532 Commits (7f99388576067388c8d3b3779a3041f4ba2fdcee)

Author	SHA1	Message	Date
Ezequiel Victorero	5039725da6	Snapshots: Add RBAC roles for creating and deleting (#96126)	6 months ago
Cedric Ziel	89e7e25b60	Backend: Inject server-timing header to match initial loads with client-side telemetry (#94978) ... feat: inject server-timing header to match initial loads with client-side telemetry Faro Web SDK can read the server-timing info and correlate the initial request with the client side telemetry gather from navigation timings.	6 months ago
Misi	0539ccf10d	Auth: Fix redirection when auto_login is enabled (#94311) ... * Fix for SAML auto login * Fix for OAuth auto login	8 months ago
Misi	d411ce2664	Auth: Use sessionStorage instead of cookie for automatic redirection (#92759) ... * WIP: working as expected, has to be tested * Rename query param, small changes * Remove unused code * Address feedback * Cleanup * Use the feature toggle to control the behaviour * Use the toggle on the FE too * Prevent the extra redirect/reload Co-authored-by: Josh Hunt <joshhunt@users.noreply.github.com> * Return to login if user is not authenticated * Add tracking issue * Align BE redirect constructor to locationSvc	8 months ago
Syerikjan Kh	715ee35abc	RBAC: Check forceLogin inside CanAdminPlugins (#93449)	8 months ago
Jan-Otto Kröpke	e2bce38a79	App Plugins: Allow resource handle to define Cache-Control Header (#92559)	9 months ago
Adela Almasan	f64b121ddb	Canvas: Allow API calls to grafana origin (#91822) ... * allow post URL * check for config * allow relative paths * add allowed internal pattern; add checks for method * update defaults.ini * add custom header * update config comment * use globbing, switch to older middleware - deprecated call * add codeowner * update to use current api, add test * update fall through logic * Update pkg/middleware/validate_action_url.go Co-authored-by: Dan Cech <dcech@grafana.com> * Update pkg/middleware/validate_action_url.go Co-authored-by: Dan Cech <dcech@grafana.com> * add more tests * Update pkg/middleware/validate_action_url_test.go Co-authored-by: Dan Cech <dcech@grafana.com> * fix request headers * add additional tests for all verbs * fix request headers++ * throw error when method is unknown --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com> Co-authored-by: Brian Gann <bkgann@gmail.com> Co-authored-by: Brian Gann <briangann@users.noreply.github.com> Co-authored-by: Dan Cech <dcech@grafana.com>	9 months ago
Todd Treece	733ae1f099	Chore: Skip gzip for apiserver routes (#92245)	9 months ago
Karl Persson	8bcd9c2594	Identity: Remove typed id (#91801) ... * Refactor identity struct to store type in separate field * Update ResolveIdentity to take string representation of typedID * Add IsIdentityType to requester interface * Use IsIdentityType from interface * Remove usage of TypedID * Remote typedID struct * fix GetInternalID	10 months ago
Kevin Minehart	c326d865c5	RBAC: Allow plugins to use scoped actions (#90946) ... Co-authored-by: gamab <gabriel.mabille@grafana.com>	10 months ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567)	10 months ago
Charandas	c210617735	K8s: use contexthandler in standalone handler chain (#90102)	11 months ago
Dave Henderson	7ac757afcb	infra(tracing): Fix span naming order-of-operations bug (#90025)	11 months ago
Dave Henderson	4ec4994e89	infra(tracing): Always end started spans (#90016) ... Signed-off-by: Dave Henderson <dave.henderson@grafana.com>	11 months ago
Marcus Andersson	04f39457cf	Chore: Remove sensitive information from presigned URLs prior to logging (#87035) ... Co-authored-by: Will Browne <wbrowne@users.noreply.github.com> Co-authored-by: Dan Cech <dcech@grafana.com> Co-authored-by: Andres Martinez Gotor <andres.martinez@grafana.com>	11 months ago
Dave Henderson	3bbc821131	Metrics: Add ability to disable classic histogram for HTTP metric (#88315) ... metrics: Add ability to disable classic histogram for HTTP metric Signed-off-by: Dave Henderson <dave.henderson@grafana.com>	12 months ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116)	12 months ago
Timur Olzhabayev	4761326568	Fix: Proper plugin logo loading depending on staging (#88247) ... * making logos respect the staging * making it work when served from subfolders * fixing helper test	1 year ago
