22 Commits

Author SHA1 Message Date
8af5da7383 Revert "auth proxy: use real ip when validating white listed ip's" 2018-06-28 15:43:33 +02:00
b418e14bd9 make sure to use real ip when validating white listed ip's 2018-06-15 15:29:43 +02:00
543c7fe587 support additional fields in authproxy (#11661) 2018-05-07 10:39:16 +02:00
3fedcb1e4b cleanup, make sure users are always synced with ldap 2018-04-17 17:48:56 -04:00
52503d9cb5 refactor authproxy & ldap integration, address comments 2018-04-17 14:06:25 -04:00
d837be91ec switch to passing ReqContext as a property 2018-04-17 14:06:25 -04:00
e53315dce8 cleanup 2018-04-17 14:06:25 -04:00
a1b1d2fe80 switch to Result 2018-04-17 14:06:25 -04:00
d5dd1c9bca update auth proxy 2018-04-17 14:06:25 -04:00
1c5afa731f shared library for managing external user accounts 2018-04-17 14:06:25 -04:00
391868c5d6 Use net.SplitHostPort to support IPv6
- Add some tests
- Make error message more helpful
2018-03-26 02:48:25 +02:00
0a415c50d0 Make golint happier 2018-03-22 22:38:44 +01:00
c0ecdee375 rename Context to ReqContext 2018-03-07 11:54:50 -05:00
338655dd37 move Context and session out of middleware 2018-03-06 18:16:49 -05:00
652fce7e76 Optimize some wrong usage and spelling
Signed-off-by: wgliang <liangcszzu@163.com>
2017-09-07 17:50:11 +08:00
f490c5f12c use X-Grafana-Org-Id header to ensure backend uses correct org (#8122) 2017-04-14 15:47:39 +02:00
ae27c17c68 Auth Proxy improvements
- adds the option to use ldap groups for authorization in combination with an auth proxy
- adds an option to limit where auth proxy requests come from by configure a list of ip's
- fixes a security issue, session could be reused
2016-12-12 09:43:17 +01:00
3fd6ae597d minor spelling corrections
Signed-off-by: Dmitry Smirnov <onlyjob@member.fsf.org>
2016-02-16 12:12:04 +11:00
7072af7c14 fix(auth proxy): Fix for server side rendering of panel when using auth proxy, fixes #2568 2015-08-21 07:49:49 +02:00
66e60357dc Set email when creating user from auth_proxy header, Fixes #2156 2015-06-13 20:14:44 +02:00
38fc85d619 Final tweaks to auth proxy feature 2015-05-02 12:30:53 +02:00
be589d81c7 Auth: Support for user authentication via reverse proxy header (like X-Authenticated-User, or X-WEBAUTH-USER), Closes #1921 2015-05-02 12:06:58 +02:00