576 Commits (2cdf73f5840a8b65e28157377d62364a139cb346)

Author	SHA1	Message	Date
Mihai Doarna	39e4f8ec1b	Auth: configure SSO settings reload interval from the ini file (#80290) ... * configure sso reload interval from ini file * change section name to sso_settings	1 year ago
Jo	5ae3249c36	Auth: Hide forgot password if grafana auth is disabled (#79895) ... * hide forgot password if grafana auth is disabled * fix test	1 year ago
Todd Treece	feb7b38fba	Metrics: Add commit & version to grafana_environment_info (#79823)	1 year ago
Karl Persson	05d1ce4026	Auth: id response header (#79757) ... * Add utility function to check if namespace is any of * Refactor code to use identity interface	1 year ago
Agnès Toulet	fdaf6e3f2e	PublicDashboards: Add setting to disable the feature (#78894) ... * Replace feature toggle with configuration setting * Fix permission alert * Update documentation * Add back feature toggle * revert unwanted commited changes * fix tests * run prettier * Update SharePublicDashboard.test.tsx * fix linter and frontend tests * Update api.go * Apply docs edit from code review Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com> * Update index.md * Update docs/sources/setup-grafana/configure-grafana/feature-toggles/index.md Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * add isPublicDashboardsEnabled + test * fix test * update ff description in registry * move isPublicDashboardsEnabled * revert getConfig() update --------- Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	1 year ago
Misi	ce1450d4d3	Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443) ... * Configure SkipOrgRoleSync from OAuthInfo * Remove skipOrgRoleSync from socialbase and connectors * Add test to socialimpl.ProvideService * Deprecate AuthSettings' fields * clean up misleading init of frontendsettings.Auth	1 year ago
owensmallwood	d5b9602a79	Config: Can add static headers to email messages (#79365) ... * Can add allowed custom headers to an email Message. WIP. * adds slug as a custom email header to all outgoing emails * Headers are static - declared as key/value pairs in config. All static headers get added to emails. * updates comment * adds tests for parsing smtp static headers * updates test to assert static headers are included when building email * updates test to use multiple static headers * updates test names * fixes linting issue with error * ignore gocyclo for loading config * updates email headers in tests to be formatted properly * add static headers first * updates tests to assert that regular headers like From cant be overwritten * ensures only the header is in a valid format for smtp and not the value * updates comment and error message wording * adds to docs and ini sample files * updates smtp.static_headers docs examples formatting * removes lines commented with semi colons * prettier:write * renames var	1 year ago
Giuseppe Guerra	0d1d437c86	Plugins: Add forward_host_env_vars setting (#79333) ... * Plugins: Add forward_host_env_vars_plugins setting * Renamed forward_host_env_vars_plugins to forward_host_env_vars * Add readPluginIDsList * refactoring * lint * Use util.SplitString	1 year ago
Jo	3647ba7360	Anonymous: Add configurable device limit (#79265) ... * Anonymous: Add device limiter * break auth if limit reached * fix typo * refactored const to make it clearer with expiration * anon device limit for config --------- Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com>	1 year ago
Giuseppe Guerra	f76b9f266e	Plugins: Add hide_angular_deprecation setting (#79296) ... * Add plugins.hide_angular_deprecation config ini * Add more tests * Remove the ability to use [plugins.*] hide_angular_deprecation	1 year ago
Todd Treece	ea36336c0a	Chore: Ensure BuildVersion is set when using CDN (#79169)	1 year ago
