public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
64,280 Commits 655 Branches 650 Tags
000c00aee9dca0bc1100a41f1955a4e6544de558
Commit Graph

19 Commits

Author SHA1 Message Date
Alexander Zobnin 294fd943c0 Chore: Update authlib (#110880) 
* Chore: Update authlib

* exclude incompatible version of github.com/grafana/gomemcache

* Update go-jose to v4

* fix jose imports

* remove jose v3 from go.mod

* fix tests

* fix serialize

* fix failing live tests

* add v1 of ES256 testkeys. Port tests to use ES256 instead of HS256

* accept more signature algs for okta and azuread

* azure social graph token sig

* accept more signature algs for oauth refresh and jwt auth

* update workspace

* add a static signer for inproc

* rebase and fix ext_jwt

* fix jwt tests

* apply alex patch on gomemcache

* update linting

* fix ext_jwt panic

* update workspaces

---------

Co-authored-by: Jo Garnier <git@jguer.space>
 2025-09-15 12:45:15 +02:00
Misi 1f3dc0533c Auth: Add tracing to auth clients and AuthToken service (#107878) 
* Add tracing to auth clients + authtoken svc

* Fix span names

* Fix ext_jwt.go

* Fix idimpl/service

* Update wire_gen.go

* Add tracing to JWT client

* Lint
 2025-07-10 15:41:00 +02:00
Karl Persson be60ef0500 IDToken: cache invalidation (#100592) 
* Make org role part of id token cache key. This way we will always sign a new token when it changes

* Remove calls to remove id token
 2025-02-13 14:10:58 +01:00
Misi ee0a1391df Auth: Add OrgRole to ID token (#100383) 
* Changes for Users and ServiceAccounts

* Align tests
 2025-02-12 05:51:29 -08:00
Ryan McKinley 680e6bc1f8 Authlib: Use types package rather than claims (#99243) 2025-01-21 12:06:55 +03:00
Ryan McKinley 2e60f28044 Auth: remove id token flag (#92209) 2024-08-21 16:30:17 +03:00
Karl Persson 8d36111420 IDForwarding: Set identity type and uid (#91830) 
* Set identity type and uid

* Set uid without prefix

* Update authlib version

* Update to new claim name
 2024-08-14 10:51:44 +02:00
Karl Persson 8bcd9c2594 Identity: Remove typed id (#91801) 
* Refactor identity struct to store type in separate field

* Update ResolveIdentity to take string representation of typedID

* Add IsIdentityType to requester interface

* Use IsIdentityType from interface

* Remove usage of TypedID

* Remote typedID struct

* fix GetInternalID
 2024-08-13 10:18:28 +02:00
Ryan McKinley 21d4a4f49e Auth: use IdentityType from authlib (#91763) 2024-08-12 09:26:53 +03:00
Claudiu Dragalina-Paraipan e2435f92f1 [authn]: add GetIDClaims() to Requester (#91387) 
* authn: add GetIDClaims() to Requester

Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com>

* authn: update StaticRequester

Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com>

* update auth/idtest/mock

Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com>

* Fix test

Co-authored-by: Claudiu Dragalina-Paraipan <claudiu.dragalina@grafana.com>

---------

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>
Co-authored-by: gamab <gabriel.mabille@grafana.com>
 2024-08-02 12:36:02 +03:00
Ryan McKinley 9db3bc926e Identity: Rename "namespace" to "type" in the requester interface (#90567) 2024-07-25 12:52:14 +03:00
Misi 69c5fa8361 IDToken: Add current user's Username and UID to the ID token (#90240) 
* Set claims.Rest.Login from the IDService

* Add UID to the ID token
 2024-07-11 14:25:30 +02:00
Karl Persson 2d8570e85e IDToken: Reuse claims from authlib (#87437) 
* bump authlib version

* Reuse claims from authlib
 2024-05-07 16:46:43 +02:00
Karl Persson 0fa983ad8e AuthN: Use typed namespace id inside authn package (#86048) 
* authn: Use typed namespace id inside package
 2024-04-24 09:57:34 +02:00
Karl Persson 895222725c Session: set authID and authenticatedBy (#85806) 
* Authn: Resolve authenticate by and auth id when fethcing signed in user

* Change logout client interface to only take Requester interface

* Session: Fetch external auth info when authenticating sessions

* Use authenticated by from identity

* Move call to get auth-info into session client and use GetAuthenticatedBy in various places
 2024-04-11 10:25:29 +02:00
Karl Persson 28bb6979f5 IDForwading: cache based on expires in (#81136) 
* IDFowarding: Cache based on expires in

* IDFowarding: Change default expires in

---------

Co-authored-by: Victor Cinaglia <victor@grafana.com>
 2024-01-24 13:56:44 +01:00
Karl Persson 43b6b6b2a4 IDForwarding: add "authenticatedBy" to id token (#80622) 
* IDForwading: Set authenticated by for users
 2024-01-17 09:52:05 +01:00
Karl Persson a2d4ce18ad IDForwarding: Add basic metrics (#75798) 
* IDService: Add basic metrics

* IDService: Add more metrics
---------

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>
 2023-10-05 09:17:40 +02:00
Karl Persson b9b4246432 IDForwarding: Add auth hook to generate id token (#75555) 
* AuthN: Move identity struct to its own file

* IDForwarding: Add IDToken property to usr and identity structs and add GetIDToken to requester interface

* Inject IDService into background services

* IDForwarding: Register post auth hook when feature toggle is enabled
 2023-09-28 09:22:05 +02:00