126 Commits (v12.0.2)

Author	SHA1	Message	Date
Mariell Hoversholm	757be6365a	CI: Bump golangci-lint to 2.0.2 (#103572)	3 months ago
Vardan Torosyan	26eab9981a	Return correct disabled status when looking up a user (#103182)	3 months ago
Ieva	392124de00	Service Accounts: Don't show error pop-ups for Service Account and Renderer UI flows (#101776) ... * don't show error pop-ups for SAs and renderer * only hide non 4xx error pop'ups * linting	4 months ago
Ieva	f0d260ba5b	Service Accounts: Don't show error pop-ups for Service Account and Renderer UI flows (#101679) ... don't show error pop-ups for SAs and renderer	4 months ago
Ryan McKinley	680e6bc1f8	Authlib: Use types package rather than claims (#99243)	5 months ago
xavi	345757c3ae	Auth: Fix SAML user IsExternallySynced not being set correctly (#98487)	6 months ago
Karl Persson	3a17d0c927	IAM: align AuthInfo interface (#97228) ... * Update to use updated interface	7 months ago
Karl Persson	76f052e8de	Requester: Remove duplicated function (#97038) ... * Remove duplicated function * Remove GetDisplayName from interface * Use GetName	7 months ago
maicon	261be0facd	UniStore: Evaluate Folder DTO attributes (#93968) ... * UniStore: Evaluate Folder DTO attributes * Handle AccessControl * Reduce the number of parameters to newToFolderDto * Detach Metadata helpers from HTTPServer * Add tests --------- Signed-off-by: Maicon Costa <maiconscosta@gmail.com>	9 months ago
Ryan McKinley	a0cd89860e	Identity: Add endpoint to get display info for an identifier (#91828)	11 months ago
Karl Persson	8bcd9c2594	Identity: Remove typed id (#91801) ... * Refactor identity struct to store type in separate field * Update ResolveIdentity to take string representation of typedID * Add IsIdentityType to requester interface * Use IsIdentityType from interface * Remove usage of TypedID * Remote typedID struct * fix GetInternalID	11 months ago
Ryan McKinley	21d4a4f49e	Auth: use IdentityType from authlib (#91763)	11 months ago
Karl Persson	bcfb66b416	Identity: remove GetTypedID (#91745)	11 months ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567)	11 months ago
Ryan McKinley	99d8025829	Chore: Move identity and errutil to apimachinery module (#89116)	1 year ago
Dan Cech	41bee274fd	Chore: Fix error handling in postDashboard, remove UserDisplayDTO, fix live redis client initialization (#87206) ... * clean up error handling in postDashboard and remove UserDisplayDTO * replace GetUserUID with GetUID and GetNamespacedUID, enforce namespace constant type * lint fix * lint fix * more lint fixes	1 year ago
Karl Persson	c4cfee8d96	User: support setting org and help flags though update function (#86535) ... * User: Support setting active org through update function * User: add support to update help flags through update function	1 year ago
Karl Persson	1a6777cb93	User: use update function for password updates (#86419) ... * Update password through Update function instead * Remove duplicated to lower * Refactor password code	1 year ago
Karl Persson	ba41954854	Email: trigger email verification flow (#85587) ... * Add email and email_verified to id token if identity is a user * Add endpoint to trigger email verification for user * Add function to clear stored id tokens and use it when email verification is completed	1 year ago
Jo	5340a6e548	Auth: Extended JWT client for OBO and Service Authentication (#83814) ... * reenable ext-jwt-client * fixup settings struct * add user and service auth * lint up * add user auth to grafana ext * fixes * Populate token permissions Co-authored-by: jguer <joao.guerreiro@grafana.com> * fix tests * fix lint * small prealloc * small prealloc * use special namespace for access policies * fix access policy auth * fix tests * fix uncalled settings expander * add feature toggle * small feedback fixes * rename entitlements to permissions * add authlibn * allow viewing the signed in user info for non user namespace * fix invalid namespacedID * use authlib as verifier for tokens * Update pkg/services/authn/clients/ext_jwt.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * Update pkg/services/authn/clients/ext_jwt_test.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * fix parameter names * change asserts to normal package * add rule for assert * fix ownerships * Local diff * test and lint * Fix test * Fix ac test * Fix pluginproxy test * Revert testdata changes * Force revert on test data --------- Co-authored-by: gamab <gabriel.mabille@grafana.com> Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	1 year ago
