mirror of
https://github.com/Termix-SSH/Termix.git
synced 2026-10-31 15:45:23 +00:00
Luke GustafsonandZacharyZcR
6b708106e1
* fix(sso): send the PKCE verifier for GitHub login (#1534) * fix(remote-desktop): clip cursor overflow without disabling zoom (#1535) * test(remote-desktop): preserve sessions beyond one hour (#1536) * fix(hosts): expose controls for overflowing editor tabs (#1537) * fix(hosts): expose controls for overflowing editor tabs * test(hosts): mock resize observation in admin panel tests * fix(status): skip TCP probes while host sessions are active (#1538) * fix(database): batch session activity persistence (#1539) * docs(api): describe cookie and API key authentication (#1540) * fix(snippets): repair missing note column on SQLite upgrades (#1541) * fix(docker): retain stored SSH credential association (#1543) * fix(file-manager): render transfer toasts without plugin hooks (#1546) * feat(hosts): keep compact row actions inline (#1547) * fix(auth): allow retrying unavailable second-factor interfaces (#1549) * fix(auth): reject unresolved legacy identity provisioning (#1550) * fix(desktop): ship the plugin SDK inside Mac App Store builds (#1551) * fix(tmux): pass full session info to the terminal's session picker (#1552) The tmux.sessions service reduced detected sessions to bare names, but the picker reads session.name, so every entry rendered blank and selecting one sent an empty name, which created a new session instead of attaching. * fix(ssh): read force keyboard-interactive as a boolean when resolving hosts (#1553) The column holds the text "true"/"false", and the resolver passed it through as-is. The string "false" is truthy, so the password provider treated every saved host as forced keyboard-interactive and left the password out. Jump hops are built straight from the resolved host, so a password hop whose server doesn't offer keyboard-interactive failed with "All configured authentication methods failed". * fix(database): batch database saves for bulk host writes (#1554) * fix(database): yield to the event loop between database saves Each SQLite save serializes and encrypts the whole database into new buffers, which V8 only releases once the event loop turns. Boot migrations and bulk host import write plugin settings per host and per key in an awaited loop, so hundreds of full copies piled up and the container ran out of memory. * fix(database): save once per bulk host write instead of once per row On SQLite every repository write force-saves the whole database. Boot plugin data migrations, host defaults materialization and the bulk host routes write one row per host per setting, so they serialized and encrypted the full database hundreds of times in a row. DatabaseSaveTrigger.batched wraps a function so force saves made while it runs collapse into a single save when it finishes. Nested scopes fold into the outer one, and work that outlives its scope saves normally. * feat(hosts): add instance-wide predefined tag suggestions (#1548) * feat(hosts): add shared predefined tag suggestions * style(hosts): format tag catalog routes * test(database): advance fake timers past the save yield (#1555) * fix(i18n): complete Simplified Chinese core and plugin translations (#1542) * fix(i18n): complete Chinese onboarding and navigation labels * fix(i18n): translate remaining Chinese core and plugin interfaces * fix(i18n): translate host editor tab overflow controls * fix(i18n): use consistent Chinese fleet terminology * fix(i18n): localize hardcoded controls and plugin views * fix(i18n): translate built-in homepage widget catalog * test(homepage): follow translated timezone placeholder * fix(i18n): translate plugin-provided homepage widgets * fix(i18n): localize feature settings section titles * fix: 2.8 oidc accounts unable to sign in after upgrading (#1381) * fix: plugins losing the saved ssh login when copying a host (#1391) * fix: fleets, proxmox and automations not getting the host sudo password * fix: host imports running a defaults pass and metrics restart per host (#1384) * fix: high cpu from status probes and full database saves on every sample (#1300) * fix: user data export freezing the server (#1393) * fix: op:// secret references rejected as ssh keys on credentials (#1394) * fix: slow file deletes from the trash lookups on every delete (#1390) * fix: add openapi docs and error handling to host tag routes * test: compare download stream buffers directly so it stops timing out * chore: drop em dash from host row comment * chore: update release notes for 2.9.1 * fix: restore space to add host tags and redesign predefined tags editor * fix: host key silently accepted when the host is missing from the database (#1397) * fix: clearer host login failed status label and fix its translations (#1396) * chore: add host key and status label fixes to release notes * fix: sso and ldap provider dialogs overflowing the screen and using mismatched toggles * chore: increment ver * fix(audit): store plugin entries with no acting user as a null user_id (#1556) Plugin audit entries written outside a request used the literal "system" as user_id. That column references users.id, so the insert was refused (Postgres logs it as an FK violation) and the entry was silently dropped. Write null instead and keep "system" / plugin:<id> in username. * chore: add sso/ldap dialog and audit log fixes to release notes * fix: tunnels and host settings missing from shared hosts on desktop * fix: remote desktop logins missing from shared hosts on desktop * fix: simplify host status to online/offline and keep it live without a refresh * chore: sync Crowdin translations for 2.9.1 --------- Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com>
75 lines
3.7 KiB
JSON
75 lines
3.7 KiB
JSON
{
|
|
"loginWithSso": "SSO로 로그인",
|
|
"loginWithProvider": "{{name}}으로 로그인",
|
|
"loading": "로딩 중...",
|
|
"permissions": {
|
|
"manage": {
|
|
"title": "SSO 제공업체 관리",
|
|
"description": "사용자가 로그인할 수 있는 SSO 제공업체를 추가, 변경 및 삭제할 수 있습니다."
