212 Commits (c8ce20a807819626979fdf3facce1db53ec511d9)

Author	SHA1	Message	Date
Karl Persson	4ede9fc7a4	AuthN: User sync info clean up (#64217) ... * AuthN: handle case where auth_info exists but not the user	2 years ago
Karl Persson	f258adadbf	AuthN: add utility functions for different type of login responses (#64133) ... * AuthN: add utility functions to handle response and redirect after successful login * API: Reuse utility functions for logins if authnService flag is enabled	2 years ago
Jo	92f47e72e1	Authn: Add missing jwt auth stat (#64127) ... add missing jwt auth stat	2 years ago
Karl Persson	e3cbc1f165	AuthN: Fix issue with duplicated auth connection (#63836) ... AuthN: Fix issue with duplicated auth connection when user signed in first time	2 years ago
Karl Persson	8484d0c4ef	Settings: Remove global variables for auth settings (#63795) ... * Setting: Remove global DisableLoginForm and add it to cfg * Setting: Remove unused BasicAuthEnabled global * Setting: Remove global OAuthAutoLogin and use from cfg * Setting: Remove global AnonymousEnabled * Setting: Remove global values for AuthProxy settings	2 years ago
Karl Persson	2a7fc3983b	AuthN: cleanup logs (#63652) ... * AuthN: clean up logs Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
Karl Persson	16b416b88b	AuthN: Extract enable disabled users logic to its own hook (#63628)	2 years ago
Karl Persson	ddaf145d71	AuthN: Fix user sync with multiple client (#63615) ... * AuthN: Fix user sync to handle auth connections to multiple providers	2 years ago
Karl Persson	057d9c45fa	AuthN: Add in-memory cache for oauth token refresh hook (#63569) ... * OAuthSyncHook: Add in-memory cache so we don't have to perform the check on every request Co-authored-by: Jo <joao.guerreiro@grafana.com>	2 years ago
Jo	635a456fa4	Authn: Add separate context for session tagging (#63561) ... add context	2 years ago
Karl Persson	207a55be66	AuthN: add flag for org roles sync (#63507) ... * AuthN: Add flag to control org role syncs * JWT: Only sync org roles if the skip flag for jwt is false * LDAP: Only sync org role if skip flag for ldap is false * OAuth: Skip org roles sync if no roles were provided by upstream service * Grafana: Set SyncOrgRoles to true for authentication through proxy with grafana as backend	2 years ago
Jo	ff78103a24	Authn: Anon session service (#63052) ... * add anon sessions package * add usage stat fn * implement count for cache * add anonservice to authn broker * lint * add tests for remote cache count * move anon service to services * wrap tagging in goroutine * make func used	2 years ago
Karl Persson	5ca8ea40c1	AuthN: Cleanup authn package (#63456) ... * AuthN: Update comments for ClientParams * AuthN: Update flag name from SyncTeamMembers to SyncTeams * UserSync: rename function and fix order of parameters so it is correct * UserSync: Fix so we skip check if no authModule or authID is passed * UserSync: move quota check to create user function * UserSync: Move FetchSyncedUserHook to UserSync * UserSync: Move last seen user hook to user sync service * ApiKey: Implement last seen hook as a client hook instead	2 years ago
Jo	554dc9b97d	Authn: Fix password client fallthrough (#63244) ... * fix password client fallthrough * fix grafana client String	2 years ago
Jo	d4cfbd9fd3	LDAP: Move LDAP globals to Config (#63255) ... * structure dtos and private methods * add basic LDAP service * use LDAP service in ldap debug API * lower non fatal error * remove unused globals * wip * remove final globals * fix tests to use cfg enabled * restructure errors * remove logger from globals * use ldap service in authn * use ldap service in context handler * fix failed tests * fix ldap middleware provides * fix provides in auth_test.go	2 years ago
Jo	6322fce725	LDAP: Move to single package cluster (#63035) ... * move multildap to ldap package * move LDAP api and tests to ldap package * register background service * lint	2 years ago
Jo	14a78b58e9	Authn: Stat registration (#62934) ... * reorganize auth usage stats * usage stat privilege elevators * stat count of modified role * cfg related info * add authn anon client * kv store * ensure anon enabled is collected even if client is not registered * fix usage stats test	2 years ago