Karl Persson	73e426b081	User: email verification completion (#85259) ... * TempUser: Include InvitedById in TempUserDTO * Extract email verfication completion flow to service	1 year ago
Karl Persson	8d9521fb6d	Refactor: Email verification (#84393) ... * Update template names * Add verifier that we can use to start verify process * Use userVerifier when verifying email on update * Add tests --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	1 year ago
Jo	0aebb9ee39	Misc: Remove unused params and impossible logic (#83756) ... * remove unused params and impossible logic * remove unused param	1 year ago
Jo	36a19bfa83	AuthProxy: Allow disabling Auth Proxy cache (#83755) ... * extract auth proxy settings * simplify auth proxy methods * add doc mentions	1 year ago
김은빈	96dfb385ca	Grafana: Replace magic number with a constant variable in response status (#80132) ... * Chore: Replace response status with const var * Apply suggestions from code review Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com> * Add net/http import --------- Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>	1 year ago
Xavi Lacasa	46c26bbd0b	Auth: Fix email verification bypass when using basic authentication (#82914)	1 year ago
linoman	ac84069071	Password policy (#82268) ... * add password service interface * add password service implementation * add tests for password service * add password service wiring * add feature toggle * Rework from service interface to static function * Replace previous password validations * Add codeowners to password service * add error logs * update config files --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	1 year ago
Marcus Efraimsson	6768c6c059	Chore: Remove public vars in setting package (#81018) ... Removes the public variable setting.SecretKey plus some other ones. Introduces some new functions for creating setting.Cfg.	1 year ago
Jo	814d62406e	User: Verify external user status for accessing certain user routes (#79909) ... stricter user profile route checking	2 years ago
Misi	ce1450d4d3	Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443) ... * Configure SkipOrgRoleSync from OAuthInfo * Remove skipOrgRoleSync from socialbase and connectors * Add test to socialimpl.ProvideService * Deprecate AuthSettings' fields * clean up misleading init of frontendsettings.Auth	2 years ago
Karl Persson	87eba34745	User: remove empty email / username check from update in service (#77347) ... User: remove empty email / username check from update in service	2 years ago
Karl Persson	1528d6f5c4	Authn: Prevent empty username and email during sync (#76330) ... * Move errors to error file * Move check for both empty username and email to user service * Move check for empty email and username to user service Update * Wrap inner error * Set username in test	2 years ago
Jo	5eed495cce	Chore: Port user services to identity.Requester (#73851) ... * port api key api to signedinuser * port users to signed in user interface * fix tests	2 years ago
Ieva	d3b481dac8	Auth: Lock down Grafana admin role updates if the role is externally synced (#72677) ... * lock down server admin role updates on the frontend if the user is externally synced * add tests * lock Grafana Server admin role updates from the backend * rename variables * check that the user has auth info * add LDAP to providers for which Grafana Server admin role can be synced * linting	2 years ago
Sofia Papagiannaki	32ff712e98	Swagger: Fix response for the search users endpoint (#71272) ... * Regenerate OpenAPI specs for fetching the latest changes * Fix swagger annotations for search users API	2 years ago
Serge Zaitsev	46605a3791	Chore: Fix authinfo api after result field removal (#65487) ... fix authinfo api after result field removal	2 years ago
Serge Zaitsev	a38f230d37	Chore: Remove result fields from login (#65136) ... * remove result fields from login * fix tests * fix tests * another shadowing	2 years ago
