53 Commits (cb3cd021b7551459e3ee4e2050d60c9a5a3b026c)

Author	SHA1	Message	Date
Mariell Hoversholm	757be6365a	CI: Bump golangci-lint to 2.0.2 (#103572)	1 month ago
Ryan McKinley	680e6bc1f8	Authlib: Use types package rather than claims (#99243)	4 months ago
Misi	26c323b5a6	Chore: Do not return the token on refresh error (#98171) ... * Small improvements * Remove unused error	5 months ago
Misi	a5635d7e89	Auth: Update external session data regardless if the improved session handling is enabled (#98139) ... Update ext session tokens regardless if the ft is enabled	5 months ago
Misi	6cd3a5458e	Auth: Return error when retries have been exhausted for OAuth token refresh (#98034) ... Return error when retries for DB lock have been exhausted in oauth_token.go	5 months ago
Misi	84b8296ffb	OAuth: Use the attached external session data in OAuthToken and OAuthTokenSync (#96655) ... * wip * wip + tests * wip * wip opt2 * Use authn.Identity struct's SessionToken * Merge fixes * Handle disabling the feature flag correctly * Fix test * Cleanup * Remove HasOAuthEntry from the OAuthTokenService interface * Remove unused function	6 months ago
Misi	d0d62fc518	Chore: Use the correct value in log (#96840)	6 months ago
Misi	1061e4712f	OAuth: Refactor OAuthToken service to make it easier to use the new external sessions (#96667) ... * Refactor OAuthToken service * introduce user.SessionAwareIdentityRequester * replace login.UserAuth parameters with user.SessionAwareIdentityRequester * Add nosec G101 to fake ID tokens * Opt 2, min changes * Revert a change to the current version	6 months ago
Dan Cech	9020eb4b17	Auth: Update oauthtoken service to use remote cache and server lock (#90572) ... * update oauthtoken service to use remote cache and server lock * remove token cache * retry is lock is held by an in-flight refresh * refactor token renewal to avoid race condition * re-add refresh token expiry cache, but in SyncOauthTokenHook * Add delta to the cache ttl * Fix merge * Change lockTimeConfig * Always set the token from within the server lock * Improvements * early return when user is not authed by OAuth or refresh is disabled * Allow more time for token refresh, tracing * Retry on Mysql Deadlock error 1213 * Update pkg/services/authn/authnimpl/sync/oauth_token_sync.go Co-authored-by: Dan Cech <dcech@grafana.com> * Update pkg/services/authn/authnimpl/sync/oauth_token_sync.go Co-authored-by: Dan Cech <dcech@grafana.com> * Add settings for configuring min wait time between retries * Add docs for the new setting * Clean up * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> --------- Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	9 months ago
Karl Persson	8bcd9c2594	Identity: Remove typed id (#91801) ... * Refactor identity struct to store type in separate field * Update ResolveIdentity to take string representation of typedID * Add IsIdentityType to requester interface * Use IsIdentityType from interface * Remove usage of TypedID * Remote typedID struct * fix GetInternalID	9 months ago
Ryan McKinley	21d4a4f49e	Auth: use IdentityType from authlib (#91763)	10 months ago
Karl Persson	bcfb66b416	Identity: remove GetTypedID (#91745)	10 months ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567)	10 months ago
Misi	f337da8e57	Chore: Add more context to logs of OAuthToken and OAuthTokenSync (#90071) ... Chore: Add more context to oauth token sync	11 months ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116)	12 months ago
Karl Persson	0fa983ad8e	AuthN: Use typed namespace id inside authn package (#86048) ... * authn: Use typed namespace id inside package	1 year ago
Gabriel MABILLE	596e828150	Fix: Refresh token when id_token is expired (#79569) ... * Fix: Refresh token when id_token is expired * add id_token comparison * Fix wire * Use userID as cache key * Apply suggestions from code review --------- Co-authored-by: linoman <2051016+linoman@users.noreply.github.com> Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	1 year ago
Jo	9f5a8bf926	AuthInfo: Revert #81013. Fix cache invalidation (#81050) ... * Revert "Auth: Revert "Auth: Cache Auth Info" (#81013)" This reverts commit ce84f7c540. * fix cache invalidation during user takeover * fix incomplete test	1 year ago
Misi	ce84f7c540	Auth: Revert "Auth: Cache Auth Info" (#81013) ... Revert "Auth: Cache Auth Info"	1 year ago
Jo	c767481dee	Auth: Cache Auth Info (#80620) ... * leverage cache for auth info * fix tests and integration * fix panic * fix panic	1 year ago