Matthew Jacobson	5a80962de9	Alerting: Add clean_upgrade config and deprecate force_migration (#78324) ... * Alerting: Add clean_upgrade config and deprecate force_migration Upgrading to UA and rolling back will no longer delete any data by default. Instead, each set of tables will remain unchanged when switching between legacy and UA. As such, the force_migration config has been deprecated and no extra configuration is required to roll back to legacy anymore. If clean_upgrade is set to true when upgrading from legacy alerting to Unified Alerting, grafana will first delete all existing Unified Alerting resources, thus re-upgrading all organizations from scratch. If false or unset, organizations that have previously upgraded will not lose their existing Unified Alerting data when switching between legacy and Unified Alerting. Similar to force_migration, it should be kept false when not needed as it may cause unintended data-loss if left enabled. --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Karl Persson	21f94c5b78	Auth: id response header (#77871) ... * Add config options for identity id response header * Add feature to add identity id response header to all responses * Use util.SplitString	2 years ago
Gabriel MABILLE	b6b86bb0b3	RBAC: Check `plugins:install` globally (#78438) ... * RBAC: Check plugins:install globally * Add disclamer to the RBACSingleOrganization config option	2 years ago
Esteban Beltran	5a2127c221	Sandbox: Fix configuration key for sandbox exceptions (#78317) ... * Sandbox: Disable incident app inside the sandbox code * Fix wrong key for default config and config key * Rllback file	2 years ago
Dan Cech	c330b7d18d	Chore: Update settings to support k8s needs (#78235) ... use util.SplitString, implement DynamicSection KeysHash	2 years ago
Ryan McKinley	dec9a07738	Settings: Actually deprecate access to feature flags (#78073)	2 years ago
Ryan McKinley	3509a5abb9	FeatureFlags: Cleanup usage of cfg.IsFeatureToggleEnabled (#78014)	2 years ago
Gabriel MABILLE	20fc0cbf35	Chore: Allow env overrides for the `extended_jwt` config (#77132) ... Chore: Allow env overrides for the extended_jwt config	2 years ago
Hugo Kiyodi Oshiro	dfc1875061	Plugins: Add managed instance installation resources (#76767) ... * Plugins: Add configs to allow managed install * Expose methods to use with cloud plugin installer * Change plugins installer bind to OSS	2 years ago
William Assis	65a7bddcee	Analytics: Add option to pass destSDKBaseURL to rudderstack load method (#74926) ... * Add option to pass destSDKBaseURL to rudderstack load method * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
João Calisto	d5691e6dd1	Live: Allow setting the engine password (#76289)	2 years ago
Jo	cada1f040a	Auth: Add support for role mapping and allowed groups in Google OIDC (#76266) ... * support google oauth allowed_groups. unify allowed groups logic * add role mapping for google oauth * add documentation * add addendums * remove extra isGroupMember * add to sample ini * Apply suggestions from code review Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2 years ago
Jo	40a1f8434d	Anon: Scaffold anon service (#74744) ... * remove API tagging method and authed tagging * add anonstore move debug to after cache change test order fix issue where mysql trims to second * add old device cleanup lint utc-ize everything trim whitespace * remove dangling setting * Add delete devices * Move anonymous authnclient to anonimpl * Add simple post login hook * move registration of Background Service cleanup * add updated_at index * do not untag device if login err * add delete device integration test	2 years ago
Ezequiel Victorero	4cfc834c08	HealthCheck: show enterprise commit (#75242)	2 years ago
Will Browne	de2a107efa	Chore: Fix slug cfg name (#75235) ... fix cfg name	2 years ago
Will Browne	e9e0e321b6	Chore: Add stack ID + slug to cfg (#75227) ... * add stack ID + slug to cfg * add to environment section	2 years ago
Andres Martinez Gotor	96b55ea37c	Feature: Allow to skip plugin loading (#74840)	2 years ago
Ieva	58efa49933	Chore: remove `IsDisabled` method for access control (#74340) ... remove IsDisabled method for access control, clean up tests	2 years ago
Kristin Laemmert	d1876b68bc	Chore: refactor grafana-apiserver a bit (#74177)	2 years ago
Ryan McKinley	025b2f3011	Chore: use any rather than interface{} (#74066)	2 years ago
venkatbvc	7c98678188	Auth: Add support for OIDC RP-Initiated Logout (#70357) ... * Fix signout redirect_uri issue * Fix signout redirect_uri issue * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * remove signout url global * style alignment * remove legacy handlers for devenv * Update pkg/api/login.go --------- Co-authored-by: Rao B V Chalapathi <b_v_chalapathi.rao@nokia.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: jguer <me@jguer.space>	2 years ago
