Commit Graph

187 Commits

Author SHA1 Message Date
Émile Ré
1daf1a64f8 Change membershipResolver.Profile to authz from membership
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-19 11:14:07 +04:00
Émile Ré
3669df3f8a Handle membership deletions and role updates in iam policies
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:36:49 -08:00
Émile Ré
5384e12ced Make magic link single use and reduce duration to 15min
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:35:45 -08:00
Émile Ré
ca4ae96f31 Rename authz.WithSesion to authz.WithSkipAssumptionCheck since we only used it with a nil arg
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:26 -08:00
Émile Ré
5beceb58d2 Change magic link request to use url builder
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:26 -08:00
Émile Ré
cbd873fd57 Revert ugly stripping by using a top level front route
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:25 -08:00
Émile Ré
491caa9e22 Ask for fullName on NDA signing
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:25 -08:00
Émile Ré
44d85a2b12 Trust center access management - get rid of access token
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:24 -08:00
Émile Ré
8b3bda56e6 Add magic link login for trust center
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:24 -08:00
Émile Ré
7322201dab Plug trust center part 1
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:23 -08:00
Émile Ré
bbdea575d1 Expire invitations on SAML sign up and invitation accept
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:03 -08:00
Bryan Frimin
53bfc36bff Fix internal error when create new org
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:34:03 -08:00
Émile Ré
b790ca312a Expire invitations on SCIM delete
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:03 -08:00
Émile Ré
b961069e1d Accept/Expire invitations on SAML & SCIM operations
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:02 -08:00
Émile Ré
cfcbda4519 Fix uneeded assume + assume after invite accept
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:02 -08:00
Émile Ré
c6094ff572 Implement organization assumption check in authorization layer
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:01 -08:00
Émile Ré
62aacced71 Plug verify email
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:30:31 -08:00
Émile Ré
62569dc44c Plug reset password page
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:30:31 -08:00
Bryan Frimin
1ff443c475 Fix missing trust center object
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:30:31 -08:00
Émile Ré
816e3a1d79 Plug sign in steps + sso login URL check
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:30:30 -08:00
Bryan Frimin
9734172196 Update default SAML role to employee
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:30:30 -08:00
Bryan Frimin
89439da20d Use employee as default role
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:30:30 -08:00
Bryan Frimin
c4285cdc42 Fix re-activitating membership does not reset the role
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:30:30 -08:00
Bryan Frimin
64610b388a Fix SCIM filter test
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:30:29 -08:00
Bryan Frimin
c4597b34fd Remove dead code
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:30:27 -08:00
Bryan Frimin
bbd6e63588 Fix missing organization context
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:49 -08:00
Bryan Frimin
71263367f6 Add last used at to personal api key
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:48 -08:00
Bryan Frimin
5c64e304e8 Enforce at least one owner
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:48 -08:00
Bryan Frimin
9936df64d9 Disallow delete membership when managed by SCIM
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:48 -08:00
Bryan Frimin
7030d06aed Add membership state
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:47 -08:00
Émile Ré
431f2fd557 Fix cannot delete expired invitation
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:22:47 -08:00
Bryan Frimin
da8a670a68 Improve scim event UI/UX
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:46 -08:00
Bryan Frimin
d72024be1e Remove useless User struct
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:46 -08:00
Bryan Frimin
07f2885371 Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:46 -08:00
Bryan Frimin
e2225d9970 Refactor scim filter management
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:46 -08:00
Bryan Frimin
eb4024d878 Simplify SCIM types/error management
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:45 -08:00
Bryan Frimin
3e9df307b8 Remove email type
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:45 -08:00
Bryan Frimin
ec1844d697 Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:45 -08:00
Bryan Frimin
a7a3025d25 Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:45 -08:00
Bryan Frimin
31f79fccce Add SCIM handler draft
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:44 -08:00
Bryan Frimin
cfc514c8e0 Add SCIM management
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:20:14 -08:00
Bryan Frimin
b6799cbb01 Add membership source
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:17:52 -08:00
Émile Ré
3564bd5495 Fix sign up and accept invite
Signed-off-by: Émile Ré <nemile.re@gmail.com>
2026-01-17 12:17:51 -08:00
Bryan Frimin
c3d4573091 Fix get identity on organization pending invitation
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:17:51 -08:00
Émile Ré
26371857e9 Fix invite user dialog create people + connection prepend edge
Signed-off-by: Émile Ré <nemile.re@gmail.com>
2026-01-17 12:14:52 -08:00
Bryan Frimin
b09a49b7f9 Fix 5xx when load organization on invitation object
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:14:51 -08:00
Bryan Frimin
7a221b6764 Fix missing iam:invitation:list for organization
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:14:51 -08:00
Émile Ré
34ab7fd66f Fix owner policy on invitations
Signed-off-by: Émile Ré <nemile.re@gmail.com>
2026-01-17 12:14:51 -08:00
Bryan Frimin
5fafba87a7 Dog food IAM to manage IAM
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:14:51 -08:00
Bryan Frimin
4013b00841 Refactor policies document
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 11:37:39 -08:00