grafana

Commit Graph

Author	SHA1	Message	Date
Karl Persson	355f47628f	AuthN: Tune logs in client (#65714 ) * AuthN: Remove log * AuthN: Check for user not found error in hook	2 years ago
Karl Persson	e4d998dc1a	ApiKeyGenPrefix: rename package (#65623 ) * Rename package to satokengen to make it clearer that it is for service account tokens	2 years ago
Karl Persson	d4397fae25	AuthN: Add functions for fake (#65522 )	2 years ago
Serge Zaitsev	a38f230d37	Chore: Remove result fields from login (#65136 ) * remove result fields from login * fix tests * fix tests * another shadowing	2 years ago
Karl Persson	382b24742a	Auth: Add feature flag to move token rotation to client (#65060 ) * FeatureToggle: Add toggle to use a new way of rotating tokens * API: Add endpoints to perform token rotation, one endpoint for api request and one endpoint for redirectsd * Auth: Aling not authorized handling between auth middleware and access control middleware * API: add utility function to get redirect for login * API: Handle token rotation redirect for login page * Frontend: Add job scheduling for token rotation and make call to token rotation as fallback in retry request * ContextHandler: Prevent in-request rotation if feature flag is enabled and check if token needs to be rotated * AuthN: Prevent in-request rotation if feature flag is enabled and check if token needs to be rotated * Cookies: Add option NotHttpOnly * AuthToken: Add helper function to get next rotation time and another function to check if token need to be rotated * AuthN: Add function to delete session cookie and set expiry cookie Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
Eric Leijonmarck	3cd952b8ba	Auth: Fix orgrole picker disabled if isSynced user (#64033 ) * fix: disable orgrolepicker if externaluser is synced * add disable to role picker * just took me 2 hours to center the icon * wip * fix: check externallySyncedUser for API call * remove check from store * add: tests * refactor authproxy and made tests run * add: feature toggle * set feature toggle for tests * add: IsProviderEnabled * refactor: featuretoggle name * IsProviderEnabled tests * add specific tests for isProviderEnabled * fix: org_user tests * add: owner to featuretoggle * add missing authlabels * remove fmt * feature toggle * change config * add test for a different authmodule * test refactor * gen feature toggle again * fix basic auth user able to change the org role * test for basic auth role * make err.base to error * lowered lvl of log and input mesg	2 years ago
Karl Persson	d2b19c167b	AuthN: Change error returned when sign up is disabled for provider (#65110 )	2 years ago
Serge Zaitsev	743d66396a	Chore: Remove result field from API keys commands and queries (#65055 ) * Chore: remove result field from api keys * fix shadowing * actually shadowing was all right	2 years ago
Jo	7784782512	AuthN: Add password and login form stats (#64868 ) * add password and login form stats * fix method handler * fix viewers can edit test	2 years ago
Jo	6b6cf5f4b7	Cfg: Move ViewersCanEdit into cfg (#64876 ) move ViewersCanEdit into cfg	2 years ago
Artur Wierzbicki	b6f77bdfdb	Chore: provide `authn.Service` rather than `authnimpl.Service` (#64792 ) chore: provide `authn.Service` rather than `authnimpl.Service` (#64792)	2 years ago
Carl Bergquist	eb507dca89	Remotecache: rename setbytearray/getbytearray to set/get and remove codec (#64470 ) Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Carl Bergquist	7c55dbf37d	Remotecache: Migrates get/set calls to use bytearrays and remove get/set functions (#63525 ) Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Misi	6543259a7d	Auth: Add SyncPermissions post auth hook (#64205 ) * Add SyncPermissionsFromDB post auth hook * Delete FromDB prefix * Align tests * Fixes * Change SyncPermissionsHook prio	2 years ago
Karl Persson	872d2d1e1c	AuthN: Login error handling (#64239 ) * Social: Fix type so it appears in error responses * AuthN: construct errutil.Error from social.Error * login: Check for errutil.Error and use public message * Login: redirectURLWithErrorCookie for authn errors Co-authored-by: Jo <joao.guerreiro@grafana.com>	2 years ago
