3
0

1088 Commits

Author SHA1 Message Date
Denis Arh
70dcc3300a CLI JWT generator now adds roles/memberOf claim 2019-05-13 13:23:57 +02:00
Denis Arh
e5d5cc16ad Remove obsolete code, placeholders 2019-05-13 13:23:19 +02:00
Denis Arh
b0b7c7d391 Allow HTTP requests to insecure servers
With SYSTEM_HTTP_CLIENT_TSL_INSECURE we reconfigure DefaultTransport and allow requests to insecure
hosts. This has direct effect on OIDC autodiscovery.
2019-05-13 09:36:33 +02:00
Denis Arh
8f61787c53 Remove all system deps from compose 2019-05-13 08:57:34 +02:00
Denis Arh
5b28c26eba Add cross-package dep check test 2019-05-13 08:57:18 +02:00
Denis Arh
717357d1cb Merge branch 'refactor-permissions' 2019-05-12 23:43:59 +02:00
Denis Arh
2ad7b466f1 Refactor JWT/ctx, include role membership 2019-05-12 23:40:39 +02:00
Denis Arh
d3f7335e25 Fix tests, add temp testing workarounds, permissiong service mocks 2019-05-10 13:05:47 +02:00
Denis Arh
9e043b34fd Resource/operation combo whitelist (refactored validation) 2019-05-10 11:33:32 +02:00
Denis Arh
543278e866 Remove webhook's PermissionResource 2019-05-10 11:32:53 +02:00
Denis Arh
cf6da20ba0 Delete build/gen* files when running integration task
Might cause platform mismatch
2019-05-10 11:32:19 +02:00
Denis Arh
904937535d Move webhook operations to service resource 2019-05-10 11:31:17 +02:00
Denis Arh
2a4054c9bc Implement permission provisioning and watchers
Remove rule reset from roles cli command
Add generic "provision" command for each binary and (re)set perm. rules
Permission rules are now separated and part of AccessControl service

Facility for watchers was added.
2019-05-10 09:49:07 +02:00
Denis Arh
f113439d23 Implement permission rule storage and watcher
Plus some additional naming changes (value => access)
2019-05-10 09:44:25 +02:00
Denis Arh
643b8549ba Cleanup Makefile, remove obsolete test... tasks, old rules codegen 2019-05-09 19:44:04 +02:00
Denis Arh
4dece123a5 Refactor all services & controllers and implement new a/c pattern 2019-05-09 16:55:18 +02:00
Denis Arh
087ba7c92d Permission rules refactored 2019-05-08 18:02:46 +02:00
Denis Arh
6e00826dc8 Rename json names for ID props 2019-05-08 11:23:11 +02:00
Denis Arh
ac817a3e69 Cleaner params handling for users jwt cmd 2019-05-08 10:44:45 +02:00
Denis Arh
e41b55324e Fix auth notification log line 2019-05-08 10:02:30 +02:00
Denis Arh
87b883b388 Extend repo error, Redo error checking in auth flow 2019-05-08 10:00:29 +02:00
Denis Arh
f7905bcf37 Fix & improve remote address handling (on req. log) 2019-05-07 23:09:16 +02:00
Denis Arh
7f04c2cc2a Fix monolith container building 2019-05-07 22:57:11 +02:00
Denis Arh
970f545156 Move avail. route output to /routes endpoint 2019-05-07 21:18:23 +02:00
Denis Arh
6e8fbe8935 Port monitor log to zap logger 2019-05-07 21:18:23 +02:00
Denis Arh
aea9741a2b Improve logging, migrate to zap, use requestID
- migrate from log to go.uber.org/zap package
 - add requestID header with sticky log field
 - push logging via context to REST controllers & HTTP middleware
 - enhance request/resnpose logging
 - add service logging framework
 - add ZapProfiler for db query profiling
2019-05-07 21:18:23 +02:00
Denis Arh
98992fcf70 Add IDE files to .gitignore 2019-05-07 10:40:44 +02:00
Denis Arh
56ff8a1075 CRM=>Compose application migration 2019-05-06 09:02:26 +02:00
Denis Arh
4bb03ca492 Add OK responses on valid pin/bookmark/reaction requests 2019-05-06 08:02:37 +02:00
Denis Arh
f557247cde Extend default JWT lifetime to 30 days 2019-05-06 08:02:37 +02:00
Tit Petric
9c30a6f807 upd(Dockerfile.crust): custom entrypoint to generate webapp configs
Signed-off-by: Tit Petric <black@scene-si.org>
2019-05-05 13:47:32 +00:00
Denis Arh
bdfc274087 Remove paging constraints 2019-05-04 18:19:07 +02:00
Denis Arh
d47db8d08f Merge branch 'compose' 2019-05-04 17:02:06 +02:00
Denis Arh
c467edb02b Fixing trigger saving, make (old) migration step more robust (drop if exists) 2019-05-04 12:32:55 +02:00
Denis Arh
fefc75f392 Refactor & fix create & read endpoints 2019-05-01 10:24:31 +02:00
Denis Arh
a9358610f5 Make sign & userID params for attachment endpoints non-required 2019-04-30 13:33:25 +02:00
Denis Arh
01b3cc529b Add missing namespaceID filter params 2019-04-29 18:51:18 +02:00
Denis Arh
19f6168506 Fix all tests broken by compose/namespace change 2019-04-29 18:51:18 +02:00
Denis Arh
4af79a5f35 Apply namespace changes to all layers of records 2019-04-29 18:51:18 +02:00
Denis Arh
edee054392 Apply namespace changes to all layers of pages 2019-04-29 18:51:18 +02:00
Denis Arh
0c2286be83 Apply namespace changes to all layers of triggers 2019-04-29 18:51:18 +02:00
Denis Arh
40999e623e Apply namespace changes to all layers of modules 2019-04-29 18:51:18 +02:00
Denis Arh
a41e4bfc19 Apply namespace changes to all layers of charts 2019-04-29 18:51:18 +02:00
Denis Arh
8ef7b77a77 Namespace changes on all types, attachment repository, service 2019-04-29 18:51:18 +02:00
Denis Arh
d10a89b31a Add /namespace/{namespaceID} prefix to compose routes
Attachments, charts, modules, records, pages, triggers can now be
accessed under /namespace/{namespaceID}/...
2019-04-29 18:51:18 +02:00
Denis Arh
5bfbab6a4e Implement namespace CRUD + various small fixes
Other fixes and improvements:
 - add parseISODateWithErr and parseISODatePtrWithErr handlers for incoming data
 - add service & repository errors
 - cleanup old (unbound) attachment controllers from router
 - fix system repository error prefix (auth => system)
2019-04-29 18:51:18 +02:00
Denis Arh
010a1351ea Rename files & symbols 2019-04-29 18:51:18 +02:00
Denis Arh
d5c5c9ffae Fix broken monolith build entry point 2019-04-29 18:49:56 +02:00
Denis Arh
a1a0785f5e Remove obsolete documentation 2019-04-27 19:39:46 +02:00
Denis Arh
0c919d9146 Implements /search/threads 2019-04-27 19:31:45 +02:00