587 Commits (ff916d9c15d38eead1ed93c4da2d7fc0c5e3b081)

Author	SHA1	Message	Date
Jo	6f62d970e3	JWT Authentication: Add support for specifying groups in auth.jwt for teamsync (#82175) ... * merge JSON search logic * document public methods * improve test coverage * use separate JWT setting struct * correct use of cfg.JWTAuth * add group tests * fix DynMap typing * add settings to default ini * add groups option to devenv path * fix test * lint * revert jwt-proxy change * remove redundant check * fix parallel test	2 years ago
Agnès Toulet	28e66b4ad8	Rendering: Adds PDF support behind feature toggle (#81811) ... * start pdf refactor * Update AppChrome.tsx * Update AppChrome.tsx * add encoding param to rendering grpc service * fix plugin mode * clean up * fix backend tests * fix lint errors * Support pdf encoding in render http api --------- Co-authored-by: Torkel Ödegaard <torkel@grafana.com>	2 years ago
Isabella Siu	81da3ff753	CloudWatch: Remove dependencies on grafana/pkg/setting (#81208)	2 years ago
Diego Augusto Molina	b02f0b926a	Settings: Fix data race when dynamically overriding settings with environment variables (#81667) ... Chore: Fix data race when dynamically overriding settings with environment variables	2 years ago
Ryan McKinley	795eb4a8d8	K8s/Snapshots: Add dashboardsnapshot api group (#77667)	2 years ago
lean.dev	7ab833d28c	Licensing: Redact license when overriden by env variable (#81726)	2 years ago
Ieva	c310a20966	AuthZ: add headers for IP range AC checks for cloud data sources (#80208) ... * add feature toggle * add a middleware that appens headers for IP range AC * sort imports * sign IP range header and only append it if the request is going to allow listed data sources * sign a random generated string instead of IP, also change the name of the middleware to make it more generic * remove the DS IP range AC options from the config file; remove unwanted change * add test * sanitize the URLs when comparing * cleanup and fixes * check if X-Real-Ip is present, and set the internal request header if it is not present * use split string function from the util package	2 years ago
ismail simsek	a3fda08d4e	Datasources: Add concurrency number to the settings (#81212) ... add concurrency to the settings	2 years ago
Misi	8246d97587	Auth: Introduce `configurable_providers` config option for SSO settings (#80911) ... * Add SSOSettingsConfigurableProviders config option * Add check to Delete and ListWithRedactedSecrets * Add check to GET, small improvements	2 years ago
Marcus Efraimsson	6768c6c059	Chore: Remove public vars in setting package (#81018) ... Removes the public variable setting.SecretKey plus some other ones. Introduces some new functions for creating setting.Cfg.	2 years ago
colin-stuart	e241188f00	Auth: Implement the SSO Settings List endpoint (#80769) ... * add list endpoint & initial tests * add tests and ETag * format service_test.go * add list swagger param, generate openAPI, remove ETag, use RedactedPassword * correct swagger param name * Align tests to latest changes * use setting.RedactedValue() * add string assertion * lint & require no error on res.Body.Close() * add custom response type --------- Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com>	2 years ago
Mihai Doarna	39e4f8ec1b	Auth: configure SSO settings reload interval from the ini file (#80290) ... * configure sso reload interval from ini file * change section name to sso_settings	2 years ago
Jo	5ae3249c36	Auth: Hide forgot password if grafana auth is disabled (#79895) ... * hide forgot password if grafana auth is disabled * fix test	2 years ago
Todd Treece	feb7b38fba	Metrics: Add commit & version to grafana_environment_info (#79823)	2 years ago
Karl Persson	05d1ce4026	Auth: id response header (#79757) ... * Add utility function to check if namespace is any of * Refactor code to use identity interface	2 years ago
Agnès Toulet	fdaf6e3f2e	PublicDashboards: Add setting to disable the feature (#78894) ... * Replace feature toggle with configuration setting * Fix permission alert * Update documentation * Add back feature toggle * revert unwanted commited changes * fix tests * run prettier * Update SharePublicDashboard.test.tsx * fix linter and frontend tests * Update api.go * Apply docs edit from code review Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com> * Update index.md * Update docs/sources/setup-grafana/configure-grafana/feature-toggles/index.md Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * add isPublicDashboardsEnabled + test * fix test * update ff description in registry * move isPublicDashboardsEnabled * revert getConfig() update --------- Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Misi	ce1450d4d3	Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443) ... * Configure SkipOrgRoleSync from OAuthInfo * Remove skipOrgRoleSync from socialbase and connectors * Add test to socialimpl.ProvideService * Deprecate AuthSettings' fields * clean up misleading init of frontendsettings.Auth	2 years ago
