Commit Graph
100 Commits
Author SHA1 Message Date
Tuan Dang a33c50b75a Adjust SCIM and SAML impl to use username / nameID, patch LDAP edge-cases 2024-02-25 18:16:26 -08:00
Tuan Dang 8c31566e17 Update various SSO / SAML auth methods to support username 2024-02-24 22:17:51 -08:00
Tuan Dang bfee74ff4e Add username field to users 2024-02-23 17:30:49 -08:00
Tuan Dang 97a7b66c6c Fix merge conflicts 2024-02-23 10:40:27 -08:00
Tuan Dang 639c78358f Add docs for LDAP 2024-02-23 10:33:48 -08:00
Tuan Dang 5053069bfc Finish frame for LDAP auth 2024-02-23 10:00:30 -08:00
Tuan Dang bbd9fa4a56 Correct SCIM Token TTL ms 2024-02-21 17:00:59 -08:00
Tuan Dang 318ad25c11 Merge remote-tracking branch 'origin' into scim 2024-02-21 12:46:37 -08:00
Tuan Dang c372eb7d20 Update SCIM docs, disable user management in Infisical if SAML is enforced 2024-02-21 11:20:42 -08:00
Tuan Dang 72d4490ee7 Fix lint/type issues 2024-02-19 15:04:42 -08:00
Tuan Dang 2336a7265b Merge remote-tracking branch 'origin' into scim 2024-02-19 14:41:46 -08:00
Tuan Dang 6f9b30b46e Minor UX adjustments to SCIM 2024-02-19 12:25:25 -08:00
Tuan Dang 7a65f8c837 Complete preliminary SCIM fns, add permissioning to SCIM, add docs for SCIM 2024-02-18 18:50:23 -08:00
Tuan Dang e15ed4cc58 Merge remote-tracking branch 'origin' into scim 2024-02-14 12:30:38 -08:00
Tuan Dang faf6323a58 Patch identity ttl conversion 2024-02-14 12:09:56 -08:00
Tuan Dang c73ee49425 Pass Okta SCIM 2.0 SPEC Test 2024-02-14 09:22:23 -08:00
Tuan Dang 79694750af Remove signup disable check for SAML 2024-02-12 11:43:55 -08:00
Tuan Dang b0fb848a92 Add disableRequestedAuthnContext for azure saml 2024-02-12 10:35:38 -08:00
Tuan Dang 3a7b697549 Make progress on SCIM 2024-02-12 09:18:33 -08:00
Tuan Dang 39634b8aae Correct spInitiated spelling in Azure SAML 2024-02-09 12:17:29 -08:00
Tuan Dang 4815ff13ee Update SAML SSO docs to include enforce SAML SSO toggle 2024-02-09 10:36:23 -08:00
Tuan Dang 069b0cd6fb Fix lint issue, add backend permission check for SAML SSO enforcement toggle 2024-02-09 10:02:12 -08:00
Tuan Dang ed23bd40d2 Redirect to SAML portal upon enforcing SAML SSO 2024-02-09 09:50:20 -08:00
Tuan Dang 82181f078a Patch login with SAML when config is inactive 2024-02-09 09:35:51 -08:00
Tuan Dang a9a5e92358 Empty 2024-02-09 09:02:22 -08:00
Tuan Dang 5878a221f8 Run lint fix 2024-02-09 08:44:30 -08:00
Tuan Dang fdbf59cd78 Redirect users to SAML portal on change org to SAML org 2024-02-09 08:31:19 -08:00
Tuan Dang 2cc2a91812 Change update slug fallback to undefined 2024-02-08 17:47:58 -08:00
Tuan Dang 4e2f2281f9 Update orgScope to orgId naming for org-level auth ref, rewire user invite saml block to org authEnforce field 2024-02-08 17:29:21 -08:00
Tuan Dang d5064fe75a Start SCIM functionality 2024-02-08 15:54:20 -08:00
Tuan Dang 22d89d791c Patch new org creation condition on SAML account signup, enable users to toggle auth methods regardless of what org they are in 2024-02-07 12:13:09 -08:00
Tuan Dang 3f8ce42682 Merge remote-tracking branch 'origin' into org-based-auth 2024-02-07 09:49:13 -08:00
Tuan Dang 3ecfb3f9d2 Show usage and billing tab on cloud only 2024-02-07 09:45:42 -08:00
Tuan Dang 9011394c34 Add validation to org slug 2024-02-07 09:39:06 -08:00