Karl Persson	c4cfee8d96	User: support setting org and help flags though update function (#86535) ... * User: Support setting active org through update function * User: add support to update help flags through update function	1 year ago
Karl Persson	0fa983ad8e	AuthN: Use typed namespace id inside authn package (#86048) ... * authn: Use typed namespace id inside package	1 year ago
Alex Khomenko	44e1bce55a	Feature toggles: Remove dashboardEmbed toggle (#86587)	1 year ago
carrychair	0913324668	Chore: Remove repetitive words (#84132) ... remove repetitive words Signed-off-by: carrychair <linghuchong404@gmail.com>	1 year ago
김은빈	96dfb385ca	Grafana: Replace magic number with a constant variable in response status (#80132) ... * Chore: Replace response status with const var * Apply suggestions from code review Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com> * Add net/http import --------- Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>	1 year ago
Torkel Ödegaard	8f36f905ee	SceneSolo: Minor fixes (#82289) ... * SceneSolo: Minor fixes * remove logging	1 year ago
Carl Bergquist	c9de794d7f	instrumentation: these features have been enabled for a while (#81617) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	1 year ago
Marcus Efraimsson	6768c6c059	Chore: Remove public vars in setting package (#81018) ... Removes the public variable setting.SecretKey plus some other ones. Introduces some new functions for creating setting.Cfg.	1 year ago
Torkel Ödegaard	e924627659	Frontend: Reload the browser when backend configuration/assets change (#79057) ... * Detect frontend asset changes * Update * merge main * Frontend: Detect new assets / versions / config changes (#79258) * avoid first check * Updates and add tests * Update * Update * Updated code * refine * use context --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	1 year ago
Will Browne	0b511aaace	Plugins: Add backend check for app page role access (#78269) ... * add backend check for roles * tidy * fix tests * incorporate rbac * fix linter * apply PR feedback * add tests * fix logic * add comment * apply PR feedback	1 year ago
Ezequiel Victorero	864d91ed3e	Export: Remove no-store headers in pdf and image previews (#78844)	1 year ago
Torkel Ödegaard	ed128ea964	Frontend: Foundations for multi tenant frontend (#78815) ... * Frontend: Foundations for multi tenant frontend * improve manifest parsing for multi-tenant frontend (#78876) * add test * add test * ?? * Updates * Added cache * test cleanup * lint * fix test * fix error templates * cleanup * remove copy * revert changes to list testdata * comment cleanup * prepare integration tests * Remove integrety --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Oscar Kilhed	4c4f11f4b3	Avatar: Allow browser caching of /avatar/ (#78314) ... don't set no-store headers to /avatar/	2 years ago
Ryan McKinley	f69fd3726b	FeatureToggles: Add context and and an explicit global check (#78081)	2 years ago
Gabriel MABILLE	420fb56fda	RBAC: Fix plugins pages access-control (#76321) ... * RBAC: Fix plugins pages access-control * Better comment Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * Add a small comment on connections/datasources routes --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
Jo	dcd0c6b11e	Identity: Unfurl OrgID in pkg/services to allow using identity.Requester interface (#76113) ... Unfurl OrgID in pkg/services to allow using identity.Requester interface	2 years ago
Carl Bergquist	0fc403d116	Instrumentation: Enable native histograms for HTTP requests (#75731) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Marcus Efraimsson	e4c1a7a141	Tracing: Standardize on otel tracing (#75528)	2 years ago
Carl Bergquist	3c8cea0764	instrumentation: rename team to grafana_team to improve alert routing. (#75860) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Karl Persson	7a38090bc0	AuthN: Fix namespaces for anonymous and render (#75661) ... * AuthN: remove IsAnonymous from identity struct and set correct namespace for anonymous and render * Don't parse user id for render namespace	2 years ago
Marcus Efraimsson	0128d0403f	Tracing: Use tracing.InitializeTracerForTest (#75479)	2 years ago
Carl Bergquist	e5fbc4a4cd	web: add slo group to request meta (#74765) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Marcus Efraimsson	8ee43f3705	Instrumentation: Add status_source label to request metrics/logs (#74114) ... Ref #68480 Co-authored-by: Giuseppe Guerra <giuseppe.guerra@grafana.com>	2 years ago
