grafana

Commit Graph

Author	SHA1	Message	Date
Alexander Zobnin	df11cdad62	Generic OAuth: customize login and id_token attributes (#26577 ) * OAuth: add login_attribute_path to generic oauth * OAuth: remove default client_secret values (able to use empty client_secret) * OAuth: allow to customize id_token attribute name * Docs: describe how login_attribute_path and id_token_attribute_name params work * Docs: review fixes * Docs: review fixes * Chore: fix go linter error * Tests: fix test code style	5 years ago
Josh Soref	7d08a8497a	Chore: fix spelling of GitHub (#26182 ) Co-authored-by: Diana Payton <52059945+oddlittlebird@users.noreply.github.com>	5 years ago
Marcus Efraimsson	460b01f1fe	Datasource: Make sure data proxy timeout applies to HTTP client (#25865 ) For backend data sources executing in the backend (not through data proxy) make sure that the timeout applies to cached HTTP client. Fixes #25863 Co-authored-by: Diana Payton <52059945+oddlittlebird@users.noreply.github.com>	5 years ago
Carl Bergquist	383aa21ab6	docs: removes invalid comment (#25883 )	5 years ago
Carl Bergquist	703f728c0c	Dashboards: Make path to default dashboard configurable (#25595 ) Closes #25463 Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com> Co-authored-by: Diana Payton <52059945+oddlittlebird@users.noreply.github.com>	5 years ago
Emil Tullstedt	80e9546cec	Settings: Add setting for hiding version number for anonymous users (#24919 ) * Settings: Add setting for hiding version number for anonymous users Fixes #12925 * Hide version string from footer when unavailable * Settings: Test frontend settings with hide version for anonymous users * Settings: Add hide version variable to frontend settings * Make AnonymousHideVersion non-global Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> * Settings: Improve test neighbor friendliness, reset state before and after * Settings: Use T.Cleanup Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com>	5 years ago
Josh Soref	ed92b41d47	Chore: spelling - misc (#24438 ) * Chore: spelling - misc * fix master merge	5 years ago
Carl Bergquist	328ea80cca	switches default value for security settings (#25175 ) closes #25163	5 years ago
thameezb	16297da298	Email Notifications: Add StartTLSPolicy config flag (#24574 )	5 years ago
Arve Knudsen	96ffcaa134	Plugins: Require signing of external back-end plugins (#24075 ) * PluginManager: Require signing of external plugins Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com> Co-authored-by: Diana Payton <52059945+oddlittlebird@users.noreply.github.com>	5 years ago
Marcus Efraimsson	76650e60e4	Image Rendering: New setting to control render request concurrency (#23950 ) Fixes #23806 Co-Authored-By: Torkel Ödegaard <torkel@grafana.com> Co-Authored-By: Arve Knudsen <arve.knudsen@gmail.com>	5 years ago
Marcus Efraimsson	854085dbc6	Dashboard: Enforce min dashboard refresh interval to 5 seconds per default (#23929 ) Fixes #22493	5 years ago
Marcus Efraimsson	871ad73414	Backend plugins: Renderer v2 plugin (#23625 ) grafana-plugin-model is legacy and is replaced by new backend plugins SDK and architecture. Renderer is not part of SDK and we want to keep it that way for now since it's highly unlikely there will be more than one kind of renderer plugin. So this PR adds support for renderer plugin v2. Also adds support sending a Device Scale Factor parameter to the plugin v2 remote rendering service and by that replaces #22474. Adds support sending a Headers parameter to the plugin v2 and remote rendering service which for now only include Accect-Language header (the user locale in browser when using Grafana), ref grafana/grafana-image-renderer#45. Fixes health check json details response. Adds image renderer plugin configuration settings in defaults.ini and sample.ini. Co-Authored-By: Arve Knudsen <arve.knudsen@gmail.com>	5 years ago
Alexander Zobnin	f023e7a399	SAML Role and Team sync (open source part) (#23391 ) * SAML: add default params for role and team sync * SAML: add org_mapping option * SAML: support allowed_organizations option * Chore: expose RedirectWithError from HTTPServer * Chore: return RedirectResponse (fix superfluous response.writeheader message) * HTTPServer: expose ValidateRedirectTo() and CookieOptionsFromCfg() * Config: move SAML section to the enterprise	5 years ago
