Steffen Baarsgaard
b047175330
Auth: Support JWT configs tls_client_ca and jwk_set_bearer_token_file ( #109095 )
...
* Auth.jwt: Support config tls_client_ca
* Auth.jwt: Support config jwk_set_bearer_token_file
* Docs: Document new JWKS url options and mention tls_skip_verify_insecure
* Docs: Fix note on JWKS response caching
* chore: Refactor getBearerToken into standalone function
* docs: Apply wording/formatting suggestions
Co-authored-by: Victor Cinaglia <victorcinaglia@gmail.com >
* chore: Simplify ca helper function using testcerts
Co-authored-by: Victor Cinaglia <victorcinaglia@gmail.com >
* chore: Update doc and add comment preventing potential erroneous optimization
Co-authored-by: Victor Cinaglia <victorcinaglia@gmail.com >
chore: Reword comment prevent an erroneous refactor
* docs: Update casing
Co-authored-by: Victor Cinaglia <victorcinaglia@gmail.com >
---------
Co-authored-by: Victor Cinaglia <victorcinaglia@gmail.com >
2025-08-26 09:50:06 -03:00
Serge Zaitsev
a95fb3a37c
Chore: Omit integration tests if short test flag is passed ( #108777 )
...
* omit integration tests if short test flag is passed
* Update pkg/services/ngalert/models/receivers_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/tests/api/alerting/api_ruler_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/tests/api/alerting/api_ruler_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/tests/api/alerting/api_ruler_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/tests/api/alerting/api_ruler_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/tests/api/alerting/api_ruler_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/services/ngalert/models/receivers_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/cmd/grafana-cli/commands/datamigrations/to_unified_storage_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/services/ngalert/models/receivers_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* fix the rest
* false positive
---------
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-07-28 13:38:54 +02:00
Serge Zaitsev
f66a693438
Chore: Rename integration tests to follow the common convention ( #105987 )
...
* automatically rename integration tests to follow the common convention
* name tests differently
* alter column type to bigint
* update another column to bigint
* add another alter
* fix subquery for mysql
2025-06-29 16:56:24 +02:00
Jo
6f62d970e3
JWT Authentication: Add support for specifying groups in auth.jwt for teamsync ( #82175 )
...
* merge JSON search logic
* document public methods
* improve test coverage
* use separate JWT setting struct
* correct use of cfg.JWTAuth
* add group tests
* fix DynMap typing
* add settings to default ini
* add groups option to devenv path
* fix test
* lint
* revert jwt-proxy change
* remove redundant check
* fix parallel test
2024-02-09 16:35:58 +01:00
Dan Cech
790e1feb93
Chore: Update test database initialization ( #81673 )
...
* streamline initialization of test databases, support on-disk sqlite test db
* clean up test databases
* introduce testsuite helper
* use testsuite everywhere we use a test db
* update documentation
* improve error handling
* disable entity integration test until we can figure out locking error
2024-02-09 09:35:39 -05:00
Marcus Efraimsson
6768c6c059
Chore: Remove public vars in setting package ( #81018 )
...
Removes the public variable setting.SecretKey plus some other ones.
Introduces some new functions for creating setting.Cfg.
2024-01-23 12:36:22 +01:00
Ryan McKinley
025b2f3011
Chore: use any rather than interface{} ( #74066 )
2023-08-30 18:46:47 +03:00
Misi
bba11d04cb
Auth: Add key_id config param to auth.jwt ( #72711 )
...
* Specify keyID for public key provided in PEM format for JWT Auth
* Update docs
* Update sample.ini
2023-08-03 09:13:23 +02:00
Jo
5e5c751ecd
Auth: Respect cache control for JWKS in auth.jwt ( #68872 )
...
* respect cache control for auth.jwt
* add documentation
* add small note on cache control header ignores
* make distinction of env
2023-05-23 12:29:10 +02:00
Jo
45fde4235b
Deps: Replace go-jose v2 with go-jose v3 ( #64228 )
...
replace go-jose v2 with go-jose v3
2023-03-06 15:12:51 +01:00
Jo
062d255124
Handle ioutil deprecations ( #53526 )
...
* replace ioutil.ReadFile -> os.ReadFile
* replace ioutil.ReadAll -> io.ReadAll
* replace ioutil.TempFile -> os.CreateTemp
* replace ioutil.NopCloser -> io.NopCloser
* replace ioutil.WriteFile -> os.WriteFile
* replace ioutil.TempDir -> os.MkdirTemp
* replace ioutil.Discard -> io.Discard
2022-08-10 15:37:51 +02:00
Emil Tullstedt
12e0a94316
JWT: Split race-y test into two stable tests ( #41950 )
2021-11-19 12:05:04 +01:00
Emil Tullstedt
dbb8246b6b
JWT: Increase distance from now in tests ( #41794 )
2021-11-17 12:03:56 +01:00
Guillaume GILL
7c5de96503
Auth: Omit all base64 paddings in JWT tokens for the JWT auth ( #35602 )
...
Omitting all base64 paddings (=) in JWT tokens.
Fixes #34496
2021-10-27 18:50:30 +02:00
Arve Knudsen
78596a6756
Migrate to Wire for dependency injection ( #32289 )
...
Fixes #30144
Co-authored-by: dsotirakis <sotirakis.dim@gmail.com >
Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com >
Co-authored-by: Ida Furjesova <ida.furjesova@grafana.com >
Co-authored-by: Jack Westbrook <jack.westbrook@gmail.com >
Co-authored-by: Will Browne <wbrowne@users.noreply.github.com >
Co-authored-by: Leon Sorokin <leeoniya@gmail.com >
Co-authored-by: Andrej Ocenas <mr.ocenas@gmail.com >
Co-authored-by: spinillos <selenepinillos@gmail.com >
Co-authored-by: Karl Persson <kalle.persson@grafana.com >
Co-authored-by: Leonard Gram <leo@xlson.com >
2021-08-25 15:11:22 +02:00
Vladimir Kochnev
39a3b0d0b0
Auth: support JWT Authentication ( #29995 )
2021-03-31 08:40:44 -07:00