owensmallwood	d5b9602a79	Config: Can add static headers to email messages (#79365) ... * Can add allowed custom headers to an email Message. WIP. * adds slug as a custom email header to all outgoing emails * Headers are static - declared as key/value pairs in config. All static headers get added to emails. * updates comment * adds tests for parsing smtp static headers * updates test to assert static headers are included when building email * updates test to use multiple static headers * updates test names * fixes linting issue with error * ignore gocyclo for loading config * updates email headers in tests to be formatted properly * add static headers first * updates tests to assert that regular headers like From cant be overwritten * ensures only the header is in a valid format for smtp and not the value * updates comment and error message wording * adds to docs and ini sample files * updates smtp.static_headers docs examples formatting * removes lines commented with semi colons * prettier:write * renames var	2 years ago
Giuseppe Guerra	0d1d437c86	Plugins: Add forward_host_env_vars setting (#79333) ... * Plugins: Add forward_host_env_vars_plugins setting * Renamed forward_host_env_vars_plugins to forward_host_env_vars * Add readPluginIDsList * refactoring * lint * Use util.SplitString	2 years ago
Jo	3647ba7360	Anonymous: Add configurable device limit (#79265) ... * Anonymous: Add device limiter * break auth if limit reached * fix typo * refactored const to make it clearer with expiration * anon device limit for config --------- Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com>	2 years ago
Giuseppe Guerra	f76b9f266e	Plugins: Add hide_angular_deprecation setting (#79296) ... * Add plugins.hide_angular_deprecation config ini * Add more tests * Remove the ability to use [plugins.*] hide_angular_deprecation	2 years ago
Todd Treece	ea36336c0a	Chore: Ensure BuildVersion is set when using CDN (#79169)	2 years ago
Matthew Jacobson	5a80962de9	Alerting: Add clean_upgrade config and deprecate force_migration (#78324) ... * Alerting: Add clean_upgrade config and deprecate force_migration Upgrading to UA and rolling back will no longer delete any data by default. Instead, each set of tables will remain unchanged when switching between legacy and UA. As such, the force_migration config has been deprecated and no extra configuration is required to roll back to legacy anymore. If clean_upgrade is set to true when upgrading from legacy alerting to Unified Alerting, grafana will first delete all existing Unified Alerting resources, thus re-upgrading all organizations from scratch. If false or unset, organizations that have previously upgraded will not lose their existing Unified Alerting data when switching between legacy and Unified Alerting. Similar to force_migration, it should be kept false when not needed as it may cause unintended data-loss if left enabled. --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Karl Persson	21f94c5b78	Auth: id response header (#77871) ... * Add config options for identity id response header * Add feature to add identity id response header to all responses * Use util.SplitString	2 years ago
Gabriel MABILLE	b6b86bb0b3	RBAC: Check `plugins:install` globally (#78438) ... * RBAC: Check plugins:install globally * Add disclamer to the RBACSingleOrganization config option	2 years ago
Esteban Beltran	5a2127c221	Sandbox: Fix configuration key for sandbox exceptions (#78317) ... * Sandbox: Disable incident app inside the sandbox code * Fix wrong key for default config and config key * Rllback file	2 years ago
Dan Cech	c330b7d18d	Chore: Update settings to support k8s needs (#78235) ... use util.SplitString, implement DynamicSection KeysHash	2 years ago
Ryan McKinley	dec9a07738	Settings: Actually deprecate access to feature flags (#78073)	2 years ago
Ryan McKinley	3509a5abb9	FeatureFlags: Cleanup usage of cfg.IsFeatureToggleEnabled (#78014)	2 years ago
Gabriel MABILLE	20fc0cbf35	Chore: Allow env overrides for the `extended_jwt` config (#77132) ... Chore: Allow env overrides for the extended_jwt config	2 years ago