Misi	50f4e78a39	Auth: Use SSO settings service to load social connectors + refactor (#79005) ... * Refactor to prevent cyclic dependencies * Move list authorization to the API layer * Init connectors using the SSO settings service in case the ssoSettingsApi feature toggle is enabled * wip, need to handle the cyclic dep * Remove cyclic dependency * Align tests + refactor * Move back OAuthInfo to social * Delete pkg/login/social/constants * Move reloadable registration to the social providers * Rename connectors.Error to connectors.SocialError	1 year ago
Karl Persson	1eb19befaa	Login: refactor auth info package (#78459) ... * Remove unused stats and metrics * No longer collect metrics * Remove unused dependency * Move database from sub package	2 years ago
Karl Persson	d42201dbf4	Login: remove unused function (#78442) ... * Move test to the db so we test the queries and not just testing the mock * Remove unused function and dependencies * Remove unused functions from the database * Add some integration tests	2 years ago
Karl Persson	a929e3f2cf	Auth: Remove unused function (#78332) ... Remove unused function	2 years ago
Misi	1e81ffccac	Auth: Handle when access token has already been refreshed in OAuth token sync (#77118) ... * Use singleflight to prevent logging error if the token has already been refreshed * Change order of error checks * align tests, change error name * Change sf key * Update based on the review * refactor	2 years ago
Misi	bd2191c158	Auth: OAuth token sync improvements (#75943) ... * Add metric, improve token refresh * changes * handle ctx cancelled * Fix import order	2 years ago
Serge Zaitsev	8187d8cb66	Chore: capitalise log message for auth packages (#74332)	2 years ago
Ryan McKinley	025b2f3011	Chore: use any rather than interface{} (#74066)	2 years ago
Jo	fe1563882a	Chore: Port oauth token service to identity requester (#73988) ... * port oauth token service to identity requester * fix broken test * no need to check for render	2 years ago
Misi	dcf26564db	OAuth: Introduce user_refresh_token setting and make it default for the selected providers (#71533) ... * First changes * WIP docs * Align current tests * Add test for UseRefreshToken * Update docs * Fix * Remove unnecessary AuthCodeURL from generic_oauth * Change GitHub to disable use_refresh_token by default	2 years ago
Jo	914daef0fd	Auth: Add request context to UserInfo calls (#70007) ... * use context for UserInfo requests * set timeouts for oauth http client * Update pkg/login/social/common.go Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
Serge Zaitsev	a38f230d37	Chore: Remove result fields from login (#65136) ... * remove result fields from login * fix tests * fix tests * another shadowing	2 years ago
Jo	ccbf200c4a	SupportBundles: Add OAuth bundle collectors (#64810) ... * wip * add oauth support bundles * add specific configs for generic oauth and azureAD * add doc entry * optimize struct packing * Update pkg/login/social/azuread_oauth.go Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * nit update --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
Kristin Laemmert	9256a520a4	chore: move user_auth models to (mostly) login service (#62269) ... * chore: move user_auth models to (mostly) login service	2 years ago
Jo	ecafb4dd15	Auth forwarding: Pass tokens without refresh (#61634) ... * return only tokens from oauth * feedback	2 years ago
Karl Persson	412d80b498	AuthN: Add post auth hook for oauth token refresh (#61608) ... * AuthN: rename package to sync * AuthN: rename sync files * Ouath: Add mock for OauthTokenService * AuthN: Implement access token refresh hook * AuthN: remove feature check from hook * AuthN: register post auth hook for oauth token refresh	2 years ago
Marcus Efraimsson	6dbe3b555f	Plugins: Refactor forward of cookies, OAuth token and header modifications by introducing client middlewares (#58132) ... Adding support for backend plugin client middlewares. This allows headers in outgoing backend plugin and HTTP requests to be modified using client middlewares. The following client middlewares added: Forward cookies: Will forward incoming HTTP request Cookies to outgoing plugins.Client and HTTP requests if the datasource has enabled forwarding of cookies (keepCookies). Forward OAuth token: Will set OAuth token headers on outgoing plugins.Client and HTTP requests if the datasource has enabled Forward OAuth Identity (oauthPassThru). Clear auth headers: Will clear any outgoing HTTP headers that was part of the incoming HTTP request and used when authenticating to Grafana. The current suggested way to register client middlewares is to have a separate package, pluginsintegration, responsible for bootstrap/instantiate the backend plugin client with middlewares and/or longer term bootstrap/instantiate plugin management. Fixes #54135 Related to #47734 Related to #57870 Related to #41623 Related to #57065	3 years ago
