1797 Commits (d17d82b3d02fd81e7ec68633d35ee2bd30f4eef8)

Author	SHA1	Message	Date
Marcus Efraimsson	3fc5f4552a	CloudWatch: Fix high CPU load (#20579) ... * Cache decrypted securejsondata * Models: Add datasource cache tests	6 years ago
Sofia Papagiannaki	d1c523838b	API: Optionally list expired keys (#20468) ... * API: Optionally list expired keys * Update docs	6 years ago
Jon Gyllenswärd	7a8c6a9b54	Reporting: Handle timeouts in rendering (#20415) ... * Added timeout in grpc call to plugins for rendering	6 years ago
Arve Knudsen	82f4fc2783	Fail when server is unable to bind port (#20409) ... * Server: Return error when unable to bind port * Server: Exit if a service fails * Build: Remove graceful kill from Bra config	6 years ago
Marcus Efraimsson	dfa2f3d2fb	Chore: Log actual error when oauth pass thru fails (#20419) ... Logs the actual error when failing to retreive access token when OAuth pass true is enabled for a datasource. Ref: #20407	6 years ago
Emil Tullstedt	d4e013fd44	NavLinks: Make ordering in navigation configurable (#20382) ... The ordering of links in the navigation bar is currently based the order of the slice containing the navigation tree. Since Grafana supports adding more links to the navigation bar with `RunIndexDataHooks` which runs at the very end of the function this means that any link registered through a hook will be placed last in the slice and be displayed last in the menu. With this PR the ordering can be specified with a weight which allows for placing links created by extensions in a more intuitive place where applicable. Stable sorting is used to ensure that the current FIFO ordering is preserved when either no weight is set or two items shares the same weight.	6 years ago
Arve Knudsen	3a8cd7b76c	Avatar: Don't log failure to add existing item to cache (#19947) ... Checks if avatar was found in cache before trying to add it to cache. Fixes #19946	6 years ago
Torkel Ödegaard	be2bf1a297	AuthProxy: Can now login with auth proxy and get a login token (#20175) ... * AuthProxy: Can now login with auth proxy and get a login token * added unit tests * renamed setting and updated docs * AuthProxy: minor tweak * Fixed tests and namings * spellfix * fix * remove unused setting, probably from merge conflict * fix	6 years ago
gotjosh	e4afc8d518	LDAP: Fixing sync issues (#19446) ... The arching goal of this commit is to enable single user synchronisation with LDAP. Also, it included minor fixes of style, error messages and minor bug fixing. The changes are: - bug: The `multildap` package has its own errors when the user is not found. We fixed the conditional branch on this error by asserting on the `multildap` errors as opposed to the `ldap` one - bug: The previous interface usage of `RevokeAllUserTokens` did not work as expected. This replaces the manual injection of the service by leveraging the service injected as part of the `server` struct. - chore: Better error messages around not finding the user in LDAP. - fix: Enable the single sync button and disable it when we receive an error from LDAP. Please note, that you can enable it by dispatching the error. This allows you to try again without having to reload the page. - fix: Move the sync info to the top, then move the sync button above that information and clearfix to have more harmony with the UI.	6 years ago
Jon Gyllenswärd	b489c75aaf	Provisioning: fix for cannot save provisioned dashboard (#20218) ... Provisioning of dashboards now always overwrite existing ones and does not look at the configuration `allowUiUpdates` anymore	6 years ago
Martin Reinhardt	7a3d1c0e4b	OAuth: Generic OAuth role mapping support (#17149) ... Adds support for Generic OAuth role mapping. A new configuration setting for generic oauth is added named role_attribute_path which accepts a JMESPath expression. Only Grafana roles named Viewer, Editor or Admin are accepted. Closes #9766	6 years ago
Leonard Gram	730bedf36f	LDAP Debug: No longer shows incorrectly matching groups based on role (#20018) ... * LDAP Debug: No longer shows incorrectly matching groups based on role Org Role was used as a shortcut to figure out what groups were matching and which weren't. That lead to too all groups matching a specific role to show up for a user if that user got that role. * LDAP Debug: Fixes ordering of matches The order of groups in the ldap.toml file is important, only the first match for an organisation will be used. This means we have to iterate based on the config and stop matching when a match is found. We might want to think about showing further matches as potential matches that are shadowed by the first match. That would possibly make it easier to understand why one match is used instead of another one. * LDAP Debug: never display more than one match for the same LDAP group/mapping. * LDAP Debug: show all matches, even if they aren't used * Update public/app/features/admin/ldap/LdapUserGroups.tsx Co-Authored-By: gotjosh <josue.abreu@gmail.com> * Update public/app/features/admin/ldap/LdapUserGroups.tsx Co-Authored-By: gotjosh <josue.abreu@gmail.com>	6 years ago