Hugo Kiyodi Oshiro	dfc1875061	Plugins: Add managed instance installation resources (#76767) ... * Plugins: Add configs to allow managed install * Expose methods to use with cloud plugin installer * Change plugins installer bind to OSS	2 years ago
William Assis	65a7bddcee	Analytics: Add option to pass destSDKBaseURL to rudderstack load method (#74926) ... * Add option to pass destSDKBaseURL to rudderstack load method * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
João Calisto	d5691e6dd1	Live: Allow setting the engine password (#76289)	2 years ago
Jo	cada1f040a	Auth: Add support for role mapping and allowed groups in Google OIDC (#76266) ... * support google oauth allowed_groups. unify allowed groups logic * add role mapping for google oauth * add documentation * add addendums * remove extra isGroupMember * add to sample ini * Apply suggestions from code review Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2 years ago
Jo	40a1f8434d	Anon: Scaffold anon service (#74744) ... * remove API tagging method and authed tagging * add anonstore move debug to after cache change test order fix issue where mysql trims to second * add old device cleanup lint utc-ize everything trim whitespace * remove dangling setting * Add delete devices * Move anonymous authnclient to anonimpl * Add simple post login hook * move registration of Background Service cleanup * add updated_at index * do not untag device if login err * add delete device integration test	2 years ago
Ezequiel Victorero	4cfc834c08	HealthCheck: show enterprise commit (#75242)	2 years ago
Will Browne	de2a107efa	Chore: Fix slug cfg name (#75235) ... fix cfg name	2 years ago
Will Browne	e9e0e321b6	Chore: Add stack ID + slug to cfg (#75227) ... * add stack ID + slug to cfg * add to environment section	2 years ago
Andres Martinez Gotor	96b55ea37c	Feature: Allow to skip plugin loading (#74840)	2 years ago
Ieva	58efa49933	Chore: remove `IsDisabled` method for access control (#74340) ... remove IsDisabled method for access control, clean up tests	2 years ago
Kristin Laemmert	d1876b68bc	Chore: refactor grafana-apiserver a bit (#74177)	2 years ago
Ryan McKinley	025b2f3011	Chore: use any rather than interface{} (#74066)	2 years ago
venkatbvc	7c98678188	Auth: Add support for OIDC RP-Initiated Logout (#70357) ... * Fix signout redirect_uri issue * Fix signout redirect_uri issue * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * remove signout url global * style alignment * remove legacy handlers for devenv * Update pkg/api/login.go --------- Co-authored-by: Rao B V Chalapathi <b_v_chalapathi.rao@nokia.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: jguer <me@jguer.space>	2 years ago
linoman	2e050f25bf	Auth: Allow to auto-assign empty role (#73326) ... Allow to auto-assign empty role	2 years ago
Carl Bergquist	243b757168	Middleware: Add team metadata to HTTP handlers (#71010) ... Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Sarah Zinger	09d5483c6c	Cloudwatch: Upgrade aws-sdk and display external ids for temporary credentials (#72821) ... (under a feature toggle, not yet ready for public testing)	2 years ago
Karl Persson	2c57bca176	Auth: Remove auth broker flag and clean up login handlers (#73109) ... * Auth: Remove auth broker flag and clean up login handlers	2 years ago
Karl Persson	144e4887ee	Auth: Use authn.Service for all tests (#72921) ... * Dashboards: Fix tests when authn broker is enabled. StarService was not configured for tests, the call was guarded by !c.IsSignedIn * Change default to be anon user to match expectations from tests * OAuth: rewrite tests to work with authn.Service * Setup template renderer by default * Extract cookie options from cfg instead of relying on global variables * Fix test to work with authn service * Middleware: rewrite auth tests * Remvoe session cookie if we cannot refresh access token	2 years ago
Sarah Zinger	deeb1d85f8	Config: making [aws][external_id] part of env (#72062) ... * Config: making [aws][external_id] part of env * Fix go.sum * Add a test	2 years ago
Eric Leijonmarck	95760cb021	Auth: OAuth sets `skip_org_role_sync = true` for auth.google by default (#72819) ... * sets skip_org_role_sync to true for google * add google skiporgrolesync and sets to true always * add field * Update docs/sources/setup-grafana/configure-security/configure-authentication/google/index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * add AKS to words * script back to mina --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago