4887 Commits (7520ebadacf2f5276a1f187f1bf4cfc4b953ab23)

Author	SHA1	Message	Date
Sofia Papagiannaki	7f40dc5317	Image rendering: Add deprecation warning when PhantomJS is used for rendering images (#18933) ... * Add deprecation warning * Update pkg/services/rendering/rendering.go Co-Authored-By: Marcus Efraimsson <marcus.efraimsson@gmail.com>	6 years ago
lzd	c9c0dd1ea8	Alerting: fix response popover prompt when add notification channels (#18967)	6 years ago
Sofia Papagiannaki	de075e529d	Build: Fix potential case-insensitive import collision for github.com/Unknwon/com (#18915) ... * update gopkg.in/macaron.v1 * update github.com/go-macaron/binding * update github.com/go-macaron/session * Substitute github.com/Unknwon/com with github.com/unknwon/com * Clean up modules using `go mod tidy` * Substitute github.com/Unknwon/bra with github.com/unknwon/bra	6 years ago
Ryan McKinley	7d32caeac2	Transformers: configure result transformations after query(alpha) (#18740)	6 years ago
gotjosh	10fe101add	LDAP: Fetch teams in debug view (#18951) ... Adds the definition of `GetTeamsForLDAPGroupCommand` which handles the lookup of team information based on LDAP groupDNs. This is an Enterprise only feature. To diferentiate,a response will contain the `team` key as `null` on OSS while on Enterprise the key will contain an empty array `[]` when no teams are found.	6 years ago
Sofia Papagiannaki	388d3d3714	Notification is sent when state changes from no_data to ok (#18920)	6 years ago
gotjosh	7c6dd1868b	LDAP: Add API endpoint to query the LDAP server(s) status (#18868) ... * LDAP: Add API endpoint to query the LDAP server(s) status| This endpoint returns the current status(es) of the configured LDAP server(s). The status of each server is verified by dialling and if no error is returned we assume the server is operational. This is the last piece I'll produce as an API before moving into #18759 and see the view come to life.	6 years ago
gotjosh	0cbbb43222	LDAP: Add API endpoint to debug user mapping from LDAP (#18833) ... * Move the ReloadLDAPCfg function to the debug file Appears to be a better suite place for this. * LDAP: Return the server information when we find a specific user We allow you to specify multiple LDAP servers as part of LDAP authentication integration. As part of searching for specific users, we need to understand from which server they come from. Returning the server configuration as part of the search will help us do two things: - Understand in which server we found the user - Have access the groups specified as part of the server configuration * LDAP: Adds the /api/admin/ldap/:username endpoint This endpoint returns a user found within the configured LDAP server(s). Moreso, it provides the mapping information for the user to help administrators understand how the users would be created within Grafana based on the current configuration. No changes are executed or saved to the database, this is all an in-memory representation of how the final result would look like.	6 years ago
Kyle Brandt	364d2358d8	alerting: add lock on job to prevent a race condition (#18218) ... without this lock there is a race condition between the scheduler and job processing.	6 years ago
Marcus Efraimsson	964c2e722f	Snapshot: Fix http api (#18830) ... (cherry picked from commit be2e2330f5)	6 years ago
Oleg Gaidarenko	1a4be4af8c	Enterprise: add dependencies for upcoming features (#18793) ... * Enterprise: add dependencies for upcoming features See enterprise issues	6 years ago
Gali Alykoff	f942fecc52	Chore: Improve err message for notifications (#18757) ... Improve message of notification json error Fix test after change error message	6 years ago
Marcus Efraimsson	e83f55f394	Chore: Use ruleId instead of alertId as log keyword (#18738)	6 years ago
Bob Shannon	056dbc7012	OAuth: Support JMES path lookup when retrieving user email (#14683) ... Add support for fetching e-mail with JMES path Signed-off-by: Bob Shannon <bobs@dropbox.com>	6 years ago
Oleg Gaidarenko	35b74a99a8	Emails: resurrect template notification (#18686) ... * Emails: resurrect template notification * Phantomjs (oh yeah, there is another dev dep phantom :-) was failing for the generation of the html templates so I had to update the dependencies in order to fix it. While doing that I update the scripts field and docs for it as well. yarn.lock is included * Move splitting of the emails to separate helper function, since more services coming up that would need to use this functionality * Add support for enterprise specific email letters. Probably could be done in the better way, but it's not a priority right now	6 years ago
Oleg Gaidarenko	c5bca40566	Email: add reply-to and direct attachment (#18715) ... * Add support for `Reply-To` header * Allow direct attachment Don't have tests yet, but they will follow	6 years ago
Ryan McKinley	f7c55d3968	Plugins: better warning when plugins fail to load (#18671) ... * better pluin feedback * add server side check for module.js	6 years ago
