Bryan Frimin
e41997a04d
Enable IdP-initiated SAML flows and simplify authentication
...
Simplifies SAML authentication by using RelayState to contain the SAML
config ID for both SP-initiated and IdP-initiated flows, removing the
need for the relay_states table and associated token management.
Key changes:
- Enable IdP-initiated flows with AllowIDPInitiated flag
- Use RelayState for SAML config ID instead of secure tokens
- Remove auth_saml_relay_states table and related code
- Maintain InResponseTo validation for SP-initiated flows
- Fix MetadataURL to use entity ID instead of ACS URL
This enables IdP-initiated SAML logins (e.g., from Google Workspace,
Azure Entra ID, Okta) while maintaining security through request ID
validation and assertion replay prevention.
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-14 09:32:23 +01:00
Bryan Frimin
80349a3b3b
Add support for PostgreSQL CA bundle from local file
...
Add PG_CA_BUNDLE_PATH environment variable to load PostgreSQL TLS CA
certificates from a file path. The bundle is read at startup and injected
into the generated configuration file, enabling secure connections to
PostgreSQL instances with custom CA certificates.
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-13 23:34:13 +01:00
Thomas Stocker
eb461d5c29
feat: update charts README.md and values to remove sensitive values
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-13 21:24:13 +01:00
Thomas Stocker
9adc975369
feat: update entrypoint to autogenerate SAML certificate and private key
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-13 21:24:13 +01:00
Thomas Stocker
53965631c8
fix: cert printing config issue
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-13 21:24:13 +01:00
Thomas Stocker
4638c72a11
feat: add saml config only if one env var is set
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-13 21:24:12 +01:00
Thomas Stocker
5b24292198
feat: add SAML config generation in entrypoint
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-13 21:24:12 +01:00
Bryan Frimin
653ac5addb
Fix error message
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-13 21:22:27 +01:00
Bryan Frimin
24abdb9d14
Fix import and error management
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-13 20:55:43 +01:00
MustafaAamir
60a3402b24
fix(certmanager#514): check DNS configuration before starting ACME
...
Signed-off-by: MustafaAamir <mustafa.290101@gmail.com >
2025-11-13 20:55:43 +01:00
Sacha Al Himdani
a3fcd522ca
Update CHANGELOG
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-13 18:16:02 +01:00
Sacha Al Himdani
08c6cc8d09
Add api membership during organization creation
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-13 18:01:00 +01:00
Sacha Al Himdani
542dfb9890
Update CHANGELOG
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-13 17:38:52 +01:00
Sacha Al Himdani
21c4b7cd9d
Add role management
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-13 17:11:22 +01:00
Sacha Al Himdani
696adb7d79
Release v0.87.0
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-13 10:29:17 +01:00
Bryan Frimin
9ad72955ca
Update CHANGELOG
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-13 09:37:51 +01:00
Antoine Bouchardy
139f5984e2
Add meeting and meeting summary objects
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 23:55:49 +01:00
Bryan Frimin
0a9033aaaf
Update CHANGELOG
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:15:32 +01:00
Thomas Stocker
6ae6c6875b
fix: ingress issue that didn't discover the right service
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:38 +01:00
Thomas Stocker
566a8e6c6d
feat: always pull latest image
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:38 +01:00
Thomas Stocker
798c5a6baf
fix: use secret instead of simple env vars
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:37 +01:00
Thomas Stocker
f28095d8a0
fix: ingress port issue and cubic review
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:37 +01:00
Thomas Stocker
eda00d0d65
fix: replace hostname with baseUrl param and add SAML config
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:37 +01:00
Thomas Stocker
3f3e06d85b
fix: use env vars and secret on container, config file is now generated on container launch
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:37 +01:00
Thomas Stocker
c1f5b01541
chore: update NOTES.txt with current template
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:36 +01:00
Thomas Stocker
ec67ac3991
fix: remove testing instructions
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:36 +01:00
Thomas Stocker
47c4efb8c8
fix: cubic issues
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:36 +01:00
Thomas Stocker
fa19f3a17c
chore: remove echo sensitive data
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:35 +01:00
Thomas Stocker
bb2d410a6d
chore: remove test values in smtp config
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:35 +01:00
Thomas Stocker
d9ab8e8af7
feat: update hostnam param with base-url
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:35 +01:00
Thomas Stocker
4a96bd796a
feat: add helm charts
...
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com >
2025-11-12 12:09:35 +01:00
Bryan Frimin
6d1760ce9b
Use enum values
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:35 +01:00
Bryan Frimin
944f61da15
Fix various errors
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:35 +01:00
Bryan Frimin
fcbfd93f26
Fix route mount for each requests
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:34 +01:00
Bryan Frimin
37aa5e04be
Add vendor list and create tools
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:34 +01:00
Bryan Frimin
87374293f7
Upgrade mcp dependencies
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:34 +01:00
Bryan Frimin
1436d0db08
Add simple MCP server
...
Proof of concept of working MCP server for Probo. Currently the official
MCP library does not support session that why the server is configured
in stateless mode. It seams the input jsonschema is not used to perform
any validation, so we should figuring out how to validate the input
properly.
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 12:04:34 +01:00
Bryan Frimin
d71800efbd
Do not log sensitive info
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 11:46:14 +01:00
Bryan Frimin
d3467c0a05
Make SAML role mapping optional
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 09:28:33 +01:00
Bryan Frimin
edce70141d
Add IDP initiated flow support
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-12 09:06:02 +01:00
Bryan Frimin
5b6016c817
Fix pebble challtestsrv
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-10 15:36:17 +01:00
Bryan Frimin
8f8271cdfa
Fix pebble command
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-10 15:32:28 +01:00
Sacha Al Himdani
6efbcad548
Release v0.86.4
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-07 20:12:23 +01:00
Sacha Al Himdani
b25d30d3c7
Fix deletion freeze
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-07 20:08:40 +01:00
Bryan Frimin
55cf769f8a
Fix docker images
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2025-11-07 18:01:37 +01:00
Sacha Al Himdani
3be392e7ab
Release v0.86.3
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-07 10:24:36 +01:00
Sacha Al Himdani
75510bc6f9
Fix document validations
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-07 10:23:20 +01:00
Sacha Al Himdani
99edee3743
Release v0.86.2
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-06 18:14:05 +01:00
Sacha Al Himdani
a63705619a
Fix vendors validation
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-06 18:11:59 +01:00
Sacha Al Himdani
eb0ce9281d
Release v0.86.1
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2025-11-06 15:41:24 +01:00