Commit Graph

57 Commits

Author SHA1 Message Date
mike12345567 e718b18127 Merge branch 'develop' of github.com:Budibase/budibase into lab-day/refactor-app-db 2022-01-31 14:09:07 +00:00
mike12345567 d2fe119d90 Main body of work, refactoring most usages. 2022-01-27 18:18:31 +00:00
Rory Powell ffcf5354eb Add CSRF Token 2022-01-25 22:54:50 +00:00
mike12345567 1327394784 Switching out @budibase/auth to @budibase/backend-core. 2022-01-10 19:33:00 +00:00
mike12345567 0f0770af32 Merge branch 'master' of github.com:Budibase/budibase into develop 2021-11-25 12:21:58 +00:00
mike12345567 bf4a8737f0 Updating to allow a list of roles to be retrieved, allowing resources to have multiple levels of role that they can be accessed via. 2021-11-15 15:26:09 +00:00
mike12345567 e918efe8c2 Fixing an issue discovered in #3385 - RBAC roles worked for applying lower levels of roles, but they didn't revoke access correctly, it would always fallback to the base permissions if higher permissions were set. 2021-11-15 13:48:26 +00:00
mike12345567 99c47ab264 Merge branch 'develop' of github.com:Budibase/budibase into fix/user-metadata 2021-11-08 17:28:32 +00:00
mike12345567 94ee13ffc4 Adding the sync call from the worker for creation, updating and deletion of users. Making sure that production and development apps are always up to date with user metadata. 2021-11-04 14:53:03 +00:00
mike12345567 88a729913c Fixing an issue with webhooks, couldn't use them in development (like getting schema) and making sure trigger will always use production app #3143. 2021-11-03 14:08:47 +00:00
Andrew Kingston 32a3c2bbb6 Lint with prettier 2021-06-15 19:39:40 +01:00
mike12345567 095e513f9f Formatting 2021-05-21 14:49:59 +01:00
mike12345567 6ccec1632a Adding a debounced updated at timestamp to applications. 2021-05-21 13:07:10 +01:00
mike12345567 4d6e4475d3 Fixing some issues found when testing. 2021-05-20 20:48:24 +01:00
mike12345567 cea82f9335 A general re-work of some parts of the auth lib, as well as moving roles/permissions around to make it possible to build an admin API which has role knowledge. 2021-05-14 15:43:41 +01:00
mike12345567 fa0544054b Fixing an issue with portal calls causing the app to be re-locked. 2021-05-13 15:32:03 +01:00
mike12345567 5df453d2a3 Updating locks to store the whole global user as well as implementing the locks on dev apps fetch. 2021-05-13 12:16:09 +01:00
mike12345567 3ad1e9a5b2 Formatting. 2021-05-12 17:43:29 +01:00
mike12345567 2021c59dd9 Putting together redis lock system. 2021-05-12 17:37:09 +01:00
mike12345567 dc20151c19 Some more server-side fixes, updating it so that builders have permissions to do anything for now (means that a builder user doesn't have to be present in app database to work. 2021-04-14 16:00:58 +01:00
mike12345567 105e1cc16f Getting most of the test auth working, adding in global builder configuration. 2021-04-13 18:12:35 +01:00
mike12345567 eaad867780 Some work towards implementing the current app cookie, removing some old dead code and re-working some of the different middlewares involved. 2021-04-12 18:31:58 +01:00
Martin McKeaveney dd0b4baef5 in progress - currentapp token 2021-04-12 12:02:28 +01:00
Martin McKeaveney c4a9d8c9f0 self endpoint, simple auth 2021-04-12 11:20:01 +01:00
Martin McKeaveney 98576f586e login page 2021-04-11 11:35:55 +01:00
mike12345567 30b7678c78 Fixing an issue with builder auth, adding a temporary endpoint which the server can set builder token on. 2021-04-07 16:08:29 +01:00
mike12345567 c1f22def11 Updating authorization test case to remove check for builder security and removing builder security while auth is being worked on - added an option to start stack without server so that user can start it in a debug mode if desired. 2021-04-07 11:54:51 +01:00
mike12345567 486ca97330 Fixing component definition test cases and fixing an issue found by authorized test case. 2021-04-07 11:27:15 +01:00
mike12345567 0b7502ba7e Updating some route middleware security. 2021-04-01 14:38:31 +01:00
Andrew Kingston 44ad38fdf8 Add BBUI to monorepo and use vite for builder, client lib and standard components 2021-03-31 16:14:56 +01:00
mike12345567 d66af9f151 Getting rid of the CLOUD environment variable, this makes no sense anymore, now there is isDev() and isProd() which will work out the current state of the cluster. 2021-03-24 18:21:23 +00:00
mike12345567 fca242b9ee Updating API keys and changing over system to allow use of builder endpoints when running in cloud. 2021-03-22 16:39:11 +00:00
Martin McKeaveney f69e06870b Merge pull request #1266 from Budibase/middleware-tests
Middleware tests
2021-03-10 15:28:11 +00:00
Martin McKeaveney 05efe05061 tests for authorized middleware 2021-03-09 11:27:12 +00:00
mike12345567 0652133a30 Some fixes after testing webhooks as well as adding test cases for all webhook endpoints. 2021-03-08 15:57:19 +00:00
mike12345567 821de55363 Adding basic permissions test which proves a public user can read from a table, but cannot write. 2021-02-09 17:24:36 +00:00
mike12345567 9fb4c14835 Some more fixes after testing permissions a bit further. 2021-02-09 16:01:02 +00:00
mike12345567 cc02397b01 Fixing issues with builtin roles living in the database as well as in code (easier to change in the future this way) - discovered by basic test case. 2021-02-09 13:01:45 +00:00
mike12345567 7a65a59c78 Making use of the resourceId in the middleware package. 2021-02-08 17:52:22 +00:00
mike12345567 7b21acd8bd Updating API key controller in self-host mode to return self host API key. 2020-12-09 17:10:53 +00:00
mike12345567 1cbe3771ab Adding in self hosted API key. 2020-12-09 17:04:05 +00:00
mike12345567 19faffff83 Changing the role system to have permissions integrated rather than the permissions being per user. 2020-12-02 17:08:25 +00:00
mike12345567 05225f7787 Changing the naming of access levels to be roles. 2020-12-02 13:20:56 +00:00
mike12345567 7f5c3a4688 Updating to have proper access control via an accessController and nearly ready to spit out the routing structure. 2020-11-16 18:04:44 +00:00
Michael Drury a423664f4c Large update, tests passing, have simplifed access level API, access levels and permissions are now totally separate. 2020-11-13 15:35:20 +00:00
mike12345567 6148128554 Tests failing but starting to progress. 2020-11-12 17:06:55 +00:00
Michael Drury 1f4e27eb13 WIP - this is working towards the permissions system but stopping here for the night, this is currently not functional. 2020-11-11 17:34:15 +00:00
mike12345567 5b2be03bc3 Renaming instanceId -> appId to reduce confusion through the system, there only is one ID now. 2020-10-29 10:28:27 +00:00
mike12345567 ea03d099b3 Initial work into multi-tenancy removal, experiencing issues with test cases at this point. 2020-10-28 20:35:06 +00:00
mike12345567 0d8ec8e03a Some initial work towards webhooks, that generates schema similar to integromat. 2020-10-22 17:48:32 +01:00