Matt Bostock 16c5d0e4b7 Always verify TLS unless explicitly told otherwise ...

TLS was not being verified in a number of places:

- connections to grafana.com

- connections to OAuth providers when TLS client authentication was
  enabled

- connections to self-hosted Grafana installations when using the CLI
  tool

TLS should always be verified unless the user explicitly enables an
option to skip verification.

Removes some instances where `InsecureSkipVerify` is explicitly set to
`false`, the default, to help avoid confusion and make it more difficult
to regress on this fix by accident.

Adds a `--insecure` flag to `grafana-cli` to skip TLS verification.

Adds a `tls_skip_verify_insecure` setting for OAuth.

Adds a `app_tls_skip_verify_insecure` setting under a new `[plugins]`
section.

I'm not super happy with the way the global setting is used by
`pkg/api/app_routes.go` but that seems to be the existing pattern used.

2017-10-06 17:09:27 +01:00

..

avatar

datasource-proxy: token exchange

2017-08-23 17:18:43 +02:00

dtos

fix: update user permissions validation was not working properly, fixes #8977

2017-08-03 08:56:34 +02:00

live

refactor(http): refactoring http server

2016-12-21 14:36:32 +01:00

pluginproxy

remove old handler

2017-09-29 13:45:11 +09:00

static

…

admin_users.go

convert old metrics to prom metrics

2017-09-14 14:26:32 +02:00

admin.go

Fixed api bugs, stats endpoint working

2016-01-24 21:18:17 -08:00

alerting.go

fix: better error handling / messsage when testing email notification when stmp is not configured, fixes #8093

2017-04-25 13:16:41 +02:00

annotations.go

alert: alerting annotation improvements, fixes #8421

2017-05-22 13:02:49 +02:00

api.go

use route as span name

2017-09-18 11:08:58 +02:00

apikey.go

…

app_routes.go

Always verify TLS unless explicitly told otherwise

2017-10-06 17:09:27 +01:00

common.go

fix(api): fixed issue with api content-type in api success messages, fixes #6160

2016-10-01 16:52:52 +02:00

dashboard_snapshot.go

convert old metrics to prom metrics

2017-09-14 14:26:32 +02:00

dashboard.go

dasboard_history: security fix, added orgId filter to dashboard version lookup

2017-06-07 14:21:40 +02:00

dataproxy.go

dataproxy: added caching of datasources when doing data proxy requests, #9078

2017-08-23 13:31:26 +02:00

datasources_test.go

admin: adds paging to global user list

2017-02-13 12:59:36 +01:00

datasources.go

mysql: improved mysql data source, added test feature when adding data source, fixed cache issue

2017-05-11 10:50:24 +02:00

frontendsettings.go

fix: jsonData should not be allowed to be null, fixes #9258

2017-09-18 09:38:02 +02:00

grafana_com_proxy.go

Always verify TLS unless explicitly told otherwise

2017-10-06 17:09:27 +01:00

http_server.go

use route as span name

2017-09-18 11:08:58 +02:00

index.go

refactor(): renaming alerting hide ui option, #7318

2017-01-25 13:32:26 +01:00

login_oauth.go

Always verify TLS unless explicitly told otherwise

2017-10-06 17:09:27 +01:00

login.go

convert old metrics to prom metrics

2017-09-14 14:26:32 +02:00

metrics.go

follow go idiom and return error as second param

2017-09-21 18:04:16 +02:00

org_invite.go

convert old metrics to prom metrics

2017-09-14 14:26:32 +02:00

org_users.go

[6486] Fix status code when adding an existing user to org (#6678)

2016-11-23 14:38:44 +01:00

org.go

convert old metrics to prom metrics

2017-09-14 14:26:32 +02:00

password.go

security: fixed returning info on weither user exists or not in password reset call, fixes #7619

2017-04-11 16:50:16 +02:00

playlist_play.go

playlist: fixed dashboard play ordering, fixes #7688

2017-05-24 13:21:43 +02:00

playlist.go

Removed playlist item when dashboard is deleted

2016-11-06 01:49:43 -08:00

plugins.go

plugin change: make interval, cache timeout & max data points options in plugin.json, remove query.options component feature, add help markdown feature and toggle for data sources

2017-08-31 14:05:52 +02:00

preferences.go

feat(preferences): theme and home dashbord settings now work work on profile and org settings page

2016-04-02 13:54:06 -07:00

quota.go

…

render.go

fix: png rendering api & timeout parameter now works as it should AND default render timeout increased from 30 to 60 seconds, fixes #8710

2017-07-31 16:04:04 +02:00

route_register_test.go

bug: enable HEAD requests again

2017-09-20 09:45:00 +02:00

route_register.go

bug: enable HEAD requests again

2017-09-20 09:45:00 +02:00

search.go

feat(instrumentation): added some more timers

2016-06-03 17:00:39 +02:00

signup.go

convert old metrics to prom metrics

2017-09-14 14:26:32 +02:00

stars.go

…

user_test.go

admin: adds paging to global user list

2017-02-13 12:59:36 +01:00

user.go

Include user Id on the lookup api (#8698)

2017-06-25 14:23:03 +02:00