grafana

Commit Graph

Author	SHA1	Message	Date
Kristian Klausen	4fc0d42470	OAuth: Add optional strict parsing of role_attribute_path (#28021 ) * OAuth: Add strict role mapping By default the user is assigned the role Viewer if role_attribute_path doesn't return a role, which is not always desirable. This commit adds a strict mode, which deny the user access if a role isn't returned. Fix #26626 * Update docs/sources/auth/generic-oauth.md Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com> * Update docs/sources/auth/generic-oauth.md * Update .gitignore file with WAN * Removed WAN from .gitignore Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com> Co-authored-by: achatterjee-grafana <70489351+achatterjee-grafana@users.noreply.github.com> Co-authored-by: achatterjee-grafana <aparajita.chatterjee@grafana.com>	5 years ago
Alexander Morozov	06bf7e8ef1	OAuth: Removes send_client_credentials_via_post setting (#20044 ) Removes send_client_credentials_via_post oauth setting and use auto-detect mechanism instead. By these changes also fixes statichcheck errors Ref #8968	6 years ago
Martin Reinhardt	7a3d1c0e4b	OAuth: Generic OAuth role mapping support (#17149 ) Adds support for Generic OAuth role mapping. A new configuration setting for generic oauth is added named role_attribute_path which accepts a JMESPath expression. Only Grafana roles named Viewer, Editor or Admin are accepted. Closes #9766	6 years ago
Bob Shannon	056dbc7012	OAuth: Support JMES path lookup when retrieving user email (#14683 ) Add support for fetching e-mail with JMES path Signed-off-by: Bob Shannon <bobs@dropbox.com>	6 years ago
Tomas Dabasinskas	eb517a3791	Update field name	7 years ago
Tomas Dabasinskas	54b73025dc	Add OAuth provider flag to indicate if it's broken	7 years ago
Bob Shannon	f257ff0216	Allow oauth email attribute name to be configurable (#13006 ) * Allow oauth email attribute name to be configurable Signed-off-by: Bob Shannon <bshannon@palantir.com> * Document e-mail determination steps for generic oauth * Add reference to email_attribute_name * Re-add e-mail determination docs to new generic-oauth page * Inherit default e-mail attribute from defaults.ini	7 years ago
Matt Bostock	16c5d0e4b7	Always verify TLS unless explicitly told otherwise TLS was not being verified in a number of places: - connections to grafana.com - connections to OAuth providers when TLS client authentication was enabled - connections to self-hosted Grafana installations when using the CLI tool TLS should always be verified unless the user explicitly enables an option to skip verification. Removes some instances where `InsecureSkipVerify` is explicitly set to `false`, the default, to help avoid confusion and make it more difficult to regress on this fix by accident. Adds a `--insecure` flag to `grafana-cli` to skip TLS verification. Adds a `tls_skip_verify_insecure` setting for OAuth. Adds a `app_tls_skip_verify_insecure` setting under a new `[plugins]` section. I'm not super happy with the way the global setting is used by `pkg/api/app_routes.go` but that seems to be the existing pattern used.	8 years ago
Eric Uldall	658fc1a67a	added hosted domain suppport to google oauth login (#6372 )	9 years ago
Dan Cech	6b16fcea52	Oauth2 Updates (#6226 ) * break out go and js build commands * support oauth providers that return errors via redirect * remove extra call to get grafana.net org membership * removed GitHub specifics from generic OAuth * readded ability to name generic source * revert to a backward-compatible state, refactor and clean up * streamline oauth user creation, make generic oauth support more generic	9 years ago
Torkel Ödegaard	e5fc4332cd	feat(oauth): refactoring PR #6077	9 years ago
Dan Cech	fc17ed351c	support logging in with grafana.net credentials	9 years ago
Kevin Fitzpatrick	b4646b6c3a	Allow users to use a generic oauth that conforms to the github style. Enables users to set their own link text.	10 years ago
Jason Harvey	ddaac50a25	Add allow_sign_up override for auth.google/github.	11 years ago
Torkel Ödegaard	e9afd30b47	Updated changelog with, Github OAuth: Now works with Github for Enterprise, thanks @williamjoy	11 years ago
Torkel Ödegaard	eb575685aa	OAuth: Specify allowed email address domains for google or and github oauth logins, Closes #1660	11 years ago
Torkel Ödegaard	d7cd2b970e	OAuth remake	11 years ago
Torkel Ödegaard	450d242d5f	working on oauth	11 years ago

19 Commits (d2f18f8b7d0be2d06a364a38d49c7e98a2ba4ec9)