634ededdc9
fix(auth): memory leaks
...
alb-provider: JWT verification block was wrapped in generic error
that turned 401 to 500 causing clients to retry the login
cimd: cimd clients are not registered in oidc_clients table
so inserting offline sessions for them violates the foreign key
constraint. dropping the fk.
offline: return access token even when refresh token issuing fails.
if the refresh token issue fails for some reason, it will return
500 which will then cause client to retry even it can get valid
access token without refresh token.
closes #33329
Signed-off-by: Hellgren Heikki <heikki.hellgren@op.fi >
2026-03-17 10:52:40 +02:00
619be54133
auth: got rid of the sql report warnings
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2026-02-22 14:52:48 +01:00
31de2c9b3a
feat(auth-backend): add experimental CIMD support ( #32307 )
...
Signed-off-by: benjdlambert <ben@blam.sh >
2026-02-17 17:00:49 +01:00
d0786b968e
auth-backend: add experimental refresh token support ( #32695 )
...
* auth-backend: add experimental refresh token support
Signed-off-by: benjdlambert <ben@blam.sh >
* auth-backend: refresh token review fixes
Signed-off-by: benjdlambert <ben@blam.sh >
* auth-backend: address PR review feedback for refresh tokens
Signed-off-by: benjdlambert <ben@blam.sh >
---------
Signed-off-by: benjdlambert <ben@blam.sh >
2026-02-10 17:00:51 +01:00
c065d53a63
Merge pull request #31799 from jtbry/master
...
fix(auth): user_created_at migration non constant defaults SQLiteError
2026-01-08 12:04:55 +01:00
3511ba4431
chore: fix down migration
...
Signed-off-by: benjdlambert <ben@blam.sh >
2025-11-18 12:29:24 +01:00
eb279cbe7b
chore: codereview comments
...
Signed-off-by: benjdlambert <ben@blam.sh >
2025-11-18 11:12:37 +01:00
986bf8f3aa
feat: set state column to text instead of varchar
...
Signed-off-by: benjdlambert <ben@blam.sh >
2025-11-18 11:03:39 +01:00
7ffc873b78
fix(auth): user_created_at migration non constant defaults to remedy SQLiteError
...
Signed-off-by: Justin Bryant <justintbry@gmail.com >
2025-11-17 13:05:25 -05:00
c2afe12dfd
chore: cleanup a little bit more 🎉
...
Signed-off-by: benjdlambert <ben@blam.sh >
Signed-off-by: benjdlambert <ben@blam.sh >
2025-09-09 14:32:51 +02:00
ec6cb6bce2
chore: code review comments
...
Signed-off-by: benjdlambert <ben@blam.sh >
2025-09-09 13:17:00 +02:00
bf372ab53f
chore: cleanup and simplify
...
Signed-off-by: benjdlambert <ben@blam.sh >
Signed-off-by: benjdlambert <ben@blam.sh >
2025-09-08 10:17:44 +02:00
b50e18b25f
chore: reworking the migrations to simplify the tables structure
...
Signed-off-by: benjdlambert <ben@blam.sh >
2025-09-08 10:17:43 +02:00
64dc5463ba
feat: started to add some tests for the oidc database
...
Signed-off-by: benjdlambert <ben@blam.sh >
Signed-off-by: benjdlambert <ben@blam.sh >
2025-09-08 10:17:43 +02:00
6c4904102a
chore: add migrations file
...
Signed-off-by: benjdlambert <ben@blam.sh >
Signed-off-by: benjdlambert <ben@blam.sh >
2025-09-08 10:17:42 +02:00
d2aafbb7cc
chore: updating migrations again and making simpler
...
Signed-off-by: benjdlambert <ben@blam.sh >
2025-07-08 10:34:00 +02:00
dc32e0c8a2
chore: fix up the migrations a little bit so that it supports adding columns
...
Signed-off-by: benjdlambert <ben@blam.sh >
2025-07-08 09:48:46 +02:00
94f1c640a8
feat: move out the database saving of the userInfo into the CatalogContext
...
Signed-off-by: benjdlambert <ben@blam.sh >
2025-07-07 17:26:54 +02:00
79b0b1f3d3
refactor(userInfo): store full claims
...
Signed-off-by: Phil Kuang <pkuang@factset.com >
2024-06-07 18:21:33 -04:00
3e823d3e14
feat(userInfo): implement persisting user info to support limited tokens
...
Signed-off-by: Phil Kuang <pkuang@factset.com >
2024-05-13 13:09:43 -04:00
3ffcdac7d0
Added a persistent session store
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2023-05-04 21:58:59 +02:00
35780e76e4
fixed copyright year
...
Signed-off-by: Manuel Scurti <manuel.scurti@agilelab.it >
2022-05-26 17:15:30 +02:00
416014b7b8
added migration file
...
Signed-off-by: Manuel Scurti <manuel.scurti@agilelab.it >
2022-05-22 19:30:40 +02:00
6dcc5f1d3e
fixed migration script for signing_keys
...
Signed-off-by: Manuel Scurti <manuel.scurti@agilelab.it >
2022-05-21 12:49:39 +02:00
ff4f1b6f51
make sure to apply tz column fix for newly created backstage instances
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2022-03-21 13:50:41 +01:00
ab7cd7d70e
Do some groundwork for supporting the better-sqlite3 driver
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2022-03-08 10:13:03 +01:00
1dd5a02e91
fix build
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2022-02-07 15:51:58 +01:00
a88073c29a
Update copyright headers
...
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2021-06-18 20:26:42 +02:00
a25efcc643
skip sqllite
...
Signed-off-by: Erik Larsson <erik.larsson@schibsted.com >
2021-03-29 13:51:02 +02:00
bd7018e6ab
fix linting
...
Signed-off-by: Erik Larsson <erik.larsson@schibsted.com >
2021-03-29 13:51:02 +02:00
0d55dcc749
fix: use timestamp with timezone for signing_keys
...
Signed-off-by: Erik Larsson <erik.larsson@schibsted.com >
2021-03-29 13:51:02 +02:00
7616988312
chore(deps): bump knex from 0.21.18 to 0.95.1
...
Bumps [knex](https://github.com/knex/knex ) from 0.21.18 to 0.95.1.
- [Release notes](https://github.com/knex/knex/releases )
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/knex/knex/commits )
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2021-03-08 10:26:45 +01:00
48b6f9533c
auth-backend: refactor identity APIs for forwards compatibility
2020-06-21 17:00:52 +02:00
adc574ee33
auth-backend: make DatabaseKeyStore only return valid keys and remove expired ones
2020-06-21 17:00:50 +02:00
0a305d7f70
auth-backend: initial identity provider implementation
2020-06-21 17:00:49 +02:00
Hellgren Heikki