Commit Graph

45 Commits

Author SHA1 Message Date
Émile Ré
f04e11866f Framework view with control list and view
Signed-off-by: Émile Ré <nemile.re@gmail.com>
2025-03-28 17:36:54 +04:00
gearnode
1867c79aad Add mitigation views
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-28 14:19:36 +01:00
gearnode
7321862ba9 First step of mitigation migration
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-27 23:34:35 +01:00
gearnode
483a620fe7 Rename control to mitigation
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-27 13:07:27 +01:00
gearnode
cc7c1db6c3 Fix panic in GraphQL resolver not hit httpserver recover
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-25 07:04:04 +01:00
gearnode
5887144054 Allow to edit time estimate
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-24 11:09:50 +01:00
gearnode
7b6c1100ec Add GraphQL tracing
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-24 10:23:42 +01:00
gearnode
b8ddb110b3 Omit gqlgen panic handler
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-23 23:45:11 +01:00
gearnode
5d770c160c Fix panic print non json log line
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-23 23:44:33 +01:00
gearnode
39487ecc5f Fix non json log lije 2025-03-23 19:15:28 +01:00
gearnode
b8bbeaba11 Add evidence type link
close #44

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-20 17:25:29 +01:00
gearnode
7117c6a210 Add forget/reset password
close #50

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-20 16:17:47 +01:00
gearnode
ef8e62d488 Fix nil panic when tenantID is nil
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-20 15:36:46 +01:00
gearnode
ffa4c93bfd Add configuration option to disable signup
close #51

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-19 16:43:49 +01:00
gearnode
7efae81113 Make task time estimate optional
close #38

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-19 13:08:27 +01:00
gearnode
c66974733a Change vendor and people default order
Close #35

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-19 08:13:36 +01:00
gearnode
1505e5b096 Expose new cursor over GraphQL API
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-19 00:20:35 +01:00
gearnode
c73e417e5c Refactor model cursor to use orderBy
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-18 18:16:14 +01:00
gearnode
257ea563a9 Add service account people kind
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-16 18:44:17 +01:00
gearnode
c9b58010f7 Use REST API for confirm endpoint
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-14 13:48:29 +01:00
gearnode
7153831fb2 Remove user from organization
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-14 11:17:28 +01:00
gearnode
ebc88ec7e8 Add user invitation system
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-14 10:43:34 +01:00
gearnode
87f7654b10 Add organization member list
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-14 09:38:01 +01:00
gearnode
03f621ec8d Add framework import
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-13 16:32:30 +01:00
gearnode
2f229fc27d Fix organization creation failed
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-13 13:47:57 +01:00
gearnode
ab739d9bda Add update organziation
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-13 11:15:13 +01:00
gearnode
8cbe08d136 Add assigned people to a task
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-13 10:08:31 +01:00
gearnode
376edd927d Add task time estimate
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-13 09:14:08 +01:00
gearnode
3255e32eac Fix create conrtrol importance is missing
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-13 08:54:48 +01:00
gearnode
d4280b1111 Add control importance
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-13 08:46:51 +01:00
gearnode
d3ca8cc60d Fix graphql playground url
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-12 16:07:15 +01:00
gearnode
1f9c5aeadb Fix tenant not found when creating new organinzation
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-12 14:02:18 +01:00
gearnode
1a6e68f13c Add email confirmation
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-12 12:17:21 +01:00
gearnode
01af3812c4 Enforce allowed tenant in each request
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-12 10:14:49 +01:00
gearnode
7c8beb74ec Fix duplicated in key in context
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-12 10:08:08 +01:00
gearnode
8035085331 Fix duplicated ctx key
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 17:37:14 +01:00
gearnode
9640e4266a Refactor probo service
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 17:02:28 +01:00
gearnode
b41f417af6 Fix unauthenticate user not redirect to login page
fix #31

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 14:33:24 +01:00
gearnode
cc1c843d0a Refactor session loading management
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 12:36:49 +01:00
gearnode
019f76ecfd Refactor authentication handler
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 12:28:51 +01:00
gearnode
5bdc474aef Move coredata outside probo service
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 09:38:36 +01:00
gearnode
51fb5c9510 Update gqlgen code
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 09:14:01 +01:00
gearnode
c2bf3a42ed Simplify database schema
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 09:03:13 +01:00
gearnode
58eda95d93 Rewrite the global id system to include tenant id
The API should be aware of the tenant they are working on. Many solution
is possible like passing a header, adding the tenant id in each function
call, encode the tenant id in the GID.

I consider the header as a hack it force the client to keep in mind to
pass this header, having to returns an error in case of not defined
header and add a non standard header make the API more harder to use.

Passing the tenant id everywhere will be a good option but since Relay
impose to have node(id: ID!) Node interface it is not possible or by
hacking by wrapping node(id: ID!) Node in top query who getting the
tenant_id.

I finish by simpliy encode the tenant id directly in the object id, it
what AWS do too, it allow to always have the information, and it ensure
a right data isolation.

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-10 13:54:55 +01:00
gearnode
123a538d82 Embded frontend inside go binary
This will simplify the self hosting of the platform.

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-09 15:30:28 +01:00