Sheen 0f7e8585dc Merge pull request #3391 from Infisical/feat/add-metadata-based-permissions-for-dynamic-secret ...

feat: add metadata based permissions for dynamic secret

2025-04-16 04:28:52 +08:00

..

utils

update auto migration msg

2025-02-12 19:20:24 -05:00

20231128072457_user.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231128092347_user-encryption-key.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231129072939_auth-token.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231130072734_auth-token-session.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231201151432_backup-key.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231204092737_organization.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231204092747_org-membership.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231205151331_incident-contact.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231207055643_user-action.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231207055701_super-admin.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231207105059_api-key.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231212110939_project.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231212110946_project-membership.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231218092441_secret-folder.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231218092508_secret-import.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231218092517_secret-tag.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231218103423_secret.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231220052508_secret-version.ts

feat: changed line length to 120

2024-01-30 22:40:10 +05:30

20231222092113_project-bot.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231222172455_integration.ts

Think I got them all

2024-10-28 13:20:36 -07:00

20231225072545_service-token.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231225072552_webhook.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231228074856_identity.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20231228074908_identity-universal-auth.ts

feat: changed line length to 120

2024-01-30 22:40:10 +05:30

20231228075011_identity-access-token.ts

feat: fixed eslint and resolved all eslint issues

2024-01-30 22:30:42 +05:30

20231228075023_identity-membership.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20240101054849_secret-approval-policy.ts

feat: changed line length to 120

2024-01-30 22:40:10 +05:30

20240101104907_secret-approval-request.ts

feat: changed line length to 120

2024-01-30 22:40:10 +05:30

20240102152111_secret-rotation.ts

feat: changed line length to 120

2024-01-30 22:40:10 +05:30

20240104140641_secret-snapshot.ts

feat: changed line length to 120

2024-01-30 22:40:10 +05:30

20240107153439_saml-config.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20240107163155_org-bot.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20240108134148_audit-log.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20240111051011_secret-scanning.ts

feat: fixed eslint and resolved all eslint issues

2024-01-30 22:30:42 +05:30

20240113103743_trusted-ip.ts

feat: changed backend-pg to backend

2024-01-27 19:14:33 +05:30

20240204171758_org-based-auth.ts

add slug index

2024-02-08 20:47:33 -05:00

20240208234120_scim-token.ts

Complete preliminary SCIM fns, add permissioning to SCIM, add docs for SCIM

2024-02-18 18:50:23 -08:00

20240216154123_ghost_users.ts

Requested changes

2024-02-22 05:00:26 +01:00

20240222201806_admin-signup-control.ts

small typos and update migration timestamp

2024-02-22 15:35:09 -05:00

20240226094411_instance-id.ts

Update 20240226094411_instance-id.ts

2024-02-29 17:47:24 -05:00

20240307232900_integration-last-used.ts

Make sync behavior apply on first sync only, finish MVP create/update bidirectional sync for Heroku

2024-03-07 18:06:56 -08:00

20240311210135_ldap-config.ts

Update LDAP migration to latest

2024-03-11 14:20:32 -07:00

20240312162549_temp-roles.ts

feat(server): removed stream in project multi role migration

2024-03-12 23:06:06 +05:30

20240312162556_temp-role-identity.ts

feat(server): removed stream in project multi role migration

2024-03-12 23:06:06 +05:30

20240318164718_dynamic-secret.ts

feat(server): updated dynamic secret names from feedback, added describe and fixed login not working

2024-03-26 13:18:31 +05:30

20240326172010_project-user-additional-privilege.ts

feat: resolved upstream rebase conflict

2024-03-28 19:55:12 +05:30

20240326172011_machine-identity-additional-privilege.ts

feat: resolved upstream rebase conflict

2024-03-28 19:55:12 +05:30

20240405000045_org-memberships-unique-constraint.ts

revert schema name

2024-05-09 13:42:23 -04:00

20240412174842_group.ts

Update migration order for group

2024-04-12 10:50:06 -07:00

20240414192520_drop-role-roleid-project-membership.ts

chore: rolling migration removed role and roleId field from project membership and identity project membership

