public/grafana
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
56,936 Commits 655 Branches 650 Tags
d87ef806f04f373471be20ef8fa4eb5df74a8708
Commit Graph
23 Commits
Author SHA1 Message Date
Karl Persson 011301f06f Authz: client cache (#100195) 
* Reduce client permissions cache for authz client

* Adjust server cache ttl
 2025-02-06 17:16:30 +01:00
IevaandGabriel MABILLE 33a53d170b AuthZ service: Add metrics (#99007) 
* add metrics for authZ MT service

* remove metrics that are already tracked by the GRPC server metrics

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>

* undo unneeded change

* test fix

---------

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>
 2025-01-24 14:03:23 +00:00
Gabriel MABILLE a9f0e15778 AuthZ: Change cache interface (#99058) 
* Authz: Switch to remotecache

* Todos

* lint

* lint test

* test readibility

* Remove ttls

* implement a cache wrap

* Rm unused func

* Comment

* Update workspace:

* Use cache

* Fix comment
 2025-01-24 09:51:39 +01:00
Ryan McKinley 680e6bc1f8 Authlib: Use types package rather than claims (#99243) 2025-01-21 12:06:55 +03:00
Karl Persson 7329d2c34b Authz: Account for fixed roles when running oss and using authz service (#99244) 
* Extract "PermissionStore" from general store interface

* Add static and union permission stores

* Add GetStaticRoles

* Use accesscontrol.Service for inproc to provide static permissions
 2025-01-20 16:00:36 +01:00
Karl Persson 3f71a72c1a Authz: Remove "wrapper" interface and only check feature toggle for grpc mode (#98933) 
* Remove "wrapper" interface and only check feature toggle for grpc and cloud mode

* Only set name for update checks

* Set dashboard permissions for admin user
 2025-01-15 09:23:56 +01:00
Gabriel MABILLE 4c86de2678 Chore: Update authlib (#98870) 
* Chore: Update authlib

* AccessChecker -> AccessClient
 2025-01-14 09:42:17 +01:00
Gabriel MABILLEandievaVasiljeva 4d699d4810 AuthZ: Use M3 AuthZ Service (#98621) 
* AuthZ: Use M3 AuthZ Service

Co-authored-by: ievaVasiljeva <ieva.vasiljeva@grafana.com>

* Fix oss

* fake auth info

---------

Co-authored-by: ievaVasiljeva <ieva.vasiljeva@grafana.com>
 2025-01-13 16:03:14 +01:00
Gabriel MABILLE bc7e90bc28 AuthZ: Fix client dial options (#98827) 2025-01-10 17:41:56 +01:00
Gabriel MABILLE 6d77c0e187 AuthZ client: Add tracing (#96983) 
* AuthZ client: Add tracing

* InProc as well
 2024-11-25 14:17:52 +01:00
Gabriel MABILLE 3c876f0208 AuthZ: Introduce cloud mode (#96922) 
* AuthZ: Introduce cloud mode

* Update readme
 2024-11-22 16:19:53 +01:00
Georges Chaudy e270412dbf unistore: wire the authz client (#96632) 
* unistore: wire the authz client

* rename dashboards.grafana.app into dashboard.grafana.app

* wire the authz client

* wire the authz client

* resuse the Standalone constructor

* configure default migration for resource folder

* add tests

* cleanup

* add logging
 2024-11-19 15:13:30 +02:00
Gabriel MABILLEandAlexander Zobnin 2788817107 AuthZ: Implement Check (#95162) 
* AuthZ: Implement Check


---------

Co-authored-by: Alexander Zobnin <alexanderzobnin@gmail.com>
 2024-10-25 14:57:39 +02:00
Gabriel MABILLEandClaudiu Dragalina-Paraipan 0704ae734f AuthZ: Refactor authentication modes for the Authz package (#95120) 
* AuthZ: Fix authentication modes for the Authz package

Co-Authored-By: Claudiu Dragalina-Paraipan <drclau@users.noreply.github.com>
 2024-10-22 13:38:59 +02:00
Karl Persson a82d01214d Auth: Update authlib (#94947) 
* Update authlib
 2024-10-18 13:36:21 +02:00
Alexander Zobnin 9f1b584c85 Chore: Update authlib version (#94714) 
* Chore: Update authlib version

* update workspace

* use ParseNamespace()
 2024-10-15 16:58:46 +02:00
Charandas af2e79aa83 K8s: namespace mapper should use authlib's util (#92332) 2024-08-27 15:01:42 -07:00
Ryan McKinley 243c0935fc Auth: Use claims.AuthInfo in requester (#91739) 2024-08-09 19:46:56 +03:00
Gabriel MABILLEandClaudiu Dragalina-Paraipan c76d1e04e8 Authz: Fix on-prem grpc authentication (#91341) 
* Authz: Fix on-prem grpc authentication

Co-authored-by: Claudiu Dragalina-Paraipan <claudiu.dragalina@grafana.com>

* Remove noAuth override

---------

Co-authored-by: Claudiu Dragalina-Paraipan <claudiu.dragalina@grafana.com>
 2024-08-01 16:30:13 +03:00
Claudiu Dragalina-ParaipanandGabriel MABILLE 05ab4cdd1f [authz]: use authlib client (#91205) 
authz: use authlib client

Co-authored-by: Gabriel MABILLE <gabriel.mabille@grafana.com>
 2024-07-30 17:49:46 +03:00
Ryan McKinley 5e95c1bdf8 Storage: Move grpc helper from entity store to resource store (#89490) 2024-06-20 22:32:19 +03:00
Gabriel MABILLE 5f83fdef2c AuthZ: GRPC client init and config options (#89161) 2024-06-18 06:13:24 +02:00
Gabriel MABILLEandKarl Persson afcb5a855c AuthZ: embed an authorization server (#89018) 
* AuthZ: embed an authorization server

* CODEOWNERS

* Remove swagger

* WIP

* Flatten structure and inject wireset

* sync mod files

* Rename authorization package

* Fix swagger gen

* CODEOWNERS

* Use itf instead of impl

---------

Co-authored-by: Karl Persson <kalle.persson@grafana.com>
 2024-06-13 11:41:35 +02:00