Juan Fernandez 194f0cfb8f Fix SSO callback URLs doubling the subpath under a URL prefix ...

Fixes #46641

When Fleet runs under a subpath, server_url already includes that
subpath, so appending url_prefix again produced a doubled ACS callback
path (e.g. https://host/subpath/subpath/api/v1/fleet/sso/callback),
breaking SAML authentication for both login and MDM end user
authentication.

Drop url_prefix from the callback URL construction so the path is
appended directly to server_url, which is the full external base URL.
Fixes the same flaw in all five ACS-construction sites: login SSO
initiate and callback, and MDM SSO initiate plus both callback branches.

2026-06-26 10:40:55 -04:00

..

async

…

calendar

Policy status page: automation activity history, reset endpoint, and details UI

2026-06-19 12:13:36 -04:00

conditional_access_microsoft_proxy

Policy status page: automation activity history, reset endpoint, and details UI

2026-06-19 12:13:36 -04:00

contract

Move loginRequest and logoutRequest to server/fleet/ (#45908)

2026-05-21 09:57:07 -03:00

embedded_scripts

Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)

2026-06-05 16:20:32 -04:00

externalsvc

Policy status page: automation activity history, reset endpoint, and details UI

2026-06-19 12:13:36 -04:00

integrationtest

Clear idp cookie after succesful SSO (#47569)

2026-06-17 11:09:21 -05:00

middleware

…

mock

…

osquery_utils

Add Python 3.13 & 3.14 as Windows FMAs and normalize versions (#46873)

2026-06-08 10:51:32 -05:00

redis_key_value

…

redis_lock

…

redis_policy_set

…

schedule

…

svctest

Changed semantics around api_endpoints init.

2026-06-03 10:13:11 -04:00

testdata

…

activities_test.go

Emit failed VPP/in-house install activity, release reserved license (#46332)

2026-05-28 14:43:25 -04:00

activities.go

Emit failed VPP/in-house install activity, release reserved license (#46332)

2026-05-28 14:43:25 -04:00

api_endpoints.go

…

appconfig_test.go

Add activity and enable managed account fleets endpoint (#48273)

2026-06-25 17:29:33 -04:00

appconfig.go

Add activity and enable managed account fleets endpoint (#48273)

2026-06-25 17:29:33 -04:00

apple_mdm_batched.go

Optimize Apple profile reconciler approach by moving logic to code (#45573)

2026-05-29 09:46:17 +02:00

apple_mdm_cmd_results_test.go

…

apple_mdm_cmd_results.go

…

apple_mdm_ddm_test.go

…

apple_mdm_declarations_batched.go

Optimize Apple profile reconciler approach by moving logic to code (#45573)

2026-05-29 09:46:17 +02:00

apple_mdm_test.go

Adding BYOD backend changes (#47716)

2026-06-25 18:21:26 -05:00

apple_mdm.go

Adding BYOD backend changes (#47716)

2026-06-25 18:21:26 -05:00

build_tags_test.go

…

calendar.go

…

campaigns_test.go

…

campaigns.go

…

carves_test.go

…

carves.go

…

categories.go

List categories device endpoint (#46938)

2026-06-08 09:15:17 -05:00

certificate_authorities_test.go

…

certificate_authorities.go

…

certificate_templates_test.go

On var change resend Android certificate templates and managed app configs (#48278)

2026-06-25 16:27:30 -05:00

certificate_templates.go

On var change resend Android certificate templates and managed app configs (#48278)

2026-06-25 16:27:30 -05:00

certificates.go

On var change resend Android certificate templates and managed app configs (#48278)

2026-06-25 16:27:30 -05:00

client_android_certificates.go

…

client_appconfig_test.go

…

client_appconfig.go

…

client_carves.go

…

client_certificate_authorities.go

…

client_compat.go

…

client_debug.go

…

client_hosts.go

…

client_labels.go

…

client_live_query_test.go

…

client_live_query.go

…

client_mdm_test.go

…

client_mdm.go

42508 Rename abm to ab in API (#46657)

2026-06-03 14:58:17 -04:00

client_packs.go

…

client_policies.go

…

client_profiles.go

…

client_queries.go

…

client_scripts.go

…

client_secret_variables.go

Move targets and secret variables to server/fleet/ (#46196)

2026-06-03 15:07:54 -03:00

client_sessions.go

Display instructions needed for SSO-enabled accounts with fleetctl (#46768)

2026-06-17 18:19:00 -04:00

client_setup.go

…

client_software.go

Change self-service categories GitOps to not require dedicated key (#47439)

