public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
6ecc420534ba17e84bd98f2ff56eaf692f07370e
grafana/pkg/api
T
History
Jo c2d3c90bc8 Auth: Implement Token URL JWT Auth (#52662) 
* Auth: check of auth_token in url and resolve user if present

* check if auth_token is passed in url

* Auth: Pass auth_token for request if present in path

* no need to decode token in index

* temp

* use loadURLToken and set authorization header

* cache token in memory and strip it from url

* Use loadURLToken

* Keep token in url

* strip sensitive query strings from url used by context logger

* adapt login by url to jwt token

* add jwt iframe devenv

* add jwt iframe devenv instructions

* add access note

* add test for cleaning request

* ensure jwt token is not carried into handlers

* do not reshuffle queries, might be important

* add correct db dump location

* prefer set token instead of cached token

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>

Co-authored-by: Karl Persson <kalle.persson@grafana.com>
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
2022-07-27 16:10:47 +02:00
..
apierrors
chore/backend: move dashboard errors to dashboard service (#51593)
2022-06-30 09:31:54 -04:00
avatar
Dashboard: Mix initials and custom gravatars in recent viewers list (#47212)
2022-04-05 22:56:17 -04:00
datasource
backend/datasources: move datasources models into the datasources service package (#51267)
2022-06-27 12:23:15 -04:00
dtos
Public Dashboards: Add Public Tag to Dashboard Title (#52351)
2022-07-19 17:44:41 -06:00
frontendlogging
Frontend Logging: Integrate grafana javascript agent (#50801)
2022-06-28 03:25:30 -04:00
navlinks
TopNav: Support for deeper nesting in section nav (#52562)
2022-07-22 10:42:41 +02:00
pluginproxy
backend/datasources: move datasources models into the datasources service package (#51267)
2022-06-27 12:23:15 -04:00
response
HTTP: Add function for using new style errors with fallback (#51627)
2022-07-13 13:14:28 +02:00
routing
Instrumentation: Fix HTTP request instrumentation of authentication failures (#44234)
2022-02-02 18:48:46 +01:00
static
API: Extract OpenAPI specification from source code using go-swagger (#40528)
2022-02-08 13:38:43 +01:00
accesscontrol.go
Revert "Service accounts: Add service account to teams" (#52710)
2022-07-26 09:43:29 +01:00
admin_encryption.go
Encryption: Expose secrets migrations through HTTP API (#51707)
2022-07-18 08:57:58 +02:00
admin_provisioning_test.go
Alerting: Add file provisioning for alert rules (#51635)
2022-07-14 23:53:13 +02:00
admin_provisioning.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
admin_test.go
RBAC: Refactor GetUserPermissions to use []accesscontrol.Permission (#50683)
2022-06-14 10:17:48 +02:00
admin_users_test.go
Chore: Move user errors to user service (#52460)
2022-07-20 14:50:06 +02:00
admin_users.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
admin.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
alerting_test.go
Rename Acl to ACL (#52342)
2022-07-18 15:14:58 +02:00
alerting.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
annotations_test.go
Rename Acl to ACL (#52342)
2022-07-18 15:14:58 +02:00
annotations.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
api.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
apikey.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
app_routes.go
RBAC: Allow app plugins access restriction (#51524)
2022-07-08 13:24:09 +02:00
basic_auth_test.go
Macaron: remove custom Request type (#37874)
2021-09-01 11:18:30 +02:00
basic_auth.go
Macaron: remove custom Request type (#37874)
2021-09-01 11:18:30 +02:00
comments.go
fix status code 200 (#47818)
2022-04-15 08:01:58 -04:00
common_test.go
Add delete user from other services/stores (#51912)
2022-07-15 18:06:44 +02:00
dashboard_permission_test.go
Rename Acl to ACL (#52342)
2022-07-18 15:14:58 +02:00
dashboard_permission.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
dashboard_snapshot_test.go
Rename Acl to ACL (#52342)
2022-07-18 15:14:58 +02:00
dashboard_snapshot.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
dashboard_test.go
Public Dashboards: Add Public Tag to Dashboard Title (#52351)
2022-07-19 17:44:41 -06:00
dashboard.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
dataproxy.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
datasources_test.go
backend/datasources: move datasources models into the datasources service package (#51267)
2022-06-27 12:23:15 -04:00
datasources.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
fakes.go
Plugins: Register management endpoints only when external managed is also false (#51802)
2022-07-06 16:22:59 +02:00
folder_permission_test.go
Rename Acl to ACL (#52342)
2022-07-18 15:14:58 +02:00
folder_permission.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
folder_test.go
Rename Acl to ACL (#52342)
2022-07-18 15:14:58 +02:00
folder.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
frontend_logging_test.go
Chore: Remove the old log format (#51526)
2022-07-08 09:56:30 -05:00
frontend_logging.go
Frontend Logging: Integrate grafana javascript agent (#50801)
