rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,812 Commits 1 Branch 0 Tags
e41997a04d6b46b2ec4b2b5e7d5537dff2ca6341
Commit Graph

751 Commits

Author SHA1 Message Date
Bryan Frimin
e41997a04d Enable IdP-initiated SAML flows and simplify authentication 
Simplifies SAML authentication by using RelayState to contain the SAML
config ID for both SP-initiated and IdP-initiated flows, removing the
need for the relay_states table and associated token management.

Key changes:
- Enable IdP-initiated flows with AllowIDPInitiated flag
- Use RelayState for SAML config ID instead of secure tokens
- Remove auth_saml_relay_states table and related code
- Maintain InResponseTo validation for SP-initiated flows
- Fix MetadataURL to use entity ID instead of ACS URL

This enables IdP-initiated SAML logins (e.g., from Google Workspace,
Azure Entra ID, Okta) while maintaining security through request ID
validation and assertion replay prevention.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-14 09:32:23 +01:00
Bryan Frimin
653ac5addb Fix error message 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-13 21:22:27 +01:00
Bryan Frimin
24abdb9d14 Fix import and error management 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-13 20:55:43 +01:00
MustafaAamir
60a3402b24 fix(certmanager#514): check DNS configuration before starting ACME 
Signed-off-by: MustafaAamir <mustafa.290101@gmail.com>
 2025-11-13 20:55:43 +01:00
Sacha Al Himdani
08c6cc8d09 Add api membership during organization creation 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-13 18:01:00 +01:00
Sacha Al Himdani
21c4b7cd9d Add role management 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-13 17:11:22 +01:00
Antoine Bouchardy
139f5984e2 Add meeting and meeting summary objects 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 23:55:49 +01:00
Bryan Frimin
6d1760ce9b Use enum values 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 12:04:35 +01:00
Bryan Frimin
944f61da15 Fix various errors 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 12:04:35 +01:00
Bryan Frimin
fcbfd93f26 Fix route mount for each requests 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 12:04:34 +01:00
Bryan Frimin
37aa5e04be Add vendor list and create tools 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 12:04:34 +01:00
Bryan Frimin
1436d0db08 Add simple MCP server 
Proof of concept of working MCP server for Probo. Currently the official
MCP library does not support session that why the server is configured
in stateless mode. It seams the input jsonschema is not used to perform
any validation, so we should figuring out how to validate the input
properly.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 12:04:34 +01:00
Bryan Frimin
d71800efbd Do not log sensitive info 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 11:46:14 +01:00
Bryan Frimin
d3467c0a05 Make SAML role mapping optional 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 09:28:33 +01:00
Bryan Frimin
edce70141d Add IDP initiated flow support 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-12 09:06:02 +01:00
Sacha Al Himdani
75510bc6f9 Fix document validations 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-07 10:23:20 +01:00
Bryan Frimin
f9216d30b2 Add validator lib 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-11-06 13:13:17 +01:00
Sacha Al Himdani
288c59a5f2 Make descriptions nullable 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-05 17:58:50 +01:00
Sacha Al Himdani
c0018f858c Use cookie SameSiteLaxMode when secure is false 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-04 17:42:03 +01:00
Sacha Al Himdani
fee5a9232e Make secure cookie configurable 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-04 17:09:51 +01:00
Sacha Al Himdani
5212d0c18f Add api keys 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-11-04 13:37:31 +01:00
Bryan Frimin
59aa332ab5 Move to vanity import url 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-31 17:01:52 +01:00
Sacha Al Himdani
fce3c58651 Fix error messages 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-10-31 16:16:25 +01:00
Sacha Al Himdani
9456c909f7 Order organization list by name 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-10-31 15:40:45 +01:00
Sacha Al Himdani
9a33f7b771 Manage errors 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-10-31 15:14:56 +01:00
Sacha Al Himdani
a22c060027 Fix organization creation 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-10-31 15:01:08 +01:00
Sacha Al Himdani
8cd014ebbc Add vendors to processing activities 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-10-31 10:17:09 +01:00
Bryan Frimin
70b221e3bd Use const instead of free string 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 22:45:45 +01:00
Bryan Frimin
379a9aa0fe Squash migration 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 22:44:26 +01:00
Bryan Frimin
d1c31978da Fix role and organization logo 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 22:42:17 +01:00
Bryan Frimin
aabad5087c Fix relay attack err 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 19:46:31 +01:00
Bryan Frimin
896e6e0736 Refactor hostname to become baseurl 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 19:41:15 +01:00
Bryan Frimin
57f43f822a Style 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:14 +01:00
Bryan Frimin
e77256c131 Fix permission issue on membership 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:14 +01:00
Bryan Frimin
29917578fc Fix various bad tenant isolation 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:13 +01:00
Bryan Frimin
a42670d5bd Simpliy and ensure tenant for saml consume 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:13 +01:00
Bryan Frimin
f67d5bfd33 Fix phantom membership 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:13 +01:00
Bryan Frimin
b92d78e4cf Remove race condition on relay attack 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:12 +01:00
Bryan Frimin
5a69c05516 Fix no iteration over all saml attr 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:12 +01:00
Bryan Frimin
f0c4a51a1d Fix mail addr validation 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:12 +01:00
Bryan Frimin
b693af1770 Fix log sensitive info 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:12 +01:00
Bryan Frimin
eaaf6deca4 Fix missing session auth info 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:11 +01:00
Bryan Frimin
fb006dbe19 Fix missing fk 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:11 +01:00
Bryan Frimin
fbd2dc115d Style 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:11 +01:00
Bryan Frimin
9d682f85df Fix missing fk 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:11 +01:00
Bryan Frimin
88f3d61982 Fix order by 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:10 +01:00
Bryan Frimin
8bf82331e8 Remove default role configuration 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:10 +01:00
Bryan Frimin
eb49e27724 Simplify saml validation 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:10 +01:00
Bryan Frimin
a2b5d03b62 Style 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:10 +01:00
Bryan Frimin
6f2bd9c92f Fix failed to to cannot 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-10-30 16:38:08 +01:00