rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
3,182 Commits 1 Branch 0 Tags
dcc08c42e3183dfc331ea52ccaf4070d82d74339
Commit Graph

63 Commits

Author SHA1 Message Date
Bryan Frimin
23084a72a2 Add OIDC login support for Google and Microsoft providers 
Implements OpenID Connect authentication flow with PKCE, JWT verification, and enterprise-only account restrictions. Adds OIDC service with JWKS caching and state management, HTTP handlers for login/callback flows, GraphQL query for available providers, and sign-in UI integration.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-23 14:17:43 +01:00
Bryan Frimin
7b320916af Add audit log feature for recording all actions 
Adds audit logging that records all authorized actions performed by
users and API keys. The audit log is automatically populated whenever
the authorizer approves an action, and is queryable via GraphQL, MCP,
and CLI interfaces. Permission checks are excluded via a dry-run flag
to avoid phantom entries on page loads.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-21 19:16:19 +01:00
Émile Ré
1d54f22cd9 Add ssoLoginURL in activate account outputs 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-03-12 17:24:27 +04:00
Bryan Frimin
e393411333 Move kind to string 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-11 13:09:02 +01:00
Émile Ré
909beeb606 Migrate some trust_center_access columns to profiles 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-03-05 10:36:08 +04:00
Émile Ré
f75bde75f1 Remove unused schema fields 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-20 18:24:57 +04:00
Émile Ré
a9e4e991b3 Add profile state sorting 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:13:05 +04:00
Émile Ré
776af96170 Fix bot review 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:13:02 +04:00
Émile Ré
ab5fe8e5e2 Fix e2e tests 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:13:01 +04:00
Émile Ré
7971f88fcd Create flow to add password after account activation 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:12:58 +04:00
Émile Ré
5ab5d2cc4c Implement activate account page 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:12:58 +04:00
Émile Ré
47aba96b69 Reimplement invitations 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:12:58 +04:00
Émile Ré
a42fc4fa61 Reimplement remove / create in console 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:12:57 +04:00
Émile Ré
f931bda10f Reimplement remove and invite user 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:12:56 +04:00
Émile Ré
196738f876 Implement create user 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:12:56 +04:00
Émile Ré
56ec0ab3c3 Move source and state from membership to profile 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:12:55 +04:00
Émile Ré
c115e2c9dc Update graphql schema 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:12:53 +04:00
Émile Ré
108e9cb85d Remove coredata.MembershipProfile MemerhipID field 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-19 16:12:52 +04:00
Émile Ré
00cc91c102 Fix assume SAML required error redirect 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-18 15:16:00 +04:00
Émile Ré
3a459f1992 Rework console pages and implement profile update 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-12 16:21:12 +04:00
Émile Ré
e46c1d4894 Rename redirect-path to continue + handle redirection on forbidden from wrong org assume 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-12 09:37:07 +04:00
Émile Ré
a8d1ce0097 Implement redirect path for saml 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-12 09:37:06 +04:00
Émile Ré
039ff7c5f0 Reuse existing session when signing in in for assume 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-12 09:37:03 +04:00
Sacha Al Himdani
1494707cb5 Exclude users from google workspace bridge 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-02-10 12:42:24 +01:00
Bryan Frimin
bc5bbdae81 Add scim bridge with connector 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-02-02 09:14:38 +01:00
Émile Ré
887d39144b Order membership by organization name 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-19 17:37:15 +04:00
Émile Ré
d92e893bfd Use authn.Cookie for SAML SSO 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-19 15:17:11 +04:00
Bryan Frimin
8ff4693bfc Use session instead of mustBeAuthenticated 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 12:34:24 -08:00
Émile Ré
cfcbda4519 Fix uneeded assume + assume after invite accept 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-17 12:34:02 -08:00
Émile Ré
c6094ff572 Implement organization assumption check in authorization layer 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-17 12:34:01 -08:00
Émile Ré
816e3a1d79 Plug sign in steps + sso login URL check 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-17 12:30:30 -08:00
Bryan Frimin
71263367f6 Add last used at to personal api key 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 12:22:48 -08:00
Bryan Frimin
7030d06aed Add membership state 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 12:22:47 -08:00
Émile Ré
f13e9ba10a Put back sorting columns on invitation and members 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-17 12:22:46 -08:00
Bryan Frimin
cfc514c8e0 Add SCIM management 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 12:20:14 -08:00
Bryan Frimin
b6799cbb01 Add membership source 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 12:17:52 -08:00
Émile Ré
3564bd5495 Fix sign up and accept invite 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2026-01-17 12:17:51 -08:00
Bryan Frimin
4dc8fbda55 Remove iam unused types 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 12:17:51 -08:00
Émile Ré
26371857e9 Fix invite user dialog create people + connection prepend edge 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2026-01-17 12:14:52 -08:00
Bryan Frimin
4013b00841 Refactor policies document 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 11:37:39 -08:00
Émile Ré
e46a11001a Fix iam pages permissions handling 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2026-01-17 11:08:16 -08:00
Bryan Frimin
c4699e433f Add reveal token 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 10:35:52 -08:00
Émile Ré
278411392d Replug invitations 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2026-01-17 10:27:44 -08:00
Émile Ré
e0f6bbd204 Plug back organization members 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2026-01-17 10:27:44 -08:00
Émile Ré
b012b5ec42 Replug SAML configurations 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2026-01-17 10:25:17 -08:00
Bryan Frimin
2615a1eed5 Add permission query 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 10:25:17 -08:00
Bryan Frimin
e9ac50d91c Update RBAC on console 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 10:23:45 -08:00
Émile Ré
d4016186c2 Move page loaders in lazy components + plug viewer membership 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2026-01-17 10:14:56 -08:00
Bryan Frimin
7ea232cceb Remove availableApplications field 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 10:14:56 -08:00
Bryan Frimin
d4b039737e Rename identity profile on membership profile 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 10:14:54 -08:00