175 Commits (7345ba35a1c7e9948b3da9e01429882fdeed0175)

Author	SHA1	Message	Date
Peter Štibraný	54b8dde1e1	services/user: Fix userimpl tests when running on Spanner. (#103715) ... Fix userimpl tests when running on Spanner.	1 month ago
Will Assis	51825cfffe	unified-storage: Reduce calls to the user service (#102934) ... * Create ListByIdOrUID in user service * create UnstructuredToLegacyFolderList * update GetFolders to use list parser * update GetDescendants to use list parser * update UnstructuredToLegacyFolder to also make a single call to the user service --------- Co-authored-by: Stephanie Hingtgen <stephanie.hingtgen@grafana.com>	2 months ago
linoman	874e98a488	SCIM: Add a distinctive label for externally provisioned users (#102701) ... * Add json mapping for user.isProvisioned * Retrieve the isProvisioned value from database * Add a Provisioned label to pages that list users * Update swagger definitions * Add changes to User Admin pages	2 months ago
linoman	cb532cafef	SCIM: Validate provisioned users (#102099) ... * Validate authID when user is provisioned * Add new `user_unique_id` to `user_auth` table * Validate provisioned user with saml assertion * Rework `ExternalUID` * Validate for ExternalUID only * Enhance verbosity * Move ExternalUID to saml config * Rename db variable for externalUID * Add verbosity to debug ExternalUID * Assign new error for ExternalUID mismatch * Add `GetByLoginFn` * Add new configuration to saml tests * add validation for empty externalUID	2 months ago
Peter Štibraný	f3df64b7f4	Pass BOOL values as real types (int/bool) instead of strings to SQL parameters. (#101961) ... * Pass BOOL values as real types (int/bool) instead of strings to SQL parameters. Fixes following integration tests when running with Spanner: * TestIntegrationDataAccess * GetDataSourcesByType/Get_prunable_data_sources * TestIntegrationUserAuthToken: * expires_correctly * can_properly_rotate_tokens * keeps_prev_token_valid_for_1_minute_after_it_is_confirmed * Fix more places where "true" or "false" string was passed as query parameter instead of bool value. * Removed unit test because it brought unwanted dependencies on xorm into multiple modules.	2 months ago
linoman	c1c9ea6964	SCIM: Assign requester org to new provisioned users (#101548) ... Assign requester org to new provisioned users Co-authored-by: Mihai Doarna <mihai.doarna@grafana.com>	3 months ago
linoman	b7a0aeeb0d	SCIM: Disable auto assign organization if the user has been provisioned (#101307) ... * Add isProvisioned field to model * Add new isProvisioned column to migration * Disable auto assignment to organization if the user is provisioned * add annotation to user model * add annotation to user models * Remove IsProvisioned field from Identity * Move new field assignenment and add default value * Update annotations for user query results * Remove isProvisioned from identity * Add new column to test * Resolve user from identity at SyncOrgHook	3 months ago
Karl Persson	c1d9d4d15a	User: Handle unique constraints errors (#101274) ... * Handle unique constraints errors	3 months ago
Misi	ee0a1391df	Auth: Add OrgRole to ID token (#100383) ... * Changes for Users and ServiceAccounts * Align tests	3 months ago
Ryan McKinley	680e6bc1f8	Authlib: Use types package rather than claims (#99243)	4 months ago
Karl Persson	3a17d0c927	IAM: align AuthInfo interface (#97228) ... * Update to use updated interface	6 months ago
Karl Persson	76f052e8de	Requester: Remove duplicated function (#97038) ... * Remove duplicated function * Remove GetDisplayName from interface * Use GetName	6 months ago
Karl Persson	3990637af9	IAM: remove duplicated functions (#96989) ... * Remove duplicated function and use the one provided by claims package	6 months ago
Charandas	9223cd8f59	Cloud Aggregation: make it work for users with no name (#96509)	6 months ago
Karl Persson	8d74296b6c	Authn: Always set namespace (#96230) ... * Rename from AllowedKubernetesNamespace to Namespace * Use a sync hook to always set namespace for Identity. * format * Don't set uid when authenticating as user	6 months ago
Jo	4452d0932a	Users: Fix potential panics on UID translation (#95794) ... fix potential panics on UID translation	7 months ago
Jo	90d2f4659e	Users: Allow specifying user UIDs in params (#95424) ... * add user ID API translation * add uid to user frontend * use users' UIDs in admin pages * fix ldapSync page * use global user search for user by UID * remove active org filtering * remove orgID params	7 months ago
Jeff Levin	a21a232a8e	Revert read replica POC (#93551) ... * Revert "chore: add replDB to team service (#91799)" This reverts commit c6ae2d7999. * Revert "experiment: use read replica for Get and Find Dashboards (#91706)" This reverts commit 54177ca619. * Revert "QuotaService: refactor to use ReplDB for Get queries (#91333)" This reverts commit 299c142f6a. * Revert "refactor replCfg to look more like plugins/plugin config (#91142)" This reverts commit ac0b4bb34d. * Revert "chore (replstore): fix registration with multiple sql drivers, again (#90990)" This reverts commit daedb358dd. * Revert "Chore (sqlstore): add validation and testing for repl config (#90683)" This reverts commit af19f039b6. * Revert "ReplStore: Add support for round robin load balancing between multiple read replicas (#90530)" This reverts commit 27b52b1507. * Revert "DashboardStore: Use ReplDB and get dashboard quotas from the ReadReplica (#90235)" This reverts commit 8a6107cd35. * Revert "accesscontrol service read replica (#89963)" This reverts commit 77a4869fca. * Revert "Fix: add mapping for the new mysqlRepl driver (#89551)" This reverts commit ab5a079bcc. * Revert "fix: sql instrumentation dual registration error (#89508)" This reverts commit d988f5c3b0. * Revert "Experimental Feature Toggle: databaseReadReplica (#89232)" This reverts commit 50244ed4a1.	8 months ago