2024-04-15 02:16:11 +05:30

20240417032913_pending-group-addition.ts

Convert pending group addition table into isPending field

2024-04-22 10:37:24 -07:00

20240423023203_ldap-config-groups.ts

Update ldap group mapping schema, replace group input field with select

2024-04-23 15:04:02 -07:00

20240424235842_user-search-filter.ts

Add user search filter field for LDAP and validation for search filters

2024-04-24 20:58:16 -07:00

20240429154610_audit-log-index.ts

fix(server): added index for audit log to resolve high latency or timeout caused

2024-04-29 22:42:35 +05:30

20240503101144_audit-log-stream.ts

feat: changed from token to headers for audit log streams api

2024-05-03 17:43:14 +05:30

20240507032811_trusted-saml-ldap-emails.ts

Update trusted email migration file with backfill

2024-05-07 07:59:37 -07:00

20240507162140_access-approval-policy.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-05-07 16:21:40 +00:00

20240507162141_access.ts

Rename 20240507162141_access to 20240507162141_access.ts

2024-05-07 13:58:10 -04:00

20240507210655_identity-aws-auth.ts

rename schema file

2024-05-09 11:59:47 -04:00

20240514041650_identity-gcp-auth.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-05-14 04:16:49 +00:00

20240514141809_inline-secret-reference-sync.ts

feat: implemented inline secret reference integration sync

2024-05-15 09:57:23 +05:30

20240518142614_kubernetes-auth.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-05-18 14:26:13 +00:00

20240520064127_add-integration-sync-status.ts

feat: added integration sync status

2024-05-20 20:56:29 +08:00

20240522193447_index-audit-logs-project-id-org-id.ts

add index for audit logs

2024-05-22 15:48:24 -04:00

20240522203425_index-secret-snapshot-secrets-envid.ts

add indexs to secret versions and secret snapshot secrets

2024-05-22 16:52:18 -04:00

20240522204414_index-secret-version-envId.ts

add indexs to secret versions and secret snapshot secrets

2024-05-22 16:52:18 -04:00

20240522212706_secret-snapshot-secrets-index-on-snapshotId.ts

add index to secret-snapshot-secret for field snapshotId

2024-05-22 17:46:16 -04:00

20240522221147_secret-snapshot-folder-index-on-snapshotId.ts

add index on secret snapshot folders

2024-05-22 18:15:04 -04:00

20240522225402_secrets-index-on-folder-id-user-id.ts

add secrets index

2024-05-22 19:04:44 -04:00

20240523003158_audit-log-add-expireAt-index.ts

add index for expire at needed for pruning

2024-05-22 20:38:04 -04:00

20240527073740_identity-azure-auth.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-05-27 07:37:39 +00:00

20240528153905_add-user-account-mfa-locking.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-05-28 15:39:05 +00:00

20240528190137_secret_sharing.ts

feat: use hash as pw & move to symmetric encrpytion

2024-05-29 14:10:47 +05:30

20240529060752_snap-shot-secret-index-secretversionid.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-05-29 06:07:52 +00:00

20240529203152_secret_sharing.ts

update secret sharing time stamp

2024-05-29 20:34:08 +00:00

20240530044702_universal-text-in-secret-sharing.ts

feat: secrets expire either with time or views

2024-05-31 12:47:19 +05:30

20240531220007_secret-replication.ts

update migration name

2024-05-31 18:12:47 -04:00

20240603075514_kms.ts

feat: resolved root key failing for base64 and also added projectid and orgid field

2024-06-05 23:58:45 +05:30

20240609133400_private-key-handoff.ts

feat: change field password to hashedPassword

2024-06-12 23:04:10 +05:30

20240610181521_add-consecutive-failed-password-attempts-user.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-06-10 18:15:21 +00:00

20240612200518_add-pit-version-limit.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-06-12 20:05:18 +00:00

20240614010847_custom-rate-limits-for-self-hosting.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-06-14 01:08:46 +00:00

20240614115952_tag-machine-identity.ts

feat: allow secret tag api for machine identity and raw secret endpoint tag support

2024-06-14 18:38:23 +05:30

20240614154212_certificate-mgmt.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-06-14 15:42:12 +00:00

20240614184133_make-secret-sharing-public.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-06-14 18:41:33 +00:00

20240624161942_add-oidc-auth.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-06-24 16:19:41 +00:00

20240624172027_default-saml-ldap-org.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-06-24 17:20:27 +00:00

20240624221840_certificate-alt-names.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-06-24 22:18:39 +00:00

20240626111536_integration-auth-aws-assume-role.ts

feat: updated integration api and queue to support aws secret manager assume role feature

