Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* feat(wip): authz/rbac feat: impl authz middleware feat: impl authz middleware chore: fix panic and bad redux selector chore: fmt ui chore: refactor chore: fix build, change to single role, default role chore: fix build, change to single role, default role chore: rm unneeded files feat: configurable roles/policies chore: config schema and tests chore: mv back events to audit package chore: reset ui folder chore: revert ui back to main chore: policy schema, visibility of errors chore: add policy schema test chore: rebase on main Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: start adding role attribute path/jmes * chore: mod tidy * Authz OIDC tests (#3098) * chore: fix tests, add role attribute path / role mapping to oidc server tests Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: authz middleware tests Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: fix audit tests Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: proto regen Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: try to fix marshal audit events behaviour Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: fix failing test Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> --------- Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: refactor request models to include scope Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: fix engine_test * chore: make scope optional and use subject if not provided * chore: fix executor_test Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: fix log sink test Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: consolidate some auth metadata to make creating policies simpler (#3106) * refactor(server/authz): make policy and data external dependencies (#3108) * refactor(server/authz): rename scope to resource Signed-off-by: George MacRorie <me@georgemac.com> * feat(config/authz): add policy and data source configuration Signed-off-by: George MacRorie <me@georgemac.com> * refactor(server/authz): make policy and data external dependencies Signed-off-by: George MacRorie <me@georgemac.com> * refactor(cmd/grpc): integrate new authz Engine changes Signed-off-by: George MacRorie <me@georgemac.com> * fix(server/authz): ensure error is captured in return Signed-off-by: George MacRorie <me@georgemac.com> * fix(config): allow policy and data sources to be empty Signed-off-by: George MacRorie <me@georgemac.com> * refactor(server/authz): support separate poll durations for policy and data Signed-off-by: George MacRorie <me@georgemac.com> * fix(config): validate non zero poll duration for authz sources Signed-off-by: George MacRorie <me@georgemac.com> * fix(cmd/grpc): calls to authz engine with changes to polling Signed-off-by: George MacRorie <me@georgemac.com> --------- Signed-off-by: George MacRorie <me@georgemac.com> * refactor(authz): pass entire request and authentication to IsAllowed (#3126) Signed-off-by: George MacRorie <me@georgemac.com> * chore: set raw claims if they exist in authz metadata (#3125) * chore: go mod tidy Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: set raw claims if they exist in authz metadata Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: fix authn oidc server test Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: skip authz on auth public server Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: log for debugging Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> --------- Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * fix: Authz fixes (#3132) * chore: go mod tidy Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * fix: authz endpoint skip for getauthself/deleteauthself Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: rm claims unmarshal for now * chore: make authorization experimental Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: add request methods to auth requests Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: add schema * chore: set package name to flipt.authz.v1 * chore: fix telemetry test Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> --------- Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: rename poll duration to poll interval Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: mod/work sync Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: fix config test Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> * chore: rm unused supports authz config; fmt cache config --------- Signed-off-by: Mark Phelps <209477+markphelps@users.noreply.github.com> Signed-off-by: George MacRorie <me@georgemac.com> Co-authored-by: George <me@georgemac.com> Co-authored-by: kodiakhq[bot] <49736102+kodiakhq[bot]@users.noreply.github.com>
- Loading branch information