niravparikh05
|
cb485e426e
|
removing references to sensitive hash information
|
2022-05-03 17:19:10 +05:30 |
|
niravparikh05
|
27b2b2f8d9
|
fixes to callback url and associate default org admin group to role
|
2022-05-03 13:08:23 +05:30 |
|
Abin Simon
|
7ba4f9e518
|
Drop broken tests from unused modules
Dropping broken tests releated to namespaces, gitops and relay peering.
|
2022-05-02 15:16:10 +05:30 |
|
Abin Simon
|
e92394080b
|
Fix string formatting in tests
|
2022-05-02 15:10:37 +05:30 |
|
Nirav Parikh
|
31a89543b0
|
Merge pull request #125 from RafayLabs/no-restart
Fix casbin caching issues
|
2022-04-29 18:35:46 +05:30 |
|
Abin Simon
|
f9ec22a0ba
|
Invalidate casbin cache after every update
|
2022-04-29 15:10:36 +05:30 |
|
Abin Simon
|
5c7776b12e
|
Set sentry scheme to http if no scheme available
|
2022-04-29 15:10:19 +05:30 |
|
niravparikh05
|
13e78d6b07
|
fixes for cli auth
|
2022-04-28 21:35:42 +05:30 |
|
niravparikh05
|
e9b9b2b7f4
|
fixes for oidc config and groups list
|
2022-04-27 21:39:24 +05:30 |
|
niravparikh05
|
101c005312
|
fixes for permissions and user group assoc
|
2022-04-26 19:56:36 +05:30 |
|
Abin Simon
|
2dfbc42717
|
Drop org and partner restriction in relay audit lookup
|
2022-04-26 15:29:37 +05:30 |
|
Abin Simon
|
9b7dc9a9a0
|
Use kratos public url in prompt
|
2022-04-26 13:29:07 +05:30 |
|
Abin Simon
|
686955a4b4
|
Fix audit log format
|
2022-04-26 10:26:15 +05:30 |
|
Abin Simon
|
5c2d211100
|
Don't add id for actor
We are dropping all ids from audit log.
|
2022-04-26 10:26:15 +05:30 |
|
niravparikh05
|
6cc5864082
|
fix for get user kubeconfig
|
2022-04-25 17:59:31 +05:30 |
|
niravparikh05
|
db7be6e26e
|
changes to support prompt
|
2022-04-25 17:24:08 +05:30 |
|
niravparikh05
|
9e8d767a9e
|
fixes in middleware to set db and few other fixes
|
2022-04-22 12:13:23 +05:30 |
|
Nirav Parikh
|
a9cd4e842e
|
multiple kratos clients for session validation and identity creation (#114)
* multiple kratos clients for session validation and identity creation
* fixed review comments
* switching few logs to debug
|
2022-04-21 11:52:20 +05:30 |
|
Akshay Gaikwad
|
9d15c3aa15
|
Remove Kratos scheme variable from auth
kratos Address var includes scheme, so no need to of separate variable
for a scheme.