2024-06-26 22:33:49 +05:30

20240626115035_admin-login-method-config.ts

feat: allowed toggling login options as admin

2024-06-26 22:45:14 +08:00

20240626171758_add-ldap-unique-user-attribute.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-06-26 17:17:57 +00:00

20240626171943_configurable-audit-log-retention.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-06-26 17:19:42 +00:00

20240627173239_add-oidc-updated-at-trigger.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-06-27 17:32:39 +00:00

20240701143900_member-project-favorite.ts

chore: renamed new migration files to latest timestamp (gh-action)

2024-07-01 14:38:59 +00:00

20240702055253_add-encrypted-webhook-url.ts

misc: addressed review comments

2024-07-04 13:33:32 +08:00

20240702131735_secret-approval-groups.ts

feat: resolved migration down failing for secret approval policy change

2024-08-30 10:52:45 +05:30

20240702175124_identity-token-auth.ts

Finish preliminary token auth method

2024-07-02 15:05:57 -07:00

20240704161322_identity-access-token-name.ts

Finish new identity page

2024-07-08 17:12:49 +07:00

20240708100026_external-kms.ts

feat: fixed migration down missing orgid

2024-07-10 14:47:44 +05:30

20240710045107_identity-oidc-auth.ts

Move migration file to front

2024-07-10 11:51:53 +07:00

20240715113110_org-membership-active-status.ts

Adjustments to migration file

2024-07-16 22:20:56 +07:00

20240717184929_add-enforcement-level-secrets-policies.ts

fix(backend): ensure idempotent migration

2024-07-18 16:23:56 +02:00

20240717194958_add-enforcement-level-access-policies.ts

fix(backend): ensure idempotent migration

2024-07-18 16:23:56 +02:00

20240718170955_add-access-secret-sharing.ts

feat: remove accessType hardcap in migration + style

2024-07-19 16:19:45 +02:00

20240719182539_add-bypass-reason-secret-approval-requets.ts

feat(backend): save bypass reason on secret_approval_requests

2024-07-19 21:31:48 +02:00

20240724101056_access-request-groups.ts

Update 20240724101056_access-request-groups.ts

2024-08-20 19:50:42 +04:00

20240728010334_secret-sharing-name.ts

Add back hashed hex for secret sharing

2024-07-30 07:16:03 -07:00

20240730181830_add-org-kms-data-key.ts

feat: renamed migrations to be latest

2024-07-30 23:54:07 +05:30

20240730181840_add-project-data-key.ts

feat: renamed migrations to be latest

2024-07-30 23:54:07 +05:30

20240730181850_secret-v2.ts

feat: removed all the migration done for webhook and dynamic secret towards kms encryption

2024-08-01 13:39:41 +05:30

20240802181855_ca-cert-version.ts

Fix ca version migration

2024-11-14 23:07:30 -07:00

20240806083221_secret-sharing-password.ts

feat: apply table migrations (add password field)

2024-08-06 12:28:03 +03:00

20240806113425_remove-creation-limit-rate-limit.ts

misc: removed creation limits completely

2024-08-06 19:41:09 +08:00

20240806185442_drop-tag-name.ts

feat: removed name from tag and stricter slugification for tag endpoint

2024-08-07 13:14:39 +05:30

20240818024923_cert-alerting.ts

Make PR review adjustments

2024-08-17 21:23:25 -07:00

20240818184238_add-certificate-template.ts

Fix merge conflicts

2024-08-18 12:05:15 -07:00

20240819092916_certificate-template-est-configuration.ts

misc: addressed review comments

2024-08-26 21:10:29 +08:00

20240821212643_crl-ca-secret-binding.ts

Finish updating CRL impl

2024-08-22 11:55:19 -07:00

20240830142938_native-slack-integration.ts

misc: moved away from dedicated slack admin config

2024-09-08 17:00:50 +08:00

20240909145938_cert-template-enforcement.ts

Fix cert template enforcement migration check

2024-09-09 12:45:33 -07:00

20240910070128_add-pki-key-usages.ts

misc: integrated custom key usages for issue-cert endpoint

2024-09-11 01:57:16 +08:00

20240918005344_add-group-approvals.ts

chore: lint fix

2024-09-28 03:20:02 +05:30

20240924100329_identity-metadata.ts

feat: added saml parsing attributes and injecting to metadata of a user in org scoped

