Abin Simon
853e7debae
No need to support org or partner ids in audit logs
...
We will add this back in once we have multi-org support in the system.
2022-04-11 13:25:34 +05:30
Abin Simon
08db221239
Create audit logs for partner and oidc provider
2022-04-08 17:42:26 +05:30
Abin Simon
34c48c5892
Skip org and partner in audit query
2022-04-08 17:42:26 +05:30
Abin Simon
5784968790
Fix timestamp and search
2022-04-08 17:42:26 +05:30
Abin Simon
89379fe07f
Fix tests after audit log changes
2022-04-08 17:42:26 +05:30
Abin Simon
5c319f3ea8
Move out event write to separate function
2022-04-08 17:42:26 +05:30
Abin Simon
0ebb1a1339
Add audit log write
...
https://blog.sandipb.net/2018/05/03/using-zap-creating-custom-loggers/
2022-04-08 17:42:26 +05:30
Abin Simon
d9d0bc3585
Fix and cleanup tests
2022-04-08 17:42:26 +05:30
Abin Simon
729009d7fb
Add basic audit logging setup
2022-04-08 17:42:26 +05:30
Abin Simon
36bfda653b
Add host, ua and ip to session data
2022-04-08 17:42:26 +05:30
niravparikh05
8397d88836
fix for casbin duplicate issue during init and removing all deletes from init
2022-04-07 17:57:37 +05:30
Abin Simon
df72864d09
Add option to filter by user auth mode
...
Pass in type=password or type=oidc to pick the mode
2022-04-06 15:03:01 +05:30
Abin Simon
66c7cc7f10
Filter from all users list if we have don't have filters
2022-04-06 14:01:32 +05:30
Abin Simon
5306d6a2c6
Send recovery url back after user creation
2022-04-06 13:39:36 +05:30
nirav-rafay
c81ca9eb95
fixed test cases and format
2022-04-04 13:37:36 +05:30
nirav-rafay
639ff1da30
addressed review comments, changes for custom roles and sso users
2022-04-04 11:41:58 +05:30
nirav-rafay
ce9063e990
rebasing with fixes for ui
2022-04-01 12:03:42 +05:30
nirav-rafay
7d38707a9e
Merge pull request #86 from RafayLabs/query-options
...
Some stuff that has to do with permissions
2022-04-01 11:30:25 +05:30
Abin Simon
94bb70cb6d
Merge sentry view table models
2022-03-31 13:37:11 +05:30
Abin Simon
1ed5a3e876
Rework session handling to prevent cyclic import
...
imports github.com/RafayLabs/rcloud-base/internal/fixtures
imports github.com/RafayLabs/rcloud-base/pkg/service
imports github.com/RafayLabs/rcloud-base/pkg/auth/v3
imports github.com/RafayLabs/rcloud-base/pkg/service
2022-03-30 14:00:05 +05:30
Akshay Gaikwad
5de4ba9765
Add two constructors for authContext
...
This includes:
- SetupAuthContext: Setups authContext with new authContext fields.
- NewAuthContext: Create AuthContext with using authContext fields
from caller function.
2022-03-30 13:00:35 +05:30
Akshay Gaikwad
c972e26d93
Update Auth constructor function and middleware
...
Auth constructor should handle creation of Kratos, database,
ApiKeyService itself for benefit to other dependent modules/repos. The
Prompt module does not need db instance hence it should not pass db
parameter when initializing Auth context and middleware.
Signed-off-by: Akshay Gaikwad <akshay.gaikwad@rafay.co >
2022-03-30 12:16:42 +05:30
Abin Simon
ff4f5d160e
Switch from permission to permissions for userinfo
2022-03-29 16:02:29 +05:30
Abin Simon
49ce1ca5a1
Add test for userinfo and fix broken tests
2022-03-29 15:58:27 +05:30
Abin Simon
229cf7c033
Pass down username from interceptor for entitlements
2022-03-29 15:09:19 +05:30
Abin Simon
ae1cae9782
Basic entitlements working
2022-03-29 15:09:19 +05:30
Abin Simon
f849cc59c3
Initial version of GetUserInfo for fetching full info about current users
2022-03-29 15:09:19 +05:30
Abin Simon
e8cc7d2f1c
Implement filtering of users and groups via sentry
...
Drop the previous implementationusing custom code
2022-03-29 15:09:19 +05:30
Abin Simon
cf0b830924
Basic QueryOptions filtering for groups and users
2022-03-29 15:09:19 +05:30
Abin Simon
c89741aefb
Don't use reflect to get resource Metadata
2022-03-25 18:18:55 +05:30
Abin Simon
abb56481a3
Auth middleware for use in prompt
2022-03-25 18:18:55 +05:30
Abin Simon
f7ac37ab6f
Initial support for authorization
2022-03-25 18:17:43 +05:30
Abin Simon
1dce43d607
Update role definition for casbin
2022-03-25 18:17:43 +05:30
Abin Simon
a2a07c2dc2
FIx transaction issues
2022-03-24 17:06:12 +05:30
Abin Simon
fb4fa3781c
Rename RafaySystems to RafayLabs
2022-03-24 12:42:59 +05:30
Abin Simon
78a0b0c625
Rearrage some files to cleanup file structure
2022-03-24 12:40:45 +05:30
Abin Simon
e6c37f4972
Fix authz issues from implementing transactions
2022-03-21 17:49:37 +05:30
Abin Simon
0ef5a92eaf
Drop unnecessary logging in audit endpoint
2022-03-21 17:49:21 +05:30
shrey-rafay
99f9ccaafb
Add support for mapping permission names to urls when creating the roles
2022-03-21 17:49:13 +05:30
Akshay Gaikwad
d792e57105
Format all packages using go fmt
2022-03-21 12:28:27 +05:30
Abin Simon
b1e6981dcf
Rollback and log when commit fails
2022-03-21 12:17:22 +05:30
Abin Simon
b305edc57e
Update how delete is done for project,org,partner
...
Since delete is now soft delete by default, we can use that instead of
update to delete stuff.
2022-03-21 12:13:34 +05:30
Abin Simon
459a4c0d19
Update more resources to use transactions
2022-03-21 12:13:32 +05:30
Abin Simon
b4abc1ea61
Make create,update,delete in role use transactions
2022-03-21 12:10:18 +05:30
Abin Simon
c18613df23
Make create,update,delete in user use transactions
2022-03-21 12:10:18 +05:30
Abin Simon
b088eaecef
Make create,update,delete in group use transactions
2022-03-21 12:10:18 +05:30
nirav-rafay
dbfc2b3928
Merge pull request #39 from RafaySystems/casbin-url-mappings
...
Add support for mapping permission names to urls when creating the roles
2022-03-21 12:09:13 +05:30
Abin Simon
a004ab25ae
Consistent error handling in services (partner,project,cluster,org)
2022-03-18 12:34:37 +05:30
shrey-rafay
5aeab8fd1d
Fix for mappings cache
2022-03-17 09:39:10 +05:30
Abin Simon
df810ab45a
Convert from dao interface to funcs
...
This was done inorder to support transactions which will be done in
the next PR. This is the first step towards that.
2022-03-16 17:10:32 +05:30
