Commit Graph

1720 Commits

Author SHA1 Message Date
gearnode
cc1c843d0a Refactor session loading management
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 12:36:49 +01:00
gearnode
019f76ecfd Refactor authentication handler
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 12:28:51 +01:00
gearnode
1f4675f692 Rename session and user tables
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 09:44:08 +01:00
gearnode
5bdc474aef Move coredata outside probo service
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 09:38:36 +01:00
gearnode
3c1a0c9d6d Fix broken user manager migration
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 09:14:08 +01:00
gearnode
51fb5c9510 Update gqlgen code
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 09:14:01 +01:00
gearnode
c2bf3a42ed Simplify database schema
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-11 09:03:13 +01:00
gearnode
7d80557d71 Fix missing sql argument
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-10 15:11:37 +01:00
gearnode
12020659a4 Fix missing tenant_id argument in sql query
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-10 14:33:57 +01:00
gearnode
7fe0774442 Reduce the size of the tenant id
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-10 14:33:44 +01:00
gearnode
58eda95d93 Rewrite the global id system to include tenant id
The API should be aware of the tenant they are working on. Many solution
is possible like passing a header, adding the tenant id in each function
call, encode the tenant id in the GID.

I consider the header as a hack it force the client to keep in mind to
pass this header, having to returns an error in case of not defined
header and add a non standard header make the API more harder to use.

Passing the tenant id everywhere will be a good option but since Relay
impose to have node(id: ID!) Node interface it is not possible or by
hacking by wrapping node(id: ID!) Node in top query who getting the
tenant_id.

I finish by simpliy encode the tenant id directly in the object id, it
what AWS do too, it allow to always have the information, and it ensure
a right data isolation.

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-10 13:54:55 +01:00
gearnode
b2b1305abe Fix bootstrap organization failed
We use organization id as tenant id, so the organization insert cannot
take scope as it self scoped tenant.

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-10 10:29:10 +01:00
gearnode
a4611f5433 Force scope usage even for insert
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-10 10:27:30 +01:00
gearnode
dc2cac9317 Remove unused omitempty
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-10 10:27:01 +01:00
gearnode
0b3bd6fd67 Fix missing aws config
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-09 15:39:16 +01:00
gearnode
3bd4762e12 Remove CORS configuration by default
Since the frontend is embded it's not needed to have CORS by default.

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-09 15:32:33 +01:00
gearnode
92826c40f5 Fix malformed filename
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-09 15:31:18 +01:00
gearnode
123a538d82 Embded frontend inside go binary
This will simplify the self hosting of the platform.

Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-09 15:30:28 +01:00
gearnode
93801e1d11 Add support of postgresql TLS configuration
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-08 21:11:27 +01:00
gearnode
4d1305f192 Fix panic on configuration load
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-08 11:26:38 +01:00
gearnode
65f2245167 Fix migration organization ref
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-06 10:21:33 +01:00
gearnode
b539abf5f0 Fix migration error
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-06 10:20:13 +01:00
gearnode
d4723024a0 Use signed cookie
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-06 08:33:38 +01:00
gearnode
13153e8f85 Add cookie signer helpers
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-05 17:35:03 +01:00
gearnode
8e09774958 Sign session cookie to avoid tapping
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-05 17:34:42 +01:00
gearnode
9526061861 Add data to session and floating duration
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-05 17:26:07 +01:00
gearnode
b214b0930c Add policy owner
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-05 11:25:08 +01:00
gearnode
c69b988ba1 Add policy review date
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-05 11:05:59 +01:00
gearnode
312474354c Add policies
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-04 12:09:22 +01:00
gearnode
cf12d3966e Replace pgx.NamedArgs to pgx.StrictNamedArgs
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-02 08:48:52 +01:00
gearnode
75c2813578 Style
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-01 23:12:36 +01:00
gearnode
bb463be895 Refactor sql row can using collectable rows
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-01 23:09:15 +01:00
gearnode
67edb3783e Add missing license headers
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-01 21:05:44 +01:00
gearnode
10b9ded41c Add delete evidence
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-01 21:02:28 +01:00
gearnode
29f23e3f77 Add evidence preview modal
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-01 19:33:55 +01:00
gearnode
312885ebd0 Add filename field to Evidence type
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-01 18:59:52 +01:00
gearnode
8d8149e692 Fix missing values for control SQL insert
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-28 14:30:38 +01:00
gearnode
c9253f3aae Add evidence attachments upload
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-28 14:23:57 +01:00
gearnode
b36b6ed3e4 Add original filename to evidence
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-28 14:13:30 +01:00
gearnode
66b4761154 Configure s3 client when probod start
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-28 14:13:07 +01:00
gearnode
521fc20766 Add awsconfig helper
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-28 14:11:34 +01:00
gearnode
cfabe3ee80 Add file upload for task evidence
The feature allows users to attach evidence files to control tasks by
clicking an upload icon, enhancing compliance documentation
capabilities.

Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-28 11:01:19 +01:00
gearnode
9f03583edf Add multipart form transport support
Will allow to upload file via the GrahQL API

Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-28 10:57:06 +01:00
gearnode
2f274aabad Fix SQL syntax error when insert evidence state transition
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-28 10:56:32 +01:00
gearnode
124b8db62c Fix SQL syntax error on evidence insert
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-28 10:56:18 +01:00
gearnode
ad19ef5b24 Fix task not found when create evidence
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-28 10:55:47 +01:00
gearnode
40ee608005 Add update control
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-27 15:37:10 +01:00
gearnode
4bb7c116b9 Refactor update payload
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-27 14:47:36 +01:00
gearnode
c946e51015 Add update framework
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-27 14:42:49 +01:00
gearnode
c54febadb8 Add create control and framework
Signed-off-by: gearnode <bryan@frimin.fr>
2025-02-27 14:22:08 +01:00