Leonard Gram	992b4b8adf	Licensing service (#19903) ... * Licensing: supplies a service to handle licensing information * Licensing: uses the license service further Uses the license service instead of settings.isEnterprise: - external team members - saml - usage stats * Licensing: fixes broken tests due to new Licensing service dependency * Licensing: fixes linting errors * Licensing: exposes license expiry information to the frontend	6 years ago
Kyle Brandt	750e8d27bf	api/dashboard: fix panic on UI save (#20137)	6 years ago
Ryan McKinley	4d1b969a5c	GEL: include the expression count in the request (#20114)	6 years ago
Jon Gyllenswärd	a45ce36566	Allow saving of provisioned dashboards (#19820) ... Allows saving of provisioned dashboards if the config value allowUiUpdates is set to true Fixes #11778	6 years ago
Ryan McKinley	861eb72113	transform: add expressions to query editor (w/ feature flag) (#20072) ... for use with gel which is not released yet.	6 years ago
Kyle Brandt	009d58c4a2	Plugins: Transform plugin support (#20036) ... currently temporary separate http api	6 years ago
Marcus Efraimsson	771f21ed09	api: new v2 metrics query endpoint ... Requests to endpoint will currently will error unless expressions feature flag is true. Co-authored-by: Sofia Papagiannaki <papagian@gmail.com>	6 years ago
Arve Knudsen	35e0e078b7	pkg/util: Check errors (#19832) ... * pkg/util: Check errors * pkg/services: DRY up code	6 years ago
Oleg Utkin	de5038441f	API: Fix logging of dynamic listening port (#19644) ... Logs the real (dynamic) HTTP port when configured Grafana using setting.HttpPort = 0. Fixes #16709	6 years ago
Amarnath Karthi	74557a4c40	Dashboard: Allows the d-solo route to be used without slug (#19640) ... Allows the d-solo route to be used with UID and without a slug. Fixes #11617	6 years ago
Weeco	8cd93f0b88	Datasource: Add custom headers on alerting queries (#19508) ... * Add custom headers on alerting queries Reference issue #15381 Signed-off-by: Martin Schneppenheim <martin.schneppenheim@rewe-digital.com> * Fix datasource transport tests * Migrate decrypting header test to models pkg * Check correct header * Add HTTP transport test Fixes #15381	6 years ago
Arve Knudsen	0a2d5e16dd	pkg/api: Check errors (#19657) ... * pkg/api: Check errors * pkg/api: Remove unused function HashEmail	6 years ago
gotjosh	4181b30b75	API: Add `createdAt` and `updatedAt` to api/users/lookup (#19496) ... * API: Add `createdAt` and `updatedAt` to api/users/lookup In the past, we have added both `updatedAt` (#19004) and `createdAt` (#19475) to /api/users/:id Turns out, api/users/lookup uses the same DTO for both. This fixes the serialization of both `createdAt` and `updatedAt`for this endpoint. Also, adds a test to ensure no further regressions. * Updated API documentation	6 years ago
Rafael George	e1b2bf711d	API: Add createdAt field to /api/users/:id (#19475) ... It would help for auditing purposes to have the user's created date exposed via the API along with the other fields already exposed via the API.	6 years ago
Marcus Efraimsson	00e7c7c4b7	Testdata: Rename package to circumvent convention in go (#19409) ... Before this change the tests for test datasource was not run.	6 years ago
gotjosh	b20a258b72	LDAP: Show non-matched groups returned from LDAP (#19208) ... * LDAP: Show all LDAP groups * Use the returned LDAP groups as the reference when debugging LDAP We need to use the LDAP groups returned as the main reference for assuming what we were able to match and what wasn't. Before, we were using the configured groups in LDAP TOML configuration file. * s/User name/Username * Add a title to for the LDAP mapping results * LDAP: UI Updates to debug view * LDAP: Make it explicit when we weren't able to match teams	6 years ago
Leonard Gram	dd794625dd	API: adds redirect helper to simplify http redirects (#19180)	6 years ago
