471 Commits (dd0d034796c1c0a3b0ed5aa2924e602bb2d77a58)

Author	SHA1	Message	Date
Leonard Gram	b67905a963	Auth: saml enabled check. (#17960)	7 years ago
Sofia Papagiannaki	dc9ec7dc91	Auth: Allow expiration of API keys (#17678) ... * Modify backend to allow expiration of API Keys * Add middleware test for expired api keys * Modify frontend to enable expiration of API Keys * Fix frontend tests * Fix migration and add index for `expires` field * Add api key tests for database access * Substitude time.Now() by a mock for test usage * Front-end modifications * Change input label to `Time to live` * Change input behavior to comply with the other similar * Add tooltip * Modify AddApiKey api call response Expiration should be *time.Time instead of string * Present expiration date in the selected timezone * Use kbn for transforming intervals to seconds * Use `assert` library for tests * Frontend fixes Add checks for empty/undefined/null values * Change expires column from datetime to integer * Restrict api key duration input It should be interval not number * AddApiKey must complain if SecondsToLive is negative * Declare ErrInvalidApiKeyExpiration * Move configuration to auth section * Update docs * Eliminate alias for models in modified files * Omit expiration from api response if empty * Eliminate Goconvey from test file * Fix test Do not sleep, use mocked timeNow() instead * Remove index for expires from api_key table The index should be anyway on both org_id and expires fields. However this commit eliminates completely the index for now since not many rows are expected to be in this table. * Use getTimeZone function * Minor change in api key listing The frontend should display a message instead of empty string if the key does not expire.	7 years ago
Kyle Brandt	599514ad68	middleware: add security related HTTP(S) response headers (#17522) ... * x_xss_protection * strict_transport_security (HSTS) * x_content_type_options these are currently defaulted to false (off) until the next minor release. fixes #17509	7 years ago
Mario Trangoni	87760d4fde	Codestyle: Fix govet issues (#17178) ... ref #10381 Signed-off-by: Mario Trangoni <mjtrangoni@gmail.com>	7 years ago
Abhilash Gnan	04d473b3e5	HTTP Server: Serve Grafana with a custom URL path prefix (#17048) ... Adds a new [server] setting `serve_from_sub_path`. By enabling this setting and using a subpath in `root_url` setting, e.g. `root_url = http://localhost:3000/grafana`, Grafana will be accessible on `http://localhost:3000/grafana`. By default it is set to `false` for compatibility reasons. Closes #16623	7 years ago
Oleg Gaidarenko	9b7f9dd9be	LDAP: consistently name the LDAP entities (#17203)	7 years ago
Oleg Gaidarenko	35f227de11	Feature: LDAP refactoring (#16950) ... * incapsulates multipleldap logic under one module * abstracts users upsert and get logic * changes some of the text error messages and import sort sequence * heavily refactors the LDAP module – LDAP module now only deals with LDAP related behaviour * integrates affected auth_proxy module and their tests * refactoring of the auth_proxy logic	7 years ago
zhulongcheng	2fff8f77dc	move log package to /infra (#17023) ... ref #14679 Signed-off-by: zhulongcheng <zhulongcheng.me@gmail.com>	7 years ago
Marcus Efraimsson	1c1427520d	Security: Add new setting allow_embedding (#16853) ... When allow_embedding is false (default) the Grafana backend will set the http header `X-Frame-Options: deny` in all responses to non-static content which will instruct browser to not allow Grafana to be embedded in `<frame>`, `<iframe>`, `<embed>` or `<object>`. Closes #14189	7 years ago
Andrej Ocenas	0433af6385	Config: Fixes bug where timeouts for alerting was not parsed correctly (#16784) ... * Fix parsing of the config * Remove unnecessary conversion * Remove timeout modification Co-Authored-By: aocenas <mr.ocenas@gmail.com> * Remove unused import	7 years ago
Oleg Gaidarenko	66c9297c36	Feature: introduce LdapActiveSyncEnabled setting (#16787) ... * Feature: introduce LdapActiveSyncEnabled setting We probably remove it after the active sync is done. But at the moment we do not want to affect the current users with not fully tested feature * Chore: move settings in more logical order	7 years ago
Oleg Gaidarenko	62b85a886e	LDAP Refactoring to support syncronizing more than one user at a time. (#16705) ... * Feature: add cron setting for the ldap settings * Move ldap configuration read to special function * Introduce cron setting (no docs for it yet, pending approval) * Chore: duplicate ldap module as a service * Feature: implement active sync This is very early preliminary implementation of active sync. There is only one thing that's going right for this code - it works. Aside from that, there is no tests, error handling, docs, transactions, it's very much duplicative and etc. But this is the overall direction with architecture I'm going for * Chore: introduce login service * Chore: gradually switch to ldap service * Chore: use new approach for auth_proxy * Chore: use new approach along with refactoring * Chore: use new ldap interface for auth_proxy * Chore: improve auth_proxy and subsequently ldap * Chore: more of the refactoring bits * Chore: address comments from code review * Chore: more refactoring stuff * Chore: make linter happy * Chore: add cron dep for grafana enterprise * Chore: initialize config package var * Chore: disable gosec for now * Chore: update dependencies * Chore: remove unused module * Chore: address review comments * Chore: make linter happy	7 years ago