Alexander Zobnin	7afdfd2ef4	Okta OAuth provider (team sync support) (#22972 ) * Okta OAuth support * Chore: fix linter error * Chore: move IsEmailAllowed to SocialBase * Chore: move IsSignupAllowed to SocialBase * Chore: review fixes * Okta: support allowed_groups * Okta: default config * Chore: move extractEmail() to OktaClaims struct * Chore: review fixes * generic_oauth_test: Handle error cases Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> * generic_oauth_test: Handle error cases Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> * Docs: Okta OAuth * Chore: don't return expected errors from searchJSONForAttr * Docs: role mapping * Chore: review fixes (searchJSONForAttr) * Docs: review fixes * Update docs/sources/auth/okta.md Co-Authored-By: Arve Knudsen <arve.knudsen@gmail.com> * Update docs/sources/auth/okta.md Co-Authored-By: Arve Knudsen <arve.knudsen@gmail.com> * Chore: log error if searchJSONForAttr failed * Docs: add Okta login link * Docs: review fixes * Docs: add reference to the org roles Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com>	5 years ago
rtrompier	474dac1501	OAuth : Introduce new setting for configuring max age of OAuth state cookie (#23195 ) * Cookie : Increase duration to avoid error When using oauth2 authentication with multifactor, the 60s delay may be too short * Introduce new setting for OAuth state cookie max age Co-authored-by: Sofia Papagiannaki <sofia@grafana.com> Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com>	5 years ago
lfroment	72628c8ea0	Dashboard: Adds support for a global minimum dashboard refresh interval (#19416 ) This feature would provide a way for administrators to limit the minimum dashboard refresh interval globally. Filters out the refresh intervals available in the time picker that are lower than the set minimum refresh interval in the configuration .ini file Adds the minimum refresh interval as available in the time picker. If the user tries to enter a refresh interval that is lower than the minimum in the URL, defaults to the minimum interval. When trying to update the JSON via the API, rejects the update if the dashboard's refresh interval is lower than the minimum. When trying to update a dashboard via provisioning having a lower refresh interval than the minimum, defaults to the minimum interval and logs a warning. Fixes #3356 Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com>	5 years ago
Alexander Zobnin	f2fc7aa3aa	Azure OAuth: enable teamsync (#22160 ) * Azure OAuth: extract groups from token for teamsync * Docs: changed some headers * Azure OAuth: fix tests * Azure OAuth: fix linter error (simplify) * Azure OAuth: add allowed_groups option * Azure OAuth: docs for team sync and allowed_groups * Azure OAuth: tests for allowed_groups * Update docs/sources/auth/azuread.md Co-Authored-By: Leonard Gram <leo@xlson.com> Co-authored-by: Leonard Gram <leo@xlson.com>	5 years ago
twendt	ff6a082e23	Auth: Azure AD OAuth (#20030 ) * Implement Azure AD oauth * Use go-jose and cleanup * Update go-jose in go.mod * cleanup * Add unit tests * Fix scopes * Add documentation page * Improve documentation * Convert extract_role into function. * Do not use upn and replace unique_name with preferred_username * Configure login button * Use official microsoft icon and color from branding guideline. * Add Azure AD config section in sample.ini.	5 years ago
Marcus Efraimsson	a1579283a6	Add disabled option for cookie samesite attribute (#21472 ) Breaking change: If disabled the cookie samesite cookie attribute will not be set, but if none the attribute will be set and is a breaking change compared to before where none did not render the attribute. This was due to a known issue in Safari. Co-Authored-By: Arve Knudsen <arve.knudsen@gmail.com> Co-Authored-By: Diana Payton <52059945+oddlittlebird@users.noreply.github.com> Fixes #19847	5 years ago
Sofia Papagiannaki	d135f1229d	Alerting: new min_interval_seconds options to enforce a minimum eval frequency (#21188 ) * add min_interval_seconds setting to alerting config It will let operator enforce a minimum time for the scheduler to enqueue evaluations * Introduce UI modifications * Update docs Co-authored-by: Martin <uepoch@users.noreply.github.com>	5 years ago
Paul Emmerich	42032f6c03	ImgUploader: add support for non-amazon S3 (#20354 ) * imguploader: add support for non-Amazon S3 endpoints and forcing of path-style S3 addressing fixes #11240 Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com>	5 years ago
