Commit Graph

96 Commits

Author SHA1 Message Date
niravparikh05
cb485e426e removing references to sensitive hash information 2022-05-03 17:19:10 +05:30
niravparikh05
27b2b2f8d9 fixes to callback url and associate default org admin group to role 2022-05-03 13:08:23 +05:30
Abin Simon
7ba4f9e518 Drop broken tests from unused modules
Dropping broken tests releated to namespaces, gitops and relay peering.
2022-05-02 15:16:10 +05:30
Abin Simon
e92394080b Fix string formatting in tests 2022-05-02 15:10:37 +05:30
Nirav Parikh
31a89543b0 Merge pull request #125 from RafayLabs/no-restart
Fix casbin caching issues
2022-04-29 18:35:46 +05:30
Abin Simon
f9ec22a0ba Invalidate casbin cache after every update 2022-04-29 15:10:36 +05:30
Abin Simon
5c7776b12e Set sentry scheme to http if no scheme available 2022-04-29 15:10:19 +05:30
niravparikh05
13e78d6b07 fixes for cli auth 2022-04-28 21:35:42 +05:30
niravparikh05
e9b9b2b7f4 fixes for oidc config and groups list 2022-04-27 21:39:24 +05:30
niravparikh05
101c005312 fixes for permissions and user group assoc 2022-04-26 19:56:36 +05:30
Abin Simon
2dfbc42717 Drop org and partner restriction in relay audit lookup 2022-04-26 15:29:37 +05:30
Abin Simon
9b7dc9a9a0 Use kratos public url in prompt 2022-04-26 13:29:07 +05:30
Abin Simon
686955a4b4 Fix audit log format 2022-04-26 10:26:15 +05:30
Abin Simon
5c2d211100 Don't add id for actor
We are dropping all ids from audit log.
2022-04-26 10:26:15 +05:30
niravparikh05
6cc5864082 fix for get user kubeconfig 2022-04-25 17:59:31 +05:30
niravparikh05
db7be6e26e changes to support prompt 2022-04-25 17:24:08 +05:30
niravparikh05
9e8d767a9e fixes in middleware to set db and few other fixes 2022-04-22 12:13:23 +05:30
Nirav Parikh
a9cd4e842e multiple kratos clients for session validation and identity creation (#114)
* multiple kratos clients for session validation and identity creation

* fixed review comments

* switching few logs to debug
2022-04-21 11:52:20 +05:30
Akshay Gaikwad
9d15c3aa15 Remove Kratos scheme variable from auth
kratos Address var includes scheme, so no need to of separate variable
for a scheme.
2022-04-19 15:20:35 +05:30
niravparikh05
8883703328 changes to expose system and user grpc clients for prompt 2022-04-15 15:05:17 +05:30
niravparikh05
c99c1c5a7e reverting changes for isGlobal in role resource 2022-04-14 18:36:55 +05:30
Nirav Parikh
a9e72810a5 Merge pull request #104 from RafayLabs/issue_fixes
issue fixes for cluster delete and adding bootstrap addr to agent config
2022-04-14 17:08:22 +05:30
niravparikh05
4b6cc8f8fe changes to support cluster proxy config 2022-04-14 17:01:05 +05:30
Abin Simon
309b1a4bda Add warning about DEV mode when calling userinfo 2022-04-14 16:55:48 +05:30
Abin Simon
5d5b097770 Remove is_global column from resourcerole table 2022-04-14 16:55:48 +05:30
Abin Simon
3f43536ad0 Don't panic if user is not available 2022-04-14 16:25:14 +05:30
Abin Simon
5537cf0608 Don't allow users to delete builtin roles 2022-04-14 16:24:44 +05:30
Abin Simon
d89136de65 Don't allow users to update builtin roles 2022-04-14 15:26:18 +05:30
Nirav Parikh
a6268da716 Merge pull request #101 from RafayLabs/authz-next
Tiny tweaks to authz
2022-04-13 12:13:18 +05:30
Abin Simon
9190ac81f2 Make UserInfo not require authz 2022-04-13 12:07:51 +05:30
Abin Simon
610a7da953 Fix returning ordering in authenticate 2022-04-12 19:25:05 +05:30
niravparikh05
2be1a80d92 removing leader election 2022-04-12 15:44:43 +05:30
Abin Simon
cf501a2dd8 Tiny little tidy up post authz fixes 2022-04-12 13:51:43 +05:30
niravparikh05
e45547a453 changes to support dev mode testing 2022-04-12 12:37:34 +05:30
sigmabaryon
fbae03741d Fix casbin permissions, add kratos changes 2022-04-12 11:26:52 +05:30
Abin Simon
8768b77698 Take care of a missing TODO 2022-04-11 13:25:34 +05:30
Abin Simon
2b03267d01 Do not print out ids in audit_logs 2022-04-11 13:25:34 +05:30
Abin Simon
853e7debae No need to support org or partner ids in audit logs
We will add this back in once we have multi-org support in the system.
2022-04-11 13:25:34 +05:30
Abin Simon
08db221239 Create audit logs for partner and oidc provider 2022-04-08 17:42:26 +05:30
Abin Simon
34c48c5892 Skip org and partner in audit query 2022-04-08 17:42:26 +05:30
Abin Simon
5784968790 Fix timestamp and search 2022-04-08 17:42:26 +05:30
Abin Simon
89379fe07f Fix tests after audit log changes 2022-04-08 17:42:26 +05:30
Abin Simon
5c319f3ea8 Move out event write to separate function 2022-04-08 17:42:26 +05:30
Abin Simon
0ebb1a1339 Add audit log write
https://blog.sandipb.net/2018/05/03/using-zap-creating-custom-loggers/
2022-04-08 17:42:26 +05:30
Abin Simon
d9d0bc3585 Fix and cleanup tests 2022-04-08 17:42:26 +05:30
Abin Simon
729009d7fb Add basic audit logging setup 2022-04-08 17:42:26 +05:30
Abin Simon
36bfda653b Add host, ua and ip to session data 2022-04-08 17:42:26 +05:30
niravparikh05
8397d88836 fix for casbin duplicate issue during init and removing all deletes from init 2022-04-07 17:57:37 +05:30
Abin Simon
df72864d09 Add option to filter by user auth mode
Pass in type=password or type=oidc to pick the mode
2022-04-06 15:03:01 +05:30
Abin Simon
66c7cc7f10 Filter from all users list if we have don't have filters 2022-04-06 14:01:32 +05:30