5340953966
Reconnect now takes a ReconnectConnectorRequest carrying the expected OrganizationID and Provider. It validates inside the same transaction that the loaded connector belongs to the requested org, provider and OAUTH2 protocol before mutating the row. This blocks cross-org and cross-provider corruption via a crafted connector_id reaching the OAuth callback through the HMAC-signed state token. preserveConnectionFields copies fields from the existing connection onto the new one when the new one omits them: - OAuth2 refresh_token: Google drops it on incremental-auth reuse when prompt=consent is skipped. - Slack webhook URL, channel and channel ID: access review Slack reconnects without the incoming-webhook scope return a token response with no incoming_webhook field. GetByOrganizationIDAndProvider now routes through the widest-scope coredata loader, and GetWithConnection exposes a by-ID load that returns the fully decrypted connector so the initiate handler can read the stored scope set. Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
Probo - Open Source Compliance
Probo is an open-source compliance platform built for startups that helps you achieve SOC-2 compliance quickly and efficiently. Unlike traditional solutions, Probo is designed to be accessible, transparent, and community-driven.
🚀 Getting Started
Prerequisites
- Go 1.21+
- Node.js 22+
- Docker
- mkcert
Quick Start
-
Clone the repository:
git clone --recurse-submodules https://github.com/getprobo/probo.git cd probo -
Install dependencies:
# Install Go dependencies go mod download # Install Node.js dependencies npm ci -
Start the development environment:
# Start infrastructure services make stack-up # Build the project make build # Start the application using development settings bin/probod -cfg-file cfg/dev.yaml
The application will be available at:
- Application: http://localhost:8080
Testing Custom Domains
To test the custom domains feature locally, add the CNAME target to your hosts file:
# Add this line to /etc/hosts (macOS/Linux) or C:\Windows\System32\drivers\etc\hosts (Windows)
127.0.0.1 custom.getprobo.com
This allows you to test custom trust center domains on your local machine. The CNAME target can be configured in cfg/dev.yaml under custom-domains.cname-target.
For detailed setup instructions, see our Contributing Guide.
🏗️ Current Status
Probo is in early development, focusing on building a solid foundation for compliance management.
🛠️ Tech Stack
Backend
- Go - API server
- PostgreSQL - Data storage
- GraphQL - API layer
Frontend
- React with TypeScript
- Relay - Data fetching
- TailwindCSS - Styling
Infrastructure
- Docker - Containerization
- OpenTelemetry - Observability
- GitHub Actions - CI/CD
Observability
- Grafana - Metrics visualization
- Prometheus - Metrics collection
- Loki - Log aggregation
- Tempo - Distributed tracing
🤝 Contributing
We love contributions from our community! There are many ways to contribute:
- 🌟 Star the repository to show your support
- 🐛 Report bugs
- 💡 Request features
- 🔧 Submit pull requests
- 📖 Improve documentation
Please read our Contributing Guide before making a pull request.
📚 Documentation
🌐 Community & Support
- Join our Discord community
- Follow us on Twitter
- Connect on LinkedIn
- Visit our website
📄 License
Probo is MIT licensed.