110 Commits (c440bd2bdaec8fed13f47fdfe76dda63e7d0008a)

Author	SHA1	Message	Date
Jo	90d2f4659e	Users: Allow specifying user UIDs in params (#95424) ... * add user ID API translation * add uid to user frontend * use users' UIDs in admin pages * fix ldapSync page * use global user search for user by UID * remove active org filtering * remove orgID params	1 year ago
Jeff Levin	a21a232a8e	Revert read replica POC (#93551) ... * Revert "chore: add replDB to team service (#91799)" This reverts commit c6ae2d7999. * Revert "experiment: use read replica for Get and Find Dashboards (#91706)" This reverts commit 54177ca619. * Revert "QuotaService: refactor to use ReplDB for Get queries (#91333)" This reverts commit 299c142f6a. * Revert "refactor replCfg to look more like plugins/plugin config (#91142)" This reverts commit ac0b4bb34d. * Revert "chore (replstore): fix registration with multiple sql drivers, again (#90990)" This reverts commit daedb358dd. * Revert "Chore (sqlstore): add validation and testing for repl config (#90683)" This reverts commit af19f039b6. * Revert "ReplStore: Add support for round robin load balancing between multiple read replicas (#90530)" This reverts commit 27b52b1507. * Revert "DashboardStore: Use ReplDB and get dashboard quotas from the ReadReplica (#90235)" This reverts commit 8a6107cd35. * Revert "accesscontrol service read replica (#89963)" This reverts commit 77a4869fca. * Revert "Fix: add mapping for the new mysqlRepl driver (#89551)" This reverts commit ab5a079bcc. * Revert "fix: sql instrumentation dual registration error (#89508)" This reverts commit d988f5c3b0. * Revert "Experimental Feature Toggle: databaseReadReplica (#89232)" This reverts commit 50244ed4a1.	1 year ago
Ryan McKinley	a0cd89860e	Identity: Add endpoint to get display info for an identifier (#91828)	1 year ago
Karl Persson	8bcd9c2594	Identity: Remove typed id (#91801) ... * Refactor identity struct to store type in separate field * Update ResolveIdentity to take string representation of typedID * Add IsIdentityType to requester interface * Use IsIdentityType from interface * Remove usage of TypedID * Remote typedID struct * fix GetInternalID	1 year ago
Ryan McKinley	21d4a4f49e	Auth: use IdentityType from authlib (#91763)	1 year ago
Kristin Laemmert	299c142f6a	QuotaService: refactor to use ReplDB for Get queries (#91333) ... * Feature (quota service): Use ReplDB for quota service Gets This adds the replDB to the quota service, as well as some more test helper functions to simplify updating tests. My intent is that the helper functions can be removed when this is fully rolled out (or not) and we're consistently using the ReplDB interface (or not!) * test updates	1 year ago
Ryan McKinley	ec6c6bd6c3	Identity: Add read-only identity apiserver (#90418)	1 year ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567)	1 year ago
Karl Persson	f18da6f4dc	User+team: remove startup migration for uid (#89953) ... * Remove migration that is performed on startup	2 years ago
Kristin Laemmert	9a3477dd11	Chore: removing (more) redundant transactions (#89373) ... * remove redundant transactions from single-statement sql methods	2 years ago
Rajguru	1b2f110664	Users: Add config option to control how often last_seen is updated (#88721) ... Users: Add config option to control how often last_seen is updated Co-authored-by: Karl Persson <kalle.persson92@gmail.com>	2 years ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116)	2 years ago
Eric Leijonmarck	c85d10d6c3	Auth: Removal of conflicting users check upon creation (#89045) ... fix: removal of check for conflicting users	2 years ago
Karl Persson	d3b06f09ae	Users: remove unused store function (#88784)	2 years ago
Carl Bergquist	6c79f63c04	Auth: Pass ctx when updating last seen (#88496) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Kristin Laemmert	876ed9bf0b	chore: decrease frequency of updating last_seen (#88461)	2 years ago
