Sanaei a31fa9abfa fix(node): refuse a node's claim on another inbound's client ...

The sync adopts each node's reported clients through SyncInbound, which resolves
a client record by email alone — and clients.email is globally unique. A node
reporting a colliding email therefore overwrote that client's UUID even when the
client is attached only to a master inbound, and the master then rebuilt its own
Xray config with the node-supplied credential: the real user locked out.

Skip a reported client whose record is attached only to inbounds of other nodes.
A record attached nowhere stays adoptable, so the soft-orphan reattach path a
flapping node depends on is unaffected.

2026-09-03 18:06:35 +02:00

..

controller

fix: do not type successfull login twice (#6374)

2026-09-03 17:00:25 +02:00

entity

feat(sub): client-side balancers for the JSON subscription (#6243)

2026-08-23 22:34:20 +02:00

global

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

job

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

locale

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

middleware

fix(web): tighten database restore body-cap exemption (#5609)

2026-06-28 15:00:55 +02:00

network

style: format struct literals and whitespace

2026-08-24 00:06:01 +02:00

runtime

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

service

fix(node): refuse a node's claim on another inbound's client

2026-09-03 18:06:35 +02:00

session

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

translation

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

websocket

fix(nodes): keep the credential-presence flag on the node heartbeat push

2026-07-28 17:38:46 +02:00

cadence_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

routes_contract_test.go

fix(api): authenticate GET /panel/api/openapi.json + pin the route registry to the router (#6133)

2026-07-29 08:00:05 +02:00

web_mtls_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_mtls.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00