Tuan Dang fc7015de83 Add lockout-preventative step in saml config setup, add update org slug section in org settings, revise navigate to org flow to account for org-level auth enforced orgs 2024-02-06 15:51:24 -08:00
Tuan Dang c1aa5c840c Add org-scoped auth to project-level endpoints 2024-02-05 14:48:02 -08:00
Tuan Dang 410476ecb5 Merge remote-tracking branch 'origin' into org-based-auth 2024-02-04 15:03:43 -08:00
Tuan Dang f1c41be7d4 Resolve merge conflicts 2024-02-04 15:02:43 -08:00
Tuan Dang f138973ac7 Add org-scoped auth to org-level endpoints, add migration file for org enableAuth field 2024-02-04 14:44:08 -08:00
Tuan Dang 4e3827780f Merge remote-tracking branch 'origin' into pg-ssl 2024-02-03 15:16:47 -08:00
Tuan Dang 644cdf5a67 Add knex SSL configuration support 2024-02-03 15:16:43 -08:00
Tuan Dang a2ef7482ea Correct startOrgTrial spelling 2024-01-30 21:14:22 +07:00
Tuan Dang 40768631e0 PAdd customer portal redirect, patch free trial endpoint 2024-01-30 17:46:52 +07:00
Tuan Dang d62e1c3703 Bump Cloudflare IP priority 2024-01-29 16:51:38 +07:00
Tuan Dang 74ac75b878 Remove async from isSamePath check in integration sync 2024-01-29 16:37:31 +07:00
Tuan Dang 5593464287 Patch Vercel integration missing teamId not being passed in from frontend 2024-01-29 09:20:39 +07:00
Tuan Dang 2606e42079 Correct Cloudflare Pages authorization page 2024-01-27 12:38:23 +05:30
Tuan Dang b1285b401b Patch integration issues 2024-01-27 12:38:23 +05:30
Tuan Dang 3afafbb885 Add Makefile, pg-admin to docker compose 2024-01-27 12:38:23 +05:30
Tuan Dang 7f17194c0f Add IPv6 consideration to default identities IP allowlist 2024-01-07 16:32:25 +01:00
Tuan Dang 1e1ad450d2 Add version query param to GET secret endpoint 2024-01-07 14:25:33 +01:00
Tuan Dang 5287b322d8 Enable new integration auth for each new integration 2024-01-07 12:49:59 +01:00
Tuan Dang c94b7d63f6 Update various identities items 2024-01-06 17:04:44 +01:00
Tuan Dang edd9c66e49 Remove commented print statements 2024-01-06 16:11:22 +01:00
Tuan Dang 0a3b85534b Fix client-side railway integration issue 2024-01-06 16:09:15 +01:00
Tuan Dang d5063018eb Added identities, universal auth, agent to changelog 2024-01-02 10:05:43 +01:00
Tuan Dang 69bbbfcfd8 Restyle self-hosting docs for Docker / Docker Compose 2023-12-20 19:52:17 +07:00
Tuan Dang cb364186d8 Add self-hosting docs for Railway 2023-12-20 17:05:28 +07:00
Tuan Dang e822820151 Finish self-hosting docs for AWS Lightsail 2023-12-20 15:42:02 +07:00
Tuan Dang 70f1122362 Add self-hosting docs for Azure App Service 2023-12-19 20:57:08 +07:00
Tuan Dang 5bed2580c3 Add self-hosting docs for Azure Container Instances 2023-12-19 15:19:24 +07:00
Tuan Dang 44fd35baf5 Add docs for deploying Infisical with GCP Cloud Run 2023-12-18 16:52:28 +07:00
Tuan Dang 4d0bff4377 Add self-hosting docs for Fly.io 2023-12-18 12:10:18 +07:00
Tuan Dang 14c8e3fa3b Update SSO docs to use Mintlify steps 2023-12-15 13:54:28 +07:00
Tuan Dang 51b788cc5b Update redirect to org after SSO 2023-12-14 23:07:22 +07:00
Tuan Dang f3767d3963 Add Mintlify steps to integration pages 2023-12-14 11:35:50 +07:00
Tuan Dang 6cda14328b Update getting started guide for fetching secrets via API 2023-12-12 17:59:56 +07:00
