3128 Commits (2d7965402e38f94406e370b6a7e58437719a309c)

Author	SHA1	Message	Date
Karl Persson	382b24742a	Auth: Add feature flag to move token rotation to client (#65060) ... * FeatureToggle: Add toggle to use a new way of rotating tokens * API: Add endpoints to perform token rotation, one endpoint for api request and one endpoint for redirectsd * Auth: Aling not authorized handling between auth middleware and access control middleware * API: add utility function to get redirect for login * API: Handle token rotation redirect for login page * Frontend: Add job scheduling for token rotation and make call to token rotation as fallback in retry request * ContextHandler: Prevent in-request rotation if feature flag is enabled and check if token needs to be rotated * AuthN: Prevent in-request rotation if feature flag is enabled and check if token needs to be rotated * Cookies: Add option NotHttpOnly * AuthToken: Add helper function to get next rotation time and another function to check if token need to be rotated * AuthN: Add function to delete session cookie and set expiry cookie Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
Ryan McKinley	f96637b5fc	Live: Remove (alpha) ability to configure live pipelines (#65138)	2 years ago
Eric Leijonmarck	3cd952b8ba	Auth: Fix orgrole picker disabled if isSynced user (#64033) ... * fix: disable orgrolepicker if externaluser is synced * add disable to role picker * just took me 2 hours to center the icon * wip * fix: check externallySyncedUser for API call * remove check from store * add: tests * refactor authproxy and made tests run * add: feature toggle * set feature toggle for tests * add: IsProviderEnabled * refactor: featuretoggle name * IsProviderEnabled tests * add specific tests for isProviderEnabled * fix: org_user tests * add: owner to featuretoggle * add missing authlabels * remove fmt * feature toggle * change config * add test for a different authmodule * test refactor * gen feature toggle again * fix basic auth user able to change the org role * test for basic auth role * make err.base to error * lowered lvl of log and input mesg	2 years ago
Joao Silva	14607e78d1	Admin: Change permissions to /admin page so org admins don't get redirected (#65098)	2 years ago
Serge Zaitsev	743d66396a	Chore: Remove result field from API keys commands and queries (#65055) ... * Chore: remove result field from api keys * fix shadowing * actually shadowing was all right	2 years ago
Ryan McKinley	91a4b8b529	Chore: remove dashboardsFromStorage (#65058)	2 years ago
Artur Wierzbicki	4274b9414f	Chore: remove `querylibrary` feature toggle (#65021) ... * chore: remove querylibrary * chore: remove querylibrary * chore: remove querylibrary	2 years ago
Will Browne	ee2dd62a1f	Plugins: Refactor loader + finder to support multiple sourcing methods (#64735) ... * it's cdn time * tidy body closing * auto signed * fix close * update log name * remove comments	2 years ago
Ieva	7860ca6c3d	RBAC: protect folder creation and moving (#64636) ... * protect moving folders to a subfolder and creating folders in a subfolder * folder update endpoint isn't used for folder parent update * lint * move permission check logic to services, fix tests * linting	2 years ago
Ezequiel Victorero	8f0a9729f0	PublicDashboards: Allow hidden queries execution (#64858)	2 years ago
Jo	6b6cf5f4b7	Cfg: Move ViewersCanEdit into cfg (#64876) ... move ViewersCanEdit into cfg	2 years ago
Jo	ccbf200c4a	SupportBundles: Add OAuth bundle collectors (#64810) ... * wip * add oauth support bundles * add specific configs for generic oauth and azureAD * add doc entry * optimize struct packing * Update pkg/login/social/azuread_oauth.go Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * nit update --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
Ryan McKinley	d5a9a0cea0	Chore: remove comments feature (#64644)	2 years ago
Ashley Harrison	3336327306	Navigation: Fix Home logo always going to `/login` (#62658) ... * only redirect to /login when anonymous access is disabled * only search for dashboards when not logged in if anon access is enabled * fix go logic * add unit tests	2 years ago
