524 Commits (b6540e2a18ea5a551e1e8447aa44781bb724a796)

Author	SHA1	Message	Date
Alex Vandiver	844b194f5b	Middleware: Don't require HTTPS for HSTS headers to be emitted (#35147) ... Grafana itself may not be serving content over HTTPS, but it may be behind a transparent proxy which does. Fixes #26770. Based on #26868.	3 years ago
Ryan McKinley	5d66194ec5	FeatureFlags: define features outside settings.Cfg (take 3) (#44443)	3 years ago
Agnès Toulet	65bdb3a899	FeatureFlags: Revert managing feature flags outside of settings.Cfg (#44382) ... * Revert "FeatureToggles: register all enterprise feature toggles (#44336)" This reverts commit f53b3fb007. * Revert "FeatureFlags: manage feature flags outside of settings.Cfg (#43692)" This reverts commit f94c0decbd.	3 years ago
Ryan McKinley	f94c0decbd	FeatureFlags: manage feature flags outside of settings.Cfg (#43692)	3 years ago
idafurjes	30aa24a183	Chore: Implement OpenTelemtry in Grafana (#42674) ... * Separate Tracer interface to TracerService and Tracer * Fix lint * Fix:Make it possible to start spans for both opentracing and opentelemetry in ds proxy * Add span methods, use span interface for rest of tracing * Fix logs in tracing * Fix tests that are related to tracing * Fix resourcepermissions test * Fix some tests * Fix more tests * Add TracingService to wire cli runner * Remove GlobalTracer from bus * Renaming test function * Remove GlobalTracer from TSDB * Replace GlobalTracer in api * Adjust tests to the InitializeForTests func * Remove GlobalTracer from services * Remove GlobalTracer * Remove bus.NewTest * Remove Tracer interface * Add InitializeForBus * Simplify tests * Clean up tests * Rename TracerService to Tracer * Update pkg/middleware/request_tracing.go Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com> * Initialize tracer before passing it to SQLStore initialization in commands * Remove tests for opentracing * Set span attributes correctly, remove unnecessary trace initiliazation form test * Add tracer instance to newSQLStore * Fix changes due to rebase * Add modified tracing middleware test * Fix opentracing implementation tags Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com>	3 years ago
Dessen Xu	8917e66eb4	Fix kiosk bug (#43152) ... * fix_kiosk_bug Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com> Co-authored-by: Sofia Papagiannaki <sofia@grafana.com>	3 years ago
Emil Tullstedt	25736b6afb	Auth: implement auto_sign_up for auth.jwt (#43502) ... Co-authored-by: James Brown <jbrown@easypost.com>	3 years ago
ying-jeanne	a8eef45a44	Logger migration from log15 to gokit/log (#41636) ... * migrate log15 to gokit/log * fix console log * update some unittest * fix all unittest * fix the build * Update pkg/infra/log/log.go Co-authored-by: Yuriy Tseretyan <tceretian@gmail.com> * general type vector * correct the level key Co-authored-by: Yuriy Tseretyan <tceretian@gmail.com>	3 years ago
idafurjes	8e6d6af744	Rename DispatchCtx to Dispatch (#43563)	3 years ago
idafurjes	7936c4c522	Rename AddHandlerCtx to AddHandler (#43557)	3 years ago
idafurjes	b8852ef6a3	Chore: Remove context.TODO() (#43409) ... * Remove context.TODO() from services * Fix live test * Remove context.TODO	3 years ago
idafurjes	c80e7764d8	Chore: Remove Dispatch and AddHandler (#42603) ... * Remove Dispatch * Remove context.TODO() * Remove AddHandler and Dispatch	4 years ago
idafurjes	e6123bc3ef	Replace AddHandler with AddHandlerCtx in tests (#42585)	4 years ago
Armand Grillet	6523486122	Alerting: Make Unified Alerting enabled by default for those who do not use legacy alerting (#42200) ... * update AlertingEnabled and UnifiedAlertingSettings.Enabled to be pointers * add a pseudo migration to fix the AlertingEnabled and UnifiedAlertingSettings.Enabled if the latter is not defined * update the default configuration file to make default value for both 'enabled' flags be undefined Misc * update Migrator to expose DB engine. This is needed for a ualert migration to access the database while the list of migrations is created. * add more verbose failure when migrations do not match Co-authored-by: gotjosh <josue@grafana.com> Co-authored-by: Yuriy Tseretyan <yuriy.tseretyan@grafana.com> Co-authored-by: gillesdemey <gilles.de.mey@gmail.com>	4 years ago
Ieva	c426f5673b	Access control: allow using targetOrgId parameter to set organization ID for a request (#41761) ... * read target org ID in context handler * simplify test * add test for request body not being read in ctx handler * linting fix	4 years ago
Ieva	ba7d65edf5	Revert "allow using targetOrgId parameter to set organisation ID for a request (#41561)" (#41643) ... This reverts commit 08276225c1.	4 years ago
