3613 Commits (c46b42a59528f3690331175eceb61ffa16b19ca7)

Author	SHA1	Message	Date
Misi	4577e61ee7	Auth: Improve /admin/authentication permission checks and include new SSO pages (#81183) ... * Move evalAuthSettings to ssoutils * Improve permission check for auth page	2 years ago
idafurjes	6b4eaa0d18	Add MFolderIDsAPICount metric to count FolderIDs in api package (#80866) ... * Add MFolderIDsAPICount metric to cound FolderIDs in api package * Change counter to counter vector with method names as string values	2 years ago
Jo	9f5a8bf926	AuthInfo: Revert #81013. Fix cache invalidation (#81050) ... * Revert "Auth: Revert "Auth: Cache Auth Info" (#81013)" This reverts commit ce84f7c540. * fix cache invalidation during user takeover * fix incomplete test	2 years ago
Marcus Efraimsson	6768c6c059	Chore: Remove public vars in setting package (#81018) ... Removes the public variable setting.SecretKey plus some other ones. Introduces some new functions for creating setting.Cfg.	2 years ago
Karl Persson	147bf01745	IDForwarding: Always forward id tokens to plugins (#81041) ... * Always forward id tokens to plugins	2 years ago
Misi	ce84f7c540	Auth: Revert "Auth: Cache Auth Info" (#81013) ... Revert "Auth: Cache Auth Info"	2 years ago
Will Browne	3f30cbf91c	DataSources: Add datasource fetching + querying interface (#80749) ... * first pass * separate oss + enterprise * tidy things up * add ctx * fix tests * use standalone svcs * mv plugin context provide * fix wire * fix import	2 years ago
Misi	6752a512f3	Auth: Change UI route, add frontend endpoints to api.go (#80671) ... Delete advanced from UI route, fix 404	2 years ago
Alexander Zobnin	484ced521f	Auth: Fix identifying rendering request (#80807) ... * Auth: Fix identifying rendering request * Add comments	2 years ago
Jo	c767481dee	Auth: Cache Auth Info (#80620) ... * leverage cache for auth info * fix tests and integration * fix panic * fix panic	2 years ago
Jo	e77dbb63e3	AccessControl: Add group to role picker and standardize display (#79570) ... * add group to role picker and standardize display * change stuttery roles	2 years ago
Ryan McKinley	41e523bde7	K8s/FeatureFlags: Add an apiserver to manage feature flags (dev only) (#80501) ... * add deployment registry API cloud only * update versions * add feature flag endpoints * use helpers * merge main * update AllowSelfServie and re-run code gen * fix package name * add allowselfserve flag to payload * remove config * update list api to return the full registry including states * change enabled check * fix compile error * add feature toggle and split path in frontend * changes * with status * add more status/state * add back config thing * add back config thing * merge main * merge main * now on the /current api endpoint * now on the /current api endpoint * drop frontend changes * change group name to featuretoggle (singular) * use the same settings * now with patch * more common refs * more common refs * WIP actually do the webhook * fix comment * fewer imports * registe standalone * one less file * fix singular name --------- Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com>	2 years ago
Gabriel MABILLE	6b954165c5	RBAC: Cover plugin routes (#80578) ... * RBAC: Cover plugin routes * Action instead of ReqAction * Fix test initializations * Fix NewPluginProxy call * Duplicate test to add RBAC checks * Cover legacy access control as well * Fix typo * action -> reqAction * Add example Co-authored-by: Andres Martinez Gotor <andres.martinez@grafana.com> --------- Co-authored-by: Andres Martinez Gotor <andres.martinez@grafana.com>	2 years ago
Tania	c0918d41dd	Chore: Remove extra loop over folders in GetFolders handler (#79933) ... Chore: Remove extra loop in GetFolders handler	2 years ago
Karl Persson	5bfb799c0d	index: Fetch auth module and provide it to front-end (#80345)	2 years ago
Ryan McKinley	85d68b88cf	FeatureFlags: Remove enabled from FeatureFlag model (#79960)	2 years ago
Ryan McKinley	2c09f969f1	K8s: Add dashboard service (requires dev mode) (#78565)	2 years ago
Ryan McKinley	1caaa56de0	FeatureFlags: Use interface rather than manager (#80000)	2 years ago
Matthew Jacobson	c18da48e50	Alerting: Separate overlapping legacy and UA alerting routes (#76517) ... * Separate overlapping legacy and UA alerting routes api/alert-notifiers, alerting/list, and alerting/notifications existed in both legacy and UA. Rename legacy route paths and nav ids to be independent of UA ones.	2 years ago
