Émile Ré
9156d6a16a
Add wsl linter and fix
...
Signed-off-by: Émile Ré <emile@probo.com >
2026-05-20 09:27:28 +04:00
Bryan Frimin
f17fb7bf49
Upgrade to kit v0.3.0
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-04-03 11:56:06 +02:00
Sacha Al Himdani
8c02c53315
Update copyright headers across all Go files
...
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com >
2026-03-25 17:38:32 +01:00
Bryan Frimin
29b41208f3
Address PR review feedback for OIDC login
...
- Remove sensitive nonce values from error messages to prevent logging leaks
- Guard ticker intervals against non-positive durations in SAML domain
verifier and garbage collector to prevent panics
- Require both client ID and client secret for Google/Microsoft OIDC
providers to be marked as enabled
- Replace http.DefaultClient with kit/httpclient for JWKS fetching to
ensure proper timeouts
- Fix eslint indentation in SignInPage OIDC button click handler
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-03-23 14:17:43 +01:00
Bryan Frimin
83468db034
Refactor sign-in page and IAM service lifecycle
...
Redesign the sign-in page to show email/password form inline
with OIDC provider buttons (with vendor icons) instead of
separate pages. Extract OIDCProvider type to its own file.
Replace errgroup with sync.WaitGroup + WithCancelCause for
graceful shutdown in IAM services. Refactor garbage collectors
to use functional options and time.Ticker instead of
time.After to avoid repeated allocations.
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-03-23 14:17:43 +01:00
Émile Ré
87415c0324
Remove useless encryption key injections
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-03-11 14:42:37 +04:00
Émile Ré
776af96170
Fix bot review
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-19 16:13:02 +04:00
Émile Ré
ae0119e2c5
Expire invitations when user is deactivated or switches to SAML source
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-19 16:13:00 +04:00
Émile Ré
47aba96b69
Reimplement invitations
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-19 16:12:58 +04:00
Émile Ré
7794563e94
Remove duplicate membership method
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-19 16:12:56 +04:00
Émile Ré
56ec0ab3c3
Move source and state from membership to profile
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-19 16:12:55 +04:00
Émile Ré
108e9cb85d
Remove coredata.MembershipProfile MemerhipID field
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-19 16:12:52 +04:00
Bryan Frimin
0f40c7e27e
Fix saml subject not populated
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-02-14 20:11:21 +01:00
Bryan Frimin
19bece9175
Fix missing name id format on saml idp initiated request
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-02-13 18:17:31 +01:00
Émile Ré
063e1107ee
set SAMLSubject on create
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-13 19:03:41 +04:00
Bryan Frimin
bc5509d742
Fix missing name id format in metadata
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-02-13 15:47:06 +01:00
Bryan Frimin
941b3c22a8
Remove dead code
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-02-13 15:46:56 +01:00
Émile Ré
a3b49db43e
Add organization_id on profiles and implement ListProfiles
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-12 16:21:11 +04:00
Émile Ré
6328952c6f
Load identity email_address on coredata.MembershipProfile
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-12 16:21:09 +04:00
Émile Ré
e46c1d4894
Rename redirect-path to continue + handle redirection on forbidden from wrong org assume
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-12 09:37:07 +04:00
Émile Ré
16556f9fb9
Implement redirect path for SAML SSO
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-12 09:37:07 +04:00
Émile Ré
a8d1ce0097
Implement redirect path for saml
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-02-12 09:37:06 +04:00
Bryan Frimin
ece54f1616
Fix golint errors
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-02-02 18:42:50 +01:00
Émile Ré
bbdea575d1
Expire invitations on SAML sign up and invitation accept
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-01-17 12:34:03 -08:00
Émile Ré
b961069e1d
Accept/Expire invitations on SAML & SCIM operations
...
Signed-off-by: Émile Ré <emile@getprobo.com >
2026-01-17 12:34:02 -08:00
Bryan Frimin
9734172196
Update default SAML role to employee
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-01-17 12:30:30 -08:00
Bryan Frimin
7030d06aed
Add membership state
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-01-17 12:22:47 -08:00
Bryan Frimin
cfc514c8e0
Add SCIM management
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-01-17 12:20:14 -08:00
Bryan Frimin
b6799cbb01
Add membership source
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-01-17 12:17:52 -08:00
Bryan Frimin
3e95c8c38a
Fix missing child session on SAML
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-01-17 10:27:44 -08:00
Bryan Frimin
41a6df9aec
Fix test login url returns 404
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-01-17 10:27:44 -08:00
Émile Ré
b012b5ec42
Replug SAML configurations
...
Signed-off-by: Émile Ré <nemile.re@gmail.com >
2026-01-17 10:25:17 -08:00
Bryan Frimin
d4b039737e
Rename identity profile on membership profile
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-01-17 10:14:54 -08:00
Bryan Frimin
2f7a3a5f76
Add identity profile
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-01-17 10:13:29 -08:00
Bryan Frimin
0f7c755d53
Rename user into identity
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-01-17 10:10:27 -08:00
Bryan Frimin
74fc3b8cd1
Rewrite identity and access management
...
Signed-off-by: Bryan Frimin <bryan@getprobo.com >
2026-01-17 10:07:34 -08:00