rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,129 Commits 1 Branch 0 Tags
064fde8dc5f39ccdfb7ab55aa9d881e36e22ea2e
Commit Graph

17 Commits

Author SHA1 Message Date
Émile Ré
c0b2a5702d Introduce pkg/mail.Addr 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2025-12-15 18:24:00 +01:00
Bryan Frimin
dfd924abeb Add tools and update authenticztion and RBAC 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-21 10:22:01 +01:00
Bryan Frimin
e41997a04d Enable IdP-initiated SAML flows and simplify authentication 
Simplifies SAML authentication by using RelayState to contain the SAML
config ID for both SP-initiated and IdP-initiated flows, removing the
need for the relay_states table and associated token management.

Key changes:
- Enable IdP-initiated flows with AllowIDPInitiated flag
- Use RelayState for SAML config ID instead of secure tokens
- Remove auth_saml_relay_states table and related code
- Maintain InResponseTo validation for SP-initiated flows
- Fix MetadataURL to use entity ID instead of ACS URL

This enables IdP-initiated SAML logins (e.g., from Google Workspace,
Azure Entra ID, Okta) while maintaining security through request ID
validation and assertion replay prevention.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-14 09:32:23 +01:00
Sacha Al Himdani
21c4b7cd9d Add role management 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-13 17:11:22 +01:00
Bryan Frimin
d71800efbd Do not log sensitive info 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 11:46:14 +01:00
Bryan Frimin
edce70141d Add IDP initiated flow support 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 09:06:02 +01:00
Sacha Al Himdani
fee5a9232e Make secure cookie configurable 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-04 17:09:51 +01:00
Sacha Al Himdani
5212d0c18f Add api keys 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-04 13:37:31 +01:00
Bryan Frimin
59aa332ab5 Move to vanity import url 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-31 17:01:52 +01:00
Bryan Frimin
d1c31978da Fix role and organization logo 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 22:42:17 +01:00
Bryan Frimin
896e6e0736 Refactor hostname to become baseurl 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 19:41:15 +01:00
Bryan Frimin
29917578fc Fix various bad tenant isolation 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:13 +01:00
Bryan Frimin
a42670d5bd Simpliy and ensure tenant for saml consume 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:13 +01:00
Bryan Frimin
f0c4a51a1d Fix mail addr validation 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:12 +01:00
Bryan Frimin
b693af1770 Fix log sensitive info 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:12 +01:00
Bryan Frimin
6f2bd9c92f Fix failed to to cannot 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:08 +01:00
Bryan Frimin
2766f8e423 Add SAML support 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:31:27 +01:00