279 Commits (0a7fcb1a379c83704e2618d734e7d01db0e62674)

Author	SHA1	Message	Date
Torkel Ödegaard	4ffff1a312	LDAP: Interpolate env variable expressions in ldap.toml file (#20173) ... * LDAP: Interpolate env variable expressions in ldap.toml file * Removed comment	6 years ago
Marcus Efraimsson	771f21ed09	api: new v2 metrics query endpoint ... Requests to endpoint will currently will error unless expressions feature flag is true. Co-authored-by: Sofia Papagiannaki <papagian@gmail.com>	6 years ago
Sofia Papagiannaki	fc08c26025	WIP: Spawn backend plugins v2 (#19835) ... * WIP: Spawn backend plugins v2 * Add test for plugin version * Fix support for SDK plugins Co-authored-by: Kyle Brandt <kyle@kbrandt.com> Co-authored-by: Marcus Olsson <olsson.e.marcus@gmail.com> Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com> * WIP: Draft PR for fork of V2 sdk / bi-directional support (#19890) * temporary use export-datasource-plugin branch of grafana-plugin-sdk * fix failing test * remove debug (spew) lines * misc cleanup * add expressions feature toggle * use latest grafana-plugin-sdk-go	6 years ago
Marcus Efraimsson	93919427f8	Upgrade grafana-plugin-model (#19438) ... * use grafana-plugin-model dependency that uses go modules * use grafana-plugin-model with updated hashicorp/go-plugin * use grafana-plugin-model with re-compiled protos * test using protoc-gen-go v1.2.0 tag * use grafana-plugin-model with re-compiled protos * chore: fix deprecation warning for lint * use latest grafana-plugin-model Fixes #19454	6 years ago
Marcus Efraimsson	80592e3361	Metrics: Adds setting for turning off total stats metrics (#19142) ... Don't update total stats metrics if reporting is disabled. New setting disable_total_stats for turning off update of total stats (stat_totals_*) metrics. Ref #19137	6 years ago
Ryan McKinley	7d32caeac2	Transformers: configure result transformations after query(alpha) (#18740)	6 years ago
Marcus Efraimsson	964c2e722f	Snapshot: Fix http api (#18830) ... (cherry picked from commit be2e2330f5)	6 years ago
kay delaney	fb0cec5591	Backend: Adds support for HTTP/2 (#18358) ... * Backend: Adds support for HTTP/2 * Adds mozilla recommended ciphers * Updates sample.ini and config documentation	6 years ago
Leonard Gram	b67905a963	Auth: saml enabled check. (#17960)	6 years ago
Sofia Papagiannaki	dc9ec7dc91	Auth: Allow expiration of API keys (#17678) ... * Modify backend to allow expiration of API Keys * Add middleware test for expired api keys * Modify frontend to enable expiration of API Keys * Fix frontend tests * Fix migration and add index for `expires` field * Add api key tests for database access * Substitude time.Now() by a mock for test usage * Front-end modifications * Change input label to `Time to live` * Change input behavior to comply with the other similar * Add tooltip * Modify AddApiKey api call response Expiration should be *time.Time instead of string * Present expiration date in the selected timezone * Use kbn for transforming intervals to seconds * Use `assert` library for tests * Frontend fixes Add checks for empty/undefined/null values * Change expires column from datetime to integer * Restrict api key duration input It should be interval not number * AddApiKey must complain if SecondsToLive is negative * Declare ErrInvalidApiKeyExpiration * Move configuration to auth section * Update docs * Eliminate alias for models in modified files * Omit expiration from api response if empty * Eliminate Goconvey from test file * Fix test Do not sleep, use mocked timeNow() instead * Remove index for expires from api_key table The index should be anyway on both org_id and expires fields. However this commit eliminates completely the index for now since not many rows are expected to be in this table. * Use getTimeZone function * Minor change in api key listing The frontend should display a message instead of empty string if the key does not expire.	6 years ago