Ieva	08276225c1	allow using targetOrgId parameter to set organisation ID for a request (#41561)	4 years ago
Kevin Minehart	9c2d70ce0f	Packaging: Dependency updates (#40534) ... * update loki * install openssl from alpine's edge repository * extracttraceid moved to tracing package * remove exit if warning limit is exceeded * disable flaky libraryelements test	4 years ago
idafurjes	5a087d2708	Chore: Add context to team (#40504) ... * Add ctx to team * Remove convey from team	4 years ago
Ben RUBSON	3d9e2d8c82	Application: Make error-template title configurable (#40310) ... * Fix error-template title as in index-template.html * Test: fix for AppTitle Co-authored-by: Hugo Häggmark <hugo.haggmark@gmail.com>	4 years ago
Serge Zaitsev	57fcfd578d	Chore: replace macaron with web package (#40136) ... * replace macaron with web package * add web.go	4 years ago
idafurjes	2759b16ef5	Chore: Add context for dashboards (#39844) ... * Add context for dashboards * Remove GetDashboardCtx * Remove ctx.TODO	4 years ago
Sofia Papagiannaki	012d4f0905	Alerting: Remove `ngalert` feature toggle and introduce two new settings for enabling Grafana 8 alerts and disabling them for specific organisations (#38746) ... * Remove `ngalert` feature toggle * Update frontend Remove all references of ngalert feature toggle * Update docs * Disable unified alerting for specific orgs * Add backend tests * Apply suggestions from code review Co-authored-by: achatterjee-grafana <70489351+achatterjee-grafana@users.noreply.github.com> * Disabled unified alerting by default * Ensure backward compatibility with old ngalert feature toggle * Apply suggestions from code review Co-authored-by: gotjosh <josue@grafana.com>	4 years ago
Andres Martinez Gotor	64c8d32fe7	Use sdk pkg for gtime (#39354)	4 years ago
Marcus Efraimsson	1e4a660ea7	Chore: Propagate context for quotas (#39205) ... Propagate context for quotas and queries/commands. Ref #36734	4 years ago
Gabriel MABILLE	4be9ec8f72	AccessControl: Protect org users lookup (#38981) ... * Move legacy accesscontrol to middleware layer * Remove bus usage for this endpoint * Add tests for legacy accesscontrol * Fix tests for org user and remove one more bus usage * Added test for FolderAdmin as suggested in the review	4 years ago
Serge Zaitsev	e1e385b318	Chore: Remove untyped data map from macaron context (#39077)	4 years ago
Serge Zaitsev	4c921cf120	remove default return handler from macaron (#38887)	4 years ago
Serge Zaitsev	51aeb717a4	inject modified request into context (#38807)	4 years ago
Serge Zaitsev	c3ab2fdeb7	Macaron: remove custom Request type (#37874) ... * remove macaron.Request, use http.Request instead * remove com dependency from bindings module * fix another c.Req.Request	4 years ago
Arve Knudsen	78596a6756	Migrate to Wire for dependency injection (#32289) ... Fixes #30144 Co-authored-by: dsotirakis <sotirakis.dim@gmail.com> Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com> Co-authored-by: Ida Furjesova <ida.furjesova@grafana.com> Co-authored-by: Jack Westbrook <jack.westbrook@gmail.com> Co-authored-by: Will Browne <wbrowne@users.noreply.github.com> Co-authored-by: Leon Sorokin <leeoniya@gmail.com> Co-authored-by: Andrej Ocenas <mr.ocenas@gmail.com> Co-authored-by: spinillos <selenepinillos@gmail.com> Co-authored-by: Karl Persson <kalle.persson@grafana.com> Co-authored-by: Leonard Gram <leo@xlson.com>	4 years ago
Serge Zaitsev	e2227c38a3	Remove debug log from gzipper (#37790)	4 years ago
Serge Zaitsev	707d3536f0	Macaron: Strip down renderer middleware (#37627) ... * strip down macaron renderer * inline renderHTML * remove IndentJSON parameter * replace renderer with a html/template set * fix failing test * fix renderer paths in tests * make template reloading even simpler * unify ignored gzip path lookup * fix csp middleware usage	4 years ago
Serge Zaitsev	0dfac9c3aa	Macaron: convert CSP middleware (#37672)	4 years ago
yuwaMSFT2	ad1f792b8b	Auth: Pass user role to Grafana using auth proxy (#36729) ... * Pass role to Grafana using auth proxy By default, the role will be applied to the default org of the user. If the request uses the standard header "X-Grafana-Org-Id", the role will be applied to the specified org Tested in both unit test and manually E2E * Address comment: only allow the user role to be applied to the default org Co-authored-by: Leonard Gram <leo@xlson.com>	4 years ago
Tobias Skarhed	7f882eea05	Login: Require user to not be signed in to get request password email (#35421)	4 years ago
Dimitris Sotirakis	1c49986b2f	Chore: Remove endpoints that contain the slug field (#35104) ... * Chore: Remove endpoints that contain the slug field * More cleanups * Lint fixes * Remove unnecessary funcs * Cleanup frontend code * Remove deprecated endpoints from docs * Revert change according to reviewer's comments	4 years ago