linoman	6cc56311d9	Auth: Display id Provider label in orgs/users view (#58033) ... * Add frontend test * Add frontend label component * Adjust backend tests * Retrieve auth IDP labels for users at org/users. Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> Co-authored-by: Kalle <kalleep@users.noreply.github.com> Co-authored-by: Jo <Jguer@users.noreply.github.com>	3 years ago
Misi	9c954d06ab	Auth: Refresh OAuth access_token automatically using the refresh_token (#56076) ... * Verify OAuth token expiration for oauth users in the ctx handler middleware * Use refresh token to get a new access token * Refactor oauth_token.go * Add tests for the middleware changes * Align other tests * Add tests, wip * Add more tests * Add InvalidateOAuthTokens method * Fix ExpiryDate update to default * Invalidate OAuth tokens during logout * Improve logout * Add more comments * Cleanup * Fix import order * Add error to HasOAuthEntry return values * add dev debug logs * Fix tests Co-authored-by: jguer <joao.guerreiro@grafana.com>	3 years ago
idafurjes	a14621fff6	Chore: Add user service method SetUsingOrg and GetSignedInUserWithCacheCtx (#53343) ... * Chore: Add user service method SetUsingOrg * Chore: Add user service method GetSignedInUserWithCacheCtx * Use method GetSignedInUserWithCacheCtx from user service * Fix lint after rebase * Fix lint * Fix lint error * roll back some changes * Roll back changes in api and middleware * Add xorm tags to SignedInUser ID fields	3 years ago
idafurjes	6afad51761	Move SignedInUser to user service and RoleType and Roles to org (#53445) ... * Move SignedInUser to user service and RoleType and Roles to org * Use go naming convention for roles * Fix some imports and leftovers * Fix ldap debug test * Fix lint * Fix lint 2 * Fix lint 3 * Fix type and not needed conversion * Clean up messages in api tests * Clean up api tests 2	3 years ago
idafurjes	d3d8fdd878	Chore: Move user errors to user service (#52460) ... * Move user not found err to user service * User ErrCaseInsensitive from user pkg * User ErrUserAlreadyExists from user pkg * User ErrLastGrafanaAdmin from user pkg * Remove errors from model	3 years ago
Kristin Laemmert	945f015770	backend/datasources: move datasources models into the datasources service package (#51267) ... * backend/datasources: move datasources models into the datasources service pkg	3 years ago
Serge Zaitsev	9315ddd57c	Chore: Remove bus from oauthtoken (#46811)	3 years ago
idafurjes	8e6d6af744	Rename DispatchCtx to Dispatch (#43563)	3 years ago
Leonard Gram	5d18834deb	OAuth: persisting the id token (#42938) ... * OAuth: persisting the id token * OAuth: verifies that the idtoken gets persistet in the database	3 years ago
idafurjes	ac6867c3bb	Chore: Add context to authinfo (#42096) ... * Add context to authinfo * Replace Dispatch with DispatchCtx	4 years ago
Katarina Yang	c4306f9b3e	Chore: add context to login (#41316) ... * Chore: add context to login attempt file and tests * Chore: add context * Chore: add context to login and login tests * Chore: continue adding context to login * Chore: add context to login query	4 years ago
Arve Knudsen	78596a6756	Migrate to Wire for dependency injection (#32289) ... Fixes #30144 Co-authored-by: dsotirakis <sotirakis.dim@gmail.com> Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com> Co-authored-by: Ida Furjesova <ida.furjesova@grafana.com> Co-authored-by: Jack Westbrook <jack.westbrook@gmail.com> Co-authored-by: Will Browne <wbrowne@users.noreply.github.com> Co-authored-by: Leon Sorokin <leeoniya@gmail.com> Co-authored-by: Andrej Ocenas <mr.ocenas@gmail.com> Co-authored-by: spinillos <selenepinillos@gmail.com> Co-authored-by: Karl Persson <kalle.persson@grafana.com> Co-authored-by: Leonard Gram <leo@xlson.com>	4 years ago
idafurjes	60ac54d969	Chore: Refactor OAuth/social package to service (#35403) ... * Creating SocialService * Add GetOAuthProviders as socialService method * Add OAuthTokenService * Add GetOAuthHttpClient method to SocialService * Rename services, access socialMap from GetConnector * Fix tests by mocking oauthtoken methods * Move NewAuthService into Init * Move OAuthService to social pkg * Refactor OAuthService to OAuthProvider * Fix nil map error, rename file, simplify tests * Fix bug for Forward OAuth Identify * Remove file after rebase	4 years ago