Commit Graph

1857 Commits

Author SHA1 Message Date
Bryan Frimin
1b52585ab2 Add obligation tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:49:00 +01:00
Bryan Frimin
dbf75ef759 Add nonconformity tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:41:07 +01:00
Bryan Frimin
947b621eb5 Add data tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:31:04 +01:00
Bryan Frimin
5917c6a17b Add assets tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:19:39 +01:00
Bryan Frimin
72a6d33535 Add framework tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:08:55 +01:00
Bryan Frimin
963fbd8eab Add measures tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:03:21 +01:00
Bryan Frimin
fa97a8e9c6 Add risks
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 20:58:23 +01:00
Bryan Frimin
0efecd232e Release v0.89.1
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-21 12:30:05 +01:00
Bryan Frimin
7cc7cc48f4 Fix lost session
Currently the session is only persist in memory so each time client
connect they may lost their session because not going on the right
instance.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-21 12:28:41 +01:00
Bryan Frimin
7f8467f5fe Release v0.89.0
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-21 10:57:55 +01:00
Bryan Frimin
64f0ea0a79 Fix nil panic
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-21 10:56:30 +01:00
Bryan Frimin
e0c4baf7d0 Fix go vet
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-21 10:36:53 +01:00
Bryan Frimin
36d4bba4d6 Update go.mod
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-21 10:28:08 +01:00
Bryan Frimin
dfd924abeb Add tools and update authenticztion and RBAC
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-21 10:22:01 +01:00
Bryan Frimin
deb656d95e Add getPeople
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 19:27:24 +01:00
Bryan Frimin
85b7c1cd7b Fix time.Time type
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 19:27:24 +01:00
Bryan Frimin
c2f9311a37 Add listPeople tool
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 19:27:24 +01:00
Bryan Frimin
0b5d4f1cd3 Migrate to mcpgen
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 19:27:22 +01:00
Bryan Frimin
d6278da0d6 Fix cursorkey json serialization
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 19:25:29 +01:00
Bryan Frimin
78bbeb8cba Release v0.88.4
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 19:25:28 +01:00
Sacha Al Himdani
5a76c47bb5 Release v0.88.8
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-20 15:20:28 +01:00
Sacha Al Himdani
4826299a24 Update go dependency
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-20 14:51:45 +01:00
Bryan Frimin
d95927d034 Update CHANGELOG
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 13:48:47 +01:00
pwnslinger
8714a5902b Fix: Correct SAML config path in entrypoint script
- Fix entrypoint.sh to place SAML config under auth.saml instead of root level,
  resolving "SP certificate and private key are not configured" error

Fixes #541

Signed-off-by: pwnslinger <mahmadi@sorenhq.com>
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 13:48:00 +01:00
Bryan Frimin
a075974980 Update CHANGELOG
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 12:00:55 +01:00
pwnslinger
ef89fa81c9 Fix: Add verifyDomain permission for SAMLConfiguration entity
Added missing ActionVerifyDomain permission mapping for SAMLConfigurationEntityType
to fix authorization error when verifying SAML domain.
Fixes #539

Signed-off-by: pwnslinger <it.ahmadi.91@gmail.com>
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 12:00:55 +01:00
Sacha Al Himdani
851e6c7f5a Release v0.88.7
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-19 19:04:32 +01:00
Sacha Al Himdani
70e00e2630 Fix snapshots
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-19 18:31:19 +01:00
Sacha Al Himdani
630cd30965 Release v0.88.6
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-18 13:46:13 +01:00
Sacha Al Himdani
41c0cf9daa Fix asset permissions
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-18 13:28:50 +01:00
Sacha Al Himdani
94bd5c7299 Release v0.88.5
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-17 10:26:11 +01:00
Sacha Al Himdani
705c8d03de Release v0.88.4
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-17 10:21:31 +01:00
Sacha Al Himdani
15d223a761 Fix invitation delete permission
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-17 09:58:40 +01:00
Sacha Al Himdani
3fcabc6a62 Fix permissions infinite failed request
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-14 21:09:35 +01:00
Bryan Frimin
f8b33fa451 Fix ca-cert-bundle entrypoint.sh
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-14 20:15:17 +01:00
Sacha Al Himdani
b1b2fc69fd Release v0.88.3
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-14 16:37:29 +01:00
Sacha Al Himdani
44cf6737b5 Fix document permission
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-14 16:32:58 +01:00
Bryan Frimin
80bbfca1f7 Fix remove postgres network
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-14 12:50:18 +01:00
Bryan Frimin
93f2136bfd Release v0.88.2
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-14 12:48:07 +01:00
Bryan Frimin
f573e639ac Fix missing AUTH_COOKIE_SECURE implementation
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-14 12:46:34 +01:00
Bryan Frimin
1ca5d894fa Fix probod kill because postgres not ready
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-14 12:37:11 +01:00
Bryan Frimin
e1a244e0ca Fix broken pipeline
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-14 11:54:31 +01:00
Sacha Al Himdani
117e83e778 Release v0.88.1
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-14 11:14:01 +01:00
Bryan Frimin
0b2420b6b8 Fix support PostgreSQL CA bundle in Helm charts with file path option
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-14 11:12:15 +01:00
Sacha Al Himdani
475cf9cbf8 Release v0.88.0
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-14 10:31:23 +01:00
Bryan Frimin
e41997a04d Enable IdP-initiated SAML flows and simplify authentication
Simplifies SAML authentication by using RelayState to contain the SAML
config ID for both SP-initiated and IdP-initiated flows, removing the
need for the relay_states table and associated token management.

Key changes:
- Enable IdP-initiated flows with AllowIDPInitiated flag
- Use RelayState for SAML config ID instead of secure tokens
- Remove auth_saml_relay_states table and related code
- Maintain InResponseTo validation for SP-initiated flows
- Fix MetadataURL to use entity ID instead of ACS URL

This enables IdP-initiated SAML logins (e.g., from Google Workspace,
Azure Entra ID, Okta) while maintaining security through request ID
validation and assertion replay prevention.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-14 09:32:23 +01:00
Bryan Frimin
80349a3b3b Add support for PostgreSQL CA bundle from local file
Add PG_CA_BUNDLE_PATH environment variable to load PostgreSQL TLS CA
certificates from a file path. The bundle is read at startup and injected
into the generated configuration file, enabling secure connections to
PostgreSQL instances with custom CA certificates.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-13 23:34:13 +01:00
Thomas Stocker
eb461d5c29 feat: update charts README.md and values to remove sensitive values
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-13 21:24:13 +01:00
Thomas Stocker
9adc975369 feat: update entrypoint to autogenerate SAML certificate and private key
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-13 21:24:13 +01:00
Thomas Stocker
53965631c8 fix: cert printing config issue
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-13 21:24:13 +01:00