Oleg Gaidarenko	78cd9058a3	Feature: add cron setting for the ldap settings (#16673) ... * Feature: add cron setting for the ldap settings * Move ldap configuration read to special function * Introduce cron setting (no docs for it yet, pending approval) * Chore: address code review comments	7 years ago
Hofls	b3bfbc6f77	Config: Show user-friendly error message instead of stack trace (#16564) ... Fixes #16283	7 years ago
Andrej Ocenas	e4f649e2c8	Chore: Small improvements to grafana-cli (#16670) ... * Small improvements * Better error handling	7 years ago
Oleg Gaidarenko	db584b3d28	Chore: remove session storage references (#16445) ... * Chore: remove session storage references * Small refactoring of the settings module * Update docs - remove references for the session storage * Update config files (sample and default configs) * Add tests for warning during the config load on defined storage cache * Remove all references to session storage * Remove macaron session dependency * Remove leftovers * Fix: address review comments * Fix: remove old deps * Fix: add skipStaticRootValidation = true to tests * Fix: improve the docs and warning message As per discussion in here - https://github.com/grafana/grafana/pull/16445/files#r273026255 * Chore: make linter happy Fixes #16148 Ref #16114	7 years ago
Ryan McKinley	3c21a121eb	Plugins: Unifying alpha state & options for all plugins (#16530) ... * app pages * app pages * workign example * started alpha support * remove app stuff * show warning on alpha/beta panels * put app back on plugin file * fix go * add enum for PluginType and PluginIncludeType * Refactoring and moving settings to plugins section fixes #16529	7 years ago
Zzy	1b84a924a3	Alerting: Makes timeouts and retries configurable (#16259) ... Adds new alert settings for configuring timeouts and retries named evaluation_timeout_seconds, notification_timeout_seconds and max_attempts. Closes #16240	7 years ago
Hugo Häggmark	a90b3e331e	config: updated feature toggle name	7 years ago
Andrej Ocenas	bbdc1c0e64	Add custom header with grafana user and a config switch for it	7 years ago
bergquist	7e7427637c	renames distcache -> remotecache	7 years ago
bergquist	daa3b17951	code layouts and comments	7 years ago
bergquist	196cdf9710	adds config to default settings	7 years ago
Woodward, Joshua	946e542412	Make password hint configurable from settings/defaults.ini	7 years ago
Hugo Häggmark	769ad21e16	Moved variable to config struct after PR comments	7 years ago
Hugo Häggmark	9c9691f7af	Added feature toggle editors_can_own	7 years ago
bergquist	170783c292	make hourly cleanup the default behavior	7 years ago
Marcus Efraimsson	1a140ee199	run token cleanup job when grafana starts, then each hour	7 years ago
Marcus Efraimsson	3c2fd02bc0	refactor login/auth token configuration settings ... remove login section and reuse existing sections security and auth	7 years ago
bergquist	a6bd2c73a0	introduce samesite setting for login cookie ... ref #15067	7 years ago
bergquist	6e672eb291	enable explore by default ... closes #15037	7 years ago
Marcus Efraimsson	e4924795a2	change default rotate_token_minutes to 10 minutes	7 years ago
Benjamin Reed	9108fd1b9d	add global datasource proxy timeout setting ... closes grafana#5699	7 years ago
bergquist	d6edaa1328	moves cookie https setting to [security]	7 years ago
bergquist	516037fbdd	makes sure rotation is always higher than urgent rotation	7 years ago
bergquist	f257101c41	removes unused/commented code	7 years ago
bergquist	ff483f3782	removes old cookie auth configuration	7 years ago
bergquist	56a521b264	makes auth token rotation time configurable	7 years ago
bergquist	64124b5042	add setting for how to long we should keep expired tokens	7 years ago
bergquist	d3ec8e1ccb	creates new config section for login settings	7 years ago
Torkel Ödegaard	f0e61af8e0	Fixed issues with the sanitizie input in text panels, added docs, renamed config option	7 years ago
Johannes Schill	1ed35f3dc1	chore: Reverse sanitize variable so it defaults to false	7 years ago
Johannes Schill	15d560a1c0	feat: wip: Sanitize user input on text panel	7 years ago
Leonard Gram	2e8c4699b0	build: internal metrics for packaging.	7 years ago
Bob Shannon	dcc48860b8	Fix formatting and remove enabled toggle	7 years ago
Bob Shannon	362b3740ed	Add basic authentication support to metrics endpoint	7 years ago
Torkel Ödegaard	b415d82611	fixed to template PR issues, #13938	7 years ago
Torkel Ödegaard	28b0ae1d82	Added new backend setting for license file	7 years ago
Torkel Ödegaard	4dad8d946e	Updated login page logo & wordmark and responsive behavior	7 years ago
Nick Triller	3414be18bc	Implement oauth_auto_login setting ... Redirect in backend	7 years ago