Eric Leijonmarck	17537b033d	API keys: Add last_used_at and docs changes for migration (#64293) ... * feat: last_used_at for apikeys * add: docs and copy changes * refactor: use br correctly * remove docs * removed more docs	2 years ago
owensmallwood	1a5a280c86	Pubdash: Email sharing handle dashboard deleted (#64247) ... dashboard service calls pubdash service when dashboard deleted	2 years ago
Ryan McKinley	42e7ec9fe4	Chore: cleanup dashboard service names (#64442)	2 years ago
Misi	6543259a7d	Auth: Add SyncPermissions post auth hook (#64205) ... * Add SyncPermissionsFromDB post auth hook * Delete FromDB prefix * Align tests * Fixes * Change SyncPermissionsHook prio	2 years ago
Sofia Papagiannaki	43095d84e4	Snapshots: Fix deleting snapshot with non existent dashboard ID (#64345) ... * Add test for deleting snapshot for non existent dashboard * Add test for failure to fetch guardian other than ErrDashboardNotFound * Fix dashboard snapshot delete	2 years ago
Will Browne	94f39e69a3	Plugins: Migrate `plugincontext`, `adapters` and `pluginsettings` to pkg/services/pluginsintegration package (#64154) ... * migrate plugincontext, adapter and pluginsettings * add to CODEOWNERS * fix imports * fix CODEOWNERS * take pluginsettings * migrate wire stuff	2 years ago
Will Browne	68df83c86d	Plugins: Add Plugin FS abstraction (#63734) ... * unexport pluginDir from dto * first pass * tidy * naming + add mutex * add dupe checking * fix func typo * interface + move logic from renderer * remote finder * remote signing * fix tests * tidy up * tidy markdown logic * split changes * fix tests * slim interface down * fix status code * tidy exec path func * fixup * undo changes * remove unused func * remove unused func * fix goimports * fetch remotely * simultaneous support * fix linter * use var * add exception for gosec warning * fixup * fix tests * tidy * rework cfg pattern * simplify * PR feedback * fix dupe field * remove g304 nolint * apply PR feedback * remove unnecessary gosec nolint * fix finder loop and update comment * fix map alloc * fix test * remove commented code	2 years ago
Karl Persson	872d2d1e1c	AuthN: Login error handling (#64239) ... * Social: Fix type so it appears in error responses * AuthN: construct errutil.Error from social.Error * login: Check for errutil.Error and use public message * Login: redirectURLWithErrorCookie for authn errors Co-authored-by: Jo <joao.guerreiro@grafana.com>	2 years ago
Sofia Papagiannaki	fde96c91c1	Chore: Differentiate the ErrOrgNotFound error messages (#64131) ... * Better org not found error messages	2 years ago
Sofia Papagiannaki	e6e8351ee9	Chore: Remove CreateUserForTests() (#64125) ... * Chore: Remove CreateUserForTests * Apply suggestion from code review	2 years ago
Ieva	a52999a886	Access Control: revert to using folder store from the scope resolvers (#64132) ... * revert to using folder store from the resolvers * fixing tests after revert * api test fixes --------- Co-authored-by: Kristin Laemmert <mildwonkey@users.noreply.github.com>	2 years ago
Ashley Harrison	d61bcdf4ca	Chore: Pass signed `user_hash` to Intercom via Rudderstack (#63921) ... * move analytics identifiers to backend * implement hash function * grab secret from env * expose and retrieve intercom secret from config * concat email with appUrl to ensure uniqueness * revert to just using email * Revert "revert to just using email" This reverts commit 8f10f9b1bc. * add docstring	2 years ago
Karl Persson	f258adadbf	AuthN: add utility functions for different type of login responses (#64133) ... * AuthN: add utility functions to handle response and redirect after successful login * API: Reuse utility functions for logins if authnService flag is enabled	2 years ago
