Commit Graph

662 Commits

Author SHA1 Message Date
Michael Drury df40c97c45
Merge pull request #9844 from Budibase/fix/audit-log-muli-tenant
Audit log multi-tenancy fix
2023-03-01 17:27:55 +00:00
mike12345567 d4c7fd100d Minor fix for audit log system - after the switch to use an async queue for handling of audit log storage, context was lost - in multi-tenant environments need to carry the tenant ID into the queue job so that context can be applied. 2023-03-01 16:38:19 +00:00
Rory Powell 45880f2c28 Prevent showing user exists for password disabled actions 2023-03-01 14:49:44 +00:00
Rory Powell bb0acf4f95 Fix settings doc id in new installs 2023-03-01 14:32:01 +00:00
Dean be79c753bb Merge remote-tracking branch 'origin/develop' into feature/app-user-onboarding-ux 2023-02-28 16:38:44 +00:00
Rory Powell 3e14f9df09 lint 2023-02-28 11:03:56 +00:00
Rory Powell 5a5a1531b3 Prefer default config for google sheets in cloud, don't use env vars for regular auth 2023-02-28 10:36:29 +00:00
Dean 34b12fd60e Merge remote-tracking branch 'origin/develop' into feature/app-user-onboarding-ux 2023-02-28 09:38:15 +00:00
Dean f818efcc9f Builder user onboarding 2023-02-28 09:37:03 +00:00
mike12345567 8e743cd44e Updating lucene test case to improve coverage. 2023-02-27 21:48:05 +00:00
mike12345567 af2d1984f6 Adding a lucene test case. 2023-02-27 21:18:06 +00:00
mike12345567 706b78b243 Merge branch 'develop' of github.com:Budibase/budibase into feature/audit-logs 2023-02-27 14:51:33 +00:00
mike12345567 43d29ca9a3 Fixing open handle issue - now that the worker has access to queues needs to shut them down. 2023-02-27 14:41:28 +00:00
Rory Powell a6027be943
Enforceable SSO (#9787)
* Add ENFORCEABLE_SSO feature flag

* First draft of enforce sso configuration / show single sign on url

* Reading and writing isSSOEnforced + integration with login page

* Enable CI + lint

* Set correct base branch for CI

* Test fix for expected string changed

* Use tenant aware platform url as SSO link

* Bring in latest pro changes

* Lint

* Add useEnforceableSSO mock helper function

* Update configs.spec.ts with coverage for public settings

* Update users.spec.ts with additional tests for isPreventPasswordActions

* Lint

* Update refresh OAuthToken to use correct enum and add case statement
2023-02-27 13:42:51 +00:00
mike12345567 827c7cef4a Moving is audited and adding in env var for ip address/user agent auditing. 2023-02-27 11:42:52 +00:00
mike12345567 35b670e3ac Further PR comments. 2023-02-27 11:00:13 +00:00
mike12345567 0debbe759c Fix based on test cases. 2023-02-24 19:04:40 +00:00
mike12345567 9327c0e096 Fix for auth logout test case. 2023-02-24 17:42:22 +00:00
mike12345567 1be17ee3bb Fixing circular dependencies which were blocking tests. 2023-02-24 17:31:58 +00:00
mike12345567 699d7da4ea Adding test case for PII clear out. 2023-02-24 16:51:04 +00:00
mike12345567 0b013f305f Adding a system for checking audited data in events, so that PII can be removed by posthog processor. 2023-02-24 16:45:33 +00:00
mike12345567 3f4ea4b152 Fixing build issue. 2023-02-24 13:55:36 +00:00
mike12345567 30024e7b81 Moving around processors to separate audit logs out of central event handling. 2023-02-24 13:52:54 +00:00
mike12345567 f407e18db6 Main body of PR comments. 2023-02-24 13:32:45 +00:00
mike12345567 98e6530913 Moving search index to an enum. 2023-02-24 13:15:14 +00:00
mike12345567 b9fb7f29a2 Merge branch 'develop' of github.com:Budibase/budibase into feature/audit-logs 2023-02-24 12:46:58 +00:00
mike12345567 a3fd0d84d5 Implementing a few basic tests to create and search the audit logs. 2023-02-23 17:23:06 +00:00
Rory Powell 744bb9690e Server flaky tests fixes - improving tenancy config 2023-02-23 13:43:27 +00:00
Rory Powell 6da72bb2c6 Configs updates: remove circular deps, dedicated module, typing improvements, reduce db reads 2023-02-23 13:41:35 +00:00
mike12345567 e5aaa5f243 Adding the ability to cleanup users from get functions (default is old behaviour). 2023-02-23 11:28:18 +00:00
mike12345567 3a0b3851a9 Getting downloading working correctly, some minor UI updates, adding a new middleware for converting a query string to a body (useful for when a GET has to be used). 2023-02-22 18:50:27 +00:00
mike12345567 4b6bb111aa Some work to make sure the user agent and ip address are always passed correctly to audit logs. 2023-02-22 16:10:54 +00:00
Rory Powell 19c86fa738
Update locks error logging (#9768)
* Fix intermittent backend-core migration test failure