Ryan McKinley	2e60f28044	Auth: remove id token flag (#92209)	9 months ago
Ryan McKinley	a0cd89860e	Identity: Add endpoint to get display info for an identifier (#91828)	9 months ago
Karl Persson	5105fb7f3a	Identity: remove GetIDClaims (#91901) ... remove GetIDClaims	9 months ago
Karl Persson	8bcd9c2594	Identity: Remove typed id (#91801) ... * Refactor identity struct to store type in separate field * Update ResolveIdentity to take string representation of typedID * Add IsIdentityType to requester interface * Use IsIdentityType from interface * Remove usage of TypedID * Remote typedID struct * fix GetInternalID	9 months ago
Ryan McKinley	21d4a4f49e	Auth: use IdentityType from authlib (#91763)	9 months ago
Ryan McKinley	243c0935fc	Auth: Use claims.AuthInfo in requester (#91739)	9 months ago
Karl Persson	bcfb66b416	Identity: remove GetTypedID (#91745)	9 months ago
Kristin Laemmert	299c142f6a	QuotaService: refactor to use ReplDB for Get queries (#91333) ... * Feature (quota service): Use ReplDB for quota service Gets This adds the replDB to the quota service, as well as some more test helper functions to simplify updating tests. My intent is that the helper functions can be removed when this is fully rolled out (or not) and we're consistently using the ReplDB interface (or not!) * test updates	10 months ago
Claudiu Dragalina-Paraipan	e2435f92f1	[authn]: add GetIDClaims() to Requester (#91387) ... * authn: add GetIDClaims() to Requester Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * authn: update StaticRequester Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * update auth/idtest/mock Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * Fix test Co-authored-by: Claudiu Dragalina-Paraipan <claudiu.dragalina@grafana.com> --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> Co-authored-by: gamab <gabriel.mabille@grafana.com>	10 months ago
Charandas	a3d3f9a1e4	Revert "Identity: Remove id token from extra info (#91169)" (#91350) ... This reverts commit 10170cb839.	10 months ago
Ryan McKinley	10170cb839	Identity: Remove id token from extra info (#91169)	10 months ago
Ryan McKinley	728150bdbd	Identity: extend k8s user.Info (#90937)	10 months ago
Ryan McKinley	ec6c6bd6c3	Identity: Add read-only identity apiserver (#90418)	10 months ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567)	10 months ago
Charandas	c210617735	K8s: use contexthandler in standalone handler chain (#90102)	11 months ago
Karl Persson	f18da6f4dc	User+team: remove startup migration for uid (#89953) ... * Remove migration that is performed on startup	11 months ago
Kristin Laemmert	9a3477dd11	Chore: removing (more) redundant transactions (#89373) ... * remove redundant transactions from single-statement sql methods	11 months ago
Rajguru	1b2f110664	Users: Add config option to control how often last_seen is updated (#88721) ... Users: Add config option to control how often last_seen is updated Co-authored-by: Karl Persson <kalle.persson92@gmail.com>	11 months ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116)	11 months ago
Eric Leijonmarck	c85d10d6c3	Auth: Removal of conflicting users check upon creation (#89045) ... fix: removal of check for conflicting users	11 months ago
Karl Persson	d3b06f09ae	Users: remove unused store function (#88784)	12 months ago
Carl Bergquist	6c79f63c04	Auth: Pass ctx when updating last seen (#88496) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	12 months ago
Kristin Laemmert	876ed9bf0b	chore: decrease frequency of updating last_seen (#88461)	12 months ago
Carl Bergquist	0e6464fc96	Don't use transaction for updating last seen for an user. (#88426) ... dont use transaction for updating last seen Signed-off-by: bergquist <carl.bergquist@gmail.com>	12 months ago
Kristin Laemmert	16b1e285ea	Chore: Use cache for all signed in user lookups (#88133) ... * GetSignedInUser unexported (renamed to getSignedInUser) * GetSignedInUserWithCacheCtx renamed to GetSignedInUser * added a check for a nil cacheservice (as defensive programming / test convenience)	1 year ago
Ieva	da1a99d729	Team: Add an endpoint for bulk team membership updates (#87441) ... * add an endpoint for bulk team membership updates * update comment * schema gen * test fix * add swagger parameter definition	1 year ago
Karl Persson	9977258d04	AuthN: Set uid during authentication (#87797) ... * Identity: Remove GetNamespacedUID and use GetUID instead * Authn: Set uid for users and service accounts	1 year ago
Karl Persson	be5ced4287	Identity: Use typed version of namespace id (#87257) ... * Remove different constructors and only use NewNamespaceID * AdminUser: check typed namespace id * Identity: Add convinient function to parse valid user id when type is either user or service account * Annotations: Use typed namespace id instead	1 year ago
Dan Cech	41bee274fd	Chore: Fix error handling in postDashboard, remove UserDisplayDTO, fix live redis client initialization (#87206) ... * clean up error handling in postDashboard and remove UserDisplayDTO * replace GetUserUID with GetUID and GetNamespacedUID, enforce namespace constant type * lint fix * lint fix * more lint fixes	1 year ago
Karl Persson	d8fbbdefea	Identity: Use typed namespace id (#87121) ... * Use typed namespace id	1 year ago
Karl Persson	a2cba3d0b5	User: Add tracing (#87028) ... * Inject tracer in tests * Annotate with traces Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	1 year ago
Misi	1cb3f332a1	Chore: Remove extra sql select from the Insert function of userimpl.store (#87060) ... Remove getAnyUserType	1 year ago