Ryan McKinley	025b2f3011	Chore: use any rather than interface{} (#74066)	2 years ago
Carl Bergquist	bd7523381e	web: removes unused function from request metadata (#73910) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Marcus Efraimsson	040b7d2571	Chore: Add errutils helpers (#73577) ... Add helpers for the errutil package in favor of errutil.NewBase.	2 years ago
Carl Bergquist	243b757168	Middleware: Add team metadata to HTTP handlers (#71010) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Karl Persson	e53e22ef2a	Contexthandler: Remove code that is no longer used (#73101) ... * Contexthandler: remove dead code * Contexthandler: Add tests * Update pkg/tests/api/alerting/api_alertmanager_test.go Co-authored-by: Jo <joao.guerreiro@grafana.com> --------- Co-authored-by: Jo <joao.guerreiro@grafana.com>	2 years ago
Karl Persson	144e4887ee	Auth: Use authn.Service for all tests (#72921) ... * Dashboards: Fix tests when authn broker is enabled. StarService was not configured for tests, the call was guarded by !c.IsSignedIn * Change default to be anon user to match expectations from tests * OAuth: rewrite tests to work with authn.Service * Setup template renderer by default * Extract cookie options from cfg instead of relying on global variables * Fix test to work with authn service * Middleware: rewrite auth tests * Remvoe session cookie if we cannot refresh access token	2 years ago
Ben Sully	51c94bccd7	api: ignore /api/gnet proxy when gzipping responses (#71437) ... This PR adds /api/gnet to the list of ignored paths in the gzip middleware. Without this, when gzip is enabled (`server.enable_gzip = true`), responses from the gnet proxy are double compressed: once by grafana.com and once by Grafana itself. With this change we only do one round of compression for these endpoints. To test this out, try a request like this with `server.enable_gzip = true` (after setting `GCOM_TOKEN` to a valid grafana.com token; you may need to change the 'bsull' slug, too): curl -v --user admin:admin \ -H "X-Api-Key: $GCOM_TOKEN" \ -H 'Accept-Encoding: gzip' \ localhost:3000/api/gnet/instances/bsull/provisioned-plugins/grafana-ml-app | gzip -d Note that there are two Content-Encoding: gzip headers before this PR, and the output is still compressed even after the `gzip -d`. After this PR things look as expected.	2 years ago
Alex Khomenko	420b19e0e4	Dashboards: Add dashboard embed route (#69596) ... * Dashboard embed: Set up route * Dashboard embed: Cleanup * Dashboard embed: Separate routes * Dashboard embed: Render dashboard page * Dashboard embed: Add toolbar * Dashboard embed: Send JSON on save * Dashboard embed: Add JSON param * Dashboard embed: Make the dashboard editable * Fix sending dashboard to remote server * Add notifications * Add "dashboardEmbed" feature toggle * Use the toggle * Update toggles * Add toggle on backend * Add get JSON endpoint * Add drawer * Close drawer on success * Update toggles * Cleanup * Update toggle * Allow embedding for the d-embed url * Allow embedding via custom X-Allow-Embedding header * Use callbackUrl * Cleanup * Update public/app/features/dashboard/containers/EmbeddedDashboardPage.tsx Co-authored-by: kay delaney <45561153+kaydelaney@users.noreply.github.com> * Use theme for spacing * Update toggles * Update public/app/features/dashboard/components/EmbeddedDashboard/SaveDashboardForm.tsx Co-authored-by: Polina Boneva <13227501+polibb@users.noreply.github.com> * Add select data source modal --------- Co-authored-by: kay delaney <45561153+kaydelaney@users.noreply.github.com> Co-authored-by: Polina Boneva <13227501+polibb@users.noreply.github.com>	2 years ago
Jo	d6c468c1c2	Auth: Add empty role definition (#64694) ... * Allow setting role as None Co-authored-by: gamab <gabi.mabs@gmail.com> Seeking for places where role.None would be used Co-authored-by: Jguer <joao.guerreiro@grafana.com> Adding None role to the frontend Co-authored-by: Jguer <joao.guerreiro@grafana.com> unify org role declaration and remove from add permission fix backend test fix backend lint * remove role none from frontend * Simplify checks Co-authored-by: Kalle Persson <kalle.persson@grafana.com> * nits --------- Co-authored-by: Kalle Persson <kalle.persson@grafana.com>	2 years ago