Carl Bergquist	0e6464fc96	Don't use transaction for updating last seen for an user. (#88426) ... dont use transaction for updating last seen Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Kristin Laemmert	16b1e285ea	Chore: Use cache for all signed in user lookups (#88133) ... * GetSignedInUser unexported (renamed to getSignedInUser) * GetSignedInUserWithCacheCtx renamed to GetSignedInUser * added a check for a nil cacheservice (as defensive programming / test convenience)	2 years ago
Karl Persson	be5ced4287	Identity: Use typed version of namespace id (#87257) ... * Remove different constructors and only use NewNamespaceID * AdminUser: check typed namespace id * Identity: Add convinient function to parse valid user id when type is either user or service account * Annotations: Use typed namespace id instead	2 years ago
Karl Persson	a2cba3d0b5	User: Add tracing (#87028) ... * Inject tracer in tests * Annotate with traces Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2 years ago
Misi	1cb3f332a1	Chore: Remove extra sql select from the Insert function of userimpl.store (#87060) ... Remove getAnyUserType	2 years ago
Eric Leijonmarck	8a1f43a65d	User: Remove the lowercasing in the query for login conflict (#87032) ... * refactor: remove the lowercasing in the query for login conflict * refactor: move function into the closure gs	2 years ago
Karl Persson	c4cfee8d96	User: support setting org and help flags though update function (#86535) ... * User: Support setting active org through update function * User: add support to update help flags through update function	2 years ago
Eric Leijonmarck	e394e16073	Auth: Force lowercase login/email for users (#86359) ... * [WIP]: Force lowercase login/email for user CRUD * warn and remove use of userCaseInsensitiveLogin check * remove log warning * reimplementation of the caseinsensitive * need to decide if we want the conflict check or not * remvoved the tests for conflict user by getEmail, getLogin * added tests for user lowercase migration * wip: emails next * tests for email lowercasing * review comments * optimized login and email lookup before migrating	2 years ago
Serge Zaitsev	522a98c126	Chore: Make Cfg field private in SQLStore (#85593) ... * make cfg private in sqlstore * fix db init in tests * fix case * fix folder test init * fix imports * make another Cfg private * remove another Cfg * remove unused variable * use store cfg, it has side-effects * fix mutated cfg in tests	2 years ago
Karl Persson	0fa983ad8e	AuthN: Use typed namespace id inside authn package (#86048) ... * authn: Use typed namespace id inside package	2 years ago
Karl Persson	1a6777cb93	User: use update function for password updates (#86419) ... * Update password through Update function instead * Remove duplicated to lower * Refactor password code	2 years ago
Eric Leijonmarck	9c1ef8b16e	Auth: Remove caseinsensitive check on update user (#86286) ... * Removal: case insensitive check on update * refactor and removal of test for duplicate user * refactor to still shadow user variable	2 years ago
Karl Persson	0f06120b56	User: Clean up update functions (#86341) ... * User: remove unused function * User: Remove UpdatePermissions and support IsGrafanaAdmin flag in Update function instead * User: Remove Disable function and use Update instead	2 years ago
Karl Persson	8520892923	User: Fix GetByID (#86282) ... * Auth: Remove unused lookup param * Remove case sensitive lookup for GetByID	2 years ago
Karl Persson	ba41954854	Email: trigger email verification flow (#85587) ... * Add email and email_verified to id token if identity is a user * Add endpoint to trigger email verification for user * Add function to clear stored id tokens and use it when email verification is completed	2 years ago
Karl Persson	73e426b081	User: email verification completion (#85259) ... * TempUser: Include InvitedById in TempUserDTO * Extract email verfication completion flow to service	2 years ago
Eric Leijonmarck	2f7fd729ef	Auth: Enable case insensitive logins/emails by default (#84840) ... * wip * wip * wip * wip postgres tests	2 years ago
Karl Persson	8d9521fb6d	Refactor: Email verification (#84393) ... * Update template names * Add verifier that we can use to start verify process * Use userVerifier when verifying email on update * Add tests --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
