29 Commits (61eb837dd6d386ea1cb45cc794ff47f785105b42)

Author	SHA1	Message	Date
Karl Persson	16fda6f686	Authz: Setup access claims for service identity (#100986) ... * Setup access claims for service identity and add them to identityes without any claims	3 months ago
Ryan McKinley	c654a580f7	Authz: Add builtin provisioning access policy (#101000)	3 months ago
Gabriel MABILLE	90eb499b78	PublicDashboards: Fetch dashboard as Grafana (#100344)	3 months ago
Karl Persson	e05413dcc4	Dashboards+Folders: Ensure the service identity is used for resolvers (#100128) ... * Dashboards+Folders: Ensure the service identity is used for dashboard and folder resolvers * Add convinient function to call closure with service context	3 months ago
Karl Persson	39d94eabcd	Auth: Fix function name (#100122) ... Fix spelling	4 months ago
maicon	20f02ec12f	Unistore: refactor provisioning to work with folder service (#99473)	4 months ago
Misi	437b7a565d	Auth: Add access token to in-proc communication and ServiceIdentity (#98926) ... Use fake access token for in-proc grpc and add ServiceIdentity --------- Co-authored-by: gamab <gabriel.mabille@grafana.com> Co-authored-by: Karl Persson <23356117+kalleep@users.noreply.github.com>	4 months ago
Ryan McKinley	680e6bc1f8	Authlib: Use types package rather than claims (#99243)	4 months ago
Karl Persson	3a17d0c927	IAM: align AuthInfo interface (#97228) ... * Update to use updated interface	6 months ago
Karl Persson	76f052e8de	Requester: Remove duplicated function (#97038) ... * Remove duplicated function * Remove GetDisplayName from interface * Use GetName	6 months ago
Karl Persson	3990637af9	IAM: remove duplicated functions (#96989) ... * Remove duplicated function and use the one provided by claims package	6 months ago
Karl Persson	8d74296b6c	Authn: Always set namespace (#96230) ... * Rename from AllowedKubernetesNamespace to Namespace * Use a sync hook to always set namespace for Identity. * format * Don't set uid when authenticating as user	6 months ago
Claudiu Dragalina-Paraipan	a8b07b0c81	[authn] use authlib client+interceptors for in-proc mode (#93124) ... * Add authlib gRPC authenticators for in-proc mode * implement `StaticRequester` signing in the unified resource client - [x] when the `claims.AuthInfo` value type is `identity.StaticRequester`, and there's no ID token set, create an internal token and sign it with symmetrical key. This is a workaround for `go-jose` not offering the possibility to create an unsigned token. - [x] update `IDClaimsWrapper` to support the scenario above - [x] Switch to using `claims.From()` in `dashboardSqlAccess.SaveDashboard()` --------- Co-authored-by: gamab <gabriel.mabille@grafana.com>	8 months ago
Charandas	af2e79aa83	K8s: namespace mapper should use authlib's util (#92332)	9 months ago
Ryan McKinley	2e60f28044	Auth: remove id token flag (#92209)	9 months ago
Karl Persson	5105fb7f3a	Identity: remove GetIDClaims (#91901) ... remove GetIDClaims	9 months ago
Karl Persson	8d36111420	IDForwarding: Set identity type and uid (#91830) ... * Set identity type and uid * Set uid without prefix * Update authlib version * Update to new claim name	9 months ago
Karl Persson	8bcd9c2594	Identity: Remove typed id (#91801) ... * Refactor identity struct to store type in separate field * Update ResolveIdentity to take string representation of typedID * Add IsIdentityType to requester interface * Use IsIdentityType from interface * Remove usage of TypedID * Remote typedID struct * fix GetInternalID	9 months ago
Ryan McKinley	21d4a4f49e	Auth: use IdentityType from authlib (#91763)	9 months ago
Ryan McKinley	243c0935fc	Auth: Use claims.AuthInfo in requester (#91739)	9 months ago
Karl Persson	bcfb66b416	Identity: remove GetTypedID (#91745)	9 months ago
Claudiu Dragalina-Paraipan	e2435f92f1	[authn]: add GetIDClaims() to Requester (#91387) ... * authn: add GetIDClaims() to Requester Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * authn: update StaticRequester Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * update auth/idtest/mock Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * Fix test Co-authored-by: Claudiu Dragalina-Paraipan <claudiu.dragalina@grafana.com> --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> Co-authored-by: gamab <gabriel.mabille@grafana.com>	10 months ago
Ryan McKinley	728150bdbd	Identity: extend k8s user.Info (#90937)	10 months ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567)	10 months ago
Ryan McKinley	f409f8c169	K8s/Dashboards: Implement dashboards as StorageBackend (#90295)	10 months ago
Charandas	3eef9b3397	Requester/authn: check the interface for nil value to avoid false positives (#90210)	11 months ago
Charandas	c210617735	K8s: use contexthandler in standalone handler chain (#90102)	11 months ago
Ryan McKinley	2173429ce2	Identity: Add static requester struct (#89190)	11 months ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116)	11 months ago