Kyle Brandt	599514ad68	middleware: add security related HTTP(S) response headers (#17522) ... * x_xss_protection * strict_transport_security (HSTS) * x_content_type_options these are currently defaulted to false (off) until the next minor release. fixes #17509	6 years ago
Mario Trangoni	87760d4fde	Codestyle: Fix govet issues (#17178) ... ref #10381 Signed-off-by: Mario Trangoni <mjtrangoni@gmail.com>	6 years ago
Abhilash Gnan	04d473b3e5	HTTP Server: Serve Grafana with a custom URL path prefix (#17048) ... Adds a new [server] setting `serve_from_sub_path`. By enabling this setting and using a subpath in `root_url` setting, e.g. `root_url = http://localhost:3000/grafana`, Grafana will be accessible on `http://localhost:3000/grafana`. By default it is set to `false` for compatibility reasons. Closes #16623	6 years ago
Oleg Gaidarenko	9b7f9dd9be	LDAP: consistently name the LDAP entities (#17203)	6 years ago
Oleg Gaidarenko	35f227de11	Feature: LDAP refactoring (#16950) ... * incapsulates multipleldap logic under one module * abstracts users upsert and get logic * changes some of the text error messages and import sort sequence * heavily refactors the LDAP module – LDAP module now only deals with LDAP related behaviour * integrates affected auth_proxy module and their tests * refactoring of the auth_proxy logic	6 years ago
zhulongcheng	2fff8f77dc	move log package to /infra (#17023) ... ref #14679 Signed-off-by: zhulongcheng <zhulongcheng.me@gmail.com>	6 years ago
Marcus Efraimsson	1c1427520d	Security: Add new setting allow_embedding (#16853) ... When allow_embedding is false (default) the Grafana backend will set the http header `X-Frame-Options: deny` in all responses to non-static content which will instruct browser to not allow Grafana to be embedded in `<frame>`, `<iframe>`, `<embed>` or `<object>`. Closes #14189	6 years ago
Andrej Ocenas	0433af6385	Config: Fixes bug where timeouts for alerting was not parsed correctly (#16784) ... * Fix parsing of the config * Remove unnecessary conversion * Remove timeout modification Co-Authored-By: aocenas <mr.ocenas@gmail.com> * Remove unused import	6 years ago
Oleg Gaidarenko	66c9297c36	Feature: introduce LdapActiveSyncEnabled setting (#16787) ... * Feature: introduce LdapActiveSyncEnabled setting We probably remove it after the active sync is done. But at the moment we do not want to affect the current users with not fully tested feature * Chore: move settings in more logical order	6 years ago
Oleg Gaidarenko	62b85a886e	LDAP Refactoring to support syncronizing more than one user at a time. (#16705) ... * Feature: add cron setting for the ldap settings * Move ldap configuration read to special function * Introduce cron setting (no docs for it yet, pending approval) * Chore: duplicate ldap module as a service * Feature: implement active sync This is very early preliminary implementation of active sync. There is only one thing that's going right for this code - it works. Aside from that, there is no tests, error handling, docs, transactions, it's very much duplicative and etc. But this is the overall direction with architecture I'm going for * Chore: introduce login service * Chore: gradually switch to ldap service * Chore: use new approach for auth_proxy * Chore: use new approach along with refactoring * Chore: use new ldap interface for auth_proxy * Chore: improve auth_proxy and subsequently ldap * Chore: more of the refactoring bits * Chore: address comments from code review * Chore: more refactoring stuff * Chore: make linter happy * Chore: add cron dep for grafana enterprise * Chore: initialize config package var * Chore: disable gosec for now * Chore: update dependencies * Chore: remove unused module * Chore: address review comments * Chore: make linter happy	6 years ago
