40 Commits (32fde6dba4be14fc90d58b07d97d5b3585b50d86)

Author	SHA1	Message	Date
Karl Persson	be60ef0500	IDToken: cache invalidation (#100592) ... * Make org role part of id token cache key. This way we will always sign a new token when it changes * Remove calls to remove id token	3 months ago
Misi	ee0a1391df	Auth: Add OrgRole to ID token (#100383) ... * Changes for Users and ServiceAccounts * Align tests	3 months ago
Ryan McKinley	680e6bc1f8	Authlib: Use types package rather than claims (#99243)	4 months ago
Karl Persson	3a17d0c927	IAM: align AuthInfo interface (#97228) ... * Update to use updated interface	6 months ago
Karl Persson	76f052e8de	Requester: Remove duplicated function (#97038) ... * Remove duplicated function * Remove GetDisplayName from interface * Use GetName	6 months ago
Gabriel MABILLE	bd53fa9580	LocalSigner: Remove unused dependency (#96118) ... ID Token Signer: Remove unecessary deps	7 months ago
Karl Persson	3bcbf231ee	IDToken: fix namespace format (#95341) ... * Bump authlib version * Remove temporary formatter and start signing tokens with `stacks-` prefix * update workspace	7 months ago
Ryan McKinley	82417c916f	K8s: Use stacks plural not singular in grafana namespaces (#92550)	9 months ago
Charandas	4f024d94d8	Authn: resolve issues with setting up a nil identity (#92620)	9 months ago
Ryan McKinley	2e60f28044	Auth: remove id token flag (#92209)	9 months ago
Karl Persson	8d36111420	IDForwarding: Set identity type and uid (#91830) ... * Set identity type and uid * Set uid without prefix * Update authlib version * Update to new claim name	9 months ago
Karl Persson	8bcd9c2594	Identity: Remove typed id (#91801) ... * Refactor identity struct to store type in separate field * Update ResolveIdentity to take string representation of typedID * Add IsIdentityType to requester interface * Use IsIdentityType from interface * Remove usage of TypedID * Remote typedID struct * fix GetInternalID	10 months ago
Ryan McKinley	21d4a4f49e	Auth: use IdentityType from authlib (#91763)	10 months ago
Karl Persson	bcfb66b416	Identity: remove GetTypedID (#91745)	10 months ago
Claudiu Dragalina-Paraipan	e2435f92f1	[authn]: add GetIDClaims() to Requester (#91387) ... * authn: add GetIDClaims() to Requester Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * authn: update StaticRequester Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * update auth/idtest/mock Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * Fix test Co-authored-by: Claudiu Dragalina-Paraipan <claudiu.dragalina@grafana.com> --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> Co-authored-by: gamab <gabriel.mabille@grafana.com>	10 months ago
colin-stuart	057c04ed9d	IDToken: Add current user's DisplayName to the ID token (#90992) ... Set claims.Rest.DisplayName from the IDService	10 months ago
Ryan McKinley	728150bdbd	Identity: extend k8s user.Info (#90937)	10 months ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567)	10 months ago
Misi	69c5fa8361	IDToken: Add current user's Username and UID to the ID token (#90240) ... * Set claims.Rest.Login from the IDService * Add UID to the ID token	11 months ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116)	12 months ago
Karl Persson	2d8570e85e	IDToken: Reuse claims from authlib (#87437) ... * bump authlib version * Reuse claims from authlib	1 year ago
Karl Persson	37af1ae58e	IDToken: Set typ header (#87430) ... TokenSigning: Set typ header	1 year ago
Dan Cech	41bee274fd	Chore: Fix error handling in postDashboard, remove UserDisplayDTO, fix live redis client initialization (#87206) ... * clean up error handling in postDashboard and remove UserDisplayDTO * replace GetUserUID with GetUID and GetNamespacedUID, enforce namespace constant type * lint fix * lint fix * more lint fixes	1 year ago
Karl Persson	a22350f8f4	IDToken: add namespace (#87242)	1 year ago
Karl Persson	0fa983ad8e	AuthN: Use typed namespace id inside authn package (#86048) ... * authn: Use typed namespace id inside package	1 year ago
