Commit Graph

1052 Commits

Author SHA1 Message Date
Bryan Frimin
a3c3411a40 Update ignore tls pattern
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-21 09:38:21 -08:00
Bryan Frimin
7a3e289677 Fix otel utf8 error
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-21 09:28:45 -08:00
Émile Ré
7ce73bbcfa Fix SOA permissions handling + add scope conditions
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-21 13:30:41 +04:00
Émile Ré
ff65303a1a Fix documents signing authentication
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-21 12:24:34 +04:00
Bryan Frimin
2b11ff90af Revert back to graphql endpoint
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-20 07:47:48 -08:00
Émile Ré
4881901a73 Revert console graphql endpoint pathname for tmp n8n app fix
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-20 14:56:42 +04:00
Émile Ré
6395dc47fa Fix invitationResolver.Organization authorize check
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-20 10:41:12 +04:00
Émile Ré
df23bc144b Clean child sessions in iam membership migration
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-19 20:52:48 +04:00
Émile Ré
8d538313a4 Fix failing migration
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-19 20:32:54 +04:00
Émile Ré
acdbc79a8f Add migration to fix wrong GIDs
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-19 18:34:11 +04:00
Émile Ré
8559a11be5 Fix organization members order and filtering
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-19 18:33:36 +04:00
Émile Ré
887d39144b Order membership by organization name
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-19 17:37:15 +04:00
Émile Ré
d92e893bfd Use authn.Cookie for SAML SSO
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-19 15:17:11 +04:00
Émile Ré
ac65c05488 Clear cookie on sign out
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-19 12:55:04 +04:00
Émile Ré
1daf1a64f8 Change membershipResolver.Profile to authz from membership
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-19 11:14:07 +04:00
Bryan Frimin
56a2073547 Fix 5xx on profile request
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-18 09:12:08 -08:00
Bryan Frimin
00bbd04e7d Fix missing policy
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-18 08:32:37 -08:00
Bryan Frimin
7e2e16034e Fix error handling
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-18 08:22:49 -08:00
Bryan Frimin
641acf18bc Fix timestamp column type
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-18 08:14:39 -08:00
Sacha Al Himdani
bd36ed6bb9 Fix obligation validations
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-01-18 07:39:02 -08:00
Bryan Frimin
2dade8236b Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 13:37:41 -08:00
Émile Ré
ff0777f685 Fixes after rebase
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:36:49 -08:00
Émile Ré
600cbbc92b Fix iam membership profiles migration and add corresponding identities to trust center accesses
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:36:49 -08:00
Émile Ré
3669df3f8a Handle membership deletions and role updates in iam policies
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:36:49 -08:00
Émile Ré
00eb3cde5e Fix trust center access creation in console
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:36:48 -08:00
Émile Ré
6c7bcfb50a Get rid of old trust-auth config
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:36:47 -08:00
Émile Ré
7cc1144192 Put backn membership middleware
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:35:47 -08:00
Émile Ré
20582a831c Uncomment cert provisioner dns config check
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:35:46 -08:00
Émile Ré
5384e12ced Make magic link single use and reduce duration to 15min
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:35:45 -08:00
Émile Ré
2bd2c5c215 Fix trust resolver IsUserAuthorized when doc is public
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:26 -08:00
Émile Ré
ca4ae96f31 Rename authz.WithSesion to authz.WithSkipAssumptionCheck since we only used it with a nil arg
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:26 -08:00
Émile Ré
5beceb58d2 Change magic link request to use url builder
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:26 -08:00
Émile Ré
a6826826b0 Remove unused code
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:25 -08:00
Émile Ré
cbd873fd57 Revert ugly stripping by using a top level front route
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:25 -08:00
Émile Ré
c5cd225d95 Fix custom domain prefix + cookie
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:25 -08:00
Émile Ré
491caa9e22 Ask for fullName on NDA signing
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:25 -08:00
Émile Ré
44d85a2b12 Trust center access management - get rid of access token
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:24 -08:00
Émile Ré
8b3bda56e6 Add magic link login for trust center
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:24 -08:00
Bryan Frimin
8ff4693bfc Use session instead of mustBeAuthenticated
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:34:24 -08:00
Bryan Frimin
10eed9a6a3 Extract session directive in a dedicated package
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:34:24 -08:00
Émile Ré
e220c259b3 Use trust center from context
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:23 -08:00
Émile Ré
7322201dab Plug trust center part 1
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:23 -08:00
Émile Ré
663400c4f6 Extract cookie config into authn pkg
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:04 -08:00
Émile Ré
1257347df9 Extract authn & authz utils
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:03 -08:00
Émile Ré
bbdea575d1 Expire invitations on SAML sign up and invitation accept
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:03 -08:00
Bryan Frimin
53bfc36bff Fix internal error when create new org
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:34:03 -08:00
Émile Ré
b790ca312a Expire invitations on SCIM delete
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:03 -08:00
Émile Ré
b961069e1d Accept/Expire invitations on SAML & SCIM operations
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:02 -08:00
Émile Ré
cfcbda4519 Fix uneeded assume + assume after invite accept
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:02 -08:00
Émile Ré
c6094ff572 Implement organization assumption check in authorization layer
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:01 -08:00