public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
673ccdc448a8de0f741f86369e58afde2d476d1d
grafana/pkg/api
T
History
Jeffrey Descan c5f906f472 Security: refactor 'redirect_to' cookie to use 'Secure' flag (#19787) 
* Refactor redirect_to cookie with secure flag in middleware

* Refactor redirect_to cookie with secure flag in api/login

* Refactor redirect_to cookie with secure flag in api/login_oauth

* Removed the deletion of 'Set-Cookie' header to prevent logout

* Removed the deletion of 'Set-Cookie' at top of api/login.go

* Add HttpOnly flag on redirect_to cookies where missing

* Refactor duplicated code

* Add tests

* Refactor cookie options

* Replace local function for deleting cookie

* Delete redundant calls

Co-authored-by: Sofia Papagiannaki <papagian@users.noreply.github.com>
2020-01-10 15:55:30 +02:00
..
avatar
use https for fetch gravatar by default (#20964)
2019-12-10 08:59:11 +01:00
dtos
NavLinks: Make ordering in navigation configurable (#20382)
2019-11-15 09:28:55 +01:00
live
pkg/api: Check errors (#19657)
2019-10-08 18:57:53 +02:00
pluginproxy
CloudWatch: Fix high CPU load (#20579)
2019-11-22 14:21:23 +01:00
routing
removes unused return object
2018-06-26 09:22:31 +02:00
static
pkg: fix codespell issues
2018-04-13 20:31:29 +02:00
admin_provisioning.go
Provisioning: Add API endpoint to reload provisioning configs (#16579)
2019-04-25 09:06:44 +02:00
admin_users_test.go
ApiUser: Fix response when enabling, disabling or deleting a nonexistent user (#21391)
2020-01-10 11:43:44 +01:00
admin_users.go
ApiUser: Fix response when enabling, disabling or deleting a nonexistent user (#21391)
2020-01-10 11:43:44 +01:00
admin.go
Initial Baby Step to refactoring settings from global vars to instance (#11777)
2018-04-30 16:21:04 +02:00
alerting_test.go
API: Restrict anonymous user information access (#18422)
2019-08-12 20:03:48 +02:00
alerting.go
API: Added alert state validation before changing its state (#21375)
2020-01-09 11:18:51 +01:00
annotations_test.go
Annotations: use a single row to represent a region (#17673)
2019-08-16 10:49:30 +02:00
annotations.go
Annotations: use a single row to represent a region (#17673)
2019-08-16 10:49:30 +02:00
api.go
Licensing service (#19903)
2019-11-01 14:56:12 +01:00
apikey.go
API: Optionally list expired keys (#20468)
2019-11-20 13:14:57 +02:00
app_routes.go
move log package to /infra (#17023)
2019-05-13 08:45:54 +02:00
basic_auth_test.go
Re-organize packages and add basic auth test
2018-11-19 13:54:13 -05:00
basic_auth.go
Re-organize packages and add basic auth test
2018-11-19 13:54:13 -05:00
common_test.go
Fix: Break redirect loop if oauth_auto_login = true and OAuth login fails (#17974)
2019-07-09 09:37:24 +03:00
common.go
pkg/api: Check errors (#19657)
2019-10-08 18:57:53 +02:00
dashboard_permission_test.go
test: fixed usage of wrap in tests.
2018-07-02 17:13:59 +02:00
dashboard_permission.go
permission: generate team avatar url with default
2018-04-04 15:50:45 +02:00
dashboard_snapshot_test.go
pkg/api: Check errors (#19657)
2019-10-08 18:57:53 +02:00
dashboard_snapshot.go
pkg/util: Check errors (#19832)
2019-10-23 10:40:12 +02:00
dashboard_test.go
Provisioning: fix for cannot save provisioned dashboard (#20218)
2019-11-07 10:49:24 +01:00
dashboard.go
Metrictank: fix bundled dashboard (#21209)
2019-12-20 11:42:47 +01:00
dataproxy_test.go
dataproxy should forward a trailing slash to proxy
2018-10-03 12:55:01 +02:00
dataproxy.go
Metrics: use consistent naming for exported variables (#18134)