Alexander Morozov	06bf7e8ef1	OAuth: Removes send_client_credentials_via_post setting (#20044 ) Removes send_client_credentials_via_post oauth setting and use auto-detect mechanism instead. By these changes also fixes statichcheck errors Ref #8968	6 years ago
Sofia Papagiannaki	21fed8c5f1	OAuth: Add missing setting from defaults.ini (#20691 )	6 years ago
Marcus Efraimsson	4a2104a1de	Chore: Sync defaults.ini with sample.ini (#20645 ) Make sure that configuration sections/keys from defaults.ini is mirrored in the sample.ini. Fixes #20622	6 years ago
Shavonn Brown	3e5abe7c21	Admin: Adds setting to disable creating initial admin user (#19505 ) Adds a new setting disable_admin_user and when true the default admin user will not be created when Grafana starts for the first time (or no users exists in the system). Closes #19038	6 years ago
Torkel Ödegaard	be2bf1a297	AuthProxy: Can now login with auth proxy and get a login token (#20175 ) * AuthProxy: Can now login with auth proxy and get a login token * added unit tests * renamed setting and updated docs * AuthProxy: minor tweak * Fixed tests and namings * spellfix * fix * remove unused setting, probably from merge conflict * fix	6 years ago
Jon Gyllenswärd	53f8088316	Auth Proxy: replace ini setting ldap_sync_ttl with sync_ttl (#20191 ) * Renamed ttl config in code to be more consistent with behaviour * Introduced new setting `sync_ttl` in .ini file * Keeping the old setting `ldap_sync_ttl` in the .ini file as fallback and compatibility.	6 years ago
Martin Reinhardt	7a3d1c0e4b	OAuth: Generic OAuth role mapping support (#17149 ) Adds support for Generic OAuth role mapping. A new configuration setting for generic oauth is added named role_attribute_path which accepts a JMESPath expression. Only Grafana roles named Viewer, Editor or Admin are accepted. Closes #9766	6 years ago
Marcus Efraimsson	75bf31b5c7	docs: image rendering (#19183 ) Adds a new "Image Rendering" page in Administration section. Updates configuration page with rendering settings and also default.ini and sample.ini. Updates and cleanup pages that referencing image rendering. Ref #18914	6 years ago
Marcus Efraimsson	80592e3361	Metrics: Adds setting for turning off total stats metrics (#19142 ) Don't update total stats metrics if reporting is disabled. New setting disable_total_stats for turning off update of total stats (stat_totals_*) metrics. Ref #19137	6 years ago
Ryan McKinley	7d32caeac2	Transformers: configure result transformations after query(alpha) (#18740 )	6 years ago
Marcus Efraimsson	964c2e722f	Snapshot: Fix http api (#18830 ) (cherry picked from commit `be2e2330f5`)	6 years ago
Bob Shannon	056dbc7012	OAuth: Support JMES path lookup when retrieving user email (#14683 ) Add support for fetching e-mail with JMES path Signed-off-by: Bob Shannon <bobs@dropbox.com>	6 years ago
kay delaney	fb0cec5591	Backend: Adds support for HTTP/2 (#18358 ) * Backend: Adds support for HTTP/2 * Adds mozilla recommended ciphers * Updates sample.ini and config documentation	6 years ago
Kyle Brandt	f689b60426	remotecache: support SSL with redis (#18511 ) * update go-redis lib from v2 -> v5 * add ssl option to the redis connection string fixes #18498	6 years ago
gotjosh	87a794fe0a	Docs: Update documentation with new SAML features (#18163 ) * Update defaults.ini and sample.ini with the SAML assertion mapping fields * Document Grafana's ability to map ACS attributes while a Grafana user is created	6 years ago
Alexander Zobnin	e47546d529	Docs: SAML idp_metadata_url option (#18181 )	6 years ago
gotjosh	d006f7c916	Docs: SAML (#18069 ) * docs: Link to SAML docs and document configuration options - Document configuration options `defaults.ini` and `sample.ini` - Add the SAML documentation - Link to the SAML documentation from "what's new in 6.3"	6 years ago
Oleg Gaidarenko	e2cf7c9698	LDAP: finishing touches (#17945 ) * LDAP:Docs: `active_sync_enabled` setting Mention `active_sync_enabled` setting and enable it by default * LDAP: move "disableExternalUser" method Idea behind new design of the LDAP module is to minimise conflation between other parts of the system, so it would decoupled as much as possible from stuff like database, HTTP transport and etc. Following "Do One Thing and Do It Well" Unix philosophy principal, other things could be better fitted on the consumer side of things. Which what this commit trying to archive * LDAP: correct user/admin binding The second binding was not happening, so if the admin login/password in LDAP configuration was correct, anyone could had login as anyone using incorrect password	6 years ago