Jack Westbrook	8c8f584b41	Plugins: Extend panel menu with links from plugins (#63089) ... * feat(plugins): introduce dashboard panel menu placement for adding menu items * test: add test for getPanelMenu() * added an unique identifier for each extension. * added context to getPluginExtensions. * wip * Wip * wiwip * Wip * feat: WWWIIIIPPPP 🧨 * Wip * Renamed some of the types to align a bit better. * added limit to how many extensions a plugin can register per placement. * decreased number of items to 2 * will trim the lenght of titles to max 25 chars. * wrapping configure function with error handling. * added error handling for all scenarios. * moved extension menu items to the bottom of the more sub menu. * added tests for configuring the title. * minor refactorings. * changed so you need to specify the full path in package.json. * wip * removed unused type. * big refactor to make things simpler and to centralize all configure error/validation handling. * added missing import. * fixed failing tests. * fixed tests. * revert(extensions): remove static extensions config in favour of registering via AppPlugin APIs * removed the compose that didn't work for some reason. * added tests just to verify that validation and error handling is tied together in configuration function. * adding some more values to the context. * draft validation. * added missing tests for getPanelMenu. * added more tests. * refactor(extensions): move logic for validating extension link config to function * Fixed ts errors. * Update packages/grafana-data/src/types/app.ts Co-authored-by: Levente Balogh <balogh.levente.hu@gmail.com> * Update packages/grafana-runtime/src/services/pluginExtensions/extensions.test.ts Co-authored-by: Levente Balogh <balogh.levente.hu@gmail.com> * refactor(extensions): rename limiter -> pluginPlacementCount * refactor(getpanelmenu): remove redundant continue statement --------- Co-authored-by: Levente Balogh <balogh.levente.hu@gmail.com> Co-authored-by: Marcus Andersson <marcus.andersson@grafana.com>	2 years ago
Kristin Laemmert	bb798e24f3	chore(services): replace dependencies on dashboard store with dashboard service (#63937) ... * chore(services): replace dependencies on dashboard store with dashboard service This continues the backend service/store split by replacing dashboard store dependencies with service dependencies. the folder service remains the single exception for now; otherwise we'd have a dependency cycle between the folder and dashboard services. I have some ideas for that, but I'll take care of all the easy parts first. While doing this, I identified and removed a number of unused arguments from the following functions: NewFolderNameScopeResolver NewFolderIDScopeResolver NewFolderUIDScopeResolver NewDashboardIDScopeResolver NewDashboardUIDScopeResolver resolveDashboardScope I have a small enterprise PR to support this commit. * lingering fmt	2 years ago
Torkel Ödegaard	27070c252d	ErrorHandling: Fixes issues with bad error messages (#63775)	2 years ago
Kristin Laemmert	157c270ad3	chore: remove export service POC from main (#63945) ... * chore: remove export service POC from main This is a POC and we'll see it, or something like it, again! * remove frontend changes --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Sofia Papagiannaki	8aae7be4e5	API: Enable serving Swagger UI by default and add docs and guidelines (#63489) ... * Enable serving Swagger UI by default It used to be served behind the `swaggerUi` feature toggle. * Remove `swaggerUi` feature toggle * Add docs and guidelines for updating swagger * Apply suggestions from code review Co-authored-by: Josh Hunt <joshhunt@users.noreply.github.com>	2 years ago
Joey	fbd049a094	Profiling: Enable flame graph & Phlare/Parca data sources for all users (#63488) ... * Remove flame graph toggle * Remove beta badge from panel * Update expectedListResp.json * Update flame graph container to only show if there is data	2 years ago
Will Browne	ab8de1a0e3	Plugins: Add simple plugin sources service (#63814) ... add simple plugin sources svc	2 years ago
zhichli	3c218d742f	Datasources: Add user_agent header customization for outgoing HTTP requests (#63769)	2 years ago