Karl Persson	9311085e5a	AuthN: support sync cache for proxy client (#62874) ... * AuthN: Add cache support for auth proxy to skip sync * AuthN: Change proxy auth hook to be a client hook * AuthN: fix cache key * fix test * lint	2 years ago
idafurjes	982939111b	Rename Id to ID for annotation models (#62886) ... * Rename Id to ID for annotation models * Add xorm tags * Rename Id to ID for API key models * Add xorm tags	2 years ago
Karl Persson	6840cc11ff	AuthN: add support for client specific hooks (#62863) ... * AuthN: Add HookClient interface * AuthN: Check if client implement authn.HookClient and call the hook if it does * AuthN: Convert refresh token hook into a client hook	2 years ago
Karl Persson	180a587f70	AuthN: fetch final state of signed in user (#62854) ... * AuthN: add a hook we can use to fetch final state of user	2 years ago
Karl Persson	ad068ed533	AuthN: Use BasicAuth from http request (#62792) ... AuthN: use BasicAuth from http request	2 years ago
Misi	7c1d9769ca	Auth: Rotate token patch (#62676) ... * Use singleflight.Group * Align tests * Cleanup	2 years ago
Karl Persson	d395901e80	AuthN: Expose RegisterClient and add client name for saml (#62604) ... * AuthN: add RegisterClient to service interface * AuthN: Add client name for saml	2 years ago
Karl Persson	efeb0daec6	AuthN: Add oauth clients and perform oauth authentication with authn.Service (#62072) ... * AuthN: Update signature of redirect client and RedirectURL function * OAuth: use authn.Service to perform oauth authentication and login if feature toggle is enabled * AuthN: register oauth clients * AuthN: set auth module metadata * AuthN: add logs for failed login attempts * AuthN: Don't use enable disabled setting * OAuth: only run hooks when authnService feature toggle is disabled * OAuth: Add function to handle oauth errors from authn.Service	2 years ago
Serge Zaitsev	7dbd2cd139	Chore: Fix goimports grouping (#62426) ... fix goimports ordering	2 years ago
Kristin Laemmert	9256a520a4	chore: move user_auth models to (mostly) login service (#62269) ... * chore: move user_auth models to (mostly) login service	2 years ago
Eric Leijonmarck	5531e22f46	Auth: Add disable of team sync for JWT Authentication (#62191) ... * fix: disable team sync for JWT Authentication * add: comment to test * change test to conform to new expected behavior * fix: spelling * formatting	2 years ago
Karl Persson	3447ad2602	AuthN: support priority for post auth and post login hooks (#62208) ... * AuthN: store post auth hooks in a priority list and update registration function to take a priority * AuthN: store post login hooks in a priority list and update registration function to take a priority * AuthN: Change priority for sync user	2 years ago
Jo	284ca4eab4	AuthN: JWT remove unnecessary if (#62233) ... remove unnecessary if	2 years ago
Karl Persson	95ea4bad6f	AuthN: Rebuild Authenticate so we only have to call it once in context handler (#61705) ... * API: Add reqSignedIn to router groups * AuthN: Add fall through in context handler * AuthN: Add IsAnonymous field * AuthN: add priority to context aware clients * ContextHandler: Add comment * AuthN: Add a simple priority queue * AuthN: Add Name to client interface * AuthN: register clients with function * AuthN: update mock and fake to implement interface * AuthN: rewrite test without reflection * AuthN: add comment * AuthN: fix queue insert * AuthN: rewrite tests * AuthN: make the queue generic so we can reuse it for hooks * ContextHandler: Add fixme for auth headers * AuthN: remove unused variable * AuthN: use multierror * AuthN: write proper tests for queue * AuthN: Add queue item that can store the value and priority Co-authored-by: Jo <joao.guerreiro@grafana.com>	2 years ago
Karl Persson	50608db59a	AuthN: Add interface and function to operate on clients that supports redirects (#61905)	2 years ago
Kristin Laemmert	cd08f2575a	chore: move jwt models into auth/jwt (#61862) ... * chore: move jwt models into auth/jwt	2 years ago
linoman	56c2755b3b	Fix JWT claims request (#61650) ... * Fix JWT claims request * Add test scenarios for missing config options	2 years ago
