Commit Graph

1812 Commits

Author SHA1 Message Date
Bryan Frimin
e41997a04d Enable IdP-initiated SAML flows and simplify authentication
Simplifies SAML authentication by using RelayState to contain the SAML
config ID for both SP-initiated and IdP-initiated flows, removing the
need for the relay_states table and associated token management.

Key changes:
- Enable IdP-initiated flows with AllowIDPInitiated flag
- Use RelayState for SAML config ID instead of secure tokens
- Remove auth_saml_relay_states table and related code
- Maintain InResponseTo validation for SP-initiated flows
- Fix MetadataURL to use entity ID instead of ACS URL

This enables IdP-initiated SAML logins (e.g., from Google Workspace,
Azure Entra ID, Okta) while maintaining security through request ID
validation and assertion replay prevention.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-14 09:32:23 +01:00
Bryan Frimin
80349a3b3b Add support for PostgreSQL CA bundle from local file
Add PG_CA_BUNDLE_PATH environment variable to load PostgreSQL TLS CA
certificates from a file path. The bundle is read at startup and injected
into the generated configuration file, enabling secure connections to
PostgreSQL instances with custom CA certificates.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-13 23:34:13 +01:00
Thomas Stocker
eb461d5c29 feat: update charts README.md and values to remove sensitive values
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-13 21:24:13 +01:00
Thomas Stocker
9adc975369 feat: update entrypoint to autogenerate SAML certificate and private key
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-13 21:24:13 +01:00
Thomas Stocker
53965631c8 fix: cert printing config issue
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-13 21:24:13 +01:00
Thomas Stocker
4638c72a11 feat: add saml config only if one env var is set
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-13 21:24:12 +01:00
Thomas Stocker
5b24292198 feat: add SAML config generation in entrypoint
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-13 21:24:12 +01:00
Bryan Frimin
653ac5addb Fix error message
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-13 21:22:27 +01:00
Bryan Frimin
24abdb9d14 Fix import and error management
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-13 20:55:43 +01:00
MustafaAamir
60a3402b24 fix(certmanager#514): check DNS configuration before starting ACME
Signed-off-by: MustafaAamir <mustafa.290101@gmail.com>
2025-11-13 20:55:43 +01:00
Sacha Al Himdani
a3fcd522ca Update CHANGELOG
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-13 18:16:02 +01:00
Sacha Al Himdani
08c6cc8d09 Add api membership during organization creation
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-13 18:01:00 +01:00
Sacha Al Himdani
542dfb9890 Update CHANGELOG
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-13 17:38:52 +01:00
Sacha Al Himdani
21c4b7cd9d Add role management
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-13 17:11:22 +01:00
Sacha Al Himdani
696adb7d79 Release v0.87.0
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-13 10:29:17 +01:00
Bryan Frimin
9ad72955ca Update CHANGELOG
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-13 09:37:51 +01:00
Antoine Bouchardy
139f5984e2 Add meeting and meeting summary objects
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 23:55:49 +01:00
Bryan Frimin
0a9033aaaf Update CHANGELOG
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:15:32 +01:00
Thomas Stocker
6ae6c6875b fix: ingress issue that didn't discover the right service
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:38 +01:00
Thomas Stocker
566a8e6c6d feat: always pull latest image
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:38 +01:00
Thomas Stocker
798c5a6baf fix: use secret instead of simple env vars
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:37 +01:00
Thomas Stocker
f28095d8a0 fix: ingress port issue and cubic review
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:37 +01:00
Thomas Stocker
eda00d0d65 fix: replace hostname with baseUrl param and add SAML config
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:37 +01:00
Thomas Stocker
3f3e06d85b fix: use env vars and secret on container, config file is now generated on container launch
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:37 +01:00
Thomas Stocker
c1f5b01541 chore: update NOTES.txt with current template
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:36 +01:00
Thomas Stocker
ec67ac3991 fix: remove testing instructions
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:36 +01:00
Thomas Stocker
47c4efb8c8 fix: cubic issues
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:36 +01:00
Thomas Stocker
fa19f3a17c chore: remove echo sensitive data
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:35 +01:00
Thomas Stocker
bb2d410a6d chore: remove test values in smtp config
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:35 +01:00
Thomas Stocker
d9ab8e8af7 feat: update hostnam param with base-url
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:35 +01:00
Thomas Stocker
4a96bd796a feat: add helm charts
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:35 +01:00
Bryan Frimin
6d1760ce9b Use enum values
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:04:35 +01:00
Bryan Frimin
944f61da15 Fix various errors
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:04:35 +01:00
Bryan Frimin
fcbfd93f26 Fix route mount for each requests
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:04:34 +01:00
Bryan Frimin
37aa5e04be Add vendor list and create tools
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:04:34 +01:00
Bryan Frimin
87374293f7 Upgrade mcp dependencies
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:04:34 +01:00
Bryan Frimin
1436d0db08 Add simple MCP server
Proof of concept of working MCP server for Probo. Currently the official
MCP library does not support session that why the server is configured
in stateless mode. It seams the input jsonschema is not used to perform
any validation, so we should figuring out how to validate the input
properly.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 12:04:34 +01:00
Bryan Frimin
d71800efbd Do not log sensitive info
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 11:46:14 +01:00
Bryan Frimin
d3467c0a05 Make SAML role mapping optional
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 09:28:33 +01:00
Bryan Frimin
edce70141d Add IDP initiated flow support
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-12 09:06:02 +01:00
Bryan Frimin
5b6016c817 Fix pebble challtestsrv
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-10 15:36:17 +01:00
Bryan Frimin
8f8271cdfa Fix pebble command
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-10 15:32:28 +01:00
Sacha Al Himdani
6efbcad548 Release v0.86.4
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-07 20:12:23 +01:00
Sacha Al Himdani
b25d30d3c7 Fix deletion freeze
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-07 20:08:40 +01:00
Bryan Frimin
55cf769f8a Fix docker images
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-07 18:01:37 +01:00
Sacha Al Himdani
3be392e7ab Release v0.86.3
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-07 10:24:36 +01:00
Sacha Al Himdani
75510bc6f9 Fix document validations
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-07 10:23:20 +01:00
Sacha Al Himdani
99edee3743 Release v0.86.2
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-06 18:14:05 +01:00
Sacha Al Himdani
a63705619a Fix vendors validation
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-06 18:11:59 +01:00
Sacha Al Himdani
eb0ce9281d Release v0.86.1
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-06 15:41:24 +01:00