143 Commits (6dcf974543f14f58f95ff837ded6dd8a6efbdc0f)

Author	SHA1	Message	Date
Charandas	c210617735	K8s: use contexthandler in standalone handler chain (#90102)	11 months ago
Karl Persson	f18da6f4dc	User+team: remove startup migration for uid (#89953) ... * Remove migration that is performed on startup	11 months ago
Kristin Laemmert	9a3477dd11	Chore: removing (more) redundant transactions (#89373) ... * remove redundant transactions from single-statement sql methods	11 months ago
Rajguru	1b2f110664	Users: Add config option to control how often last_seen is updated (#88721) ... Users: Add config option to control how often last_seen is updated Co-authored-by: Karl Persson <kalle.persson92@gmail.com>	11 months ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116)	12 months ago
Eric Leijonmarck	c85d10d6c3	Auth: Removal of conflicting users check upon creation (#89045) ... fix: removal of check for conflicting users	12 months ago
Karl Persson	d3b06f09ae	Users: remove unused store function (#88784)	12 months ago
Carl Bergquist	6c79f63c04	Auth: Pass ctx when updating last seen (#88496) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	1 year ago
Kristin Laemmert	876ed9bf0b	chore: decrease frequency of updating last_seen (#88461)	1 year ago
Carl Bergquist	0e6464fc96	Don't use transaction for updating last seen for an user. (#88426) ... dont use transaction for updating last seen Signed-off-by: bergquist <carl.bergquist@gmail.com>	1 year ago
Kristin Laemmert	16b1e285ea	Chore: Use cache for all signed in user lookups (#88133) ... * GetSignedInUser unexported (renamed to getSignedInUser) * GetSignedInUserWithCacheCtx renamed to GetSignedInUser * added a check for a nil cacheservice (as defensive programming / test convenience)	1 year ago
Ieva	da1a99d729	Team: Add an endpoint for bulk team membership updates (#87441) ... * add an endpoint for bulk team membership updates * update comment * schema gen * test fix * add swagger parameter definition	1 year ago
Karl Persson	9977258d04	AuthN: Set uid during authentication (#87797) ... * Identity: Remove GetNamespacedUID and use GetUID instead * Authn: Set uid for users and service accounts	1 year ago
Karl Persson	be5ced4287	Identity: Use typed version of namespace id (#87257) ... * Remove different constructors and only use NewNamespaceID * AdminUser: check typed namespace id * Identity: Add convinient function to parse valid user id when type is either user or service account * Annotations: Use typed namespace id instead	1 year ago
Dan Cech	41bee274fd	Chore: Fix error handling in postDashboard, remove UserDisplayDTO, fix live redis client initialization (#87206) ... * clean up error handling in postDashboard and remove UserDisplayDTO * replace GetUserUID with GetUID and GetNamespacedUID, enforce namespace constant type * lint fix * lint fix * more lint fixes	1 year ago
Karl Persson	d8fbbdefea	Identity: Use typed namespace id (#87121) ... * Use typed namespace id	1 year ago
Karl Persson	a2cba3d0b5	User: Add tracing (#87028) ... * Inject tracer in tests * Annotate with traces Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	1 year ago
Misi	1cb3f332a1	Chore: Remove extra sql select from the Insert function of userimpl.store (#87060) ... Remove getAnyUserType	1 year ago
Eric Leijonmarck	8a1f43a65d	User: Remove the lowercasing in the query for login conflict (#87032) ... * refactor: remove the lowercasing in the query for login conflict * refactor: move function into the closure gs	1 year ago
Karl Persson	c4cfee8d96	User: support setting org and help flags though update function (#86535) ... * User: Support setting active org through update function * User: add support to update help flags through update function	1 year ago
Eric Leijonmarck	e394e16073	Auth: Force lowercase login/email for users (#86359) ... * [WIP]: Force lowercase login/email for user CRUD * warn and remove use of userCaseInsensitiveLogin check * remove log warning * reimplementation of the caseinsensitive * need to decide if we want the conflict check or not * remvoved the tests for conflict user by getEmail, getLogin * added tests for user lowercase migration * wip: emails next * tests for email lowercasing * review comments * optimized login and email lookup before migrating	1 year ago
Serge Zaitsev	522a98c126	Chore: Make Cfg field private in SQLStore (#85593) ... * make cfg private in sqlstore * fix db init in tests * fix case * fix folder test init * fix imports * make another Cfg private * remove another Cfg * remove unused variable * use store cfg, it has side-effects * fix mutated cfg in tests	1 year ago
Karl Persson	0fa983ad8e	AuthN: Use typed namespace id inside authn package (#86048) ... * authn: Use typed namespace id inside package	1 year ago
Karl Persson	1a6777cb93	User: use update function for password updates (#86419) ... * Update password through Update function instead * Remove duplicated to lower * Refactor password code	1 year ago
Eric Leijonmarck	9c1ef8b16e	Auth: Remove caseinsensitive check on update user (#86286) ... * Removal: case insensitive check on update * refactor and removal of test for duplicate user * refactor to still shadow user variable	1 year ago
Karl Persson	0f06120b56	User: Clean up update functions (#86341) ... * User: remove unused function * User: Remove UpdatePermissions and support IsGrafanaAdmin flag in Update function instead * User: Remove Disable function and use Update instead	1 year ago
Karl Persson	8520892923	User: Fix GetByID (#86282) ... * Auth: Remove unused lookup param * Remove case sensitive lookup for GetByID	1 year ago
Karl Persson	895222725c	Session: set authID and authenticatedBy (#85806) ... * Authn: Resolve authenticate by and auth id when fethcing signed in user * Change logout client interface to only take Requester interface * Session: Fetch external auth info when authenticating sessions * Use authenticated by from identity * Move call to get auth-info into session client and use GetAuthenticatedBy in various places	1 year ago