Karl Persson	895222725c	Session: set authID and authenticatedBy (#85806) ... * Authn: Resolve authenticate by and auth id when fethcing signed in user * Change logout client interface to only take Requester interface * Session: Fetch external auth info when authenticating sessions * Use authenticated by from identity * Move call to get auth-info into session client and use GetAuthenticatedBy in various places	1 year ago
Karl Persson	ba41954854	Email: trigger email verification flow (#85587) ... * Add email and email_verified to id token if identity is a user * Add endpoint to trigger email verification for user * Add function to clear stored id tokens and use it when email verification is completed	1 year ago
Karl Persson	2f5e3023c2	IDFowrarding: ignore logging context canceled errors (#85141)	1 year ago
Karl Persson	28bb6979f5	IDForwading: cache based on expires in (#81136) ... * IDFowarding: Cache based on expires in * IDFowarding: Change default expires in --------- Co-authored-by: Victor Cinaglia <victor@grafana.com>	1 year ago
Karl Persson	43b6b6b2a4	IDForwarding: add "authenticatedBy" to id token (#80622) ... * IDForwading: Set authenticated by for users	1 year ago
Vardan Torosyan	63cd5a5625	Chore: Cleanup namespace and ID resolution (#79360) ... * Chore: Cleanup namespace ID resolution * Check for negative userID when relevant * Reuse existing function for parsing ID as int * Fix imports	1 year ago
Ryan McKinley	f69fd3726b	FeatureToggles: Add context and and an explicit global check (#78081)	2 years ago
Karl Persson	e2ba399e30	IDForwarding: Use single flight for SignIdentity (#76530) ... * IDForwarding: Use single flight for SignIdentity * Update cache inside single flight call	2 years ago
Karl Persson	ea741dda6b	Signingkeys: Add local cache (#76234) ... * IDForwarding: change audience to be prefixed by org and remove JTI * IDForwarding: Construct new signer each time we want to sign a token. * SigningKeys: Simplify storage layer and move logic to service * SigningKeys: Add private key to local cache	2 years ago
Karl Persson	a2d4ce18ad	IDForwarding: Add basic metrics (#75798) ... * IDService: Add basic metrics * IDService: Add more metrics --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2 years ago
Karl Persson	09e638cd9d	IDForwarding: Use feature toggle not generate a key if feature is not enabled (#75961) ... * Use feature toggle not generate a key if feature is not enabled * Fix check	2 years ago
Jo	44fa0697ce	Auth: Signing Key persistence (#75487) ... * signing key wip use db keyset storage add signing_key table add testing for key storage add ES256 key tests Remove caching and implement UpdateOrCreate Stabilize interfaces * Encrypt private keys * Fixup signer * Fixup ext_jwt * Add GetOrCreatePrivate with automatic key rotation * use GetOrCreate for ext_jwt * use GetOrCreate in id * catch invalid block type * fix broken test * remove key generator * reduce public interface of signing service	2 years ago
Karl Persson	fd2235b5ad	AuthN: Implement requester interface for identity (#75618) ... * AuthN: Implement identity.Requester interface for authn.Identity * AuthN: Replace OrgRole with GetOrgRole * IDForwarding: skip converting to SignedInUser * Pass identity directly in permission sync hook	2 years ago
Karl Persson	b9b4246432	IDForwarding: Add auth hook to generate id token (#75555) ... * AuthN: Move identity struct to its own file * IDForwarding: Add IDToken property to usr and identity structs and add GetIDToken to requester interface * Inject IDService into background services * IDForwarding: Register post auth hook when feature toggle is enabled	2 years ago
Karl Persson	b50f1e15a8	IDForwarding: Add service and a local signer (#75423) ... * IDForwarding: Add service for handling id token and create a local signer --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago