Commit Graph

780 Commits

Author SHA1 Message Date
Bryan Frimin
d8abb230b8 Add audit mcp tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-24 10:23:30 +01:00
Bryan Frimin
2d722700d6 Make status and priority optional
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-24 10:23:30 +01:00
Bryan Frimin
55eb8a6c06 Fix vendor snapshot
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-24 09:46:58 +01:00
Bryan Frimin
c4e7fd41cd Fix missing https redirect for trust center
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-24 09:26:44 +01:00
Bryan Frimin
e4438302f9 Fix mcp order type
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 23:21:37 +01:00
Bryan Frimin
b99eb1c816 Fix delete domain permission
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 23:04:01 +01:00
Bryan Frimin
be5f918d0e Add http to https redirect trust center
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 22:42:33 +01:00
Bryan Frimin
c9e1fd54a5 Fix risks encoding
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 22:28:29 +01:00
Bryan Frimin
112c793328 Add continious improvment tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:55:00 +01:00
Bryan Frimin
1b52585ab2 Add obligation tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:49:00 +01:00
Bryan Frimin
dbf75ef759 Add nonconformity tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:41:07 +01:00
Bryan Frimin
947b621eb5 Add data tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:31:04 +01:00
Bryan Frimin
5917c6a17b Add assets tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:19:39 +01:00
Bryan Frimin
72a6d33535 Add framework tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:08:55 +01:00
Bryan Frimin
963fbd8eab Add measures tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 21:03:21 +01:00
Bryan Frimin
fa97a8e9c6 Add risks
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-23 20:58:23 +01:00
Bryan Frimin
7cc7cc48f4 Fix lost session
Currently the session is only persist in memory so each time client
connect they may lost their session because not going on the right
instance.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-21 12:28:41 +01:00
Bryan Frimin
64f0ea0a79 Fix nil panic
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-21 10:56:30 +01:00
Bryan Frimin
dfd924abeb Add tools and update authenticztion and RBAC
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-21 10:22:01 +01:00
Bryan Frimin
deb656d95e Add getPeople
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 19:27:24 +01:00
Bryan Frimin
85b7c1cd7b Fix time.Time type
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 19:27:24 +01:00
Bryan Frimin
c2f9311a37 Add listPeople tool
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 19:27:24 +01:00
Bryan Frimin
0b5d4f1cd3 Migrate to mcpgen
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 19:27:22 +01:00
Bryan Frimin
d6278da0d6 Fix cursorkey json serialization
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 19:25:29 +01:00
pwnslinger
ef89fa81c9 Fix: Add verifyDomain permission for SAMLConfiguration entity
Added missing ActionVerifyDomain permission mapping for SAMLConfigurationEntityType
to fix authorization error when verifying SAML domain.
Fixes #539

Signed-off-by: pwnslinger <it.ahmadi.91@gmail.com>
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-20 12:00:55 +01:00
Sacha Al Himdani
70e00e2630 Fix snapshots
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-19 18:31:19 +01:00
Sacha Al Himdani
41c0cf9daa Fix asset permissions
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-18 13:28:50 +01:00
Sacha Al Himdani
15d223a761 Fix invitation delete permission
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-17 09:58:40 +01:00
Sacha Al Himdani
44cf6737b5 Fix document permission
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-14 16:32:58 +01:00
Bryan Frimin
e41997a04d Enable IdP-initiated SAML flows and simplify authentication
Simplifies SAML authentication by using RelayState to contain the SAML
config ID for both SP-initiated and IdP-initiated flows, removing the
need for the relay_states table and associated token management.

Key changes:
- Enable IdP-initiated flows with AllowIDPInitiated flag
- Use RelayState for SAML config ID instead of secure tokens
- Remove auth_saml_relay_states table and related code
- Maintain InResponseTo validation for SP-initiated flows
- Fix MetadataURL to use entity ID instead of ACS URL

This enables IdP-initiated SAML logins (e.g., from Google Workspace,
Azure Entra ID, Okta) while maintaining security through request ID
validation and assertion replay prevention.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-14 09:32:23 +01:00
Bryan Frimin
653ac5addb Fix error message
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-13 21:22:27 +01:00
Bryan Frimin
24abdb9d14 Fix import and error management
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-13 20:55:43 +01:00
MustafaAamir
60a3402b24 fix(certmanager#514): check DNS configuration before starting ACME
Signed-off-by: MustafaAamir <mustafa.290101@gmail.com>
2025-11-13 20:55:43 +01:00
Sacha Al Himdani
08c6cc8d09 Add api membership during organization creation
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-13 18:01:00 +01:00
Sacha Al Himdani
21c4b7cd9d Add role management
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-13 17:11:22 +01:00
Antoine Bouchardy
139f5984e2 Add meeting and meeting summary objects
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 23:55:49 +01:00
Bryan Frimin
6d1760ce9b Use enum values
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:04:35 +01:00
Bryan Frimin
944f61da15 Fix various errors
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:04:35 +01:00
Bryan Frimin
fcbfd93f26 Fix route mount for each requests
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:04:34 +01:00
Bryan Frimin
37aa5e04be Add vendor list and create tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:04:34 +01:00
Bryan Frimin
1436d0db08 Add simple MCP server
Proof of concept of working MCP server for Probo. Currently the official
MCP library does not support session that why the server is configured
in stateless mode. It seams the input jsonschema is not used to perform
any validation, so we should figuring out how to validate the input
properly.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:04:34 +01:00
Bryan Frimin
d71800efbd Do not log sensitive info
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 11:46:14 +01:00
Bryan Frimin
d3467c0a05 Make SAML role mapping optional
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 09:28:33 +01:00
Bryan Frimin
edce70141d Add IDP initiated flow support
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 09:06:02 +01:00
Sacha Al Himdani
75510bc6f9 Fix document validations
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-07 10:23:20 +01:00
Bryan Frimin
f9216d30b2 Add validator lib
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-06 13:13:17 +01:00
Sacha Al Himdani
288c59a5f2 Make descriptions nullable
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-05 17:58:50 +01:00
Sacha Al Himdani
c0018f858c Use cookie SameSiteLaxMode when secure is false
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-04 17:42:03 +01:00
Sacha Al Himdani
fee5a9232e Make secure cookie configurable
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-04 17:09:51 +01:00
Sacha Al Himdani
5212d0c18f Add api keys
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-04 13:37:31 +01:00