Commit Graph
29 Commits
Author SHA1 Message Date
Abin Simon 686955a4b4 Fix audit log format 2022-04-26 10:26:15 +05:30
niravparikh05 db7be6e26e changes to support prompt 2022-04-25 17:24:08 +05:30
Nirav Parikh a9cd4e842e multiple kratos clients for session validation and identity creation (#114)
* multiple kratos clients for session validation and identity creation

* fixed review comments

* switching few logs to debug
2022-04-21 11:52:20 +05:30
niravparikh05 e7d436a232 issue fixes for cluster delete and adding bootstrap addr to agent config 2022-04-14 13:10:38 +05:30
Nirav Parikh a6268da716 Merge pull request #101 from RafayLabs/authz-next
Tiny tweaks to authz
2022-04-13 12:13:18 +05:30
Abin Simon 9190ac81f2 Make UserInfo not require authz 2022-04-13 12:07:51 +05:30
niravparikh05 2be1a80d92 removing leader election 2022-04-12 15:44:43 +05:30
niravparikh05 e45547a453 changes to support dev mode testing 2022-04-12 12:37:34 +05:30
nirav-rafay 2ea4e264e5 Merge branch 'main' into system-audit 2022-04-11 17:29:55 +05:30
niravparikh05 ea79bbb13d retrying for kratos to be up during init and possible fix for leaderelection issue 2022-04-11 17:18:45 +05:30
Abin Simon 0ebb1a1339 Add audit log write
https://blog.sandipb.net/2018/05/03/using-zap-creating-custom-loggers/
2022-04-08 17:42:26 +05:30
niravparikh05 d626f402bb default dev mode 2022-04-06 15:30:33 +05:30
niravparikh05 aac445114d excluding bootstrap registration from authn 2022-04-06 15:27:51 +05:30
nirav-rafay 639ff1da30 addressed review comments, changes for custom roles and sso users 2022-04-04 11:41:58 +05:30
nirav-rafay ce9063e990 rebasing with fixes for ui 2022-04-01 12:03:42 +05:30
Akshay Gaikwad 5de4ba9765 Add two constructors for authContext
This includes:
- SetupAuthContext:  Setups authContext with new authContext fields.
- NewAuthContext: Create AuthContext with using authContext fields
from caller function.
2022-03-30 13:00:35 +05:30
Akshay Gaikwad c972e26d93 Update Auth constructor function and middleware
Auth constructor should handle creation of Kratos, database,
ApiKeyService itself for benefit to other dependent modules/repos. The
Prompt module does not need db instance hence it should not pass db
parameter when initializing Auth context and middleware.

Signed-off-by: Akshay Gaikwad <akshay.gaikwad@rafay.co>
2022-03-30 12:16:42 +05:30
Abin Simon fb4fa3781c Rename RafaySystems to RafayLabs 2022-03-24 12:42:59 +05:30
Abin Simon 78a0b0c625 Rearrage some files to cleanup file structure 2022-03-24 12:40:45 +05:30
nirav-rafay dbfc2b3928 Merge pull request #39 from RafaySystems/casbin-url-mappings
Add support for mapping permission names to urls when creating the roles
2022-03-21 12:09:13 +05:30
Abin Simon df810ab45a Convert from dao interface to funcs
This was done inorder to support transactions which will be done in
the next PR. This is the first step towards that.
2022-03-16 17:10:32 +05:30
Akshay Gaikwad 9f260950af Drop KRATOS_SCHEME env var 2022-03-15 10:22:09 +05:30
Akshay Gaikwad b0d2df72f4 Clean up env variables
- Removed unnecessary env vars.
- Add all env vars to env.example file.
2022-03-14 15:13:28 +05:30
nirav-rafay d469315bad changes for cli config download, apikey services and cli auth verify (#55) 2022-03-11 20:06:55 +05:30
akshay196-rafayandAbin Simon 5429bf4493 Add Docker compose file (#49)
* Add DB_ADDR to env vars list
* Add Dockerfile and docker-compose
* Remove go.mod from _kratos dir and clean go.mod of root dir
* Run Kratos docker-compose quickstart from root dir
* Add gomigrate to docker-compose
* Bump docker-composen version to 3.7
* Add Kratos services in the single docker compose file
Removed Kratos quickstart files and merge all setup required for
rcloud-base in the kratos-compose.yml file located in the root of the
repo.
* Add elasticsearch in docker-compose
* Allow es to not be available in when in dev mode
* Change default ES endpoint

Co-authored-by: Abin Simon <abin.simon@rafay.co>
2022-03-11 17:28:16 +05:30
abin-rafay 0e9be5e589 Audit engine query endpoints (#43) 2022-03-08 16:44:41 +05:30
akshay196-rafay 7938f30668 Update IdP and OIDC Provider (#40)
* Update creating oidc provider

* Validate partner and organization by checking in db tables.

* Validate empty scopes

* Fix oidc provider update

* Fix application Host url in ACS URL of Idp
2022-03-07 19:06:57 +05:30
shrey-rafay bfaeb4831d Add support for mapping permission names to urls when creating the roles 2022-03-04 16:24:06 +05:30
nirav-rafay c66bdc25cd restructure rcloud-base as a single base controller (#37)
* restructure rcloud-base as a single base controller
* updated master.rest
* moved sentry from internal to pkg as it is used by relay
* removing unused rpc and it's dependencies
* Fix usermgmt tests
* Don't redefine variables in rest file
Co-authored-by: Abin Simon <abin.simon@rafay.co>
2022-03-03 17:59:06 +05:30