linoman	2e050f25bf	Auth: Allow to auto-assign empty role (#73326) ... Allow to auto-assign empty role	2 years ago
Carl Bergquist	243b757168	Middleware: Add team metadata to HTTP handlers (#71010) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Sarah Zinger	09d5483c6c	Cloudwatch: Upgrade aws-sdk and display external ids for temporary credentials (#72821) ... (under a feature toggle, not yet ready for public testing)	2 years ago
Karl Persson	2c57bca176	Auth: Remove auth broker flag and clean up login handlers (#73109) ... * Auth: Remove auth broker flag and clean up login handlers	2 years ago
Karl Persson	144e4887ee	Auth: Use authn.Service for all tests (#72921) ... * Dashboards: Fix tests when authn broker is enabled. StarService was not configured for tests, the call was guarded by !c.IsSignedIn * Change default to be anon user to match expectations from tests * OAuth: rewrite tests to work with authn.Service * Setup template renderer by default * Extract cookie options from cfg instead of relying on global variables * Fix test to work with authn service * Middleware: rewrite auth tests * Remvoe session cookie if we cannot refresh access token	2 years ago
Sarah Zinger	deeb1d85f8	Config: making [aws][external_id] part of env (#72062) ... * Config: making [aws][external_id] part of env * Fix go.sum * Add a test	2 years ago
Eric Leijonmarck	95760cb021	Auth: OAuth sets `skip_org_role_sync = true` for auth.google by default (#72819) ... * sets skip_org_role_sync to true for google * add google skiporgrolesync and sets to true always * add field * Update docs/sources/setup-grafana/configure-security/configure-authentication/google/index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * add AKS to words * script back to mina --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Ieva	3a2538c2ca	Auth: lock down Grafana admin sync for SAML (#72828) ... lock down Grafana admin sync for SAML	2 years ago
Todd Treece	f3ffc850aa	Chore: Revert dskit service additions (#72608)	2 years ago
Sofia Papagiannaki	afb59af79b	Usage stats: Tune collector execution startup and interval (#72688) ... * Do not update statistics at service collector startup * Configurable collector interval * Introduce initial random delay * Prevent reporting metrics until the stats have been collected * Apply suggestion from code review	2 years ago
Misi	bba11d04cb	Auth: Add key_id config param to auth.jwt (#72711) ... * Specify keyID for public key provided in PEM format for JWT Auth * Update docs * Update sample.ini	2 years ago
Ieva	1fa4f4bc57	Chore: remove `DisableSyncLock` setting, as it's not used anymore (#72680) ... * rmeove DisableSyncLock setting, as it's not used anymore * remove unused import	2 years ago
Jo	3353b1a8aa	Auth: Add authed device tagging (#72442) ... * add authed device tagging * fix config * implement feedback * implement feedback * add reverse untag behavior * remove duplicate stat * Update pkg/services/anonymous/anonimpl/impl.go	2 years ago
João Calisto	4ba83173ea	Feature toggles management: Define get feature toggles api (#72106) ... * Feature Toggle Management: Define get feature toggles api * lint	2 years ago
Ieva	59eb2f68b7	AuthN: Lock down manual role updates for users synced through Grafana Com portal (#72044) ... take into account auth.grafananet config section when checking if gcom auth is enabled	2 years ago
Jo	0ffd359801	Auth: Enforce role sync except if skip org role sync is enabled (#70766) ... * enforce role sync except if skip org role sync is enabled * move errors to errors file and set codes * fix docs and defaults * remove legacy parameter * support fall through token-api in generic oauth * fix error handling for generic_oauth * Update pkg/login/social/generic_oauth.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * Update pkg/login/social/gitlab_oauth_test.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * Update pkg/login/social/gitlab_oauth_test.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2 years ago
Esteban Beltran	d618bc46d1	Plugins: Add config option to exclude specific plugins from frontend sandbox (#70899)	2 years ago
Jo	b8a336c9d7	Auth: Remove Email Lookup from oauth integrations (#894) ... Remove email lookup from oauth integrations Co-authored-by: ievaVasiljeva <ieva.vasiljeva@grafana.com>	2 years ago