2026-06-11 16:19:11 -04:00

client_targets.go

Move targets and secret variables to server/fleet/ (#46196)

2026-06-03 15:07:54 -03:00

client_teams.go

Change self-service categories GitOps to not require dedicated key (#47439)

2026-06-11 16:19:11 -04:00

client_test.go

…

client_trigger.go

…

client_users.go

…

client.go

Update some GitOps error messages for clarity (#47134)

2026-06-19 11:10:58 -05:00

conditional_access_cleanup_test.go

Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)

2026-06-05 16:20:32 -04:00

conditional_access_cleanup.go

Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)

2026-06-05 16:20:32 -04:00

conditional_access_failure_activity_test.go

Policy status page: automation activity history, reset endpoint, and details UI

2026-06-19 12:13:36 -04:00

conditional_access_idp_test.go

Restrict conditional access Okta IdP asset endpoints to privileged roles (#48294)

2026-06-25 15:57:25 -03:00

conditional_access_idp.go

Auto-clean duplicate Okta CA SCEP cert after profile install (#46172)

2026-06-05 16:20:32 -04:00

conditional_access_microsoft.go

…

cron_schedules_test.go

…

cron_schedules.go

…

debug_handler_test.go

…

debug_handler.go

Added trace sampler to use OTEL in prod. (#46595)

2026-06-02 18:53:00 -05:00

debug_trace_sampler_test.go

Added trace sampler to use OTEL in prod. (#46595)

2026-06-02 18:53:00 -05:00

debug_trace_sampler.go

Added trace sampler to use OTEL in prod. (#46595)

2026-06-02 18:53:00 -05:00

devices_endpoint_test.go

…

devices_test.go

…

devices_url_auth_test.go

Narrow host lookup for iDevice URL auth (#47141)

2026-06-09 13:13:37 -04:00

devices.go

Narrow host lookup for iDevice URL auth (#47141)

2026-06-09 13:13:37 -04:00

email_links_subpath_test.go

Fix duplicated URL prefix in transactional email links for subpath deployments

2026-06-26 10:40:26 -04:00

endpoint_campaigns.go

…

endpoint_middleware_test.go

…

endpoint_middleware.go

…

endpoint_setup.go

…

endpoint_utils_test.go

…

endpoint_utils.go

…

frontend_test.go

Clear idp cookie after succesful SSO (#47569)

2026-06-17 11:09:21 -05:00

frontend.go

Clear idp cookie after succesful SSO (#47569)

2026-06-17 11:09:21 -05:00

full_test.go

…

global_policies_test.go

Authorize query read when creating a policy from query_id

2026-06-24 08:27:53 -04:00

global_policies.go

Authorize query read when creating a policy from query_id

2026-06-24 08:27:53 -04:00

global_schedule_test.go

…

global_schedule.go

…

handler_deprecated_paths.go

42508 Rename abm to ab in API (#46657)

2026-06-03 14:58:17 -04:00

handler_test.go

…

handler.go

Policy status page: automation activity history, reset endpoint, and details UI

2026-06-19 12:13:36 -04:00

hosts_reports_test.go

…

hosts_test.go

Adding BYOD backend changes (#47716)

2026-06-25 18:21:26 -05:00

hosts.go

Adding BYOD backend changes (#47716)

2026-06-25 18:21:26 -05:00

http_auth_test.go

Move loginRequest and logoutRequest to server/fleet/ (#45908)

2026-05-21 09:57:07 -03:00

integration_android_certificate_templates_test.go

Clean up Apple reconciler queries, no longer used (#46712)

2026-06-05 11:43:16 +02:00

integration_android_software_test.go

Added FLEET_VAR_HOST to android configs (#47642)

2026-06-17 11:10:03 -05:00

integration_apple_vpp_config_test.go

Emit failed VPP/in-house install activity, release reserved license (#46332)

2026-05-28 14:43:25 -04:00

integration_certificate_authorities_test.go

Fix NDES not using the same retry clearing method as SmallStep for macos (#48105)

2026-06-25 09:32:22 -04:00

integration_core_test.go

Gate all policy label inclusions/exclusions as premium-only (#47686)

2026-06-17 10:57:28 -03:00

integration_desktop_test.go

Filter vulnerable software by cvss on my device page (#47372)

2026-06-16 11:28:06 -04:00

integration_ds_only_test.go

…

integration_enterprise_test.go

Restrict authorization for team membership operations (#48201)