Sofia Papagiannaki	b5f0a5d5ca	Api: Readonly datasources should not be created via the API (#19006) ... * Readonly datasources should not be created via the API * Return correct `ReadOnly` value in GetDataSourceByName	6 years ago
Alexander Zobnin	494b4aaf88	LDAP: only show tab if LDAP is enabled (#19156) ... * LDAP: add nav link only if ldap enabled * LDAP: /admin/ldap required admin permissions	6 years ago
Peter Holmberg	3c61b563c3	Ldap: Add LDAP debug page (#18759) ... * Add items for navmodel and basic page * add reducer and actions * adding user mapping table component * adding components for ldap tables * add alert box on error * close error alert box * LDAP status page: connect APIs WIP * LDAP debug: fetch connection status from API * LDAP debug: fetch user info from API * LDAP debug: improve connection error view * LDAP debug: connection error tweaks * LDAP debug: fix role mapping view * LDAP debug: role mapping view tweaks * LDAP debug: add bulk-sync button stub * LDAP debug: minor refactor * LDAP debug: show user teams * LDAP debug: user info refactor * LDAP debug: initial user page * LDAP debug: minor refactor, remove unused angular wrapper * LDAP debug: add sessions to user page * LDAP debug: tweak user page * LDAP debug: tweak view for disabled user * LDAP debug: get sync info from API * LDAP debug: user sync info * LDAP debug: sync user button * LDAP debug: clear error on page load * LDAP debug: add user last sync info * LDAP debug: actions refactor * LDAP debug: roles and teams style tweaks * Pass showAttributeMapping to LdapUserTeams * LDAP debug: hide bulk sync button * LDAP debug: refactor sessions component * LDAP debug: fix loading user sessions * LDAP debug: hide sync user button * LDAP debug: fix fetching unavailable /ldap-sync-status endpoint * LDAP debug: revert accidentally added fix * LDAP debug: show error when LDAP is not enabled * LDAP debug: refactor, move ldap components into ldap/ folder * LDAP debug: styles refactoring * LDAP debug: ldap reducer tests * LDAP debug: ldap user reducer tests * LDAP debug: fix connection error placement * Text update * LdapUser: Minor UI changes moving things around * AlertBox: Removed icon-on-top as everywhere else it is centered, want to have it be consistent	6 years ago
Dominik Prokop	97ff75732d	Routing: Update routing to require sign in on every route (#19118) ... * Update routing to require sign in on every route * Review update	6 years ago
Dominik Prokop	44a2a648c6	Login: fix login page failing when navigating from reset password views (#19124)	6 years ago
gotjosh	7b7b95341e	LDAP: Allow an user to be synchronised against LDAP (#18976) ... * LDAP: Allow an user to be synchronised against LDAP This PR introduces the /ldap/sync/:id endpoint. It allows a user to be synchronized against LDAP on demand. A few things to note are: LDAP needs to be enabled for the sync to work It only works against users that originally authenticated against LDAP If the user is the Grafana admin and it needs to be disabled - it will not sync the information Includes a tiny refactor that favours the JSONEq assertion helper instead of manually parsing JSON strings.	6 years ago
548017	09b434bdd0	Auth: Allow inviting existing users when login form is disabled (#19048) ... Allow api to accept inviting existing users when login form is disabled. UI shows invite button when login form is disabled.	6 years ago
gotjosh	fa007423e3	API: Add `updatedAt` to api/users/:id (#19004) ... * API: Add `updatedAt` to api/users/:id This adds the timestamp of when a particular user was last updated to the `api/users/:id` endpoint. This helps our administrators understand when was the user information last updated. Particularly when it comes from external systems e.g. LDAP	6 years ago
Ryan McKinley	7d32caeac2	Transformers: configure result transformations after query(alpha) (#18740)	6 years ago
gotjosh	10fe101add	LDAP: Fetch teams in debug view (#18951) ... Adds the definition of `GetTeamsForLDAPGroupCommand` which handles the lookup of team information based on LDAP groupDNs. This is an Enterprise only feature. To diferentiate,a response will contain the `team` key as `null` on OSS while on Enterprise the key will contain an empty array `[]` when no teams are found.	6 years ago
gotjosh	7c6dd1868b	LDAP: Add API endpoint to query the LDAP server(s) status (#18868) ... * LDAP: Add API endpoint to query the LDAP server(s) status| This endpoint returns the current status(es) of the configured LDAP server(s). The status of each server is verified by dialling and if no error is returned we assume the server is operational. This is the last piece I'll produce as an API before moving into #18759 and see the view come to life.	6 years ago