linoman	ac84069071	Password policy (#82268) ... * add password service interface * add password service implementation * add tests for password service * add password service wiring * add feature toggle * Rework from service interface to static function * Replace previous password validations * Add codeowners to password service * add error logs * update config files --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	2 years ago
Karl Persson	1315c67c8b	Team/User: UID migrations (#82298) ... * Add user uid migration to run on every startup to protect against empty values in a upgrade downgrade scenario * Add team uid migration to run on every startup to protect against empty values in a upgrade downgrade scenario * Run team uid migration	2 years ago
Dan Cech	790e1feb93	Chore: Update test database initialization (#81673) ... * streamline initialization of test databases, support on-disk sqlite test db * clean up test databases * introduce testsuite helper * use testsuite everywhere we use a test db * update documentation * improve error handling * disable entity integration test until we can figure out locking error	2 years ago
Ryan McKinley	9c9e5e68c8	User: Add uid colum to user table (#81615)	2 years ago
Dan Cech	318f51eaee	Chore: Remove unused CacheService dependency from sqlstore (#78507) ... remove unused CacheService dependency from sqlstore	2 years ago
Jo	259ecb1793	AuthZ: Improve team ID fetching for signedInUser (#78378) ... * improve team ID fetching for signedInUser * remove inner join * rename func * nit: remove extra params * nit: spacing and wrapping	2 years ago
Ieva	2c73f15839	Revert "Revert "RBAC: remove dashboard ACL logic from dash store, service #78130" (#78203) ... Revert "Revert "RBAC: remove dashboard ACL logic from dash store, service #78130 (#78198)" This reverts commit 8057b9298d.	2 years ago
Eric Leijonmarck	8057b9298d	Revert "RBAC: remove dashboard ACL logic from dash store, service #78130 (#78198) ... Revert "RBAC: remove dashboard ACL logic from dash store and service (#78130)" This reverts commit dd54931147.	2 years ago
Ieva	dd54931147	RBAC: remove dashboard ACL logic from dash store and service (#78130) ... remove dashboard ACL logic from dash store and service	2 years ago
Karl Persson	87eba34745	User: remove empty email / username check from update in service (#77347) ... User: remove empty email / username check from update in service	2 years ago
Karl Persson	1528d6f5c4	Authn: Prevent empty username and email during sync (#76330) ... * Move errors to error file * Move check for both empty username and email to user service * Move check for empty email and username to user service Update * Wrap inner error * Set username in test	2 years ago
Gabriel MABILLE	96cbe70b14	User: Support `sort` query param for user and org user, search endpoints (#75229) ... * User: Add sort option to user search * Switch to an approach that uses the dashboard search options * Cable user sort on the org endpoint * Alias user table with u in org store * Add test and cover orgs/:orgID/users/search endpoint * Add test to userimpl store * Simplify the store_test with sortopts.ParseSortQueryParam * Account for PR feedback * Positive check * Update docs * Update docs * Switch to ErrOrFallback Co-authored-by: Karl Persson <kalle.persson@grafana.com> --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	2 years ago
Ryan McKinley	025b2f3011	Chore: use any rather than interface{} (#74066)	2 years ago
Ieva	6885b3d577	Chore: remove checks for whether RBAC is disabled (#73812) ... * remove checks for whether access control is disabled, as it is always enabled now * linting	2 years ago
linoman	2e050f25bf	Auth: Allow to auto-assign empty role (#73326) ... Allow to auto-assign empty role	2 years ago
linoman	1c7f89c41b	Auth: Add empty role usage metrics for service and user accounts (#73108) ... * Add tests for service accounts metrics usage * Add service account store implementation * Add service account service implementation * Add tests for org metrics usage * Add org implementation * Add service implementation	2 years ago