Misi
437ae8e8c5
Auth: Refactor OAuth connectors' initialization ( #77919 )
...
* Refactor AzureAD to init itself
* Use mapstructure to convert data to OAuthInfo
* Update
* Align tests
* Remove unused functions
* Add owner to mapstructure
* Clean up, lint
* Refactor Okta init, Align tests
* Address review comments, fix name in newSocialBase
* Update newSocialBase first param
* Refactor GitLab init, align tests
* Update pkg/login/social/common.go
Co-authored-by: Karl Persson <kalle.persson@grafana.com >
* Use ini conversion to map
* Leftovers
* Refactor GitHub connector initialization, align tests
* Refactor Google connector init, align tests
* Refactor grafana_com connector, align tests
* Refactor generic_oauth connector init, align tests
* cleanup
* Remove util.go
* Add tests for custom field init
* Change OAuthInfo's Extra type
* Fix
* Replace interface{} with any
* clean up
---------
Co-authored-by: Karl Persson <kalle.persson@grafana.com >
2023-11-20 09:45:40 +01:00
Jo
348233bddb
Auth: Gitlab Improve group fetching when using read_api ( #72277 )
...
* improve group fetching when using read api
* add constant for access level
2023-07-25 18:05:12 +02:00
Jo
0ffd359801
Auth: Enforce role sync except if skip org role sync is enabled ( #70766 )
...
* enforce role sync except if skip org role sync is enabled
* move errors to errors file and set codes
* fix docs and defaults
* remove legacy parameter
* support fall through token-api in generic oauth
* fix error handling for generic_oauth
* Update pkg/login/social/generic_oauth.go
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com >
* Update pkg/login/social/gitlab_oauth_test.go
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com >
* Update pkg/login/social/gitlab_oauth_test.go
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com >
---------
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com >
2023-07-17 15:58:16 +02:00
Jo
26b66fda4b
Auth: Support Gitlab OIDC scopes ( #69890 )
...
* draft gitlab openid
* mutualize id token extraction
* unexport fields
* user user info endpoint for retrieving indirect group memberships
* add to readme
* fix missing doc
* fix generic oauth wrong parameter
* log token
2023-06-14 15:38:16 +02:00
Jo
914daef0fd
Auth: Add request context to UserInfo calls ( #70007 )
...
* use context for UserInfo requests
* set timeouts for oauth http client
* Update pkg/login/social/common.go
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com >
---------
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com >
2023-06-14 14:30:40 +02:00
Serge Zaitsev
7dbd2cd139
Chore: Fix goimports grouping ( #62426 )
...
fix goimports ordering
2023-01-30 09:34:18 +01:00
Eric Leijonmarck
143ee0c49f
Auth: Add skip_org_role_sync to GitLab OAuth ( #62055 )
...
* Auth: Add skip_org_role_sync to GitLab OAuth
- add: tests
- docs added
* Update pkg/login/social/gitlab_oauth.go
Co-authored-by: Karl Persson <kalle.persson@grafana.com >
* fix: for import
Co-authored-by: Karl Persson <kalle.persson@grafana.com >
2023-01-25 13:39:54 +01:00
Karl Persson
052d1426f9
Oauth: Display friendly error message when role_attribute_strict=true and no valid role found ( #57818 )
...
* Oauth: change error type to a struct that unwraps into a social error
* Oauth: Handle empty role in error and fix unwrap
* Oauth: provide more informatio in error
* Oauth: return InvalidBasicRoleError
* Oauth: Fix tests
* Login: Remove casing
* Oath: Change to warning logs
2022-10-31 09:11:31 +01:00
Jo
00e7324bf6
Auth: Restore legacy behavior and add deprecation notice for empty org role in oauth ( #55118 )
...
* Auth: Add deprecation notice for empty org role
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com >
* fix recasts
* fix azure tests missing logger
* Adding test to gitlab oauth
* Covering more cases
* Cover more options
* Add role attributestrict check fail
* Adding one more edge case test
* Using legacy for gitlab
* Yet another edge case YAEC
* Reverting github oauth to legacy
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Not using token
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Nit.
* Adding warning in docs
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* add warning to generic oauth
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Be more precise
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Adding warning to github oauth
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Adding warning to gitlab oauth
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Adding warning to okta oauth
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Add docs about mapping to AzureAD
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Clarify oauth_skip_org_role_update_sync
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Nit.
* Nit on Azure AD
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Reorder docs index
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Fix typo
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com >
Co-authored-by: gamab <gabi.mabs@gmail.com >
2022-09-15 17:35:59 +02:00