5 Commits

Author	SHA1	Message	Date
Dan Cech	c0ecdee375	rename Context to ReqContext	2018-03-07 11:54:50 -05:00
Dan Cech	338655dd37	move Context and session out of middleware	2018-03-06 18:16:49 -05:00
Matt Bostock	16c5d0e4b7	Always verify TLS unless explicitly told otherwise ... TLS was not being verified in a number of places: - connections to grafana.com - connections to OAuth providers when TLS client authentication was enabled - connections to self-hosted Grafana installations when using the CLI tool TLS should always be verified unless the user explicitly enables an option to skip verification. Removes some instances where `InsecureSkipVerify` is explicitly set to `false`, the default, to help avoid confusion and make it more difficult to regress on this fix by accident. Adds a `--insecure` flag to `grafana-cli` to skip TLS verification. Adds a `tls_skip_verify_insecure` setting for OAuth. Adds a `app_tls_skip_verify_insecure` setting under a new `[plugins]` section. I'm not super happy with the way the global setting is used by `pkg/api/app_routes.go` but that seems to be the existing pattern used.	2017-10-06 17:09:27 +01:00
Ivan Babrou	9a4ae30227	Enable dualstack in every net.Dialer, fixes #9364 ... Default transport enables it: * https://github.com/golang/go/blob/d2826d3e06/src/net/http/transport.go#L42-L46 ``` DialContext: (&net.Dialer{ Timeout: 30 * time.Second, KeepAlive: 30 * time.Second, DualStack: true, }).DialContext, ``` See also: https://github.com/golang/go/issues/15324	2017-09-27 22:29:48 -07:00
Torkel Ödegaard	c34db77f04	grafana_com: changed name of oauth grafana_net integration (old settings names still work), and updated login button look, closes #8415	2017-05-22 14:56:50 +02:00