Eric Leijonmarck	3cd952b8ba	Auth: Fix orgrole picker disabled if isSynced user (#64033) ... * fix: disable orgrolepicker if externaluser is synced * add disable to role picker * just took me 2 hours to center the icon * wip * fix: check externallySyncedUser for API call * remove check from store * add: tests * refactor authproxy and made tests run * add: feature toggle * set feature toggle for tests * add: IsProviderEnabled * refactor: featuretoggle name * IsProviderEnabled tests * add specific tests for isProviderEnabled * fix: org_user tests * add: owner to featuretoggle * add missing authlabels * remove fmt * feature toggle * change config * add test for a different authmodule * test refactor * gen feature toggle again * fix basic auth user able to change the org role * test for basic auth role * make err.base to error * lowered lvl of log and input mesg	2 years ago
Karl Persson	8484d0c4ef	Settings: Remove global variables for auth settings (#63795) ... * Setting: Remove global DisableLoginForm and add it to cfg * Setting: Remove unused BasicAuthEnabled global * Setting: Remove global OAuthAutoLogin and use from cfg * Setting: Remove global AnonymousEnabled * Setting: Remove global values for AuthProxy settings	2 years ago
Eric Leijonmarck	91b5337600	Auth: Refactoring of frontend skipOrgRoleSync logic to backend (#62921) ... * WIP * refactor: add function in login for externSynced * refactor: make function to make ExternalSyncedInfo - adds tests - refactors strings into consts * remove: console.log * remove: unnessecary comment * added exhaustive tests * refactor: labelname * removed unused code * missspelling * refactor: based on review comments * add: comment to functions about authinfo behavior * Update pkg/services/login/authinfo.go Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * Update pkg/services/login/authinfo.go Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * fix: tests --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
idafurjes	cbc10f9c5d	Chore: Delete password and search from models package (#62482) ... * Chore: Delete password and search from models package * Rename model to AdminCreateUserResponse	2 years ago
Kristin Laemmert	9256a520a4	chore: move user_auth models to (mostly) login service (#62269) ... * chore: move user_auth models to (mostly) login service	2 years ago
idafurjes	6c5a573772	Chore: Move ReqContext to contexthandler service (#62102) ... * Chore: Move ReqContext to contexthandler service * Rename package to contextmodel * Generate ngalert files * Remove unused imports	2 years ago
idafurjes	f2ffce4351	Chore: Move team models to models pkg (#61262) ... * Chore: Move team models to models pkg * Fix ACL tests * More ACL tests * Change Id to ID in conflict user command test * Remove team from models * Fix ac test lint	2 years ago
idafurjes	bb35f37b66	Chore: Delete org model duplicates (#60940) ... * Delete org model duplicates * Fix lint * Move OrgDetailsDTO to org pkg	3 years ago
idafurjes	325f7a789e	Chore: Delete duplicate models for user (#60906) ... * Delete duplicate models for user * Use new models in some tests * Add auth model conversion back	3 years ago
Jo	121631daae	Fix: Email and username trimming and invitation validation (#58442) ... * fix: email and username trimming and invitation validation * Trim leading and trailing whitespaces from email and username on signup * Check whether the provided email address is the same as where the invitation sent * Align tests Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com>	3 years ago
idafurjes	bc7a383252	Remove org methods from sqlstore interface (#56358) ... * Remove org methods from sqlstore interface * Remove some mocks * Fix some tests	3 years ago
idafurjes	a45ef61d25	Chore: Remove GetUserByEmail and GetUserByLogin from sqlstore (#55903) ... * Chore: Remove GetUserByEmail and GetUserByLogin from sqlstore Rename GetUserProfile to GetProfile * Fix lint * Skip test for mysql * Add missing method to sqlstore mock	3 years ago
Kristin Laemmert	701f6d5436	UserService: use the UserService instead of calling sqlstore directly (#55745) ... * UserService: update callers to use the UserService instead of calling sqlstore directly There is one major change hiding in this PR. UserService.Delete originally called a number of services to delete user-related records. I moved everything except the actual call to the user table, and moved those into the API. This was done to avoid dependencies cycles; many of our services depend on the user service, so the user service itself should have as few dependencies as possible.	3 years ago