Jo	5ae3249c36	Auth: Hide forgot password if grafana auth is disabled (#79895) ... * hide forgot password if grafana auth is disabled * fix test	2 years ago
Torkel Ödegaard	e924627659	Frontend: Reload the browser when backend configuration/assets change (#79057) ... * Detect frontend asset changes * Update * merge main * Frontend: Detect new assets / versions / config changes (#79258) * avoid first check * Updates and add tests * Update * Update * Updated code * refine * use context --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Kat Yang	29113a6369	Chore: Update OpenAPI generation README to include bingo instructions (#79104) ... * Chore: Update OpenAPI generation README to include bingo instructions * chore: remove extra whitespace	2 years ago
Jo	814d62406e	User: Verify external user status for accessing certain user routes (#79909) ... stricter user profile route checking	2 years ago
linoman	824e0f9ce8	Plugins: Display plugin permissions required (#78355) ... * Add definition of external service registration * Add style and tables for permissions needed * Add external service registration to local without counterpart * Add feature toggle check * Add feature flag check in the backend as well * Add the disclaimer for permissions --------- Co-authored-by: Gabriel MABILLE <gabriel.mabille@grafana.com>	2 years ago
idafurjes	3770daabe2	Remove deprecated FolderID from api tests (#79466) ... * Remove deprecated FolderID from api tests * Removed unused const	2 years ago
Agnès Toulet	fdaf6e3f2e	PublicDashboards: Add setting to disable the feature (#78894) ... * Replace feature toggle with configuration setting * Fix permission alert * Update documentation * Add back feature toggle * revert unwanted commited changes * fix tests * run prettier * Update SharePublicDashboard.test.tsx * fix linter and frontend tests * Update api.go * Apply docs edit from code review Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com> * Update index.md * Update docs/sources/setup-grafana/configure-grafana/feature-toggles/index.md Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * add isPublicDashboardsEnabled + test * fix test * update ff description in registry * move isPublicDashboardsEnabled * revert getConfig() update --------- Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Karl Persson	8cb351e54a	Authn: Handle logout logic in auth broker (#79635) ... * AuthN: Add new client extension interface that allows for custom logout logic * AuthN: Add tests for oauth client logout * Call authn.Logout Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2 years ago
Michael Mandrus	456939bac4	Feature Toggles: Remove use of boolPtr in FeatureFlag struct (#79550) ... * remove bool ptr and update docs * fix silly thing * merge main * maybe this time --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2 years ago
Will Browne	0b511aaace	Plugins: Add backend check for app page role access (#78269) ... * add backend check for roles * tidy * fix tests * incorporate rbac * fix linter * apply PR feedback * add tests * fix logic * add comment * apply PR feedback	2 years ago
Ezequiel Victorero	864d91ed3e	Export: Remove no-store headers in pdf and image previews (#78844)	2 years ago
Sofia Papagiannaki	6d9c651b74	Chore: Remove redundant benchmarks (#79626)	2 years ago
Eric Leijonmarck	57ca8fa368	Anonymous: Add device limits to stats (#79494) ... * add device limits * feat: tabs the anon and session stats w. highlight	2 years ago
Sofia Papagiannaki	d89a8a3a82	Nested Folders: Fix /api/folders pagination (#79447) ... * Nested Folders: Fix /api/folders pagination We used to check access to the root folders after fetching them from the DB with pagination. This fix splits logic for fetching folders in: - fetching subfolders - fetching root folders and refactors the query for the latter so that is filters by folders with permissions * Add tests * Update benchmarks	2 years ago
Andres Martinez Gotor	1324186f87	Chore: Evaluate if an app is disabled for API requests (#79564)	2 years ago
Misi	ce1450d4d3	Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443) ... * Configure SkipOrgRoleSync from OAuthInfo * Remove skipOrgRoleSync from socialbase and connectors * Add test to socialimpl.ProvideService * Deprecate AuthSettings' fields * clean up misleading init of frontendsettings.Auth	2 years ago
Will Browne	ce8fd14f1f	Plugins: Make renderer service load renderer plugin (#77854) ... * rendering service loads renderer plugin * update naming * tidy * apply PR feedback * fix missing feature manager * fix step * set plugin	2 years ago