Karl Persson	ba41954854	Email: trigger email verification flow (#85587) ... * Add email and email_verified to id token if identity is a user * Add endpoint to trigger email verification for user * Add function to clear stored id tokens and use it when email verification is completed	1 year ago
Jo	5340a6e548	Auth: Extended JWT client for OBO and Service Authentication (#83814) ... * reenable ext-jwt-client * fixup settings struct * add user and service auth * lint up * add user auth to grafana ext * fixes * Populate token permissions Co-authored-by: jguer <joao.guerreiro@grafana.com> * fix tests * fix lint * small prealloc * small prealloc * use special namespace for access policies * fix access policy auth * fix tests * fix uncalled settings expander * add feature toggle * small feedback fixes * rename entitlements to permissions * add authlibn * allow viewing the signed in user info for non user namespace * fix invalid namespacedID * use authlib as verifier for tokens * Update pkg/services/authn/clients/ext_jwt.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * Update pkg/services/authn/clients/ext_jwt_test.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * fix parameter names * change asserts to normal package * add rule for assert * fix ownerships * Local diff * test and lint * Fix test * Fix ac test * Fix pluginproxy test * Revert testdata changes * Force revert on test data --------- Co-authored-by: gamab <gabriel.mabille@grafana.com> Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	1 year ago
Karl Persson	73e426b081	User: email verification completion (#85259) ... * TempUser: Include InvitedById in TempUserDTO * Extract email verfication completion flow to service	1 year ago
Karl Persson	152cb47692	AuthN: Add IsAuthenticatedBy to identity interface and replace checks (#85262) ... Add IsAuthenticatedBy to identity interface and replace checks	1 year ago
Eric Leijonmarck	2f7fd729ef	Auth: Enable case insensitive logins/emails by default (#84840) ... * wip * wip * wip * wip postgres tests	1 year ago
Karl Persson	d4e802dd47	Authn: Add function to resolve identity from org and namespace id (#84555) ... * Add function to get the namespaced id * Add function to resolve an identity through authn.Service from org and namespace id * Switch to resolve identity for re-authenticate in another org	1 year ago
Karl Persson	8d9521fb6d	Refactor: Email verification (#84393) ... * Update template names * Add verifier that we can use to start verify process * Use userVerifier when verifying email on update * Add tests --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	1 year ago
Misi	63f1c30313	Auth: Set the default org after User login (#83918) ... * poc * add logger, skip hook when user is not assigned to default org * Add tests, move to hook folder * docs * Skip for OrgId < 1 * Address feedback * Update docs/sources/setup-grafana/configure-grafana/_index.md * lint * Move the hook to org_sync.go * Update pkg/services/authn/authnimpl/sync/org_sync.go * Handle the case when GetUserOrgList returns error --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: Karl Persson <kalle.persson@grafana.com>	1 year ago
linoman	a7fbe3c6dc	Password Policy: Update frontend facing messages (#83227) ... * update tests * update error messages	1 year ago
Xavi Lacasa	46c26bbd0b	Auth: Fix email verification bypass when using basic authentication (#82914)	1 year ago
linoman	ac84069071	Password policy (#82268) ... * add password service interface * add password service implementation * add tests for password service * add password service wiring * add feature toggle * Rework from service interface to static function * Replace previous password validations * Add codeowners to password service * add error logs * update config files --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	1 year ago
Karl Persson	1315c67c8b	Team/User: UID migrations (#82298) ... * Add user uid migration to run on every startup to protect against empty values in a upgrade downgrade scenario * Add team uid migration to run on every startup to protect against empty values in a upgrade downgrade scenario * Run team uid migration	1 year ago
Dan Cech	790e1feb93	Chore: Update test database initialization (#81673) ... * streamline initialization of test databases, support on-disk sqlite test db * clean up test databases * introduce testsuite helper * use testsuite everywhere we use a test db * update documentation * improve error handling * disable entity integration test until we can figure out locking error	1 year ago
Ryan McKinley	9c9e5e68c8	User: Add uid colum to user table (#81615)	1 year ago
Gabriel MABILLE	3df0611f81	RBAC: Fix authorize in org (#81552) ... * RBAC: Fix authorize in org * Implement option 2 * Fix typo * Fix alerting test * Add test to cover the not member case	1 year ago
Dan Cech	318f51eaee	Chore: Remove unused CacheService dependency from sqlstore (#78507) ... remove unused CacheService dependency from sqlstore	1 year ago
Jo	40c8e2fc75	Live: Move empty orgRole safety valve (#78531) ... move empty orgRole safety valve	2 years ago
Jo	259ecb1793	AuthZ: Improve team ID fetching for signedInUser (#78378) ... * improve team ID fetching for signedInUser * remove inner join * rename func * nit: remove extra params * nit: spacing and wrapping	2 years ago
Ieva	2c73f15839	Revert "Revert "RBAC: remove dashboard ACL logic from dash store, service #78130" (#78203) ... Revert "Revert "RBAC: remove dashboard ACL logic from dash store, service #78130 (#78198)" This reverts commit 8057b9298d.	2 years ago
Eric Leijonmarck	8057b9298d	Revert "RBAC: remove dashboard ACL logic from dash store, service #78130 (#78198) ... Revert "RBAC: remove dashboard ACL logic from dash store and service (#78130)" This reverts commit dd54931147.	2 years ago
Ieva	dd54931147	RBAC: remove dashboard ACL logic from dash store and service (#78130) ... remove dashboard ACL logic from dash store and service	2 years ago
Karl Persson	87eba34745	User: remove empty email / username check from update in service (#77347) ... User: remove empty email / username check from update in service	2 years ago