Jim
e0e6e58bb2
better api error codes from OIDC auth method update/change-state operations ( #1116 )
2021-04-14 15:00:20 -04:00
Todd Knight
fad9f6d525
Allow oidc accounts to be add|set|removed to users. ( #1117 )
2021-04-14 11:34:17 -07:00
Jeff Mitchell
c57841fa2e
Update wording for user not found to indicate the auth method isn't primary for the scope
2021-04-14 13:27:03 -04:00
Todd Knight
dc881e65d4
Fix alignment for Is Primary For Scope field and values for listing.
2021-04-14 10:25:25 -07:00
Michael Gaffney
5855930921
Renumber migrations in the '2/' directory to start at 01 ( #1114 )
2021-04-14 11:47:21 -04:00
Jim
6c003c94f7
add "Is Primary" to auth method CLI output ( #1115 )
2021-04-14 11:36:42 -04:00
Jim Lambert
06df7e0240
updated UI_COMMITISH
2021-04-13 20:24:32 -04:00
Todd Knight
072b950540
Filter inactive and private oidc auth methods from unauthenticated list requests ( #1110 )
2021-04-13 16:42:25 -07:00
Jeff Mitchell
ca57e50516
Add more OIDC error output. ( #1108 )
...
Some of this is in the form of logging, and some via returning error
messages to users.
Also cleans a couple of linter complaints.
2021-04-13 19:07:50 -04:00
Jeff Mitchell
412018fbb4
Update misleading Authenticated bool with new name and explanation. ( #1111 )
2021-04-13 17:55:40 -04:00
Jim
f8f66abcf4
regen proto ( #1109 )
2021-04-13 17:10:14 -04:00
Todd Knight
53ec3c44bc
Auth Method Listing matches other resources, remove repeated "Version" field. ( #1107 )
2021-04-13 10:34:13 -07:00
Todd Knight
14c222709c
Make oidc auth callback redirect on most errors ( #1105 )
2021-04-13 09:21:26 -07:00
Jim
d0f36f6a74
ensure that inbound auth method id matches request wrapper auth metho… ( #1104 )
2021-04-12 17:17:28 -04:00
Jeff Mitchell
90b30bad25
Use 202 for token polling endpoint instead of 204 ( #1103 )
2021-04-12 14:57:14 -04:00
Todd Knight
71673ea161
Pass disable_discovered_config_validation in the API change-state call ( #1100 )
2021-04-12 08:49:22 -07:00
Michael Gaffney
3130bd615e
Fix go doc: remove sentence fragment
2021-04-12 11:32:27 -04:00
Jim
8f9c287233
properly handle ClientSecret updates ( #1097 )
2021-04-09 15:33:21 -04:00
Randall Morey
5500566fca
chore: bump UI commitish to latest ( #1096 )
2021-04-09 13:30:00 -04:00
Jeff Mitchell
f05f37d0fa
Fix panic in non-generated API calls when printing as JSON ( #1095 )
...
Fixes #992
2021-04-09 13:09:51 -04:00
Jim
26c0c4479d
send MaxAge when set for auth method ( #1094 )
2021-04-09 10:41:54 -04:00
dd0f34bc35
Add new OIDC auth method. ( #1090 )
...
Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com >
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com >
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com >
2021-04-08 20:54:32 -04:00
s-christoff
5c5b07c04a
Revert "Refactor internal/servers/controller/handlers errors ( #1070 )" ( #1092 )
...
This reverts commit 21ac3cdddd
2021-04-08 19:20:36 -05:00
s-christoff
21ac3cdddd
Refactor internal/servers/controller/handlers errors ( #1070 )
2021-04-08 17:48:57 -05:00
Michael Gaffney
d3146992f1
Errors: add Code and Kind for external system errors ( #1080 )
2021-04-07 14:50:00 -04:00
Lars Lehtonen
d3b72899f1
fix scopes double import ( #1066 )
2021-04-05 12:16:38 -04:00
Jeff Mitchell
6c48f6ea77
Use pointers for any Uber atomic values ( #1044 )
...
BK clued me into the fact that for some types, similar alignment
problems exist as with the normal atomic package (e.g. 64-bit types on
32-bit architectures) if they are not pointer values. So change the few
places they weren't pointers to pointers.
None of these are 64-bit, but it feels like best practice for using the
library and should just standardize on it.
