Commit Graph
2169 Commits
Author SHA1 Message Date
Livio SpringandGitHub 1b4740c78f fix: primary domain scope (handle context correctly) (#3872) 2022-06-27 09:24:23 +02:00
Livio SpringandGitHub ed5721d39e feat: TLS support (#3862)
* feat: TLS support

* add comment

* fix comment
2022-06-24 12:38:22 +00:00
70a108deeb chore(console): add customer portal link (#3837)
* feat: add customer portal link

* add customer portal to environment.json from backend

Co-authored-by: Livio Amstutz <[email protected]>
2022-06-24 11:18:54 +00:00
SilvanandGitHub c244dcaffd fix(notify): correct get user (#3836) 2022-06-16 13:49:45 +00:00
SilvanandGitHub e1cfc242ab fix(auth): read user if not found after create (#3835) 2022-06-16 13:06:17 +00:00
38be00971b fix(login): text color for idp, footer (#3830)
Co-authored-by: Fabi <[email protected]>
2022-06-15 16:33:36 +00:00
SilvanandGitHub d1bc4a9bc5 fix(notify): fail if required fields are empty (#3831) 2022-06-15 16:22:48 +00:00
7e35775681 docs(legal): Updated agreements and policies v2 (#3823)
* tos

* adds cloud service

* cloud service description WIP

* action minute

* service level description

* SAML and last revised

* tos credit and payment

* dpa basic, profile, and payment data

* service description: authenticated requests

* cloud service description: ui

* add notification box

* sla description

* support services

* removes dedicated instance annex

* remove dedicated instance annex sidebar, links

* update dedicated terms

* merge additional terms in sidebar

* privacy formatting

* pp update piid table

* remove cloudflare cookies

* privacy customer portal cookies

* revert editing guides

* dates

* docs: test

* modification of services

* Apply suggestions from code review

Co-authored-by: Fabi <[email protected]>

* add disclaimer to regions list

Co-authored-by: Maximilian Panne <[email protected]>
Co-authored-by: Maximilian Panne <[email protected]>
Co-authored-by: mffap <[email protected]>
2022-06-15 08:30:58 +02:00
SilvanandGitHub 72b696ccb2 fix(system): search for existing domain globally (#3822) 2022-06-14 15:45:19 +02:00
dd2f31683c fix(query): realtime data on defined requests (#3726)
* feat: directly specify factors on addCustomLoginPolicy and return on LoginPolicy responses

* fix proto

* update login policy

* feat: directly specify idp on addCustomLoginPolicy and return on LoginPolicy responses

* fix: tests

* fix(projection): trigger bulk

* refactor: clean projection pkg

* instance should bulk

* fix(query): should trigger bulk on id calls

* tests

* build prerelease

* fix: add shouldTriggerBulk

* fix: test

Co-authored-by: Livio Amstutz <[email protected]>
Co-authored-by: Max Peintner <[email protected]>
2022-06-14 07:51:00 +02:00
Max PeintnerandGitHub 1da305f2de fix(login): idp, link font color (#3814)
fix: idp, a font color
2022-06-13 09:36:42 +02:00
Livio SpringandGitHub f57e3df39d fix: sms providers (#3801) 2022-06-13 08:34:11 +02:00
6bd5799770 fix: idp styling (#3797)
* fix: idp styling

* escape idp a color

* elevation on hover

* css gen

Co-authored-by: Max Peintner <[email protected]>
2022-06-10 13:17:33 +00:00
Livio SpringandGitHub 7b0f0b81a3 fix: set instanceID correctly in org project mapping (#3789) 2022-06-10 13:12:07 +00:00
Max PeintnerandGitHub d6cb36db31 fix(console, login): label policy and privacy policy from authservice, login - remove double footer element, mobile (#3795)
fix: cnsl auth policy, lgn footer mobile
2022-06-10 14:46:59 +02:00
3500961fbb fix: add smtp config, remove smtp and sms provider, console adaptations (#3792)
* fix: add AddSMTPConfig to admin api

* addsmtpconfig

* fix: add RemoveSMTPConfig and RemoveSMSProvider to admin api

* update twilio, token fcn

* fix account switcher, twilio token set, cleanup dialog

* cleanup

* buttons

Co-authored-by: Livio Amstutz <[email protected]>
2022-06-10 12:39:38 +02:00
Livio SpringandGitHub 03a77b381e fix: password check policy correctly (#3787)
* fix: password check policy correctly

