Skip to content

v2.9.0 Features & Fixes - #924

Merged
jaredhendrickson13 merged 22 commits into
masterfrom
next_minor
Jul 29, 2026
Merged

v2.9.0 Features & Fixes#924
jaredhendrickson13 merged 22 commits into
masterfrom
next_minor

Conversation

@jaredhendrickson13

@jaredhendrickson13 jaredhendrickson13 commented Jul 29, 2026

Copy link
Copy Markdown
Member

New

Breaking changes

  • RESTAPISettings hasync_username now must hold page-all privileges to successfully sync on HA peers
  • RESTAPISettings hasync must now be enabled on remote HA peers before settings sync can occur

Fixes

  • Addresses a potential privilege escalation issue in /api/v2/system/restapi/settings/sync
  • Fixes a weak deserialization pattern in /api/v2/system/restapi/settings/sync

TechAsen and others added 22 commits June 5, 2026 18:18
@TechAsen asenchooo
feat: Add System HA Sync endpoint (#901)
be9918b 
Co-authored-by: asenchooo <asenchooo@localhost.localdomain>
@jaredhendrickson13
Merge branch 'master' of github.com:jaredhendrickson13/pfsense-api in…
acdc050 
…to next_minor
@jaredhendrickson13
style: run prettier on changed files
a2d8bfd
@jaredhendrickson13
fix(RESTAPISettingsSync): re-validate incoming settings sync-set data
52e75e1
@jaredhendrickson13
feat(Endpoint): allow endpoints to disable scoped privileges and enfo…
dee8a0e 
…rce page-all
@jaredhendrickson13
fix: ensure /api/v2/system/restapi/settings/sync requires page-all
a30b280
@jaredhendrickson13
fix(RESTAPISettingsSync): reject sync requests when ha sync is disabled
d2553a5
@jaredhendrickson13
chore: do not remove ha sync flags
21060f5
@jaredhendrickson13
test: include e2e tests for rest api ha sync endpoint
cc0c2f1
@jaredhendrickson13
test: update RESTAPISettingsSync model tests to accommodate changes
64e1e43
@jaredhendrickson13
test: include Endpoint tests to cover new privilege generation gate
5248fc0
@jaredhendrickson13
chore: remove leftover var dump from Endpoint test case
9e504cc
@jaredhendrickson13
style: run prettier on changed files
0042059
@jaredhendrickson13
docs: add note that ha sync requires page-all privileges
f7021a6
@jaredhendrickson13
style: run prettier on changed files
e4f3ff7
@jaredhendrickson13
Merge branch 'next_patch' of github.com:jaredhendrickson13/pfsense-ap…
38896a3 
…i into next_minor

# Conflicts:
#	pfSense-pkg-RESTAPI/files/usr/local/pkg/RESTAPI/Models/FirewallRule.inc
@jaredhendrickson13
chore: cleanup HASync model for consistency
f3fe067
@jaredhendrickson13
test: add tests for HASync model
440942e
@jaredhendrickson13
chore: cleanup SystemHASyncEndpoint definition for consistency
81eb3c2
@jaredhendrickson13
chore(SystemDNS): sort parameters
fb65fd6
@jaredhendrickson13
feat: add WireGuard status endpoints #790
73adfce
@jaredhendrickson13
fix(HASync): allow loopback interfaces
27e7fd9
@jaredhendrickson13 jaredhendrickson13 changed the title Next minor v2.9.0 Features & Fixes Jul 29, 2026
This was linked to issues Jul 29, 2026
[Feature] Wireguard Peer Status #790
Closed
Add HA Sync (XMLRPC config sync) endpoint (/api/v2/system/hasync) #843
Closed
@jaredhendrickson13
jaredhendrickson13 merged commit d040fa6 into master Jul 29, 2026
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Add HA Sync (XMLRPC config sync) endpoint (/api/v2/system/hasync) [Feature] Wireguard Peer Status

2 participants

@jaredhendrickson13 @TechAsen