Oleg Gaidarenko	78cd9058a3	Feature: add cron setting for the ldap settings (#16673) ... * Feature: add cron setting for the ldap settings * Move ldap configuration read to special function * Introduce cron setting (no docs for it yet, pending approval) * Chore: address code review comments	6 years ago
Hofls	b3bfbc6f77	Config: Show user-friendly error message instead of stack trace (#16564) ... Fixes #16283	6 years ago
Andrej Ocenas	e4f649e2c8	Chore: Small improvements to grafana-cli (#16670) ... * Small improvements * Better error handling	6 years ago
Oleg Gaidarenko	db584b3d28	Chore: remove session storage references (#16445) ... * Chore: remove session storage references * Small refactoring of the settings module * Update docs - remove references for the session storage * Update config files (sample and default configs) * Add tests for warning during the config load on defined storage cache * Remove all references to session storage * Remove macaron session dependency * Remove leftovers * Fix: address review comments * Fix: remove old deps * Fix: add skipStaticRootValidation = true to tests * Fix: improve the docs and warning message As per discussion in here - https://github.com/grafana/grafana/pull/16445/files#r273026255 * Chore: make linter happy Fixes #16148 Ref #16114	6 years ago
Ryan McKinley	3c21a121eb	Plugins: Unifying alpha state & options for all plugins (#16530) ... * app pages * app pages * workign example * started alpha support * remove app stuff * show warning on alpha/beta panels * put app back on plugin file * fix go * add enum for PluginType and PluginIncludeType * Refactoring and moving settings to plugins section fixes #16529	6 years ago
Zzy	1b84a924a3	Alerting: Makes timeouts and retries configurable (#16259) ... Adds new alert settings for configuring timeouts and retries named evaluation_timeout_seconds, notification_timeout_seconds and max_attempts. Closes #16240	6 years ago
Hugo Häggmark	a90b3e331e	config: updated feature toggle name	6 years ago
Andrej Ocenas	bbdc1c0e64	Add custom header with grafana user and a config switch for it	6 years ago
bergquist	7e7427637c	renames distcache -> remotecache	6 years ago
bergquist	daa3b17951	code layouts and comments	6 years ago
bergquist	196cdf9710	adds config to default settings	6 years ago
Woodward, Joshua	946e542412	Make password hint configurable from settings/defaults.ini	6 years ago
Hugo Häggmark	769ad21e16	Moved variable to config struct after PR comments	6 years ago
Hugo Häggmark	9c9691f7af	Added feature toggle editors_can_own	6 years ago
bergquist	170783c292	make hourly cleanup the default behavior	6 years ago
Marcus Efraimsson	1a140ee199	run token cleanup job when grafana starts, then each hour	6 years ago
Marcus Efraimsson	3c2fd02bc0	refactor login/auth token configuration settings ... remove login section and reuse existing sections security and auth	6 years ago
bergquist	a6bd2c73a0	introduce samesite setting for login cookie ... ref #15067	6 years ago
bergquist	6e672eb291	enable explore by default ... closes #15037	6 years ago
Marcus Efraimsson	e4924795a2	change default rotate_token_minutes to 10 minutes	6 years ago
Benjamin Reed	9108fd1b9d	add global datasource proxy timeout setting ... closes grafana#5699	6 years ago
bergquist	d6edaa1328	moves cookie https setting to [security]	6 years ago
bergquist	516037fbdd	makes sure rotation is always higher than urgent rotation	6 years ago
bergquist	f257101c41	removes unused/commented code	6 years ago
bergquist	ff483f3782	removes old cookie auth configuration	6 years ago
bergquist	56a521b264	makes auth token rotation time configurable	6 years ago
bergquist	64124b5042	add setting for how to long we should keep expired tokens	6 years ago
bergquist	d3ec8e1ccb	creates new config section for login settings	6 years ago
Torkel Ödegaard	f0e61af8e0	Fixed issues with the sanitizie input in text panels, added docs, renamed config option	6 years ago
Johannes Schill	1ed35f3dc1	chore: Reverse sanitize variable so it defaults to false	6 years ago