2021-04-05 09:37:34 -04:00
Michael Gaffney
aafbada3ae
Remove calls to t.Helper() from test methods (not helpers) ( #1063 )
2021-04-02 19:40:51 -04:00
Jim
c281e808d6
refactor to use WithOrderByCreateTime(...) ( #1058 )
2021-04-02 19:13:48 -04:00
Jim
f21996d8ad
refactor to use WithOrderByVersion(...) ( #1059 )
2021-04-02 18:19:48 -04:00
Louis Ruch
93bad3cb83
400 if account already assocaited ( #1048 )
2021-03-30 13:00:48 -07:00
Jeff Mitchell
17ad2410cd
Add extra tags config test
2021-03-29 16:00:40 -04:00
Jeff Mitchell
b05ed0bf65
If the database is already initialized, use 0 as the return value ( #1033 )
...
This matches the migrations code, which treats the operation as
idempotent.
2021-03-25 17:53:11 -04:00
Jeff Mitchell
3c430678ae
Fix test scope errors ( #1029 )
...
When using a disabled verifier context we were faking scope information. Due to other recent changes, this was now causing test errors. This adjusts that flow to actually query the DB, fixing tests and making them more like real code.
2021-03-25 03:15:43 -04:00
Jeff Mitchell
6605b4c9f8
Revamp authenticate ( #1025 )
2021-03-24 16:07:43 -04:00
Jeff Mitchell
aa570f4e48
Honor child scope list permissions when recursing ( #1016 )
...
Current behavior is that you need list grant on the parent scope when
recursively listing, and this is sufficient. This is good for
administrative workflows but can be unintuitive for resources that only
exist at a project level. This change allows permissions on the child
scope to also be taken into account, so that you can start a recursive
list from a parent scope without direct list support on that scope but
still get back child scopes for which list access is granted.
This also fixes a bug where visibility of a scope for recursive listing
would be based on whether the user had list resources for roles within
that scope instead of for the resource type in question.
2021-03-24 15:33:04 -04:00
Jeff Mitchell
fcbf372881
Bump proto/grpc deps ( #1017 )
...
* Bump proto/grpc deps
* Back out buf change
* Run make gen
2021-03-20 16:12:01 -04:00
Jim and Louis Ruch
b39dff8140
New error codes. ( #1019 )
...
* new error codes
* Add general system errors to API interceptor
Co-authored-by: Louis Ruch <louisruch@gmail.com >
2021-03-20 06:52:47 -04:00
Louis Ruch
ebdc08e5ff
Skip hidden directories when generating version numbers ( #1008 )
2021-03-17 14:45:13 -07:00
Todd Knight
48ef25433f
Fix creation of initial Scope roles ( #996 )
...
* Fix the creation of initial roles and users so the admin has permission to list/read resources.
* Adding known permission issue to CHANGELOG.md.
2021-03-16 08:42:08 -07:00
Jeff Mitchell
bb2d86eb39
Add ability to generate pseudo-random IDs ( #984 )
2021-03-16 11:19:10 -04:00
Randall Morey
c0f33f982c
chore: bump ui version ( #990 )
2021-03-09 14:28:15 -05:00
Jeff Mitchell
68f8d7e595
Rerun make gen
2021-03-09 13:49:12 -05:00
Louis Ruch
e3e96a87fa
Fix error codes
2021-03-09 08:28:33 -08:00
Jeff Mitchell
90a6a71f99
Cleanup container if it's started but can't ping Postgres
2021-03-05 18:54:04 -05:00
Jeff Mitchell
645a068dab
Fix error message
2021-03-05 18:49:21 -05:00
Louis Ruch
7387cec475
Remove sentinel errors ( #968 )
...
* Remove sentinal errors
2021-03-05 06:34:06 -08:00
Jeff Mitchell
3b452cb503
Fix initial user ID not being shown in some cases during init
2021-03-04 21:08:22 -05:00
Jeff Mitchell
c63529e020
Fix WithKeyId after recent PR ( #978 )
...
Fixing the session passing around its key ID (which had previously been
blank) exposed another issue which was caught during bats tests:
WithKeyId statements using the wrong key, which prior to now had been
ignored because the argument was empty, resulting in an ineffective
option. This fixes those situations.
It also updates a bats test that didn't get updated in the CLI return
status PR.
2021-03-04 20:45:27 -05:00
Jeff Mitchell
9649a19d23
Update CLI error codes to be consistent with connect ( #976 )
2021-03-04 20:05:17 -05:00
Jim
Todd Knight
Jeff Mitchell
Michael Gaffney
Michael Gaffney
Randall Morey
s-christoff
Lars Lehtonen
Louis Ruch