kay delaney	8143991b94	Security: Update default CSP template and fix firefox CSP issues (#34836) ... * Security: Update default content_security_policy_template - Add 'strict-dynamic' back to script-src - Add ws(s)://$ROOT_PATH to connect-src - Change onEvent to on-event in angular templates to fix CSP issues in firefox. - Add blob: to style-src	4 years ago
Serge Zaitsev	dfbf955aa8	simplify method/code sanitization (#34723)	4 years ago
Carl Bergquist	4710566514	bus: add ctx for all signed in user queries (#33970) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	4 years ago
Carl Bergquist	8254efc027	metrics: instrument request with histograms by default (#33921) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	4 years ago
Alexander Emelin	765fa675f5	live: disable gzip for ws endpoints (#34015)	4 years ago
Carl Bergquist	b6e6fa53fc	instrumentation: prefix metrics with grafana (#33925) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	4 years ago
Sofia Papagiannaki	540f110220	[Alerting]: Extend quota service to optionally set limits on alerts (#33283) ... * Quota: Extend service to set limit on alerts * Add test for applying quota to alert rules * Apply suggestions from code review Co-authored-by: Diana Payton <52059945+oddlittlebird@users.noreply.github.com> * Get used alert quota only if naglert is enabled * Set alert limit to zero if nglalert is not enabled Co-authored-by: Diana Payton <52059945+oddlittlebird@users.noreply.github.com>	4 years ago
Marcus Efraimsson	caa420f92f	Chore: Improve request distributed tracing middleware (#33033) ... Before these changes the request tracing was added for each route registered using the routing.RouteRegister, see code. This had the consequence that middleware executed earlier/later in the request pipeline was not part of the request tracing middleware life-cycle which measures the duration of requests among other things. In the logger middleware we do extract the current distributed trace identifier, if available, and set that on request info/error log messages. With these changes we can extract the current distributed trace identifier, if available, and set that on the contextual HTTP request logger (models.ReqContext.Logger) which would improve the possibility to correlate all HTTP request log messages with traces. In addition, the request tracing middleware is now executed first and last in the request pipeline and should therefore result in more accurate timing measurements (request duration). Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com>	4 years ago
Vladimir Kochnev	39a3b0d0b0	Auth: support JWT Authentication (#29995)	4 years ago
Alexander Emelin	07f7c60ae0	live: fix writing headers in hijacked connection with gzip enabled (#32310)	4 years ago
Joan López de la Franca Beltran	610999cfa2	Auth: Allow soft token revocation (#31601) ... * Add revoked_at field to user auth token to allow soft revokes * Allow soft token revocations * Update token revocations and tests * Return error info on revokedTokenErr * Override session cookie only when no revokedErr nor API request * Display modal on revoked token error * Feedback: Refactor TokenRevokedModal to FC * Add GetUserRevokedTokens into UserTokenService * Backendsrv: adds tests and refactors soft token path * Apply feedback * Write redirect cookie on token revoked error * Update TokenRevokedModal style * Return meaningful error info * Some UI changes * Update backend_srv tests * Minor style fix on backend_srv tests * Replace deprecated method usage to publish events * Fix backend_srv tests * Apply suggestions from code review Co-authored-by: Alex Khomenko <Clarity-89@users.noreply.github.com> Co-authored-by: Hugo Häggmark <hugo.haggmark@gmail.com> * Apply suggestions from code review * Apply suggestions from code review Co-authored-by: Hugo Häggmark <hugo.haggmark@gmail.com> * Minor style fix after PR suggestion commit * Apply suggestions from code review Co-authored-by: Ursula Kallio <73951760+osg-grafana@users.noreply.github.com> * Prettier fixes Co-authored-by: Hugo Häggmark <hugo.haggmark@gmail.com> Co-authored-by: Alex Khomenko <Clarity-89@users.noreply.github.com> Co-authored-by: Ursula Kallio <73951760+osg-grafana@users.noreply.github.com>	4 years ago
Marcus Efraimsson	a97637a133	Snapshots: Fix usage of sign in link from the snapshot page (#31986) ... Fix redirect to login page from snapshot page when not authenticated. Fixes #28547	4 years ago
Arve Knudsen	47f13abf7a	Backend: Migrate to using non-global configuration (#31856) ... Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>	4 years ago