* fix: password check policy correctly
2022-06-09 13:48:57 +00:00
Livio SpringandGitHub 7f34ce1891 fix: allow project grants without roles in database (#3786) 2022-06-09 11:48:54 +02:00
Livio SpringandGitHub a377f2816c feat: return instance domains on list instances, fix: login policy and avatar url in oidc responses (#3785)
* feat: return instance domains on list instances

* fix: filter login policy idps correctly

* remove debug

* fix: absolute avatar url in oidc responses
2022-06-08 13:46:24 +02:00
Livio SpringandGitHub ace94917da test: ensure consistency of TestSpooler_awaitError (#3750) 2022-06-07 11:40:46 +00:00
Max PeintnerandGitHub 233d80502d fix(console, login): console - ensure permission is available, login - i18n fixes, input borders, lgn-touched script to add class on blur (#3760)
* permission restriction, member, login i18n input borders, secondary text

* add touched js
2022-06-07 09:25:56 +00:00
Livio SpringandGitHub 5e4b38d69b fix: improve oidc issuer / endpoints (#3753)
* fix: improve oidc issuer / endpoints

* docs: update endpoints
2022-06-07 10:04:51 +02:00
Livio AmstutzandGitHub 3a1569bd94 fix: grpc gateway interceptors (#3767) 2022-06-03 12:44:04 +00:00
Livio AmstutzandGitHub da1f74fde0 fix: update user sessions after avatar or primary domain change (#3768) 2022-06-03 12:37:24 +00:00
Livio AmstutzandGitHub 0baaaf8a05 fix: handle default org id (#3769) 2022-06-03 14:30:39 +02:00
ebb73186b6 fix(console, login): Idp detail and create layout optimization, login - sub formfield link spacing (#3755)
* idp detail, create layout

* fat finger fix

Co-authored-by: Livio Amstutz <[email protected]>
2022-06-03 07:20:56 +00:00
Livio AmstutzandGitHub 6506ce537d fix: sql error check (#3762) 2022-06-01 16:00:25 +00:00
Livio AmstutzandGitHub d65761f388 fix: render only base language in html (#3759) 2022-06-01 15:32:18 +02:00
Livio AmstutzandGitHub 21a0e4a972 feat: get current label and privacy policies (#3748) 2022-06-01 09:50:28 +02:00
Livio AmstutzandGitHub b0436c995b fix: return correct empty flow if not found (#3749) 2022-06-01 08:11:48 +02:00
SilvanandGitHub fb93085430 fix(projection): add missing col to idp login policy links (#3745)
* fix(projection): add missing col to projection

* refactor: method naming
2022-05-31 20:39:37 +02:00
SilvanandGitHub ed36680ea1 fix(query): show views and failed events (#3743)
* fix(system): show views and failed events

* fix: set correct database on failed events and views
2022-05-31 16:33:50 +02:00
e3e0207318 fix: login checkbox contrast, login policy factors, asset urls (#3742)
* checkbox contrast

* idp create before remove, add, asset service

* login policy events

Co-authored-by: Fabi <[email protected]>
2022-05-31 13:51:21 +00:00
SilvanandGitHub 16c86149be fix(current_sequence): no error if not found (#3740) 2022-05-31 11:50:51 +00:00
Livio AmstutzandGitHub 81c0ca3337 fix: use issuer for jwt profile check on system api (#3741) 2022-05-31 13:11:49 +02:00
Max PeintnerandGitHub ac65d9d331 fix(login): checkbox, label, container styles (#3732)
fix: checkbox, label styles
2022-05-31 07:20:39 +00:00
SilvanandGitHub 3513148cf6 fix: SMTP config in defaults (#3736)
* fix(command): create smtp provider cmds after domains

* chore(defaults): add smtp configuration
2022-05-30 17:39:18 +02:00
Livio AmstutzandGitHub 992892a8bb fix: read key data for system api users from config (#3731) 2022-05-30 12:53:21 +00:00
b3f50702f8 feat: directly specify factors/idps on addCustomLoginPolicy and return on LoginPolicy responses (#3711)
* feat: directly specify factors on addCustomLoginPolicy and return on LoginPolicy responses

* fix proto

* update login policy

* feat: directly specify idp on addCustomLoginPolicy and return on LoginPolicy responses

* fix: tests

Co-authored-by: Max Peintner <[email protected]>
Co-authored-by: Fabi <[email protected]>
2022-05-30 11:51:07 +00:00
Livio AmstutzandGitHub 2fc39c0da0 feat: system api requires authenticated requests (#3570)
* begin auth

