Misi
7c1d9769ca
Auth: Rotate token patch ( #62676 )
...
* Use singleflight.Group
* Align tests
* Cleanup
2023-02-02 14:36:16 +01:00
Misi
b8b08ea292
Auth: Add sub claim check to JWT Auth pre-checks ( #61417 )
...
* Auth: Add sub claim check to JWT Auth pre-checks
* Add #nosec annotation to the test tokens
2023-01-16 10:50:34 +01:00
Misi
b3a44649ce
RolePicker: Align groupHeader to the list items horizontally ( #61060 )
...
RolePicker: align groupHeader to the list items horizontally
2023-01-10 10:43:02 +01:00
Misi
6d8bf5ac01
LDAP: Disable user in case it has been removed from LDAP directory ( #60231 )
...
* Fix login flow
* Align test
* Fix comments
* Improve test
2022-12-14 03:41:51 -05:00
Misi
7bb5200cc2
Devenv: OpenLDAP-Mac improvements ( #60229 )
...
* Use groupOfUniqueNames and uniqueMember
* Update README.md
2022-12-13 18:20:37 +01:00
Misi and Karl Persson
9c98314e9f
OAuth: Refactor OAuth parameters handling to support obtaining refresh tokens for Google OAuth ( #58782 )
...
* Add ApprovalForce to AuthCodeOptions
* Extract access token validity check to a function
* Refactor
* Oauth: set options internally instead of exposing new function
* Align tests
* Remove unused function
Co-authored-by: Karl Persson <kalle.persson@grafana.com >
2022-11-18 10:12:17 +01:00
4915d21c25
OAuth: Feature toggle for access token expiration check and docs ( #58179 )
...
* Add feature toggle for access token expiration check
* Add docs for configuring refresh tokens
* Update docs
* Update docs based on review
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
* Improve documentation
* Change access_type default to Offline
* Update docs/sources/setup-grafana/configure-security/configure-authentication/gitlab/index.md
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
* Update docs/sources/setup-grafana/configure-security/configure-authentication/google/index.md
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
* Update pkg/services/featuremgmt/registry.go
Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com >
* Regenerate toggles
* Update Generic OAuth docs
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com >
2022-11-14 16:47:46 +01:00
Misi and jguer
9c954d06ab
Auth: Refresh OAuth access_token automatically using the refresh_token ( #56076 )
...
* Verify OAuth token expiration for oauth users in the ctx handler middleware
* Use refresh token to get a new access token
* Refactor oauth_token.go
* Add tests for the middleware changes
* Align other tests
* Add tests, wip
* Add more tests
* Add InvalidateOAuthTokens method
* Fix ExpiryDate update to default
* Invalidate OAuth tokens during logout
* Improve logout
* Add more comments
* Cleanup
* Fix import order
* Add error to HasOAuthEntry return values
* add dev debug logs
* Fix tests
Co-authored-by: jguer <joao.guerreiro@grafana.com >
2022-10-18 18:17:28 +02:00
Misi
1de0f4453e
Chore: Make NewCookieOptions exported in cookies.go ( #56476 )
2022-10-06 20:00:54 +02:00
Misi
8405a99fef
Chore: Add changed enterprise devenv path to .gitignore ( #55408 )
2022-09-19 12:15:28 -04:00
Misi
c5be9605a2
Chore: Use TimeNow instead of time.Now in user sql store to make it testable ( #54983 )
2022-09-09 18:43:14 +02:00
Mihály Gyöngyösi
53c095aae7
RBAC: Disable RBACPermissionValidation by default ( #54626 )
...
* update conf/provisioning/access-control/sample.yaml
2022-09-02 17:18:01 +02:00
Mihály Gyöngyösi
60839d9c30
RBAC: Config setting to disable permission validation ( #54447 )
...
* Add scope_validation_enabled config setting to rbac section
* Rename config setting
2022-08-31 16:58:45 +02:00
Mihály Gyöngyösi
990f673202
Docs: Fix typo in custom-role-actions-scopes.md ( #54294 )
...
* Fix typo in custom-role-actions-scopes.md
* Address lint issue
2022-08-29 11:59:17 +02:00
Mihály Gyöngyösi and Alex Khomenko
aace0b1e7f
Admin: Create/Edit Team/ServiceAccount UI changes ( #53889 )
...
* RolePicker: Handle inherited with
* Small ammendment to Create Service Account layout
* RolePicker: introduce maxWidth prop
* Clean up
* Change VerticalGroup spacing to large on Team Settings page
* Introduce constant for submenu width
* Update public/app/core/components/RolePicker/RolePicker.tsx
Simplify style parameter
Co-authored-by: Alex Khomenko <Clarity-89@users.noreply.github.com >
* Add description to the improved calculation
Co-authored-by: Alex Khomenko <Clarity-89@users.noreply.github.com >
2022-08-25 13:30:11 +02:00
Mihály Gyöngyösi
a915977002
Teams: Add TeamRolePicker to the Create and Edit Team pages ( #53775 )
...
* Add TeamRolePicker to CreateTeam and TeamSettings pages
* Align tests to the changes
* Change TeamRolePicker
* Add useRoleOptions hook
* Clean up
* Requested changes by reviewers
* Fixes
* Fixes
2022-08-18 13:21:06 +02:00
Mihály Gyöngyösi
1c0ab501aa
UsersTable: Display Disabled flag in Organizations' Users table ( #53656 )
...
* Add disabled column to Org's Users table
* fix typo
* Change column order
* Add test for testing whether GetOrgUsers populates the DTO correctly
* Remove type assertion
2022-08-15 10:58:58 +02:00
Mihály Gyöngyösi and jguer
57a46767cd
AccessControl: Move GetCacheKey to SignedInUser ( #53591 )
...
* Add HasUniqueId and IsApiKeyUser to SignedInUser
* Improve GetCacheKey by explicit checks and error branch
* Align SignedInUser to merged changes
* change comparison method
Co-authored-by: jguer <joao.guerreiro@grafana.com >
2022-08-12 09:47:47 +02:00
Mihály Gyöngyösi
3ac4415d6d
Devenv: Universal jwt_proxy environment ( #53377 )
...
* change hostname to env.grafana.local to not collide with any custom host.docker.internal settings
* add WSL2 documentation
* update general documentation
* cleanup
2022-08-09 17:02:36 +02:00
Mihály Gyöngyösi
dc775c7577
RolePicker: Fix RolePicker menu positioning ( #53201 )
...
Fixes #52800
2022-08-03 14:35:51 +02:00
Misi
