210 Commits (3f3175972e1a1a18b6c9dcc4a7bb4ebb618b717d)

Author	SHA1	Message	Date
Marcus Efraimsson	3d1c624c12	WIP: Protect against brute force (frequent) login attempts (#10031) ... * db: add login attempt migrations * db: add possibility to create login attempts * db: add possibility to retrieve login attempt count per username * auth: validation and update of login attempts for invalid credentials If login attempt count for user authenticating is 5 or more the last 5 minutes we temporarily block the user access to login * db: add possibility to delete expired login attempts * cleanup: Delete login attempts older than 10 minutes The cleanup job are running continuously and triggering each 10 minute * fix typo: rename consequent to consequent * auth: enable login attempt validation for ldap logins * auth: disable login attempts validation by configuration Setting is named DisableLoginAttemptsValidation and is false by default Config disable_login_attempts_validation is placed under security section #7616 * auth: don't run cleanup of login attempts if feature is disabled #7616 * auth: rename settings.go to ldap_settings.go * auth: refactor AuthenticateUser Extract grafana login, ldap login and login attemp validation together with their tests to separate files. Enables testing of many more aspects when authenticating a user. #7616 * auth: rename login attempt validation to brute force login protection Setting DisableLoginAttemptsValidation => DisableBruteForceLoginProtection Configuration disable_login_attempts_validation => disable_brute_force_login_protection #7616	7 years ago
bergquist	49673c509d	fixes broken phantomjs rendering ... when migrating from govendor to dep we broke the phantomjs rendering. ref #10602	7 years ago
bergquist	a4e4b76785	fixes log typo	8 years ago
bergquist	b840514797	imguploader: log if the configuration is invalid	8 years ago
Carl Bergquist	35106537f2	Replace Read Only Editor role with ViewersCanEdit setting (#10166) ... * removes readonly editor role * adds viewersCanEdit setting This enable you to allow viewers to edit/inspect dashboards in grafana in their own browser without allowing them to save dashboards * remove read only editor option from all dropdowns * migrates all read only viewers to viewers * docs: replace readOnlyEditor with viewersCanEdit	8 years ago
bergquist	2e610cb256	dashboards as cfg: move dash/ds config files to /provisioning/*	8 years ago
bergquist	361acd3fa1	dashboards as cfg: include cfg files in dist packages	8 years ago
bergquist	d69b63cbc0	dashboards as cfg: read first cfg version	8 years ago
bergquist	ebbfc529e0	datasource as cfg: support globbing	8 years ago
bergquist	665df676a5	datasource as cfg: rename feature to provisioning	8 years ago
bergquist	c9bfa781fd	datasource as cfg: improve name for this feature	8 years ago
bergquist	ba4bbd1d47	datasource as cfg: refactor tests to use yaml files	8 years ago
bergquist	3f0eb52389	datasource as cfg: ignore datasource all ready exist for inserts	8 years ago
bergquist	5910411845	datasource as cfg: add support for securedata field	8 years ago
bergquist	930da63173	datasource as cfg: setting for purging datasources not in cfg	8 years ago
bergquist	0f29b8ac83	datasources as cfg: tests for insert/updating datasources	8 years ago
bergquist	39b6c04643	datasource as cfg: basic implementation	8 years ago
Alexander Zobnin	a0a1f4aacd	dashboard history: refactor after review	8 years ago
Alexander Zobnin	08e2bbef83	dashboard history: clean up dashboard version history	8 years ago
Matt Bostock	16c5d0e4b7	Always verify TLS unless explicitly told otherwise ... TLS was not being verified in a number of places: - connections to grafana.com - connections to OAuth providers when TLS client authentication was enabled - connections to self-hosted Grafana installations when using the CLI tool TLS should always be verified unless the user explicitly enables an option to skip verification. Removes some instances where `InsecureSkipVerify` is explicitly set to `false`, the default, to help avoid confusion and make it more difficult to regress on this fix by accident. Adds a `--insecure` flag to `grafana-cli` to skip TLS verification. Adds a `tls_skip_verify_insecure` setting for OAuth. Adds a `app_tls_skip_verify_insecure` setting under a new `[plugins]` section. I'm not super happy with the way the global setting is used by `pkg/api/app_routes.go` but that seems to be the existing pattern used.	8 years ago