Karl Persson	66ef5325d1	AuthN: add metrics for login and authentication (#63783 ) * AuthN: Add metrics	2 years ago
Karl Persson	4ede9fc7a4	AuthN: User sync info clean up (#64217 ) * AuthN: handle case where auth_info exists but not the user	2 years ago
Karl Persson	f258adadbf	AuthN: add utility functions for different type of login responses (#64133 ) * AuthN: add utility functions to handle response and redirect after successful login * API: Reuse utility functions for logins if authnService flag is enabled	2 years ago
Jo	92f47e72e1	Authn: Add missing jwt auth stat (#64127 ) add missing jwt auth stat	2 years ago
Karl Persson	e3cbc1f165	AuthN: Fix issue with duplicated auth connection (#63836 ) AuthN: Fix issue with duplicated auth connection when user signed in first time	2 years ago
Karl Persson	8484d0c4ef	Settings: Remove global variables for auth settings (#63795 ) * Setting: Remove global DisableLoginForm and add it to cfg * Setting: Remove unused BasicAuthEnabled global * Setting: Remove global OAuthAutoLogin and use from cfg * Setting: Remove global AnonymousEnabled * Setting: Remove global values for AuthProxy settings	2 years ago
Karl Persson	2a7fc3983b	AuthN: cleanup logs (#63652 ) * AuthN: clean up logs Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
Karl Persson	16b416b88b	AuthN: Extract enable disabled users logic to its own hook (#63628 )	2 years ago
Karl Persson	ddaf145d71	AuthN: Fix user sync with multiple client (#63615 ) * AuthN: Fix user sync to handle auth connections to multiple providers	2 years ago
Karl Persson	057d9c45fa	AuthN: Add in-memory cache for oauth token refresh hook (#63569 ) * OAuthSyncHook: Add in-memory cache so we don't have to perform the check on every request Co-authored-by: Jo <joao.guerreiro@grafana.com>	2 years ago
Jo	635a456fa4	Authn: Add separate context for session tagging (#63561 ) add context	2 years ago
Karl Persson	207a55be66	AuthN: add flag for org roles sync (#63507 ) * AuthN: Add flag to control org role syncs * JWT: Only sync org roles if the skip flag for jwt is false * LDAP: Only sync org role if skip flag for ldap is false * OAuth: Skip org roles sync if no roles were provided by upstream service * Grafana: Set SyncOrgRoles to true for authentication through proxy with grafana as backend	2 years ago
Jo	ff78103a24	Authn: Anon session service (#63052 ) * add anon sessions package * add usage stat fn * implement count for cache * add anonservice to authn broker * lint * add tests for remote cache count * move anon service to services * wrap tagging in goroutine * make func used	2 years ago
Karl Persson	5ca8ea40c1	AuthN: Cleanup authn package (#63456 ) * AuthN: Update comments for ClientParams * AuthN: Update flag name from SyncTeamMembers to SyncTeams * UserSync: rename function and fix order of parameters so it is correct * UserSync: Fix so we skip check if no authModule or authID is passed * UserSync: move quota check to create user function * UserSync: Move FetchSyncedUserHook to UserSync * UserSync: Move last seen user hook to user sync service * ApiKey: Implement last seen hook as a client hook instead	2 years ago
Jo	554dc9b97d	Authn: Fix password client fallthrough (#63244 ) * fix password client fallthrough * fix grafana client String	2 years ago
Jo	d4cfbd9fd3	LDAP: Move LDAP globals to Config (#63255 ) * structure dtos and private methods * add basic LDAP service * use LDAP service in ldap debug API * lower non fatal error * remove unused globals * wip * remove final globals * fix tests to use cfg enabled * restructure errors * remove logger from globals * use ldap service in authn * use ldap service in context handler * fix failed tests * fix ldap middleware provides * fix provides in auth_test.go	2 years ago
Jo	6322fce725	LDAP: Move to single package cluster (#63035 ) * move multildap to ldap package * move LDAP api and tests to ldap package * register background service * lint	2 years ago
Jo	14a78b58e9	Authn: Stat registration (#62934 ) * reorganize auth usage stats * usage stat privilege elevators * stat count of modified role * cfg related info * add authn anon client * kv store * ensure anon enabled is collected even if client is not registered * fix usage stats test	2 years ago