linoman	4d095547f8	Auth: Implement skip org role sync for jwt (#61647) ... * Add new config option * Add frontend control * Condition new auth broker with config option * Condition old auth broker with config option Co-authored-by: Jo <joao.guerreiro@grafana.com> Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2 years ago
Jo	ecafb4dd15	Auth forwarding: Pass tokens without refresh (#61634) ... * return only tokens from oauth * feedback	2 years ago
Karl Persson	412d80b498	AuthN: Add post auth hook for oauth token refresh (#61608) ... * AuthN: rename package to sync * AuthN: rename sync files * Ouath: Add mock for OauthTokenService * AuthN: Implement access token refresh hook * AuthN: remove feature check from hook * AuthN: register post auth hook for oauth token refresh	2 years ago
Karl Persson	766fa4e7d5	AuthN: Add last seen sync hooks for user and api keys (#61571) ... * AUthN: Add last seen sync hooks for user / service account and move api key last seen to own hook * ContextHandler: only run sync for last seen if auth.Service is not enabled	2 years ago
Karl Persson	b44b6fc5c6	AuthN: Add auth proxy client (#61555) ... * AuthN: set up boilerplate for proxy client * AuthN: Implement Test for proxy client * AuthN: parse accept list in constructor * AuthN: add proxy client interface * AuthN: handle error * AuthN: Implement the proxy client interface for ldap * AuthN: change reciever name * AuthN: add grafana as a proxy client * AuthN: for error returned * AuthN: add tests for grafana proxy auth * AuthN: swap order of grafan and ldap auth * AuthN: Parse additional proxy headers in proxy client and pass down	2 years ago
Karl Persson	2324597d8d	AuthN: Perform login with authn.Service (#61466) ... * AuthN: Create password client wrapper and use that on in basic auth client * AuthN: fix basic auth client test * AuthN: Add tests for form authentication * API: Inject authn service * Login: If authnService feature flag is enabled use authn login * Login: Handle token creation errors	2 years ago
Jo	6fec8fda39	AuthN: Clean errors in user/org sync (#61560) ... * clean errors in user/org sync * lower logging level for non 5xx errors	2 years ago
Jo	be3b81fecd	AuthN: Readd user protection service to user sync (#61534) ... * add user protection service to user sync * fix tests	2 years ago
Jo	dcfeab2c73	AuthN: User Quota (#61540) ... * remove reqContext from quota checks in login * add guards for nil ScopeParams	2 years ago
Misi	b8b08ea292	Auth: Add sub claim check to JWT Auth pre-checks (#61417) ... * Auth: Add sub claim check to JWT Auth pre-checks * Add #nosec annotation to the test tokens	2 years ago
Karl Persson	0d572ff2ce	AuthN: Add check for disabled identities (#61382) ... * AuthN: return error if identity is disabled * AuthN: Remove isDisabled check in client * AuthN: Format imports	2 years ago
Karl Persson	3e8857acb8	AuthN: Post login hooks (#61287) ... * AuthN: add the ability to register post login hooks * AuthN: add a guard for the user id * AuthN: Add helper to create external user info from identity * AuthN: Pass auth request to password clients * AuthN: set auth module and username in metadata	2 years ago
Jo	0c8ad80575	Authn: JWT client (#61157) ... * add jwt client * alias JWT verifier * debug implementation * add tests for jwt client * add constant for JWT module * Feedback Co-authored-by: Kalle Persson <kalle.persson@grafana.com> Co-authored-by: Mihály Gyöngyösi <mgyongyosi@users.noreply.github.com> Co-authored-by: Kalle Persson <kalle.persson@grafana.com> Co-authored-by: Mihály Gyöngyösi <mgyongyosi@users.noreply.github.com>	2 years ago
Karl Persson	2de72c1c39	AuthN: Login (#61225) ... * AuthN: Add function to login auth request	2 years ago
Karl Persson	a49892c9ac	AuthN: Refactor basic auth client to support multiple password auth (#61153) ... * AuthN: add interface for password clients * AuthN: Extract grafana password client * AuthN: Rewrite basic client tests * AuthN: Add Ldap client and rename method of PasswordClient * AuthN: Configure multiple password clients * AuthN: create ldap service and add tests	2 years ago
idafurjes	7dcb502b33	Chore: Remove org model duplicates (#61025) ... Remove org model duplicates	2 years ago