Karl Persson	a7a51bf2d8	Analytics: Return empty analytic settings for users that are not signed in (#79515) ... Return empty analytic settings for users that are not signed in	2 years ago
Ben Sully	315100e2e3	Plugins: Add Grafana config to app plugin context (#79439)	2 years ago
Jo	3647ba7360	Anonymous: Add configurable device limit (#79265) ... * Anonymous: Add device limiter * break auth if limit reached * fix typo * refactored const to make it clearer with expiration * anon device limit for config --------- Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com>	2 years ago
Ieva	19ad788333	RBAC: change annotation scopes back (#79330) ... Change the annotation scopes back to what they were	2 years ago
Ryan McKinley	f69516bf47	K8s: Add resource type helper to avoid so many hardcoded names (#79344)	2 years ago
Gábor Farkas	5b4da3a7dc	mssql: prepare logs-handling for decouple-datasource changes (#79214) ... mssql: refactor logs-handling	2 years ago
Mihai Doarna	bff2ac3627	Auth: check that oauthProvider is not nil in Logout() func (#79271) ... check that oauthProvider is not nil	2 years ago
Misi	50f4e78a39	Auth: Use SSO settings service to load social connectors + refactor (#79005) ... * Refactor to prevent cyclic dependencies * Move list authorization to the API layer * Init connectors using the SSO settings service in case the ssoSettingsApi feature toggle is enabled * wip, need to handle the cyclic dep * Remove cyclic dependency * Align tests + refactor * Move back OAuthInfo to social * Delete pkg/login/social/constants * Move reloadable registration to the social providers * Rename connectors.Error to connectors.SocialError	2 years ago
Kat Yang	31fb38723d	Chore: Remove FolderID from DTO Folder (#78420) ... * Chore: Remove FolderID from DTO Folder * chore: add OrgID field to an instance of SaveDashboardCommand * chore: add another OrgID to pair with the FolderUID: * chore: add OrgId to Folder struct and expectedParentOrgIDs to testCase struct, unsure if last part is necessary * Fix folder test, add expected orgID * chore: regen specs --------- Co-authored-by: Ida Furjesova <ida.furjesova@grafana.com>	2 years ago
idafurjes	550746be71	Fix capitalising Folder structs (#79207) ... * Fix capitalising Folder structs * Add swagger and fix api dashboard test * Add swagger files with bingo installed	2 years ago
Todd Treece	2a2a132c61	K8s: Refactor metrics to share k8s registry (#79106)	2 years ago
Todd Treece	ea36336c0a	Chore: Ensure BuildVersion is set when using CDN (#79169)	2 years ago
Alexander Zobnin	959ebf82da	Folders: Show dashboards and folders with directly assigned permissions in "Shared" folder (#78465) ... * Folders: Show folders user has access to at the root level * Refactor * Refactor * Hide parent folders user has no access to * Skip expensive computation if possible * Fix tests * Fix potential nil access * Fix duplicated folders * Fix linter error * Fix querying folders if no managed permissions set * Update benchmark * Add special shared with me folder and fetch available non-root folders on demand * Fix parents query * Improve db query for folders * Reset benchmark changes * Fix permissions for shared with me folder * Simplify dedup * Add option to include shared folder permission to user's permissions * Fix nil UID * Remove duplicated folders from shared list * Folders: Fix fetching empty folder * Nested folders: Show dashboards with directly assigned permissions * Fix slow dashboards fetch * Refactor * Fix cycle dependencies * Move shared folder to models * Fix shared folder links * Refactor * Use feature flag for permissions * Use feature flag * Review comments * Expose shared folder UID through frontend settings * Add frontend type for sharedWithMeFolderUID option * Refactor: apply review suggestions * Fix parent uid for shared folder * Fix listing shared dashboards for users with access to all folders * Prevent creating folder with "shared" UID * Add tests for shared folders * Add test for shared dashboards * Fix linter * Add metrics for shared with me folder * Add metrics for shared with me dashboards * Fix tests * Tests: add metrics as a dependency * Fix access control metadata for shared with me folder * Use constant for shared with me * Optimize parent folders access check, fetch all folders in one query. * Use labels for metrics	2 years ago
Dan Cech	647f576359	Server: Automatically generate a self-signed TLS cert if needed (#78243) ... generate a self-signed cert when running in https or http2 mode without a provided cert	2 years ago