloud

Timeout Azure discovery install command (#66496)

2026-05-07 21:42:45 +00:00

componentfeatures

[Access Requests] Support SSH node resource constraints (#64403)

2026-04-01 21:31:16 +00:00

config

Add TLS options to app spec (#65995)

2026-05-05 15:50:04 +00:00

configurators

EC2 Auto Discover: add new required permission account:ListRegions (#61967)

2025-12-04 09:40:10 +00:00

connectmycomputer

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

cryptosuites

Add AppClient CA (#66273)

2026-04-30 19:05:23 +00:00

darwin

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

decision

Fix headless login when in-band MFA is required (#66168)

2026-05-08 17:25:55 +00:00

defaults

Add LinuxDesktop gRPC and backend (#62974)

2026-04-21 20:51:35 +00:00

desktop

Refactor reversetunnelclient.Tunnel interface (#57674)

2025-08-21 20:16:55 +00:00

devicetpm

chore: Bump go-attestation to v0.6.0 (#61294)

2025-11-12 20:37:19 +00:00

devicetrust

Use the DeviceCollectedData.os_login_user field (#63389)

2026-02-03 14:19:37 +00:00

events

Add web ui audit event for AccessGraphSettingsUpdateCode (#66530)

2026-05-08 09:30:47 +00:00

expression

Revise predicate language docs and add contains(set, item) (#64864)

2026-04-01 19:11:15 +00:00

fixtures

Reduce testing symbols in production binaries (#55360)

2025-06-09 16:51:12 +00:00

gcp

Port gcp join method to new join service (#61205)

2025-11-18 00:46:04 +00:00

hardwarekey

Remove (auth.Server) SetClock (#60526)

2025-10-29 15:19:44 +00:00

healthcheck

Support username in role templates and expressions (#64888)

2026-04-15 16:29:41 +00:00

httplib

Remove unused argument from httplib.SetIndexContentSecurityPolicy (#63331)

2026-01-30 17:48:09 +00:00

integrations

[AWSIC] Add iam:CreateSAMLProvider to Identity Center Policy (#66420)

2026-05-06 05:22:41 +00:00

inventory

Fixing scope propagation and heartbeat enforcement for kube service (#65894)

2026-04-24 00:36:08 +00:00

itertools

Add DynamicBatchSizeIter util (#61157)

2025-11-12 09:15:01 +00:00

join

Update tests to inject modules instead of relying on modulestest.SetTestModules (#65976)

2026-04-22 17:38:51 +00:00

jwt

Add Device Bound Session Credentials to App Access (#65431)

2026-04-28 22:35:47 +00:00

kube

updating deduplication when listing resources to work only within scope boundaries when listing kube clusters (#66339)

2026-05-06 13:32:30 +00:00

labels

Introduce logtest package (#56741)

2025-07-15 18:11:10 +00:00

limiter

limiter: Short-circuit when no rates or connections are configured (#63751)

2026-04-01 06:05:53 +00:00

linux

Apply remaining modernize changes. (#56037)

2025-06-25 21:25:29 +00:00

loginrule

feat: JSONPath interpolation for Login Rules (OIDC) (#56598)

2025-08-05 18:41:26 +00:00

loglimit

Fix bug in the log limiter (#63568)

2026-02-06 14:35:13 +00:00

modules

fips: Rename IsBoringBinary to IsFIPSBuild throughout (#66346)

2026-05-02 10:58:23 +00:00

msgraph

Split MS Graph endpoint validation into separate functions (#66315)

2026-04-30 15:07:24 +00:00

multiplexer

pgx migration: all places outside engine + test server (#65596)

2026-04-13 14:31:23 +00:00

observability

[fix] Use provided registry in metrics.RegisterCollectors (#64919)

2026-03-24 14:17:20 +00:00

oidc

chore: Bump opentelemetry to v1.40.0 (#64014)

2026-02-20 18:45:30 +00:00

okta

Okta: Don't allow creating user_group Access Request in RO (#55420)

2025-06-10 11:09:04 +00:00

openssh

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

player

chore: Bump Go to 1.25.1 (#58875)

2025-09-15 21:49:53 +00:00

plugin

Initialize usage reporting via plugin registry after auth server setup (#64265)

2026-03-26 11:46:12 +00:00

plugins

proto PluginSyncFilter to filter input type converter (#62187)

2025-12-19 06:27:17 +00:00

proxy

rework scoped comparison helpers (#63359)