2024-10-02 00:39:43 +05:30

20240925100349_managed-secret-sharing.ts

Revert "Revert "Permission phase 2""

2024-10-25 00:59:38 +05:30

20240930072738_add-oidc-auth-enforced-to-org.ts

feat: enforce oidc sso

2024-09-30 20:59:48 +08:00

20241003220151_kms-key-cmek-alterations.ts

Revert "Revert "Permission phase 2""

2024-10-25 00:59:38 +05:30

20241005170802_kms-keys-temp-slug-col.ts

remove trigger functions

2024-10-05 18:05:50 -07:00

20241007052025_make-audit-log-independent.ts

misc: addressed comments

2024-10-07 14:00:20 +08:00

20241007202149_default-org-membership-roles.ts

feat: default org membership role

2024-10-07 15:02:14 -07:00

20241008172622_project-permission-split.ts

feat: removed folder striping in permission split project role migration

2024-10-25 00:59:42 +05:30

20241014084900_identity-multiple-auth-methods.ts

feat: moved auth method deletion to top

2024-11-19 02:17:25 +05:30

20241015084434_increase-identity-metadata-col-length.ts

misc: increase identity metadata col length

2024-10-15 16:59:13 +08:00

20241015145450_external-group-org-role-mapping.ts

feature: scim group org role mapping

2024-10-15 07:57:26 -07:00

20241016183616_add-org-enforce-mfa.ts

feat: added enforceMfa toggle for orgs

2024-10-17 03:02:26 +08:00

20241021114650_add-missing-org-cascade-references.ts

misc: added cleanup of global/instance-level resources

2024-10-21 21:19:55 +08:00

20241101174939_project-templates.ts

improvement: address requested feedback

2024-11-07 12:38:33 -08:00

20241107112632_skip-bootstrap-cert-validation-est.ts

misc: remove not nullable from alter

2024-11-12 02:35:21 +08:00

20241110032223_add-missing-oidc-org-cascade-reference.ts

misc: finalize org migration script

2024-11-10 11:49:25 +08:00

20241111175154_kms-root-cfg-hsm.ts

updated migrations

2024-11-11 21:52:35 +04:00

20241112082701_add-totp-support.ts

feat: initial implementation for totp authenticator

2024-11-14 00:07:35 +08:00

20241119143026_add-project-descripton.ts

feat: Add Project Descriptions (#2774)

2024-11-25 21:59:14 +01:00

20241121131344_make-identity-metadata-not-nullable-again.ts

misc: made identity metadata value not nullable

2024-11-21 21:27:56 +08:00

20241203165840_allow-disabling-approval-workflows.ts

fix(Approval Workflows): Workflows keep approval history after deletion (#2834)

2024-12-09 20:03:45 +01:00

20241209144123_add-identity-jwt-auth.ts

feat: finished crud endpoints

2024-12-10 23:10:44 +08:00

20241213122320_add-index-for-secret-version-v2-folder.ts

misc: address cpu usage issue of secret version query

2024-12-13 20:31:34 +08:00

20241213122350_project-split-to-products.ts

feat: changed multi insert into batch insert

2024-12-14 01:19:56 +05:30

20241216013357_ssh-mgmt.ts

Move ssh out to org level

2024-12-15 20:43:13 -08:00

20241218165837_resource-metadata.ts

feat: secret approval and replication

2024-12-21 02:51:47 +08:00

20241218181018_app-connection.ts

improvements: address feedback

2024-12-18 21:18:38 -08:00

20250115222458_groups-unique-name.ts

feat(groups): unique names

2025-01-16 01:01:01 +01:00

20250116092245_add-enforce-capitalization-project-flag.ts

misc: added handling for case enforcement

2025-01-16 19:10:00 +08:00

20250122055102_secret-sync.ts

improvements: address feedback

2025-01-22 10:50:24 -08:00

20250129214629_oidc-configs-manage-group-memberships-col.ts

feature: oidc group membership mapping

2025-01-30 10:21:30 -08:00

20250203141127_add-kmip.ts

misc: migrated KMIP PKI to be scoped at the org level

2025-02-17 15:54:02 +08:00

20250204025010_app-connections-and-secret-syncs-unique-constraint.ts

chore: add migration file

2025-02-03 19:40:00 -08:00

20250205045509_increase-gcp-auth-limit.ts

improvements: cmek additions, normalization and remove kms key slug col

2025-02-05 17:28:57 -08:00

20250205220952_kms-keys-drop-slug-col.ts

improvements: cmek additions, normalization and remove kms key slug col

2025-02-05 17:28:57 -08:00

20250207002643_secret-syncs-increase-message-length.ts

improvement: increase max error message size for secret syncs and handle messages that exceed limit