* Update lock logging
2023-02-22 08:32:03 +00:00
mike12345567 5518d8d336 Adding new mechanism to get the ipAddress and userAgent of call for audit logs. 2023-02-21 19:14:57 +00:00
mike12345567 420502a3e7 Merge branch 'develop' of github.com:Budibase/budibase into feature/audit-logs 2023-02-21 17:26:24 +00:00
Rory Powell f153fb8e82
Run CI steps in parallel (#9760)
* Parallel CI

* Add build to integration test

* Add checkout to top of each run

* Revert branch update for ci job

* Experiment with --runInBand for CI

* Fix intermittent backend-core migration test failure

* Fix hanging worker redis connection

* Update naming from reset to newTenant
2023-02-21 17:13:24 +00:00
mike12345567 e4c027093f Some DB type updates (typing dump function) and adding in main audit log event publishers. 2023-02-21 14:56:38 +00:00
Rory Powell 1b041c41c3
Prevent SSO users from setting / resetting a password (#9672)
* Prevent SSO users from setting / resetting a password

* Add support for ENABLE_SSO_MAINTENANCE_MODE

* Add typing to self api and build out user update sdk

* Integrate sso checks with user sdk. Integrate user sdk with self api

* Test fixes

* Move self update into SDK

* Lock down maintenance mode to admin user

* Fix typo

* Add health status response and return type signature to accounts.getStatus

* Remove some unnecessary comments

* Make sso save user function non optional

* Remove redundant check on sso auth details provider

* Update syncProfilePicture function name to getProfilePictureUrl

* Update packages/worker/src/sdk/users/events.ts

Co-authored-by: Adria Navarro <adria@revityapp.com>

* Add ENABLE_EMAIL_TEST_MODE flag

* Fix for logging in as sso user when existing user has password already

* Hide password update and force reset from ui for sso users

* Always disable sso maintenance mode in cloud

---------

Co-authored-by: Adria Navarro <adria@revityapp.com>
2023-02-21 08:23:53 +00:00
mike12345567 029c046a3a Minor fixes for friendly audited events, and a new function for comparing app IDs. 2023-02-20 17:20:42 +00:00
Rory Powell bd09914e4e Merge branch 'develop' into rory/february 2023-02-20 09:57:17 +00:00
mike12345567 2fdf8639b1 Updating types for audit logs to correctly handle the deletion of resources like users or apps. 2023-02-17 19:00:45 +00:00
mike12345567 5b6b4c4b9b Finishing up search API, updating typing in lucene layer. 2023-02-17 17:46:49 +00:00
mike12345567 343ff1271d Required work to support the new lucene audit logs search indexing. 2023-02-17 16:26:55 +00:00
mike12345567 ee70944176 Updating events to include a proper friendly map of audited events. 2023-02-15 19:44:32 +00:00
mike12345567 fd41acf984 Adding in event auditing to server/worker. 2023-02-15 18:03:55 +00:00
Rory Powell 3da6502c8c Merge master into develop 2023-02-15 15:10:02 +00:00
mike12345567 91df9ffbc1 Removing pro from backend-core. 2023-02-15 13:49:30 +00:00
mike12345567 a190bd3da7 Update on audit logs, getting the full write flow from events configured. 2023-02-15 12:37:32 +00:00
mike12345567 7bc850f6d8 Some updates to add in the audit log DB. 2023-02-13 18:16:13 +00:00
mike12345567 7cd28ca4d3 Moving lucene handling to backend-core so that it can be used for other databases (outside row indexes). 2023-02-13 17:13:59 +00:00