2026-03-18 21:23:25 +00:00

puttyhosts

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

relaypeer

Relay SSH routing logic and transport server (#58855)

2025-09-25 15:18:03 +00:00

relaytransport

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145)

2026-04-01 12:34:10 +00:00

relaytunnel

Kubernetes forwarding in the Relay Service (#60974)

2025-11-14 22:25:00 +00:00

release

Clean up some utils (#57423)

2025-08-01 18:42:18 +00:00

resourceusage

Convert lib/resourceusage to use slog (#50311)

2024-12-17 13:30:33 +00:00

resumption

Set Teleport version in SSH clients (#65004)

2026-04-07 18:06:00 +00:00

reversetunnel

[reversetunnel] respect KeepAliveCountMax in agent pool (#66513)

2026-05-07 12:33:09 +00:00

reversetunnelclient

Set Teleport version in SSH clients (#65004)

2026-04-07 18:06:00 +00:00

saml

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

scopes

[scopes] feat: filter scoped roles by name (#65891)

2026-04-27 23:35:37 +00:00

secret

Fix log messages and tsh command description (#61037)

2025-11-05 15:31:30 +00:00

secretsscanner

Fix ReportSecrets hanging on upstream error (#66062)

2026-04-23 15:28:11 +00:00

service

Move env var check to higher level (#66577)

2026-05-08 15:39:57 +00:00

services

feat: Preparation for Beams list (web ui) (#66287)

2026-05-07 17:54:49 +00:00

session

Improve error message for terminal size unmarshalling (#62775)

2026-01-13 11:35:05 +00:00

srv

Fix headless login when in-band MFA is required (#66168)

2026-05-08 17:25:55 +00:00

sshagent

Capture x11 and agent forwarding requests in trace. (#59292)

2025-09-18 19:43:20 +00:00

sshca

Fix headless login when in-band MFA is required (#66168)

2026-05-08 17:25:55 +00:00

sshutils

Capture reexec networking stderr for logging (#65202)

2026-04-29 20:04:39 +00:00

subca

Implement CA override resolver logic (#66333)

2026-05-07 16:32:09 +00:00

system

Convert lib/system to use slog (#50300)

2024-12-17 13:27:21 +00:00

systemd

Add join failure handling for ec2 using readyz health check (#64296)

2026-04-20 14:59:21 +00:00

tbot

feat: added db vnet access to be embedded in tbot (#66503)

2026-05-08 16:15:08 +00:00

teleterm

feat: Added basic setup for database access support via vnet (#65298)

2026-05-05 17:41:27 +00:00

terminal

Reduce the memory usage of the session recording processor by ~80% (#60266)

2025-10-15 15:21:54 +00:00

tfgen

tfgen: add hash to sanitized resource name (#66227)

2026-04-30 15:46:30 +00:00

tlsca

[Access Requests] Fix sentinel in legacy cert extension replacing actual resource IDs (#66556)

2026-05-08 16:53:04 +00:00

tlscatest

Add the tlscatest.GenerateSelfSignedCA helper (#64113)

2026-03-02 16:29:45 +00:00

tpm

Fix ./lib/tpm tests using -tags=tpmsimulator (#65807)

2026-04-16 15:07:00 +00:00

uds

chore: Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.5.0 (#44739)

2024-07-29 15:05:34 +00:00

ui

Align label sorting in Connect with what Web UI does (#48086)

2024-10-30 09:54:28 +00:00

usagereporter

initial draft (#64972)

2026-04-22 23:40:37 +00:00

usertasks

[web] add azure discovery rules, user tasks to integrations api (#65385)

2026-04-21 20:30:58 +00:00

utils

Add enum value rendering to CLI docs and remove duplicate descriptions (#66466)

2026-05-08 13:53:15 +00:00

versioncontrol

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145)

2026-04-01 12:34:10 +00:00

vnet

feat: added db vnet access to be embedded in tbot (#66503)

2026-05-08 16:15:08 +00:00

watcher

Adjust log level on some noisy entries (#61076)

2025-11-06 21:03:31 +00:00

web

Add metadata/thumbnail generation for desktop recordings (#65381)

2026-05-07 11:23:04 +00:00

windowsexec

Convert lib/windowsexec to use slog (#50307)

2024-12-17 04:47:52 +00:00

windowsservice

Connect: gracefully handle VNet service and app version mismatch (#64438)

2026-03-19 07:45:58 +00:00

winpki

Watch and publish CA override CRLs to LDAP (#66487)

2026-05-07 20:42:53 +00:00