2025-02-06 17:14:22 -08:00

20250210101840_webhook-to-kms.ts

chore: fix lint

2025-02-12 20:33:13 +04:00

20250210101841_dynamic-secret-root-to-kms.ts

chore: fix lint

2025-02-12 20:33:13 +04:00

20250210101841_secret-rotation-to-kms.ts

chore: fix lint

2025-02-12 20:33:13 +04:00

20250210101842_identity-k8-auth-to-kms.ts

chore: fix lint

2025-02-12 20:33:13 +04:00

20250210101842_identity-oidc-auth-to-kms.ts

chore: fix lint

2025-02-12 20:33:13 +04:00

20250210101845_directory-config-to-kms.ts

chore: fix lint

2025-02-12 20:33:13 +04:00

20250212191958_create-gateway.ts

fix: corrected table name check in migration

2025-03-17 21:28:50 +05:30

20250226021631_secret-requests.ts

feat(secret-sharing): secret requests

2025-03-03 21:14:40 +04:00

20250226082254_add-gov-banner-and-consent-fields.ts

misc: add instance banner and consent support

2025-02-26 23:58:45 +09:00

20250228022604_increase-secret-reminder-note-max-length.ts

improvement: increase secret v2 reminder note max length

2025-02-28 12:26:30 +09:00

20250303213350_add-folder-description.ts

Lint fixes

2025-03-04 10:44:26 -03:00

20250305080145_add-secret-review-comment.ts

feat: add secret approval review comment

2025-03-05 19:25:56 +08:00

20250305131152_add-actor-id-to-secret-versions-v2.ts

Lint fixes

2025-03-06 17:36:09 -03:00

20250311105617_add-share-to-anyone-setting-to-organizations.ts

Fix rebase issue with deleted files

2025-03-14 08:54:14 -03:00

20250313124706_add-privilege-upgrade-field.ts

Run linter

2025-04-10 12:27:56 -07:00

20250314145202_identity-oidc-claim-mapping.ts

feat: completed backend code for oidc permission inject

2025-03-14 22:11:22 +05:30

20250317101525_add-instance-admin-mi.ts

feat: initialize base

2025-03-17 22:35:37 +08:00

20250319134021_recursive-folder-index.ts

feat: indexed and optimized folder queries

2025-03-19 19:46:05 +05:30

20250321100157_k8s-self-reviewer-jwt.ts

feat: updated backend for identity auth with reviewer optional

2025-03-22 01:06:58 +05:30

20250324142102_add-self-approvals-to-secret-approval-policies.ts

Fix typo

2025-03-25 12:48:51 -03:00

20250324142104_app-connection-is-platform-managed-credentials-col.ts

feature secret rotations v2

2025-03-31 20:34:48 -07:00

20250324142105_secret-rotation-v2.ts

improvements: final feedback and ssl enforcement

2025-04-04 13:28:01 -07:00

20250326171707_folder-last-secret-modified.ts

feat: completed folder last secret commit feature

2025-03-27 00:19:26 +05:30

20250402000941_add-type-to-kms-keys.ts

requested changes

2025-04-14 21:36:16 +04:00

20250404022310_ssh-ca-key-source.ts

Update docs for Infisical SSH, fix Infisical SSH project deletion bug

2025-04-04 11:59:05 -07:00

20250405185753_ssh-mgmt-v2.ts

Add unique constraints for ssh login user and login user mapping tables

2025-04-11 00:52:50 -07:00

20250409161555_add-dynamic-secret-to-resource-metadata.ts

feat: add metadata based permissions for dynamic secret

2025-04-11 00:20:02 +08:00

20250410203010_add-comment-to-access-request.ts

Add access request note and change secret request to change request

2025-04-10 20:10:38 -03:00

20250415010421_increase-certificate-altnames-character-limit.ts

increase certificate altnames character limit to 4096

2025-04-15 00:40:28 -04:00

20250415020304_increase-kmip-certificate-altnames-character-limit.ts

increase certificate altnames character limit to 4096

2025-04-15 00:40:28 -04:00