|
2022-04-19 15:20:35 +05:30 |
|
niravparikh05
|
8883703328
|
changes to expose system and user grpc clients for prompt
|
2022-04-15 15:05:17 +05:30 |
|
niravparikh05
|
c99c1c5a7e
|
reverting changes for isGlobal in role resource
|
2022-04-14 18:36:55 +05:30 |
|
Nirav Parikh
|
a9e72810a5
|
Merge pull request #104 from RafayLabs/issue_fixes
issue fixes for cluster delete and adding bootstrap addr to agent config
|
2022-04-14 17:08:22 +05:30 |
|
niravparikh05
|
4b6cc8f8fe
|
changes to support cluster proxy config
|
2022-04-14 17:01:05 +05:30 |
|
Abin Simon
|
309b1a4bda
|
Add warning about DEV mode when calling userinfo
|
2022-04-14 16:55:48 +05:30 |
|
Abin Simon
|
5d5b097770
|
Remove is_global column from resourcerole table
|
2022-04-14 16:55:48 +05:30 |
|
Abin Simon
|
3f43536ad0
|
Don't panic if user is not available
|
2022-04-14 16:25:14 +05:30 |
|
Abin Simon
|
5537cf0608
|
Don't allow users to delete builtin roles
|
2022-04-14 16:24:44 +05:30 |
|
Abin Simon
|
d89136de65
|
Don't allow users to update builtin roles
|
2022-04-14 15:26:18 +05:30 |
|
Nirav Parikh
|
a6268da716
|
Merge pull request #101 from RafayLabs/authz-next
Tiny tweaks to authz
|
2022-04-13 12:13:18 +05:30 |
|
Abin Simon
|
9190ac81f2
|
Make UserInfo not require authz
|
2022-04-13 12:07:51 +05:30 |
|
Abin Simon
|
610a7da953
|
Fix returning ordering in authenticate
|
2022-04-12 19:25:05 +05:30 |
|
niravparikh05
|
2be1a80d92
|
removing leader election
|
2022-04-12 15:44:43 +05:30 |
|
Abin Simon
|
cf501a2dd8
|
Tiny little tidy up post authz fixes
|
2022-04-12 13:51:43 +05:30 |
|
niravparikh05
|
e45547a453
|
changes to support dev mode testing
|
2022-04-12 12:37:34 +05:30 |
|
sigmabaryon
|
fbae03741d
|
Fix casbin permissions, add kratos changes
|
2022-04-12 11:26:52 +05:30 |
|
Abin Simon
|
8768b77698
|
Take care of a missing TODO
|
2022-04-11 13:25:34 +05:30 |
|
Abin Simon
|
2b03267d01
|
Do not print out ids in audit_logs
|
2022-04-11 13:25:34 +05:30 |
|
Abin Simon
|
853e7debae
|
No need to support org or partner ids in audit logs
We will add this back in once we have multi-org support in the system.
|
2022-04-11 13:25:34 +05:30 |
|
Abin Simon
|
08db221239
|
Create audit logs for partner and oidc provider
|
2022-04-08 17:42:26 +05:30 |
|
Abin Simon
|
34c48c5892
|
Skip org and partner in audit query
|
2022-04-08 17:42:26 +05:30 |
|
Abin Simon
|
5784968790
|
Fix timestamp and search
|
2022-04-08 17:42:26 +05:30 |
|
Abin Simon
|
89379fe07f
|
Fix tests after audit log changes
|
2022-04-08 17:42:26 +05:30 |
|
Abin Simon
|
5c319f3ea8
|
Move out event write to separate function
|
2022-04-08 17:42:26 +05:30 |
|
Abin Simon
|
0ebb1a1339
|
Add audit log write
https://blog.sandipb.net/2018/05/03/using-zap-creating-custom-loggers/
|
2022-04-08 17:42:26 +05:30 |
|
Abin Simon
|
d9d0bc3585
|
Fix and cleanup tests
|
2022-04-08 17:42:26 +05:30 |
|
Abin Simon
|
729009d7fb
|
Add basic audit logging setup
|
2022-04-08 17:42:26 +05:30 |
|
Abin Simon
|
36bfda653b
|
Add host, ua and ip to session data
|
2022-04-08 17:42:26 +05:30 |
|
niravparikh05
|
8397d88836
|
fix for casbin duplicate issue during init and removing all deletes from init
|
2022-04-07 17:57:37 +05:30 |
|
Abin Simon
|
df72864d09
|
Add option to filter by user auth mode
Pass in type=password or type=oidc to pick the mode
|
2022-04-06 15:03:01 +05:30 |
|
Abin Simon
|
66c7cc7f10
|
Filter from all users list if we have don't have filters
|
2022-04-06 14:01:32 +05:30 |
|