Karl Persson	9311085e5a	AuthN: support sync cache for proxy client (#62874 ) * AuthN: Add cache support for auth proxy to skip sync * AuthN: Change proxy auth hook to be a client hook * AuthN: fix cache key * fix test * lint	2 years ago
idafurjes	982939111b	Rename Id to ID for annotation models (#62886 ) * Rename Id to ID for annotation models * Add xorm tags * Rename Id to ID for API key models * Add xorm tags	2 years ago
Karl Persson	6840cc11ff	AuthN: add support for client specific hooks (#62863 ) * AuthN: Add HookClient interface * AuthN: Check if client implement authn.HookClient and call the hook if it does * AuthN: Convert refresh token hook into a client hook	2 years ago
Karl Persson	180a587f70	AuthN: fetch final state of signed in user (#62854 ) * AuthN: add a hook we can use to fetch final state of user	2 years ago
Karl Persson	ad068ed533	AuthN: Use BasicAuth from http request (#62792 ) AuthN: use BasicAuth from http request	2 years ago
Misi	7c1d9769ca	Auth: Rotate token patch (#62676 ) * Use singleflight.Group * Align tests * Cleanup	2 years ago
Karl Persson	d395901e80	AuthN: Expose RegisterClient and add client name for saml (#62604 ) * AuthN: add RegisterClient to service interface * AuthN: Add client name for saml	2 years ago
Karl Persson	efeb0daec6	AuthN: Add oauth clients and perform oauth authentication with authn.Service (#62072 ) * AuthN: Update signature of redirect client and RedirectURL function * OAuth: use authn.Service to perform oauth authentication and login if feature toggle is enabled * AuthN: register oauth clients * AuthN: set auth module metadata * AuthN: add logs for failed login attempts * AuthN: Don't use enable disabled setting * OAuth: only run hooks when authnService feature toggle is disabled * OAuth: Add function to handle oauth errors from authn.Service	2 years ago
Serge Zaitsev	7dbd2cd139	Chore: Fix goimports grouping (#62426 ) fix goimports ordering	2 years ago
Kristin Laemmert	9256a520a4	chore: move user_auth models to (mostly) login service (#62269 ) * chore: move user_auth models to (mostly) login service	2 years ago
Eric Leijonmarck	5531e22f46	Auth: Add disable of team sync for JWT Authentication (#62191 ) * fix: disable team sync for JWT Authentication * add: comment to test * change test to conform to new expected behavior * fix: spelling * formatting	2 years ago
Karl Persson	3447ad2602	AuthN: support priority for post auth and post login hooks (#62208 ) * AuthN: store post auth hooks in a priority list and update registration function to take a priority * AuthN: store post login hooks in a priority list and update registration function to take a priority * AuthN: Change priority for sync user	2 years ago
Jo	284ca4eab4	AuthN: JWT remove unnecessary if (#62233 ) remove unnecessary if	2 years ago
Karl Persson	95ea4bad6f	AuthN: Rebuild Authenticate so we only have to call it once in context handler (#61705 ) * API: Add reqSignedIn to router groups * AuthN: Add fall through in context handler * AuthN: Add IsAnonymous field * AuthN: add priority to context aware clients * ContextHandler: Add comment * AuthN: Add a simple priority queue * AuthN: Add Name to client interface * AuthN: register clients with function * AuthN: update mock and fake to implement interface * AuthN: rewrite test without reflection * AuthN: add comment * AuthN: fix queue insert * AuthN: rewrite tests * AuthN: make the queue generic so we can reuse it for hooks * ContextHandler: Add fixme for auth headers * AuthN: remove unused variable * AuthN: use multierror * AuthN: write proper tests for queue * AuthN: Add queue item that can store the value and priority Co-authored-by: Jo <joao.guerreiro@grafana.com>	2 years ago
Karl Persson	50608db59a	AuthN: Add interface and function to operate on clients that supports redirects (#61905 )	2 years ago
Kristin Laemmert	cd08f2575a	chore: move jwt models into auth/jwt (#61862 ) * chore: move jwt models into auth/jwt	2 years ago
linoman	56c2755b3b	Fix JWT claims request (#61650 ) * Fix JWT claims request * Add test scenarios for missing config options	2 years ago

1 2

78 Commits (9a29dd7d6e14746c7ba4977b8d07df20c9beb0c4)