Commit Graph

103 Commits

Author SHA1 Message Date
Quentin Gliech
90aaf395d8 graphql: allow filtering appsessions on device_id 2023-10-06 16:05:26 +02:00
dependabot[bot]
023178157c build(deps): bump sqlx from 0.7.1 to 0.7.2
Bumps [sqlx](https://github.com/launchbadge/sqlx) from 0.7.1 to 0.7.2.
- [Changelog](https://github.com/launchbadge/sqlx/blob/main/CHANGELOG.md)
- [Commits](https://github.com/launchbadge/sqlx/commits)

---
updated-dependencies:
- dependency-name: sqlx
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-05 19:36:48 +02:00
dependabot[bot]
d9127efb56 build(deps): bump sea-query from 0.30.1 to 0.30.2
Bumps [sea-query](https://github.com/SeaQL/sea-query) from 0.30.1 to 0.30.2.
- [Release notes](https://github.com/SeaQL/sea-query/releases)
- [Changelog](https://github.com/SeaQL/sea-query/blob/master/CHANGELOG.md)
- [Commits](https://github.com/SeaQL/sea-query/compare/0.30.1...0.30.2)

---
updated-dependencies:
- dependency-name: sea-query
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-26 14:37:45 +02:00
Quentin Gliech
1079a29ca4 Add missing tracing to app session storage 2023-09-20 20:29:16 +02:00
Quentin Gliech
e56275b7c9 Storage layer for a unified session list 2023-09-20 20:27:08 +02:00
Quentin Gliech
8e73092ad0 Make the last activity timestamp and IP available through the API 2023-09-19 21:57:54 +02:00
Quentin Gliech
0042129878 Save the session activity in the database 2023-09-19 21:57:54 +02:00
Quentin Gliech
921f491a00 Rust dependencies housekeeping
Including:
 - package upgrades
 - stop using the patched version of `ulid`
 - update cargo deny duplicate exception list
2023-09-14 23:43:00 +02:00
Quentin Gliech
bfcd2fb967 storage: make the access token expiration optional 2023-09-11 12:03:42 +02:00
Quentin Gliech
37ae1420f3 data-model: make the access token expiration optional 2023-09-11 12:03:42 +02:00
Quentin Gliech
e8f17924c2 Add a GraphQL mutation to create arbitrary OAuth2 sessions. 2023-09-11 12:03:42 +02:00
Quentin Gliech
a53040b94b Implement the client credentials grant 2023-09-06 09:35:34 +02:00
Quentin Gliech
07d895e33a storage: add a method to create an OAuth 2.0 session for a client credentials grant 2023-09-06 09:35:34 +02:00
Quentin Gliech
9ffbb5742a storage-pg: make the user_id in oauth2_sessions nullable 2023-09-06 09:35:34 +02:00
Quentin Gliech
43aa2db3d5 data-model: Make the user_id optional in the OAuth 2.0 sessions 2023-09-06 09:35:34 +02:00
Quentin Gliech
d39daf48c5 Define common crates metadata on the workspace level 2023-09-01 16:27:22 +02:00
Quentin Gliech
fb246508b2 Store the browser user-agent when starting a browser session 2023-08-29 17:38:01 +02:00
Quentin Gliech
cb017c6436 graphql: Always make the associated SSO login available in compatibility sessions 2023-08-29 16:53:38 +02:00
Quentin Gliech
df474f9e55 storage: Look up compat sessions by device_id 2023-08-29 16:53:38 +02:00
Quentin Gliech
42cb190ab6 storage: Allow filtering oauth2 sessions by scope 2023-08-29 16:53:38 +02:00
Quentin Gliech
e8b2ab8df1 Add the user_id directly on oauth2_sessions and make the scope a text list 2023-08-29 12:52:24 +02:00
Quentin Gliech
4495a5eca8 Save the authentication method on each authorization
This will help us logging out of the upstream.
2023-08-28 17:14:59 +02:00
Quentin Gliech
d06061c14d Save the application_type and the contacts in the OAuth 2.0 clients
This also removes the dedicated "redirect_uris" table and makes it a field of the "oauth2_clients" table
2023-08-28 14:41:49 +02:00
dependabot[bot]
8b1f2b6780 build(deps): bump sea-query from 0.30.0 to 0.30.1
Bumps [sea-query](https://github.com/SeaQL/sea-query) from 0.30.0 to 0.30.1.
- [Release notes](https://github.com/SeaQL/sea-query/releases)
- [Changelog](https://github.com/SeaQL/sea-query/blob/master/CHANGELOG.md)
- [Commits](https://github.com/SeaQL/sea-query/compare/0.30.0...0.30.1)