2019-07-16 16:58:46 +02:00
datasources_test.go
Return a 404 when deleting a datasource through the API if it doesn't exist and add a test for it to confirm #12313
2018-06-22 21:15:36 -05:00
datasources.go
Api: Readonly datasources should not be created via the API (#19006)
2019-09-17 12:29:43 +03:00
folder_permission_test.go
test: fixed usage of wrap in tests.
2018-07-02 17:13:59 +02:00
folder_permission.go
permissions: return user and team avatar in folder permissions api
2018-04-04 15:51:19 +02:00
folder_test.go
Search: Fixes search limits and adds a page parameter (#16458)
2019-04-17 13:07:50 +02:00
folder.go
API: Minor fix for nil pointer when trying to log error during creating new dashboard via the API (#18003)
2019-07-11 09:45:29 +03:00
frontendsettings.go
Licensing service (#19903)
2019-11-01 14:56:12 +01:00
grafana_com_proxy.go
http: remove dualstack since its deprecated (#16940)
2019-05-08 10:37:48 +02:00
http_server_test.go
Re-organize packages and add basic auth test
2018-11-19 13:54:13 -05:00
http_server.go
Cleanup: use the local variable (#20767)
2019-11-29 07:34:20 -08:00
index.go
Footer: Single footer component for both react & angular pages (#21389)
2020-01-09 11:25:52 +01:00
ldap_debug_test.go
LDAP: Fixing sync issues (#19446)
2019-11-07 14:31:44 +01:00
ldap_debug.go
LDAP: Fixing sync issues (#19446)
2019-11-07 14:31:44 +01:00
login_oauth.go
Security: refactor 'redirect_to' cookie to use 'Secure' flag (#19787)
2020-01-10 15:55:30 +02:00
login_test.go
Security: refactor 'redirect_to' cookie to use 'Secure' flag (#19787)
2020-01-10 15:55:30 +02:00
login.go
Security: refactor 'redirect_to' cookie to use 'Secure' flag (#19787)
2020-01-10 15:55:30 +02:00
metrics.go
GEL: include the expression count in the request (#20114)
2019-10-31 16:22:00 -07:00
org_invite.go
Server: Return 404 when non-pending invite is requested (#20863)
2019-12-04 13:01:37 +01:00
org_users.go
API: Restrict anonymous user information access (#18422)
2019-08-12 20:03:48 +02:00
org.go
Metrics: use consistent naming for exported variables (#18134)
2019-07-16 16:58:46 +02:00
password.go
pkg/util: Check errors (#19832)
2019-10-23 10:40:12 +02:00
playlist_play.go
move log package to /infra (#17023)
2019-05-13 08:45:54 +02:00
playlist.go
Codestyle: Fix some goconst issues (#17530)
2019-06-12 07:27:47 +02:00
plugins.go
Metrictank: fix bundled dashboard (#21209)
2019-12-20 11:42:47 +01:00
preferences.go
feat: team preferences
2018-11-12 20:01:53 +01:00
quota.go
Make golint happier
2018-03-22 22:38:44 +01:00
render.go
Reporting: Handle timeouts in rendering (#20415)
2019-11-18 16:58:15 +01:00
search.go
Metrics: use consistent naming for exported variables (#18134)
2019-07-16 16:58:46 +02:00
signup.go
pkg/util: Check errors (#19832)
2019-10-23 10:40:12 +02:00
stars.go
Make golint happier
2018-03-22 22:38:44 +01:00
team_members.go
Licensing service (#19903)
2019-11-01 14:56:12 +01:00
team_test.go
API: Minor fix for team creation endpoint when using API key (#18252)
2019-08-08 11:27:47 +03:00
team.go
API: Minor fix for team creation endpoint when using API key (#18252)
2019-08-08 11:27:47 +03:00
user_test.go
API: Add createdAt and updatedAt to api/users/lookup (#19496)
2019-09-30 20:54:09 +01:00
user_token_test.go
Api: Fix auth tokens returning wrong seenAt value (#17980)
2019-07-08 14:30:02 +02:00
user_token.go
Api: Fix auth tokens returning wrong seenAt value (#17980)
2019-07-08 14:30:02 +02:00
user.go
pkg/util: Check errors (#19832)
2019-10-23 10:40:12 +02:00