Ryan McKinley	e6fbf358c8	TestData: attach labels to series results (#18653)	6 years ago
Oleg Gaidarenko	6ca1a6c8da	Auth: change the error HTTP status codes (#18584) ... * Auth: change the error HTTP status codes * Use 407 HTTP status code for incorrect credentials error * Improve proxy auth logs * Remove no longer needed TODO comment Fixes #18439	6 years ago
Oleg Gaidarenko	02af966964	LDAP: multildap + ldap integration (#18588) ... It seems `ldap` module introduced new error type of which multildap module didn't know about. This broke the multildap login logic Fixes #18491 Ref #18587	6 years ago
kay delaney	fb0cec5591	Backend: Adds support for HTTP/2 (#18358) ... * Backend: Adds support for HTTP/2 * Adds mozilla recommended ciphers * Updates sample.ini and config documentation	6 years ago
Ryan McKinley	6335509a23	Annotations: use a single row to represent a region (#17673) ... * SQLite migrations * cleanup * migrate end times * switch to update with a query * real migration * anno migrations * remove old docs * set isRegion from time changes * use <> for is not * add comment and fix index decleration * single validation place * add test * fix test * add upgrading docs * use AnnotationEvent * fix import * remove regionId from typescript	6 years ago
Kyle Brandt	f689b60426	remotecache: support SSL with redis (#18511) ... * update go-redis lib from v2 -> v5 * add ssl option to the redis connection string fixes #18498	6 years ago
Marcus Efraimsson	8fd153edb7	API: Restrict anonymous user information access (#18422) ... Existing /api/alert-notifications now requires at least editor access. Existing /api/alert-notifiers now requires at least editor access. New /api/alert-notifications/lookup returns less information than /api/alert-notifications and can be access by any authenticated user. Existing /api/org/users now requires org admin role. New /api/org/users/lookup returns less information than /api/org/users and can be access by users that are org admins, admin in any folder or admin of any team. UserPicker component now uses /api/org/users/lookup instead of /api/org/users. Fixes #17318	6 years ago
Sofia Papagiannaki	4e29357d15	Backend: Do not set SameSite cookie attribute if cookie_samesite is none (#18462) ... * Do not set SameSite login_error cookie attribute if cookie_samesite is none * Do not set SameSite grafana_session cookie attribute if cookie_samesite is none * Update middleware tests	6 years ago
Sofia Papagiannaki	7520166f17	API: Minor fix for team creation endpoint when using API key (#18252) ... * Fix CreateTeam api endpoint No team member should be created for requests authenticated by API tokens. * Update middleware test Assert that `isAnonymous` is set for `SignedInUser` authenticated via API key. * Add test for team creation Assert that no team member is created if the signed in user is anomymous. * Revert "Fix CreateTeam api endpoint" This reverts commit 9fcc4e67f5. * Revert "Update middleware test" This reverts commit 75f767e58d. * Fix CreateTeam api endpoint No team member should be created for requests authenticated by API tokens. * Update team test * Change error to warning and update tests	6 years ago
Alexander Zobnin	b47f0ff07f	OAuth: return GitLab groups as a part of user info (enable team sync) (#18388) ... * GitLab OAuth: GetGroups refactor * GitLab OAuth: fetch groups into UserInfo * GitLab OAuth: minor refactor * GitLab OAuth: team sync docs	6 years ago
Kyle Brandt	e1b2d61ceb	backend: null.Float NaN -> null for json marshal (#18284)	6 years ago
Sofia Papagiannaki	269c1fb107	Do not set SameSite for OAuth cookie if cookie_samesite is None (#18392)	6 years ago
Elykov Alexandr	2514209083	MSSQL: Change connectionstring to URL format to fix using passwords with semicolon (#18384) ... Fixes #17665	6 years ago
Alexander Berger	4e1e220962	CloudWatch: Fix alerting for queries with Id (using GetMetricData) (#17899) ... This commit addresses half of #13749 by making sure GetMetricData works for alerting. Math Expressions (compound metrics) will still not work for alerting, this would require a bigger refactoring of Grafana's alerting service. However, with this commit at least alerting for basic metrics with non empty query Id will work. Fixes half of #13749	6 years ago
Oleg Gaidarenko	d88fdc86fc	Auth: Do not search for the user twice (#18366) ... * Auth: Do not search for the user twice Previously `initContextWithBasicAuth` did not use `LoginUserQuery`, doing `GetUserByLoginQuery` only i.e. looking user in DB only, things changed when this function started to check LDAP provider via `LoginUserQuery` (#6940), however, this request was placed after `GetUserByLoginQuery`, so we first looking in DB then in the LDAP - if LDAP user hasn't logged in we will not find it in DB, so `LoginUserQuery` will never be reached. `LoginUserQuery` request already performs `GetUserByLoginQuery` request in correct sequence. So we can just remove redundant request. * Correct sequence execution during authentification & introduce tests for it * Move basic auth tests to separate test file, since main test file already pretty large * Introduce `testing.go` for the middleware module * Remove redundant test helper function * Make handler names more explicit Ref 5777f65d05 Fixes #18329 * Auth: address review comment	6 years ago