Will Browne	32aa0ad272	Plugins: Remove stream handler from plugins DTO (#63812) ... remove stream handler from DTO	2 years ago
Karl Persson	8484d0c4ef	Settings: Remove global variables for auth settings (#63795) ... * Setting: Remove global DisableLoginForm and add it to cfg * Setting: Remove unused BasicAuthEnabled global * Setting: Remove global OAuthAutoLogin and use from cfg * Setting: Remove global AnonymousEnabled * Setting: Remove global values for AuthProxy settings	2 years ago
Jo	3b22955ebb	Orgs: Remove auto assign globals (#63754) ... * remove auto assign globals * add missing gitignore entries	2 years ago
Jo	c8db771939	Users: Fix org user always getting org id = 1 on auto assign false (#63708) ... * fix org user always getting org id = 1 on auto assign false * make tests explicit * use correct cfg in service accounts * fix api tests * fix database test of ac * fix InsertOrgUser returning affected rows as orgID	2 years ago
Giuseppe Guerra	966bcd3545	Plugins: Fix plugins CDN not working when plugins are not in domain's root path (#63202) ... * Plugins CDN: Add support for different CDN root path * Plugins CDN: Make frontendsettings return the correct CDN base path * Update comments * Fix version detection * Undo frontend changes * Fix system.js asset path construction * fix(plugins): translate all plugin css asset paths loaded via cdn * refactor(plugins): rename extractPluginNameVersionFromUrl and add comments * Fix typo in comment Co-authored-by: Will Browne <wbrowne@users.noreply.github.com> * Hardcode CDN URL structure /{id}/{version}/public/plugins/{id}/{assetPath} is not required anymore in the cdn url template config --------- Co-authored-by: Jack Westbrook <jack.westbrook@gmail.com> Co-authored-by: Will Browne <wbrowne@users.noreply.github.com>	2 years ago
Will Browne	200d2ad249	Plugins: Invalidate plugin context app settings cache post update (#63279) ... invalid plugin settings	2 years ago
Emil Tullstedt	3abaf32cf2	Chore: Upgrade golangci-lint to v1.51.2 (#63630) ... Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>	2 years ago
Jo	ff78103a24	Authn: Anon session service (#63052) ... * add anon sessions package * add usage stat fn * implement count for cache * add anonservice to authn broker * lint * add tests for remote cache count * move anon service to services * wrap tagging in goroutine * make func used	2 years ago
Selene	7ace44c8b5	Chore: Update oapi-codegen library (#62962) ... * Update oapi library and thema * Use fork commit to fix elasticsearch and cloudwatch generators * Update thema * Fixes * Update thema with last fixes * Sync * Fix test * Update thema and schemas * Update thema	2 years ago
Emil Tullstedt	0caacb3333	Cookies: Provide a mechanism for per user control over cookies (#61566)	2 years ago
Karl Persson	5eaaf9b9b7	RBAC: Rewrite search and plugin list rbac test (#63483) ... * API: rewrite rbac tests for search * API: rewrite rbac tests for listing plugins * API: remove unused rbac test setup code	2 years ago
Jo	d4cfbd9fd3	LDAP: Move LDAP globals to Config (#63255) ... * structure dtos and private methods * add basic LDAP service * use LDAP service in ldap debug API * lower non fatal error * remove unused globals * wip * remove final globals * fix tests to use cfg enabled * restructure errors * remove logger from globals * use ldap service in authn * use ldap service in context handler * fix failed tests * fix ldap middleware provides * fix provides in auth_test.go	2 years ago
Jo	c70571c536	SupportBundles: Replace feature toggle with enabled (#63241) ... replace feature toggle with enabled	2 years ago
Ryan McKinley	0018c8e9c1	K8S: cleanup and consolidate feature toggles (#63212)	2 years ago
suntala	49b3027049	Chore: Remove Result field from datasources (#63048) ... * Remove Result field from AddDataSourceCommand * Remove DatasourcesPermissionFilterQuery Result * Remove GetDataSourceQuery Result * Remove GetDataSourcesByTypeQuery Result * Remove GetDataSourcesQuery Result * Remove GetDefaultDataSourceQuery Result * Remove UpdateDataSourceCommand Result	2 years ago