gotjosh	e6b8a1529b	SAML: Configuration defaults, examples and dependencies (#17954 ) * Add SAML configuration options * Add crewjam/saml as a depdency Needed as part of the enterprise SAML integration. * Vendor github.com/stretchr/testify/require The package require implements the same assertions as the `assert` package but stops test execution when a test fails.	6 years ago
Sofia Papagiannaki	dc9ec7dc91	Auth: Allow expiration of API keys (#17678 ) * Modify backend to allow expiration of API Keys * Add middleware test for expired api keys * Modify frontend to enable expiration of API Keys * Fix frontend tests * Fix migration and add index for `expires` field * Add api key tests for database access * Substitude time.Now() by a mock for test usage * Front-end modifications * Change input label to `Time to live` * Change input behavior to comply with the other similar * Add tooltip * Modify AddApiKey api call response Expiration should be time.Time instead of string Present expiration date in the selected timezone * Use kbn for transforming intervals to seconds * Use `assert` library for tests * Frontend fixes Add checks for empty/undefined/null values * Change expires column from datetime to integer * Restrict api key duration input It should be interval not number * AddApiKey must complain if SecondsToLive is negative * Declare ErrInvalidApiKeyExpiration * Move configuration to auth section * Update docs * Eliminate alias for models in modified files * Omit expiration from api response if empty * Eliminate Goconvey from test file * Fix test Do not sleep, use mocked timeNow() instead * Remove index for expires from api_key table The index should be anyway on both org_id and expires fields. However this commit eliminates completely the index for now since not many rows are expected to be in this table. * Use getTimeZone function * Minor change in api key listing The frontend should display a message instead of empty string if the key does not expire.	6 years ago
Oleg Gaidarenko	31d2905490	LDAP:Docs: add information on LDAP sync feature and update LDAP sync default (#17689 ) * Docs: for LDAP active sync feature	6 years ago
Sergey Goppikov	dda8b731e8	Settings: Fix typo in defaults.ini (#17707 ) `backround` -> `backGround`	6 years ago
Kyle Brandt	49f0f0e89e	config: fix connstr for remote_cache (#17675 ) fixes #17643 and adds test to check for commented out lines (but will only catch `;`, not `#`).	6 years ago
Kyle Brandt	599514ad68	middleware: add security related HTTP(S) response headers (#17522 ) * x_xss_protection * strict_transport_security (HSTS) * x_content_type_options these are currently defaulted to false (off) until the next minor release. fixes #17509	6 years ago
Kyle Brandt	c09fe3c3b4	remote_cache: Fix redis (#17483 ) * wip: fix remote cache for redis connstr parsing and non-negative expires for #17377 TODO: finish parse, check zero case, find out why negative duration in the first place * finish parse. Still TODO, find out negative value, and decide if would be better to make database specific entries in the .ini file * update ini files * remove accidental uncomment in defaults.ini * auth_proxy: expiration non-negative so expiration is not in the past * fix test, revert neg in redis * review: use errutil	6 years ago
Jonathan Rockway	02975256d1	Tracing: allow propagation with Zipkin headers (#17009 ) Closes #17006	6 years ago
Abhilash Gnan	04d473b3e5	HTTP Server: Serve Grafana with a custom URL path prefix (#17048 ) Adds a new [server] setting `serve_from_sub_path`. By enabling this setting and using a subpath in `root_url` setting, e.g. `root_url = http://localhost:3000/grafana`, Grafana will be accessible on `http://localhost:3000/grafana`. By default it is set to `false` for compatibility reasons. Closes #16623	6 years ago
Marcus Efraimsson	1c1427520d	Security: Add new setting allow_embedding (#16853 ) When allow_embedding is false (default) the Grafana backend will set the http header `X-Frame-Options: deny` in all responses to non-static content which will instruct browser to not allow Grafana to be embedded in `<frame>`, `<iframe>`, `<embed>` or `<object>`. Closes #14189	6 years ago

... 3 4 5 6 7 ...

515 Commits (5155455c55c2bf4b3848f03a7eecebd4f4e4ba9e)