Torkel Ödegaard	0c86241c5b	Webpack (#9391) ... * webpack poc, this is not going to work for plugins, dam * tech: webpack and systemjs for plugins starting to work * tech: webpack and systemjs combo starting to work * tech: webpack + karma tests progress * tech: webpack + karma progress * tech: working on tests * tech: webpack * tech: webpack + karma, all tests pass * tech: webpack + karma, all tests pass * tech: webpack all tests pass * webpack: getting closer * tech: webpack progress * webpack: further build refinements * webpack: ng annotate fixes * webpack: optimized build fix * tech: minor fix for elasticsearch * tech: webpack + ace editor * tech: restored lodash move mixin compatability * tech: added enzyme react test and upgraded to react v16 * tech: package version fix * tech: added testdata to built in bundle * webpack: sass progress * tech: prod & dev build is working for the sass * tech: clean up unused grunt stuff and moved to scripts folder * tech: added vendor and manifest chunks, updated readme and docs * tech: webpack finishing touches	8 years ago
Tobias Hintze	af79d046db	introduce smtp config option for EHLO identity	8 years ago
Torkel Ödegaard	73563d087c	feat: more work on #8768	8 years ago
Torkel Ödegaard	23558c61d4	feat: wip work on #8768	8 years ago
Daniel Lee	8973b48f96	setting: add tests for windows	8 years ago
Anton Yackushev	bab21c9069	misspell: Corrected some misspelled words	8 years ago
Torkel Ödegaard	c34db77f04	grafana_com: changed name of oauth grafana_net integration (old settings names still work), and updated login button look, closes #8415	8 years ago
Mitja Z	c92d719a72	added support for listening on unix socket #4030 (#8221)	8 years ago
Dan Cech	b489e93d94	Config Array Syntax (#8204) ... * refactor util encryption library so it doesn't have to import log * add util.SplitString to handle space and/or comma-separated config lines * go fmt	8 years ago
Seuf	319b8d8fca	Configurable signout menu activation (#7968)	8 years ago
Torkel Ödegaard	4d4e165be7	links: updated links from grafana.net to grafana.com	8 years ago
Jacob Bednarz	90cbfacacf	Add `FromName` to SmtpSettings struct ... Updates the `SmtpSettings` struct to include a value for setting the name of the email sender.	8 years ago
bergquist	5dd961c0f5	settings: remove commented code	8 years ago
Torkel Ödegaard	40d39f8a3e	refactor(): renaming alerting hide ui option, #7318	8 years ago
smalik	9862c9ff40	feat(alerting): Show/hide alerting UI using configuration variable ... Use configuration variable "show_alerting_ui" to show/hide alerting UI	8 years ago
bergquist	06440ef57b	tech(dataproxy): moves cfg to [dataproxy]	8 years ago
Ricky Niemi	0b48e48e3d	Small whitespace fix on setting file	8 years ago
Ricky Niemi	269d16301a	Rename to audit logging to data proxy logging	8 years ago
Ricky Niemi	0fee7c863a	Gate data proxy audit logging behind audit_logging server setting	8 years ago
Mitsuhiro Tanda	7e4c101d02	S3 IAM support (#7058) ... * add s3 dependencly * rewrite image uploader by aws-sdk-go * improve backward compatibility of s3 image uploading * set default for expires option * remove acl and expires	8 years ago
Seuf	ae27c17c68	Auth Proxy improvements ... - adds the option to use ldap groups for authorization in combination with an auth proxy - adds an option to limit where auth proxy requests come from by configure a list of ip's - fixes a security issue, session could be reused	9 years ago
Torkel Ödegaard	88e1d56bc2	fix(logging): added extra logging when default config file is not found (ie homepath is not correct), fixes #6829	9 years ago
bergquist	ab2f109443	fix(config): error message for broken config file ... closes #6731	9 years ago
Torkel Ödegaard	ea5cb0d076	fix(server side rendering): Fixed address used when rendering panel via phantomjs and using non default http_addr config, fixes #6660	9 years ago
bergquist	5dea0fda51	fix(settings): remove nil pointer exception	9 years ago
Eric Uldall	658fc1a67a	added hosted domain suppport to google oauth login (#6372)	9 years ago
Carl Bergquist	7bdedff89c	feat(plugins): make sure windows data plugin path is absolute (#6264)	9 years ago
Dan Cech	6b16fcea52	Oauth2 Updates (#6226) ... * break out go and js build commands * support oauth providers that return errors via redirect * remove extra call to get grafana.net org membership * removed GitHub specifics from generic OAuth * readded ability to name generic source * revert to a backward-compatible state, refactor and clean up * streamline oauth user creation, make generic oauth support more generic	9 years ago
bergquist	04f417a423	feat(alerting): enabled by default. configurable elert engine ... closes #6210	9 years ago
Eric Perrino	d3b0905899	Added allow_sign_up setting to auth.ldap to be able to disable automatic user creation for LDAP logins (#6191)	9 years ago