Gabriel MABILLE
4280e31239
Devenv: Fix openldap-multiple dev environment ( #75013 )
2023-09-18 17:21:59 +03:00
venkatbvc
7c98678188
Auth: Add support for OIDC RP-Initiated Logout ( #70357 )
...
* Fix signout redirect_uri issue
* Fix signout redirect_uri issue
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>
* remove signout url global
* style alignment
* remove legacy handlers for devenv
* Update pkg/api/login.go
---------
Co-authored-by: Rao B V Chalapathi <b_v_chalapathi.rao@nokia.com>
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>
Co-authored-by: jguer <me@jguer.space>
2023-08-29 11:34:11 +02:00
Gabriel MABILLE
4c7b97cdb0
ClientTokenRotation: Don't rotate session cookie for authproxy ( #72496 )
...
* ClientTokenRotation: Don't rotate session cookie for authproxy
* Account for config option auth.proxy enable_login_token
* Limit amount of changes on devenv
* Fix tests by moving authenticatedBy up
* Uncomment nginx conf
2023-07-28 15:32:58 +02:00
linoman
0ffa72877e
Chore: Bump keycloak version ( #72386 )
...
* Bump keycloak version
* Remove troubleshooting
* Remove script for M1 machines
2023-07-27 09:56:31 +02:00
SeamusGrafana
711cedfe34
DevEnv: Add Support for SAML SLO in Authentik ( #69147 )
...
* Update Authentik Image Version in docker-compose.yaml
Update Authentik Image Version in `docker-compose.yaml` to use the current version (as of writing) which is `2023.5.1` where this has been tested against.
* DevEnv: update SLO support for Authentik
2023-06-21 08:14:11 +02:00
Jo
e43c3ef87e
Devenv: Update auth devenv versions ( #69370 )
...
update auth devenv versions
2023-06-01 17:28:55 +02:00
Misi
28bb960e42
AuthN: Make clientTokenRotation work when Grafana is accessible on a sub url ( #69385 )
...
Fix clientTokenRotation for auth-proxy
2023-06-01 17:06:00 +02:00
Misi
8548218776
Devenv: Add prometheus_oauth2_proxy_azure devenv ( #66825 )
...
Add prometheus_oauth2_proxy_azure devenv
2023-04-19 17:28:14 +02:00
Jo
8bb10f87e9
Auth: Update authentik devenv and add oauth ( #64691 )
...
update authentik devenv and add oauth
2023-03-13 15:13:16 +01:00
Eric Leijonmarck
27f0c9c70f
Auth: Doc change url for getting JWT ( #62319 )
...
docs: change url for getting JWT
2023-01-27 14:26:35 +01:00
linoman
8ba5f59fb7
Promote openldap-mac ( #61332 )
...
* Replace `openldap` with `openldap-mac`
* Rename all references for `openldap-mac`
* Rename prepopulated users with first names
2023-01-12 10:20:01 +01:00
Jo
5f6f1a7d07
Devenv: Update to keycloak 20 ( #61174 )
...
update to keycloak 20
2023-01-10 16:50:53 +01:00
Jo
0c8ad80575
Authn: JWT client ( #61157 )
...
* add jwt client
* alias JWT verifier
* debug implementation
* add tests for jwt client
* add constant for JWT module
* Feedback
Co-authored-by: Kalle Persson <kalle.persson@grafana.com>
Co-authored-by: Mihály Gyöngyösi <mgyongyosi@users.noreply.github.com>
Co-authored-by: Kalle Persson <kalle.persson@grafana.com>
Co-authored-by: Mihály Gyöngyösi <mgyongyosi@users.noreply.github.com>
2023-01-10 15:08:52 +01:00
Jo
ba9decfd04
Devenv: Add SAML authentik devenv ( #60881 )
...
* add SAML support to authentik devenv
* update authentik image
* mark SAML as done
2023-01-03 10:06:24 +00:00
Jo
e1ea5490b3
Devenv: Remove abandoned environment ( #60882 )
...
chore: remove abandoned environment
2023-01-03 09:30:59 +01:00
Misi
7bb5200cc2
Devenv: OpenLDAP-Mac improvements ( #60229 )
...
* Use groupOfUniqueNames and uniqueMember
* Update README.md
2022-12-13 18:20:37 +01:00
Conor Evans
40ba2ba18d
fix(config/jwt): the value should be "expect_claims", not "expected_claims" ( #58284 )
...
Signed-off-by: Conor Evans <coevans@tcd.ie>
2022-11-07 12:29:27 +00:00
Jo
e3ea7ee145
Doc: Add groups mapping config to readme ( #58208 )
2022-11-04 10:43:38 +01:00
Jo
61774ae7f1
Docs: Add keycloak oauth setup guide ( #57685 )
...
* use scopes for generic_oauth devenv. Support refresh_tokens
* add keycloak section
* add teamsync support to oauth devenv
* Add keycloak guide
* Upgrade keycloak to version 19
* Update devenv/docker/blocks/auth/oauth/readme.md
Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>
* feedback
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
2022-10-28 17:57:56 -04:00
Jo
77437f2c89
Add multi-auth devenv ( #57609 )
...
* add authentik devenv
* remove direct dependency on spew
* use cn
* add authentik instructions
* add backup instructions
2022-10-26 13:46:50 +02:00
Jo
ef245874da
OAuth: Allow assigning Server Admin ( #54780 )
...
* extract errors to errors file
* implement oauth server admin assignment
* add server admin tests
* deduplicate autoAssignOrgRole
* deduplicate strict setting
* deduplicate strict setting
* add support for generic oauth
* add role attribute strict support for generic oauth
* add support for github/gitlab
* assignGrafanaAdmin option is here to stay
* unify similar errors
* add config option
* add okta server admin mapping
* remove never used Company attribute
* unify generic oauth role extract with other methods
* case insensitive role match as in azure
* add ini settings
* add server admin to devenv
* remove duplicate fields
* add documentation to oauth
* fix titlecase test
* implement doc feedback
2022-09-08 06:11:00 -04:00
Nicholas Wiersma
9e704fec3c
JWT: Add support for assigning org roles ( #54277 )
...
* feat: allow jwt role to be set
* chore: update documentation
* fix: cr suggestions
* fix: lint issues
* respect org auto assign and default org ID
* add server admin to devenv
Co-authored-by: jguer <joao.guerreiro@grafana.com>
2022-09-07 14:00:33 +02:00
linoman
0324e9c60e
Fix paths for auth/ build and volume paths ( #54828 )
2022-09-07 10:53:58 +02:00
linoman
c915cb2d5c
Update auth/jwt_proxy and auth/oauth reference ( #54781 )
2022-09-06 15:46:01 +02:00
linoman
638fb5dc6d
Fix docker compose for openldap and oauth ( #54745 )
...
* Fix reference for `openldap` block
* Fix volume reference for `oauth` block
2022-09-06 14:22:03 +02:00
Jo
4952b7f22d
Add JWT url auth documentation ( #54040 )
...
* add jwt auth docs
* add appropriate warnings to docs
* remove unimplemented login_token assumptions
* Update conf/sample.ini
2022-09-05 03:46:50 -04:00
linoman
3f0beee362
Update README build references ( #54394 )
2022-08-29 16:36:06 +02:00
linoman
d2547bb832
Chore: Group auth docker blocks ( #54274 )
...
* Move auth docker images to parent folder
* Add README file for auth parent folder
* Add grafana-authnz-team as code owner
* Update `devenv` docs
2022-08-29 08:36:56 +02:00