|
|
}
|
|
},
|
|
"providers": {
|
|
"docsLink": "문서 보기",
|
|
"none": "설정된 SSO 제공자가 없습니다.",
|
|
"add": "제공자 추가",
|
|
"edit": "제공자 편집",
|
|
"delete": "제공자 삭제",
|
|
"deleteConfirm": "이 제공자를 삭제하시겠습니까? 연결된 사용자는 로그인할 수 없습니다.",
|
|
"name": "표시 이름",
|
|
"namePlaceholder": "내 SSO 제공업체",
|
|
"nameRequired": "표시 이름은 필수입니다.",
|
|
"type": "제공자 유형",
|
|
"enabled": "사용",
|
|
"enabledDesc": "Show a sign in button for this provider on the login screen.",
|
|
"dialogDesc": "Connect an identity provider so users can sign in with it.",
|
|
"sectionGeneral": "General",
|
|
"sectionCredentials": "Client",
|
|
"sectionClaims": "Claims",
|
|
"sectionAccess": "Access",
|
|
"save": "제공자 저장",
|
|
"saving": "저장 중...",
|
|
"saved": "저장됨",
|
|
"saveFailed": "저장 실패",
|
|
"deleted": "삭제됨",
|
|
"deleteFailed": "삭제 실패",
|
|
"loadFailed": "SSO 공급자를 로드하는 데 실패했습니다.",
|
|
"cancel": "취소",
|
|
"copy": "복사",
|
|
"copied": "복사됨",
|
|
"redirectUri": "리디렉션 URI",
|
|
"redirectUriDesc": "이 URL을 ID 공급자에서 리디렉션 또는 콜백 URL로 등록하세요.",
|
|
"legacyCallback": "기존 리디렉션 URI를 유지하세요",
|
|
"legacyCallbackDesc": "이 공급자는 Termix 2.9 이전에 설정되었으며 여전히 이전 리디렉션 URI를 사용하고 있지만 정상적으로 작동합니다. 새 URI로 전환하려면 먼저 ID 공급자에 {{uri}} 를 추가한 다음 이 기능을 비활성화하십시오.",
|
|
"authorizationUrl": "인증 URL: {{url}}"
|
|
},
|
|
"fields": {
|
|
"clientId": "클라이언트 ID",
|
|
"clientSecret": "클라이언트 시크릿",
|
|
"secretKeep": "비밀이 저장되었습니다. 비밀을 지키려면 이 칸을 비워 두세요.",
|
|
"issuerUrl": "Issuer URL",
|
|
"authUrl": "인증 URL",
|
|
"tokenUrl": "토큰 URL",
|
|
"userIdentifier": "사용자 식별자 경로",
|
|
"displayName": "표시 이름 경로",
|
|
"scopes": "스코프",
|
|
"userinfoUrl": "Userinfo URL 재정의",
|
|
"groupClaim": "그룹 클레임",
|
|
"groupClaimDesc": "선택 사항입니다. 사용자 그룹이 포함된 클레임 경로입니다. 기본값은 groups, roles, group 순서로 검색됩니다. 사용자 정의 클레임이 있는 제공자(예: Zitadel)의 경우 이 값을 사용하세요.",
|
|
"allowedUsers": "허용 사용자",
|
|
"allowedUsersDesc": "한 줄에 이메일 하나씩 입력하세요. 비워두면 모두 허용됩니다.",
|
|
"adminGroup": "관리자 그룹",
|
|
"adminGroupDesc": "이 그룹의 사용자에게 관리자 권한이 부여됩니다. 비워두면 그룹 동기화가 비활성화됩니다.",
|
|
"caCert": "사용자 정의 CA 인증서",
|
|
"caCertDesc": "선택 사항입니다. 개인 또는 자체 서명 CA를 사용하는 OIDC 제공자를 위한 PEM 인코딩 CA 인증서입니다. 비워두면 시스템 신뢰 저장소가 사용됩니다."
|
|
},
|
|
"settings": {
|
|
"silentLoginDefault": {
|
|
"label": "SSO로 자동 로그인",
|
|
"description": "방문자를 로그인 양식을 표시하는 대신 첫 번째 SSO 제공업체로 바로 보냅니다. OIDC_SILENT_LOGIN_DEFAULT 환경 변수는 이 설정을 재정의합니다."
|
|
}
|
|
},
|
|
"plugin": {
|
|
"name": "Single sign-on"
|
|
}
|
|
}
|