7 Commits

Author	SHA1	Message	Date
Ryan McKinley	680e6bc1f8	Authlib: Use types package rather than claims (#99243)	2025-01-21 12:06:55 +03:00
Karl Persson	a82d01214d	Auth: Update authlib (#94947) ... * Update authlib	2024-10-18 13:36:21 +02:00
Karl Persson	86fc8da703	RBAC: Add legacy authorization checks to teams (#94524) ... * Setup team authorization for teams * Add list filter for teams	2024-10-10 16:47:31 +02:00
Karl Persson	0160f4f72c	RBAC: Add legacy authorization checks to service accounts (#93753) ... * Extract a helper funtion to perform list with authorization checks * Add k8s verb to utils package * Construct default mapping when no custom mapping is passed * Configure authorization checks for service accounts * Fix helper and add filtering to service accounts	2024-09-27 15:53:11 +02:00
Karl Persson	2e38329026	RBAC: Add required component to perform access control checks for user api when running single tenant (#93104) ... * Unexport store and create new constructor function * Add ResourceAuthorizer and LegacyAccessClient * Configure checks for user store * List with checks if AccessClient is configured * Allow system user service account to read all users --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2024-09-23 11:26:44 +02:00
Karl Persson	2bfa607ad0	ServiceAccount: Update service account api resource and add service account token (#92972) ... * Create own legacy store function to list service accounts and update api model * Add service account tokens as a sub resource for service accounts	2024-09-05 13:43:54 +02:00
Ryan McKinley	9338e40dc3	K8s/IAM: Move identity.grafana.app to iam.grafana.app (#92929)	2024-09-05 09:43:54 +03:00