2026-06-25 10:01:15 -03:00

integration_enterprise_vulns_test.go

…

integration_install_test.go

Auth in-house iOS app downloads with install tokens (#46819)

2026-06-05 16:34:20 -04:00

integration_live_queries_test.go

…

integration_logger_test.go

Move loginRequest and logoutRequest to server/fleet/ (#45908)

2026-05-21 09:57:07 -03:00

integration_mdm_commands_test.go

43116 fix Fedora wipe btrfs snapshots (#45704)

2026-06-02 10:14:02 +01:00

integration_mdm_ddm_test.go

Clean up Apple reconciler queries, no longer used (#46712)

2026-06-05 11:43:16 +02:00

integration_mdm_dep_test.go

BYOF: API & GitOps support (#47506)

2026-06-17 13:02:37 +02:00

integration_mdm_lifecycle_test.go

BYOF: Add support for unique token ADUE (#47407)

2026-06-16 14:56:11 +02:00

integration_mdm_profiles_test.go

Windows MDM reconciler cleanup and remaining fixes (#47493)

2026-06-12 22:30:58 +01:00

integration_mdm_release_worker_test.go

…

integration_mdm_setup_experience_test.go

Adding BYOD backend changes (#47716)

2026-06-25 18:21:26 -05:00

integration_mdm_test.go

Adding BYOD backend changes (#47716)

2026-06-25 18:21:26 -05:00

integration_osquery_headerauth_test.go

…

integration_smtp_test.go

…

integration_software_titles_test.go

Merge branch 'main' of github.com:fleetdm/fleet into feat/39018-self-service-categories

2026-06-08 12:12:33 -04:00

integration_sso_test.go

…

integration_vpp_install_test.go

Auth in-house iOS app downloads with install tokens (#46819)

2026-06-05 16:34:20 -04:00

invites_test.go

…

invites.go

Fix duplicated URL prefix in transactional email links for subpath deployments

2026-06-26 10:40:26 -04:00

jitter_test.go

…

jitter.go

…

labels_test.go

Made team label membership checks more robust

2026-06-23 10:01:23 -04:00

labels_util.go

…

labels.go

Made team label membership checks more robust

2026-06-23 10:01:23 -04:00

linux_mdm_test.go

…

linux_mdm.go

…

live_queries.go

…

mail_test.go

…

maintained_apps_test.go

…

maintained_apps.go

Paginate Fleet-maintained apps and filters (#47615)

2026-06-16 15:58:24 -05:00

mdm_profiles_test.go

…

mdm_profiles.go

…

mdm_scep.go

improve apple mdm ber parsing (#47498)

2026-06-12 16:07:59 +02:00

mdm_test.go

Fix returned values on MDM command results endpoint (#48296)

2026-06-26 10:34:26 -04:00

mdm.go

Fix returned values on MDM command results endpoint (#48296)

2026-06-26 10:34:26 -04:00

mem_failing_policies_set_test.go

…

metrics_appconfig.go

…

metrics_change_email.go

…

metrics_invites.go

…

metrics_labels.go

…

metrics_sessions.go

…

metrics_users.go

…

metrics.go

…

microsoft_mdm_integration_test.go

Windows MDM reconciler cleanup and remaining fixes (#47493)

2026-06-12 22:30:58 +01:00

microsoft_mdm_property_test.go

Always display Windows ESP error when software install fails (#47522)

2026-06-18 06:35:57 +01:00

microsoft_mdm_test.go

Fixed Windows MDM not re-installing fleetd (#47852)

2026-06-19 06:33:04 +01:00

microsoft_mdm.go

Fixed Windows MDM not re-installing fleetd (#47852)

2026-06-19 06:33:04 +01:00

orbit_eua_test.go

Fix to populate host_emails during Linux/Windows SSO enrollment (#45951)

2026-05-21 16:38:44 -03:00

orbit_test.go

fleetd Windows MDM wake (push vs poll) (#46594)

2026-06-03 17:38:14 -05:00

orbit.go

Don't require end user auth on orbit re-enrollment (#46300) (#47740)

2026-06-18 16:22:49 +01:00

org_logo_test.go

…

org_logo.go

…

osquery_header_auth_test.go

…

osquery_header_auth.go

…

osquery_test.go

Setup experience software policy checks (#47075)

2026-06-10 21:16:37 +01:00

osquery.go

Policy status page: automation activity history, reset endpoint, and details UI

2026-06-19 12:13:36 -04:00

packs_test.go

…

packs.go

Fix typo: explicty -> explicitly in server/service/packs.go (#45874)

