grafana/pkg/services/contexthandler
Karl Persson 382b24742a
Auth: Add feature flag to move token rotation to client (#65060)
* FeatureToggle: Add toggle to use a new way of rotating tokens

* API: Add endpoints to perform token rotation, one endpoint for api request and one endpoint for redirectsd

* Auth: Aling not authorized handling between auth middleware and access
control middleware

* API: add utility function to get redirect for login

* API: Handle token rotation redirect for login page

* Frontend: Add job scheduling for token rotation and make call to token rotation as fallback in retry request

* ContextHandler: Prevent in-request rotation if feature flag is enabled and check if token needs to be rotated

* AuthN: Prevent in-request rotation if feature flag is enabled and check if token needs to be rotated

* Cookies: Add option NotHttpOnly

* AuthToken: Add helper function to get next rotation time and another function to check if token need to be rotated

* AuthN: Add function to delete session cookie and set expiry cookie

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
2023-03-23 14:39:04 +01:00
..
authproxy Auth: Fix orgrole picker disabled if isSynced user (#64033) 2023-03-22 17:41:59 +00:00
ctxkey pkg/web: restrict handler types (#48495) 2022-05-20 12:45:18 -04:00
model Reqcontext: Use err status code instead of always fallback (#63974) 2023-03-01 17:11:16 -03:00
auth_jwt.go ContextHandler: add all configured auth header to context (#62775) 2023-02-02 16:25:46 +01:00
auth_proxy_test.go Remotecache: rename setbytearray/getbytearray to set/get and remove codec (#64470) 2023-03-10 13:57:29 +01:00
contexthandler_test.go Auth: Rotate token patch (#62676) 2023-02-02 14:36:16 +01:00
contexthandler.go Auth: Add feature flag to move token rotation to client (#65060) 2023-03-23 14:39:04 +01:00