* feat: system api requires authenticated requests

* fix tests
2022-05-30 13:38:30 +02:00
Livio AmstutzandGitHub 41d78ef523 fix: return absolute url for avatar in user sessions (#3724)
* fix: return absolute url for avatar in user sessions

* fix: refresh token unique constraint
2022-05-30 11:27:52 +00:00
e79aab3671 fix: login ui for v2 (#3712)
* fix: login ui for v2

* a color

* footer

Co-authored-by: Livio Amstutz <[email protected]>
2022-05-30 09:03:40 +00:00
Livio AmstutzandGitHub 737e01bfd2 fix: fix and improve primary keys on projections (#3708)
* fix: org_domain projection

* fix: projection reset

* fix test

* improve foreign keys on suffixed tables
2022-05-25 14:15:13 +02:00
Livio AmstutzandGitHub 79452da7d6 fix: check membership from projection (#3710)
* fix: check membership from projection

* remove authz setup
2022-05-25 14:07:16 +02:00
09b021b257 feat: Configurable Unique Machine Identification (#3626)
* feat: Configurable Unique Machine Identification

This change fixes Segfault on AWS App Runner with v2 #3625

The change introduces two new dependencies:

* github.com/drone/envsubst for supporting AWS ECS, which has its metadata endpoint described by an environment variable
* github.com/jarcoal/jpath so that only relevant data from a metadata response is used to identify the machine.

The change ads new configuration (see `defaults.yaml`):

* `Machine.Identification` enables configuration of how machines are uniquely identified - I'm not sure about the top level category `Machine`, as I don't have anything else to add to it. Happy to hear suggestions for better naming or structure here.
* `Machine.Identifiation.PrivateId` turns on or off the existing private IP based identification. Default is on.
* `Machine.Identification.Hostname` turns on or off using the OS hostname to identify the machine. Great for most cloud environments, where this tends to be set to something that identifies the machine uniquely. Enabled by default.
* `Machine.Identification.Webhook` configures identification based on the response to an HTTP GET request.  Request headers can be configured, a JSONPath can be set for processing the response (no JSON parsing is done if this is not set), and the URL is allowed to contain environment variables in the format `"${var}"`.

The new flow for getting a unique machine id is:

1. PrivateIP (if enabled)
2. Hostname (if enabled)
3. Webhook (if enabled, to configured URL)
4. Give up and error out.

It's important that init configures machine identity first. Otherwise we could try to get an ID before configuring it. To prevent this from causing difficult to debug issues, where for example the default configuration was used, I've ensured that
the application will generate an error if the module hasn't been configured and you try to get an ID.

Misc changes:

* Spelling and gramatical corrections to `init.go::New()` long description.
* Spelling corrections to `verify_zitadel.go::newZitadel()`.
* Updated `production.md` and `development.md` based on the new build process. I think the run instructions are also out of date, but I'll leave that for someone else.
* `id.SonyFlakeGenerator` is now a function, which sets `id.sonyFlakeGenerator`, this allows us to defer initialization until configuration has been read.

* Update internal/id/config.go

Co-authored-by: Alexei-Barnes <[email protected]>

* Fix authored by @livio-a for tests

Co-authored-by: Livio Amstutz <[email protected]>
2022-05-24 16:57:57 +02:00
Livio AmstutzandGitHub e1ee89982a fix: unify commands (and remove todos for checking existence) (#3696) 2022-05-24 09:28:17 +00:00
Livio AmstutzandGitHub cf6f4d6894 fix(tracing): parsing of fraction (#3705)
* fix(tracing): parsing of fraction

* log id
2022-05-24 09:18:25 +00:00
mffapandGitHub 32ccada7a9 chore: more typos (#3688) 2022-05-21 22:41:21 +02:00
5a2ffd80dc chore: "EMail" typo (#3679)
Co-authored-by: Florian Forster <[email protected]>
2022-05-21 11:29:25 +00:00
4d30d3a7e1 chore: various typos (#3686)
* fix(cli): typo in clis

* chore: fix typos in guides and readme

* markdown lint

* readme typos

* markdown lint

* typos in security.md

* login de

* login en

* console de

* console en

* Apply suggestions from code review

E-Mail instead of Email

Co-authored-by: Florian Forster <[email protected]>

Co-authored-by: Florian Forster <[email protected]>
2022-05-21 10:44:09 +00:00