Marcus Efraimsson f778c1d971 Security: Responses from backend should not be cached (#16848) ...

Currently all API requests set Cache-control: no-cache to avoid browsers 
caching sensitive data. This fixes so that all responses returned from 
backend not are cached using http headers. The exception is the data proxy 
where we don't add these http headers in case datasource backend needs 
to control whether data can be cached or not.

Fixes #16845

2019-05-06 09:22:59 +02:00

..

avatar

…

dtos

Provisioning: Show file path of provisioning file in save/delete dialogs (#16706)

2019-04-30 13:32:18 +02:00

live

…

pluginproxy

DataProxy: Restore Set-Cookie header after proxy request (#16838)

2019-05-01 16:32:03 +02:00

routing

…

static

…

admin_ldap.go

LDAP: Added reload endpoint for LDAP config (#15470)

2019-05-03 14:53:07 +02:00

admin_provisioning.go

Provisioning: Add API endpoint to reload provisioning configs (#16579)

2019-04-25 09:06:44 +02:00

admin_users_test.go

feat(api): support list/revoke auth token in admin/current user api

2019-03-08 15:15:38 +01:00

admin_users.go

Auth: Enable retries and transaction for some db calls for auth tokens (#16785)

2019-04-30 14:42:01 +02:00

admin.go

…

alerting_test.go

Fix Error 500 on unexisting /api/alert-notification/<id>

2019-01-13 21:30:20 +02:00

alerting.go

Alerting: Notification channel http api fixes (#16379)

2019-04-04 17:52:40 +02:00

annotations_test.go

Added PATCH verb end point for annotation op

2019-02-05 09:43:17 +10:00

annotations.go

Address review comments

2019-02-06 06:41:39 +10:00

api.go

LDAP: Added reload endpoint for LDAP config (#15470)

2019-05-03 14:53:07 +02:00

apikey.go

…

app_routes.go

Plugins: Unifying alpha state & options for all plugins (#16530)

2019-04-12 13:46:42 +02:00

basic_auth_test.go

Re-organize packages and add basic auth test

2018-11-19 13:54:13 -05:00

basic_auth.go

Re-organize packages and add basic auth test

2018-11-19 13:54:13 -05:00

common_test.go

Chore: use remote cache instead of session storage (#16114)

2019-04-08 14:31:46 +03:00

common.go

…

dashboard_permission_test.go

…

dashboard_permission.go

…

dashboard_snapshot_test.go

snapshots: Add support for deleting external snapshots

2018-12-10 18:47:23 -05:00

dashboard_snapshot.go

moves metric package to /infra

2019-02-24 21:12:51 +01:00

dashboard_test.go

Provisioning: Show file path of provisioning file in save/delete dialogs (#16706)

2019-04-30 13:32:18 +02:00

dashboard.go

Provisioning: Show file path of provisioning file in save/delete dialogs (#16706)

2019-04-30 13:32:18 +02:00

dataproxy_test.go

…

dataproxy.go

Add custom header with grafana user and a config switch for it

2019-03-14 16:33:19 +01:00

datasources_test.go

…

datasources.go

permissions: cleanup.

2018-10-17 15:58:52 +02:00

folder_permission_test.go

…

folder_permission.go

…

folder_test.go

Search: Fixes search limits and adds a page parameter (#16458)

2019-04-17 13:07:50 +02:00

folder.go

Search: Fixes search limits and adds a page parameter (#16458)

2019-04-17 13:07:50 +02:00

frontendsettings.go

Security: Store datasource passwords encrypted in secureJsonData (#16175)

2019-04-15 11:11:17 +02:00

grafana_com_proxy.go

pkg/util/{ip.go,url.go}: Fix some golint issues

2019-01-28 22:29:20 +01:00

http_server_test.go

Re-organize packages and add basic auth test

2018-11-19 13:54:13 -05:00

http_server.go

Security: Responses from backend should not be cached (#16848)

2019-05-06 09:22:59 +02:00

index.go

teams: viewers and editors can view teams

2019-03-19 14:01:14 +01:00

login_oauth.go

Merge branch 'master' into 12556-oauth-pass-thru

2019-03-13 14:25:43 -04:00

login.go

Auth: Enable retries and transaction for some db calls for auth tokens (#16785)

2019-04-30 14:42:01 +02:00

metrics.go

log error on datasource access denied

2018-10-30 09:32:32 +01:00

org_invite.go

Return 404 on user not found (#15606)

2019-03-02 20:34:48 +01:00

org_users.go

Merge pull request #13611 from grafana/remove-user-from-org-and-system

2018-10-11 21:54:07 +02:00

org.go

moves metric package to /infra

2019-02-24 21:12:51 +01:00

password.go

Prevent password reset when login form is disabled or either LDAP or Auth Proxy is enabled

2018-12-03 15:32:26 +02:00

playlist_play.go

playlist: fix loading dashboards by tag (#16727)

2019-04-24 10:10:16 +02:00

playlist.go

…

plugins.go

App Plugins: support react pages and tabs (#16586)

2019-05-02 10:15:39 -07:00

preferences.go

feat: team preferences

2018-11-12 20:01:53 +01:00

quota.go

…

render.go

pkg/util/{ip.go,url.go}: Fix some golint issues

2019-01-28 22:29:20 +01:00

search.go

Search: Fixes search limits and adds a page parameter (#16458)

2019-04-17 13:07:50 +02:00

signup.go

moves metric package to /infra

2019-02-24 21:12:51 +01:00

stars.go

…

team_members.go

teams: local access to bus, moving away from dep on global.

2019-03-19 14:01:20 +01:00

team_test.go

teams: moved logic for searchteams to backend

2019-03-19 14:01:15 +01:00

team.go

permissions: removes global access to bus from MakeUserAdmin.

2019-03-19 14:01:20 +01:00

user_test.go

…

user_token_test.go

Auth: Enable retries and transaction for some db calls for auth tokens (#16785)

2019-04-30 14:42:01 +02:00

user_token.go

Auth: Enable retries and transaction for some db calls for auth tokens (#16785)

2019-04-30 14:42:01 +02:00

user.go

Fixed bug with getting teams for user

2019-02-22 14:07:18 +01:00