Tuan Dang b551ee50e7 Fix merge conflicts 2023-12-12 15:50:14 +07:00
Tuan Dang 93aeacc6b6 Add API reference docs for identity / universal auth endpoints 2023-12-12 13:42:17 +07:00
Tuan Dang 5f29562fad Update existing endpoints in API reference to support Identities, update Identities docs 2023-12-11 20:01:32 +07:00
Tuan Dang 4f6adb50d1 Minor UX update to identities 2023-12-10 22:35:12 +07:00
Tuan Dang 444ce9508d Resolve PR review items, moved identity auth logic into separate controller, etc. 2023-12-10 14:15:25 +07:00
Tuan Dang 50ef23e8a0 Restructure MIs to more generic Identity 2023-12-09 22:18:38 +07:00
Tuan Dang ec5cf97f18 Add case for MI token renewal 2023-12-07 00:29:08 +07:00
Tuan Dang 69b57817d6 Switch access token tracking to be persistent, add num uses, draft token renewal, update docs 2023-12-07 00:11:16 +07:00
Tuan Dang 591f33ffbe Move MI endpoints from v3 to v1 2023-12-05 22:24:25 +07:00
Tuan Dang 855158d0bb Allow MI to create another MI test 2023-12-05 19:34:43 +07:00
Tuan Dang 87e997e7a0 Replace most getUserOrgPermissions with more generic getAuthDataOrgPermissions for MIs in backend 2023-12-05 19:20:30 +07:00
Tuan Dang 3c449214d1 Add error messages for MI expired client secret, num uses limit reached 2023-12-05 17:53:35 +07:00
Tuan Dang d813f0716f Switch RBAC flag 2023-12-05 17:47:46 +07:00
Tuan Dang 6787c0eaaa Update authz logic for MI 2023-12-05 17:46:50 +07:00
Tuan Dang c91f6521c1 Update MI fields numUses, numUsesLimit, ttl, added modal for delete client secret confirmation 2023-12-05 11:15:57 +07:00
Tuan Dang 0ebd1d3d81 Merge branch 'stv3-org-roles' of https://github.com/Infisical/infisical into stv3-org-roles 2023-12-05 08:57:50 +07:00
Tuan Dang 28b617fd89 Update MI docs for client id/secret 2023-12-04 23:04:04 +07:00
Tuan Dang 8b1eaad7b5 Fix audit logs UI rendering 2023-12-04 18:23:04 +07:00
Tuan Dang c917cf8a18 Add logging to MI secret endpoints 2023-12-04 17:48:32 +07:00
Tuan Dang 282830e7a2 Fix lint issues 2023-12-04 16:24:55 +07:00
Tuan Dang 3d6f04b94e Merge remote-tracking branch 'origin' into stv3-org-roles 2023-12-04 16:15:14 +07:00
Tuan Dang 60a5092947 Merge remote-tracking branch 'origin' into stv3-org-roles 2023-12-04 16:14:31 +07:00
Tuan Dang 69dae1f0b2 Move MI from refresh token to client id / client secrets approach 2023-12-04 16:13:00 +07:00
Tuan Dang 057fcb164d Add missing secret rotation link in changelog 2023-11-29 17:02:57 +07:00
Tuan Dang 372afa2111 Update changelog 2023-11-29 16:58:12 +07:00
Tuan Dang 6557d7668e Add docs for MIs 2023-11-29 15:55:15 +07:00
Tuan Dang 77e3d10a64 Flip RBAC 2023-11-27 15:50:59 +07:00
Tuan Dang 814b71052d Update error-handling, show underprivileged notification error 2023-11-27 15:50:00 +07:00
Tuan Dang 6579b3c93f Update MI authz logic 2023-11-27 14:19:10 +07:00
Tuan Dang 99c41bb63b Add no access role, replace ST V3 refs with machine 2023-11-27 09:59:15 +07:00
Tuan Dang 63df0dba64 Add default org and project-level no access roles 2023-11-26 17:02:03 +07:00
Tuan Dang 4e050cfe7a Fix frontend lint issues 2023-11-26 13:34:50 +07:00
Tuan Dang 32f5c96dd2 Move custom role paywall to assignment step 2023-11-26 13:18:49 +07:00