gotjosh	0cbbb43222	LDAP: Add API endpoint to debug user mapping from LDAP (#18833) ... * Move the ReloadLDAPCfg function to the debug file Appears to be a better suite place for this. * LDAP: Return the server information when we find a specific user We allow you to specify multiple LDAP servers as part of LDAP authentication integration. As part of searching for specific users, we need to understand from which server they come from. Returning the server configuration as part of the search will help us do two things: - Understand in which server we found the user - Have access the groups specified as part of the server configuration * LDAP: Adds the /api/admin/ldap/:username endpoint This endpoint returns a user found within the configured LDAP server(s). Moreso, it provides the mapping information for the user to help administrators understand how the users would be created within Grafana based on the current configuration. No changes are executed or saved to the database, this is all an in-memory representation of how the final result would look like.	6 years ago
Marcus Efraimsson	964c2e722f	Snapshot: Fix http api (#18830) ... (cherry picked from commit be2e2330f5)	6 years ago
kay delaney	fb0cec5591	Backend: Adds support for HTTP/2 (#18358) ... * Backend: Adds support for HTTP/2 * Adds mozilla recommended ciphers * Updates sample.ini and config documentation	6 years ago
Ryan McKinley	6335509a23	Annotations: use a single row to represent a region (#17673) ... * SQLite migrations * cleanup * migrate end times * switch to update with a query * real migration * anno migrations * remove old docs * set isRegion from time changes * use <> for is not * add comment and fix index decleration * single validation place * add test * fix test * add upgrading docs * use AnnotationEvent * fix import * remove regionId from typescript	6 years ago
Marcus Efraimsson	8fd153edb7	API: Restrict anonymous user information access (#18422) ... Existing /api/alert-notifications now requires at least editor access. Existing /api/alert-notifiers now requires at least editor access. New /api/alert-notifications/lookup returns less information than /api/alert-notifications and can be access by any authenticated user. Existing /api/org/users now requires org admin role. New /api/org/users/lookup returns less information than /api/org/users and can be access by users that are org admins, admin in any folder or admin of any team. UserPicker component now uses /api/org/users/lookup instead of /api/org/users. Fixes #17318	6 years ago
Sofia Papagiannaki	4e29357d15	Backend: Do not set SameSite cookie attribute if cookie_samesite is none (#18462) ... * Do not set SameSite login_error cookie attribute if cookie_samesite is none * Do not set SameSite grafana_session cookie attribute if cookie_samesite is none * Update middleware tests	6 years ago
Sofia Papagiannaki	7520166f17	API: Minor fix for team creation endpoint when using API key (#18252) ... * Fix CreateTeam api endpoint No team member should be created for requests authenticated by API tokens. * Update middleware test Assert that `isAnonymous` is set for `SignedInUser` authenticated via API key. * Add test for team creation Assert that no team member is created if the signed in user is anomymous. * Revert "Fix CreateTeam api endpoint" This reverts commit 9fcc4e67f5. * Revert "Update middleware test" This reverts commit 75f767e58d. * Fix CreateTeam api endpoint No team member should be created for requests authenticated by API tokens. * Update team test * Change error to warning and update tests	6 years ago
Sofia Papagiannaki	269c1fb107	Do not set SameSite for OAuth cookie if cookie_samesite is None (#18392)	6 years ago
Torkel Ödegaard	f3fb178efa	Navigation: Fixed double settings menus (#18349)	6 years ago
Sofia Papagiannaki	69b7b8bb46	Fix OAuth error due to SameSite cookie policy (#18332) ... The `oauth_state` cookie used to be created with the SameSite value set according to the `cookie_samesite` configuration. However, due to a Safari bug SameSite=None or SameSite=invalid are treated as Strict which results in "missing saved state" OAuth login failures because the cookie is not sent with the redirect requests to the OAuth provider. This commit always creates the `oauth_state` cookie with SameSite=Lax to compensate for this.	6 years ago