Commit Graph

35 Commits

Author SHA1 Message Date
Bryan Frimin
f17fb7bf49 Upgrade to kit v0.3.0
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-03 11:56:06 +02:00
Sacha Al Himdani
8c02c53315 Update copyright headers across all Go files
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-03-25 17:38:32 +01:00
Bryan Frimin
29b41208f3 Address PR review feedback for OIDC login
- Remove sensitive nonce values from error messages to prevent logging leaks
- Guard ticker intervals against non-positive durations in SAML domain
  verifier and garbage collector to prevent panics
- Require both client ID and client secret for Google/Microsoft OIDC
  providers to be marked as enabled
- Replace http.DefaultClient with kit/httpclient for JWKS fetching to
  ensure proper timeouts
- Fix eslint indentation in SignInPage OIDC button click handler

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-03-23 14:17:43 +01:00
Bryan Frimin
83468db034 Refactor sign-in page and IAM service lifecycle
Redesign the sign-in page to show email/password form inline
with OIDC provider buttons (with vendor icons) instead of
separate pages. Extract OIDCProvider type to its own file.

Replace errgroup with sync.WaitGroup + WithCancelCause for
graceful shutdown in IAM services. Refactor garbage collectors
to use functional options and time.Ticker instead of
time.After to avoid repeated allocations.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-03-23 14:17:43 +01:00
Émile Ré
87415c0324 Remove useless encryption key injections
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-03-11 14:42:37 +04:00
Émile Ré
776af96170 Fix bot review
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-19 16:13:02 +04:00
Émile Ré
ae0119e2c5 Expire invitations when user is deactivated or switches to SAML source
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-19 16:13:00 +04:00
Émile Ré
47aba96b69 Reimplement invitations
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-19 16:12:58 +04:00
Émile Ré
7794563e94 Remove duplicate membership method
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-19 16:12:56 +04:00
Émile Ré
56ec0ab3c3 Move source and state from membership to profile
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-19 16:12:55 +04:00
Émile Ré
108e9cb85d Remove coredata.MembershipProfile MemerhipID field
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-19 16:12:52 +04:00
Bryan Frimin
0f40c7e27e Fix saml subject not populated
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-02-14 20:11:21 +01:00
Bryan Frimin
19bece9175 Fix missing name id format on saml idp initiated request
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-02-13 18:17:31 +01:00
Émile Ré
063e1107ee set SAMLSubject on create
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-13 19:03:41 +04:00
Bryan Frimin
bc5509d742 Fix missing name id format in metadata
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-02-13 15:47:06 +01:00
Bryan Frimin
941b3c22a8 Remove dead code
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-02-13 15:46:56 +01:00
Émile Ré
a3b49db43e Add organization_id on profiles and implement ListProfiles
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-12 16:21:11 +04:00
Émile Ré
6328952c6f Load identity email_address on coredata.MembershipProfile
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-12 16:21:09 +04:00
Émile Ré
e46c1d4894 Rename redirect-path to continue + handle redirection on forbidden from wrong org assume
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-12 09:37:07 +04:00
Émile Ré
16556f9fb9 Implement redirect path for SAML SSO
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-12 09:37:07 +04:00
Émile Ré
a8d1ce0097 Implement redirect path for saml
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-12 09:37:06 +04:00
Bryan Frimin
ece54f1616 Fix golint errors
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-02-02 18:42:50 +01:00
Émile Ré
bbdea575d1 Expire invitations on SAML sign up and invitation accept
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:03 -08:00
Émile Ré
b961069e1d Accept/Expire invitations on SAML & SCIM operations
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-01-17 12:34:02 -08:00
Bryan Frimin
9734172196 Update default SAML role to employee
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:30:30 -08:00
Bryan Frimin
7030d06aed Add membership state
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:22:47 -08:00
Bryan Frimin
cfc514c8e0 Add SCIM management
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:20:14 -08:00
Bryan Frimin
b6799cbb01 Add membership source
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 12:17:52 -08:00
Bryan Frimin
3e95c8c38a Fix missing child session on SAML
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 10:27:44 -08:00
Bryan Frimin
41a6df9aec Fix test login url returns 404
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 10:27:44 -08:00
Émile Ré
b012b5ec42 Replug SAML configurations
Signed-off-by: Émile Ré <nemile.re@gmail.com>
2026-01-17 10:25:17 -08:00
Bryan Frimin
d4b039737e Rename identity profile on membership profile
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 10:14:54 -08:00
Bryan Frimin
2f7a3a5f76 Add identity profile
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 10:13:29 -08:00
Bryan Frimin
0f7c755d53 Rename user into identity
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 10:10:27 -08:00
Bryan Frimin
74fc3b8cd1 Rewrite identity and access management
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 10:07:34 -08:00