Dominic Miglar	32d6740b8f	Alerting: Also include configured AlertRuleTags in Webhooks (#18233) ... * added alert rule tags in webhook notifications * fix: don't include whole list of Tag objects but only key/value pairs in Webhook JSON * marked webhook alerts to support alert rule tags	6 years ago
Oleg Gaidarenko	7e89a93b5f	Auth: introduce more tests for middleware module (#18365) ... * Add tests for errors basic auth cases and moves tests to separate test-case. Also names test cases consistently * Add additional test helper Ref 82661b9f69	6 years ago
Oleg Gaidarenko	fb273cb874	LDAP: nitpicks (#18309) ... * LDAP: nitpicks * Add more tests * Correct and clarify comment for Login() method * Rename methods (hail consistency!) * Uppercases first letter of the logs everywhere * Moves method definitions around to more appropriate places Fixes #18295	6 years ago
Torkel Ödegaard	f3fb178efa	Navigation: Fixed double settings menus (#18349)	6 years ago
Oleg Gaidarenko	82661b9f69	Auth: consistently return same basic auth errors (#18310) ... * Auth: consistently return same basic auth errors * Put repeated errors in consts and return only those consts as error strings * Add tests for errors basic auth cases and moves tests to separate test-case. Also names test cases consistently * Add more error logs and makes their messages consistent * A bit of code style * Add additional test helper * Auth: do not expose even incorrect password * Auth: address review comments Use `Debug` for the cases when it's an user error	6 years ago
Leonard Gram	c675449aa2	cli: fix for recognizing when in dev mode. (#18334)	6 years ago
Sofia Papagiannaki	69b7b8bb46	Fix OAuth error due to SameSite cookie policy (#18332) ... The `oauth_state` cookie used to be created with the SameSite value set according to the `cookie_samesite` configuration. However, due to a Safari bug SameSite=None or SameSite=invalid are treated as Strict which results in "missing saved state" OAuth login failures because the cookie is not sent with the redirect requests to the OAuth provider. This commit always creates the `oauth_state` cookie with SameSite=Lax to compensate for this.	6 years ago
gotjosh	ed8aeb2999	Auth Proxy: Include additional headers as part of the cache key (#18298) ... * Auth Proxy: Include additional headers as part of the cache key Auth proxy has support to send additional user attributes as part of the authentication flow. These attributes (e.g. Groups) need to be monitored as part of the process in case of change. This commit changes the way we compute the cache key to include all of the attributes sent as part of the authentication request. That way, if we change any user attributes we'll upsert the user information.	6 years ago
Andrej Ocenas	8c49d27705	CLI: Allow installing custom binary plugins (#17551) ... Make sure all data is sent to API to be able to select correct archive version.	6 years ago
gotjosh	2f240a11ce	SAML: Only show SAML login button on Enterprise version (#18270) ... SAML Authentication is an Enterprise only feature. This change enables the SAML login button to only be shown on enterprise.	6 years ago
Andrej Ocenas	7f1214ac46	Permissions: Show plugins in nav for non admin users but hide plugin configuration (#18234) ... Allow non admins to see plugins list but only with readme. Any config tabs are hidden from the plugin page. Also plugin panel does not show action buttons (like Enable) for non admins.	6 years ago
Oleg Gaidarenko	1e5fc76601	LDAP: improve POSIX support (#18235) ... * LDAP: improve POSIX support * Correctly abtain DN attributes result * Allow more flexibility with comparison mapping between POSIX group & user * Add devenv for POSIX LDAP server * Correct the docs Fixes #18140	6 years ago
Dima Kurguzov	a4b0ccc138	Instrumentation: Add failed notifications metric (#18089)	6 years ago
Markus Blaschke	31547597d3	remote_cache: Fix redis connstr parsing (#18204) ... * Fix redis connstr parsing * Don’t log the password	6 years ago
Oleg Gaidarenko	d16fd58bdb	Auth: do not expose disabled user disabled status (#18229) ... Fixes #17947	6 years ago
Kyle Brandt	ea0cee4c35	alerting: more specific error when missing threshold (#18221) ... fixes #18184	6 years ago
Kyle Brandt	172464e91e	alerting: return err when SetAlertState fails to save to sql (#18216) ... fix duplicate alert states when the alert fails to save to the database. fixes #18176	6 years ago
Leonard Gram	2014549fa5	PhantomJS: Fixes rendering on Debian Buster (#18162) ... Closes #17588	6 years ago