2026-05-25 15:12:52 +02:00

policies_test.go

Policy status page: automation activity history, reset endpoint, and details UI

2026-06-19 12:13:36 -04:00

policies.go

Policy status page: automation activity history, reset endpoint, and details UI

2026-06-19 12:13:36 -04:00

queries_test.go

…

queries.go

…

reconcile_windows_profiles_property_test.go

Improved Windows MDM reconciler (#47071)

2026-06-11 07:03:28 +01:00

scheduled_queries_test.go

…

scheduled_queries.go

…

scim.go

…

scripts_encoding_test.go

…

scripts_encoding.go

…

scripts_test.go

Fix batch script execution validations (#48243)

2026-06-25 07:25:33 -04:00

scripts.go

Fix batch script execution validations (#48243)

2026-06-25 07:25:33 -04:00

secret_variables_test.go

…

secret_variables.go

Move targets and secret variables to server/fleet/ (#46196)

2026-06-03 15:07:54 -03:00

service_appconfig_test.go

…

service_appconfig.go

Fix duplicated URL prefix in transactional email links for subpath deployments

2026-06-26 10:40:26 -04:00

service_campaign_test.go

…

service_campaigns.go

…

service_errors.go

…

service_users.go

…

service.go

Fix duplicated URL prefix in transactional email links for subpath deployments

2026-06-26 10:40:26 -04:00

sessions_test.go

Fix SSO callback URLs doubling the subpath under a URL prefix

2026-06-26 10:40:55 -04:00

sessions.go

Fix SSO callback URLs doubling the subpath under a URL prefix

2026-06-26 10:40:55 -04:00

setup_experience_test.go

fleetd Windows MDM wake (push vs poll) (#46594)

2026-06-03 17:38:14 -05:00

setup_experience.go

fleetd Windows MDM wake (push vs poll) (#46594)

2026-06-03 17:38:14 -05:00

software_installers_test.go

Change self-service categories GitOps to not require dedicated key (#47439)

2026-06-11 16:19:11 -04:00

software_installers.go

Change self-service categories GitOps to not require dedicated key (#47439)

2026-06-11 16:19:11 -04:00

software_test.go

…

software_title_icons_test.go

…

software_title_icons.go

…

software_titles_test.go

Improve fleet scope validation for software title lookups (#48034)

2026-06-23 14:28:15 -04:00

software_titles.go

Improve fleet scope validation for software title lookups (#48034)

2026-06-23 14:28:15 -04:00

software.go

…

status.go

…

targets_test.go

POST /api/latest/fleet/targets returns more info than needed (#46082)

2026-05-27 11:33:05 -04:00

targets.go

Move targets and secret variables to server/fleet/ (#46196)

2026-06-03 15:07:54 -03:00

team_policies_test.go

Authorize query read when creating a policy from query_id

2026-06-24 08:27:53 -04:00

team_policies.go

Authorize query read when creating a policy from query_id

2026-06-24 08:27:53 -04:00

team_schedule_test.go

…

team_schedule.go

…

teams_test.go

Restrict authorization for team membership operations (#48201)

2026-06-25 10:01:15 -03:00

teams.go

…

test_types.go

…

testing_client_test.go

BYOF: Add support for unique token ADUE (#47407)

2026-06-16 14:56:11 +02:00

testing_utils_test.go

Changed semantics around api_endpoints init.

2026-06-03 10:13:11 -04:00

tracing_tiers.go

Added trace sampler to use OTEL in prod. (#46595)

2026-06-02 18:53:00 -05:00

translator.go

…

transport_error.go

…

transport_setup.go

…

transport_test.go

Mark ptr methods as deprecated (#46626)

2026-06-02 10:43:18 -03:00

transport.go

…

trigger.go

…

user_roles.go

…

users_test.go

Fix required password reset logging users out (#48287)

2026-06-25 13:51:53 -04:00

users.go

Fix duplicated URL prefix in transactional email links for subpath deployments

2026-06-26 10:40:26 -04:00

validation_setup.go

…

vpp_test.go

…

vpp.go

…

vulnerabilities_test.go

…

vulnerabilities.go

…

windows_mdm_profiles_test.go

validate label scoping on fleet free unassigned (#47265)

2026-06-10 17:22:52 +02:00

windows_mdm_profiles.go

Policies: combine include/exclude label targeting + add labels_exclude_all (#33441) (#47444)

2026-06-12 15:05:20 -03:00