---
updated-dependencies:
- dependency-name: sea-query
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-27 19:12:56 +02:00
Quentin Gliech
c840e3ec55 Grab a database lock when syncing the config
Fixes #1475
2023-08-25 15:48:47 +02:00
Quentin Gliech
8c1a7ea370 Remove the pgcrypto extension requirement
Fixes #1557
2023-08-23 18:46:45 +02:00
dependabot[bot]
5dc2da2c7b build(deps): bump async-trait from 0.1.72 to 0.1.73
Bumps [async-trait](https://github.com/dtolnay/async-trait) from 0.1.72 to 0.1.73.
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](https://github.com/dtolnay/async-trait/compare/0.1.72...0.1.73)

---
updated-dependencies:
- dependency-name: async-trait
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-23 15:40:08 +02:00
Quentin Gliech
a6dc094f09 Move some common dependencies on the workspace level
Also deprecates the AWS SESv2 transport for emails
2023-08-14 13:00:01 +02:00
Quentin Gliech
0ad4c68268 Setup cargo-deny
Also try to remove a bunch of duplicate crates
2023-08-14 11:22:52 +02:00
dependabot[bot]
03c87f455e build(deps): bump serde from 1.0.181 to 1.0.183
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.181 to 1.0.183.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.181...v1.0.183)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-08 20:35:57 +02:00
dependabot[bot]
e4eb09e0a5 build(deps): bump serde from 1.0.180 to 1.0.181
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.180 to 1.0.181.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.180...v1.0.181)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-04 23:18:07 +02:00
Quentin Gliech
04099d5235 Merge branch 'main' into quenting/user-lock 2023-08-03 15:20:05 +02:00
dependabot[bot]
874a7876f2 build(deps): bump serde from 1.0.177 to 1.0.180
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.177 to 1.0.180.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.177...v1.0.180)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-03 15:18:17 +02:00
Quentin Gliech
30cd9f6113 Show and log the policy violations better 2023-08-03 14:06:34 +02:00
Quentin Gliech
e4c3b9fd9f storage-pg: add tests for user locking 2023-08-03 14:06:34 +02:00
Quentin Gliech
7f3aa06153 Add a way to lock users 2023-08-03 14:06:34 +02:00
dependabot[bot]
6a58195ae9 build(deps): bump serde from 1.0.176 to 1.0.177
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.176 to 1.0.177.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.176...v1.0.177)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-27 23:28:07 +02:00
Quentin Gliech
a9b3445493 Bump Rust dependencies and remove unused ones 2023-07-27 17:23:08 +02:00
dependabot[bot]
9b92d26c7e build(deps): bump serde from 1.0.171 to 1.0.174
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.171 to 1.0.174.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.171...v1.0.174)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-22 00:17:55 +02:00
dependabot[bot]
7a65034a92 build(deps): bump async-trait from 0.1.71 to 0.1.72
Bumps [async-trait](https://github.com/dtolnay/async-trait) from 0.1.71 to 0.1.72.
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](https://github.com/dtolnay/async-trait/compare/0.1.71...0.1.72)

---
updated-dependencies:
- dependency-name: async-trait
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-21 23:36:36 +02:00
Quentin Gliech
01bc5802c3 Better upstream OAuth links pagination and filtering 2023-07-21 19:50:30 +02:00
Quentin Gliech
ec1a87cfda Better upstream OAuth provider pagination and filtering 2023-07-21 19:50:30 +02:00
Quentin Gliech
60f1e3af8c Better OAuth 2.0 sessions pagination and filtering 2023-07-21 19:50:30 +02:00
Quentin Gliech
2e94e380e6 Fix doc generation by removing mentions of LookupResultExt::to_option 2023-07-21 19:50:30 +02:00
Quentin Gliech
c8dfc87fdf Better user emails pagination and filtering 2023-07-21 19:50:30 +02:00
Quentin Gliech
b1c4644f54 Better SSO login pagination and filtering 2023-07-21 19:50:30 +02:00
Quentin Gliech
0f1babea3a Better compatibility sessions pagination and filtering 2023-07-21 19:50:30 +02:00
Quentin Gliech
c72665e7d7 mas-storage-pg: use fetch_optional instead of fetch_one and matching on the error 2023-07-21 19:50:30 +02:00
Quentin Gliech
2b1d7d9d56 Remove the last authentication from the browser session model 2023-07-21 19:50:30 +02:00
Quentin Gliech
181ed9d16d WIP: use sea-query for dynamic paginated queries 2023-07-21 19:50:30 +02:00