feat: Device Security — certificate management UI (CA settings, enrollment approval, revocation)#612

Open

dexion wants to merge 37 commits intonetbirdio:mainfrom

dexion:feature/tpm-cert-auth

Commits on Apr 14, 2026

feat(device-security): add TypeScript interfaces and DeviceSecurityProvider

beLIEai
authored and
beLIEai
committed
feat: add device security settings page

beLIEai
authored and
beLIEai
committed
feat: add device security enrollments page

beLIEai
authored and
beLIEai
committed
feat: add device security trusted CAs page

beLIEai
authored and
beLIEai
committed
fix: add type guards, inventory_type passthrough, error handling in device security UI

beLIEai
authored and
beLIEai
committed
fix: add error handling for renewDevice in DevicesTable

beLIEai
authored and
beLIEai
committed
feat: add device security navigation and layout

beLIEai
authored and
beLIEai
committed
fix: gate device security navigation by isRestricted permission

beLIEai
authored and
beLIEai
committed
fix: add error state, extend cert-and-sso lockout warning, clamp validity days

beLIEai
authored and
beLIEai
committed
fix: add PEM END certificate marker validation in AddTrustedCAModal

beLIEai
authored and
beLIEai
committed
fix: fix empty state text, add reason column, add error feedback in enrollments

beLIEai
authored and
beLIEai
committed
fix: move DeviceSecurityProvider to layout, add /device-security redirect

beLIEai
authored and
beLIEai
committed
fix: remove unsupported title prop from Callout in settings error state

beLIEai
authored and
beLIEai
committed
fix: align CAType values with backend (builtin/vault/smallstep/scep, not external)

beLIEai
authored and
beLIEai
committed
feat(device-security): add CA config and inventory types and provider methods

beLIEai
authored and
beLIEai
committed
feat(device-security): add Inventory nav item and update Trusted CAs callout

beLIEai
authored and
beLIEai
committed
feat(device-security): redesign settings page with CA config, enrollment hints, and CRL section

beLIEai
authored and
beLIEai
committed
fix: spec compliance corrections for settings page

beLIEai
authored and
beLIEai
committed
fix: improve accessibility in CA test panel and settings

beLIEai
authored and
beLIEai
committed
feat: add inventory configuration page

beLIEai
authored and
beLIEai
committed
fix: add validation and accessibility improvements to inventory page

beLIEai
authored and
beLIEai
committed
fix: remove OCSP fields, fix handleSave error handling, fix handleTestCA, fix updateRef drift

beLIEai
authored and
beLIEai
committed
feat: inventory page - two-tab static list, status callout, coming-soon providers, hasChanges

beLIEai
authored and
beLIEai
committed
fix: prevent race in inventory save, guard disabled provider types

beLIEai
authored and
beLIEai
committed
fix: update Dockerfile to nginx:alpine, fix stand for reviewers

beLIEai
authored and
beLIEai
committed
fix: remove duplicate daemon directive in nginx.conf

beLIEai
authored and
beLIEai
committed
feat: multi-source inventory, fix defaults and styling

beLIEai
authored and
beLIEai
committed
fix: prevent Bearer undefined requests when OIDC token not yet loaded

beLIEai
authored and
beLIEai
committed
feat: add require_inventory_check toggle and cert_approver role

beLIEai
authored and
beLIEai
committed
chore: update package-lock.json

beLIEai
authored and
beLIEai
committed
feat: add Beta badge to Device Security nav item

beLIEai
authored and
beLIEai
committed
fix: sync caType into localCAConfig so Test Connection sends correct ca_type

beLIEai
authored and
beLIEai
committed
feat: show peer name as link in enrollments table

beLIEai
authored and
beLIEai
committed
feat: show peer name as link in device certificates table

beLIEai
authored and
beLIEai
committed
feat: add serial numbers CRUD in inventory static allow-list

beLIEai
authored and
beLIEai
committed
feat: expandable certificate PEM viewer in trusted CAs table

beLIEai
authored and
beLIEai
committed
security: confirmation dialogs for enrollment actions, strip inactive CA secrets

beLIEai
authored and
beLIEai
committed