2022-06-28 03:25:30 -04:00
frontend_metrics.go
Chore: Report frontend metrics for JS/CSS load time (#42421)
2021-12-02 09:34:39 +01:00
frontendsettings_test.go
Plugins: Show that Secrets Manager Plugin is active in the UI (#50953)
2022-06-29 08:48:23 -04:00
frontendsettings.go
Auth: Implement Token URL JWT Auth (#52662)
2022-07-27 16:10:47 +02:00
grafana_com_proxy.go
Instrumentation: Proxy status code correction and various improvements (#47473)
2022-04-11 13:17:08 +02:00
health_test.go
Chore: Remove bus from health api (#44897)
2022-02-04 14:33:35 +01:00
health.go
Chore: Remove bus from health api (#44897)
2022-02-04 14:33:35 +01:00
http_server_test.go
Plugins: Make backend plugin metrics endpoints available with optional authentication (#46467)
2022-03-29 11:18:26 +02:00
http_server.go
Correlations: Add CreateCorrelation HTTP API (#51630)
2022-07-25 15:19:07 +01:00
index.go
Profile: Fix nav tree link to notifications (#52685)
2022-07-26 10:11:40 +01:00
ldap_debug_test.go
Chore: Move user errors to user service (#52460)
2022-07-20 14:50:06 +02:00
ldap_debug.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
login_oauth_test.go
OAuth: Redirect to login if no oauth module is found or if module is not configured (#50661)
2022-06-13 16:59:15 +02:00
login_oauth.go
Fix: Choose Lookup params per auth module (#395) (#52312)
2022-07-15 10:21:09 +01:00
login_test.go
Split Create User (#50502)
2022-06-28 14:32:25 +02:00
login.go
Chore: Move user errors to user service (#52460)
2022-07-20 14:50:06 +02:00
metrics_test.go
Add delete user from other services/stores (#51912)
2022-07-15 18:06:44 +02:00
metrics.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
org_invite_test.go
Access control: Allow organisation admins to add existing users to org (#51668)
2022-07-08 12:07:00 +01:00
org_invite.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
org_test.go
Split Create User (#50502)
2022-06-28 14:32:25 +02:00
org_users_test.go
Rename Acl to ACL (#52342)
2022-07-18 15:14:58 +02:00
org_users.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
org.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
password.go
Split Create User (#50502)
2022-06-28 14:32:25 +02:00
playlist_play.go
Public Dashboards: Query Caching (#51403)
2022-07-06 12:42:39 -06:00
playlist.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
plugin_dashboards_test.go
Add delete user from other services/stores (#51912)
2022-07-15 18:06:44 +02:00
plugin_dashboards.go
Plugins: Refactor GetPluginDashboards/LoadPluginDashboard (#46316)
2022-03-10 18:38:04 +01:00
plugin_metrics_test.go
Plugins: Make backend plugin metrics endpoints available with optional authentication (#46467)
2022-03-29 11:18:26 +02:00
plugin_metrics.go
Plugins: Make backend plugin metrics endpoints available with optional authentication (#46467)
2022-03-29 11:18:26 +02:00
plugin_resource.go
backend/datasources: move datasources models into the datasources service package (#51267)
2022-06-27 12:23:15 -04:00
plugins_test.go
Add delete user from other services/stores (#51912)
2022-07-15 18:06:44 +02:00
plugins.go
RBAC: Allow app plugins access restriction (#51524)
2022-07-08 13:24:09 +02:00
preferences_test.go
Public Dashboards: Query Caching (#51403)
2022-07-06 12:42:39 -06:00
preferences.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
quota_test.go
RBAC: Refactor GetUserPermissions to use []accesscontrol.Permission (#50683)
2022-06-14 10:17:48 +02:00
quota.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
render.go
Dash previews: populate crawler queue from SQL query (#44083)
2022-02-09 13:23:32 +04:00
search_test.go
RBAC: Refactor GetUserPermissions to use []accesscontrol.Permission (#50683)
2022-06-14 10:17:48 +02:00
search.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
short_url_test.go
Chore: Remove bus (#47511)
2022-04-08 16:15:06 +02:00
short_url.go
ShortURL: Use new Error type (#50859)
2022-06-15 15:11:36 +02:00
signup.go
Chore: Move user errors to user service (#52460)
2022-07-20 14:50:06 +02:00
stars.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
swagger_responses.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
swagger_tags.json
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
swagger.go
fix status code 200 (#47818)
2022-04-15 08:01:58 -04:00
team_members_test.go
Add delete user from other services/stores (#51912)
2022-07-15 18:06:44 +02:00
team_members.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
team_test.go
RBAC: Refactor GetUserPermissions to use []accesscontrol.Permission (#50683)
2022-06-14 10:17:48 +02:00
team.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
user_test.go
Fix: Choose Lookup params per auth module (#395) (#52312)
2022-07-15 10:21:09 +01:00
user_token_test.go
Chore: Move user errors to user service (#52460)
2022-07-20 14:50:06 +02:00
user_token.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
user.go
Chore: Move swagger definitions to the handlers (#52643)
2022-07-27 09:54:37 -04:00
utils.go
Permissions: Validate against Team/User permission role update (#29101)
2020-11-18 15:36:41 +01:00