mike12345567
|
846f8b5038
|
Adding slash incase couch URL doesn't contain.
|
5 years ago |
mike12345567
|
b23a9caf50
|
Removing repeated line.
|
5 years ago |
mike12345567
|
c7d287485b
|
Allowing start end key syntax to be used outside of tenancy if we need to.
|
5 years ago |
mike12345567
|
f6705b879a
|
Reducing the load on DB caused by CouchDB all_db when working with a large number of couch databases.
|
5 years ago |
mike12345567
|
b1cc0d0783
|
Setting auth cookie to not expire.
|
5 years ago |
mike12345567
|
e6b3521ed5
|
Extending logout TTL from a day to a week.
|
5 years ago |
mike12345567
|
3b9f3d6690
|
Fix for cypress test issues, when metadata is updated rapidly it could get into a bad state - this should resolve it.
|
5 years ago |
mike12345567
|
8d56fe1339
|
Adding a script to be able to debug backend like cypress runs, without needing to build everytime - fixing an issue that appears to only occur occasionally in the cypress environment.
|
5 years ago |
mike12345567
|
a9c6395d72
|
Fixing issue discovered by cypress test.
|
5 years ago |
mike12345567
|
960ea66fd7
|
Quick update to the app caching to improve performance even further, cache when an app doesn't have metadata/is invalid, meaning we don't need to poll the database everytime to see if the metadata doc exists.
|
5 years ago |
mike12345567
|
35d96f54c8
|
Adding specific error cases to all app ID checking functions - three cases, is dev/prod, isn't and no app/ID provided.
|
5 years ago |
Michael Drury
|
0f37562ab6
|
Fixing issue presented by test, passing Couch instance around for when it is being used in memory.
|
5 years ago |
mike12345567
|
7eb29ffc7d
|
Updating the getAllApps function to use a cached version of the app metadata, rather than retrieving it individually everytime. Also invalidating the results everytime they are updated (at least in the important locations).
|
5 years ago |
mike12345567
|
e0f04abfb1
|
Updating to allow a list of roles to be retrieved, allowing resources to have multiple levels of role that they can be accessed via.
|
5 years ago |
mike12345567
|
4268ad6f80
|
Fixing an issue discovered in #3385 - RBAC roles worked for applying lower levels of roles, but they didn't revoke access correctly, it would always fallback to the base permissions if higher permissions were set.
|
5 years ago |
Rory Powell
|
cf13853f09
|
Fixes for google sso, cloud email url and cloud logo updates
|
5 years ago |
mike12345567
|
c8e02a20a0
|
Updating per review comments.
|
5 years ago |
mike12345567
|
51b6687262
|
Updating per review comments.
|
5 years ago |
Martin McKeaveney
|
7cead2d8f4
|
cookie based approach
|
5 years ago |
Michael Drury
|
8bf2e7278e
|
Adding sync user endpoint to server which can be used by the worker.
|
5 years ago |
Rory Powell
|
85cca04321
|
Add expired user notification
|
5 years ago |
Rory Powell
|
2dced6f7a8
|
Fix: Prevent user updates in multi tenant mode from deleting user password. Also forward the authentication error from the backend to the login page to warn when an sso user is trying to log in with a password when one is not present
|
5 years ago |
Rory Powell
|
957ce7ef04
|
Add migration unit tests
|
5 years ago |
Rory Powell
|
2011e579a1
|
Ignore case when finding user by email
|
5 years ago |
mike12345567
|
a2d302cd57
|
Removing live replication between deployed and development app, instead it is replicated when the app is opened in the builder. Live replication was not working and only actually pulled back the data on deploy which was a little confusing, this way it can easily be controlled.
|
5 years ago |
Martin McKeaveney
|
81f49dcdf1
|
encapsulate global logout function
|
5 years ago |
Martin McKeaveney
|
ed9574b815
|
tidy up
|
5 years ago |
Martin McKeaveney
|
3f279d8d0f
|
platform logout function
|
5 years ago |
Martin McKeaveney
|
14370c81b9
|
SSL support for digitalocean, started utility function for BB logout, bunch of minor bug fixes
|
5 years ago |
mike12345567
|
380d0e030e
|
Fixing issue with user's being logged in and trying to access other tenants public apps, this work makes sure that users from other tenants will not be 403'd immediately (too aggressive) but instead they will have all other their RBAC roles revoked.
|
5 years ago |
Rory Powell
|
13a2770c26
|
Fix tests
|
5 years ago |
Martin McKeaveney
|
a3e01cccdb
|
don't upload tarball to s3 in cloud
|
5 years ago |
mike12345567
|
8699d7293b
|
Fixing an issue with new data source creation, could not view fetched tables until refresh page.
|
5 years ago |
Rory Powell
|
f10297953f
|
Don't let user exist in multiple tenants when using custom sso
|
5 years ago |
Rory Powell
|
651947bb49
|
Add API keys between account portal and budibase
|
5 years ago |
Rory Powell
|
0e4bdb73a4
|
Remove global info users on user deletion
|
5 years ago |
mike12345567
|
f69469ea4f
|
Adding the ability to run the monorepo in cloud mode without the connected account portal (login, org setting and admin creation are all available again) as well as re-working how the redirects work to massively reduce the chance of cycles which I was experiencing constantly.
|
5 years ago |
Rory Powell
|
e8b35e2a68
|
Honour cookie domain on empty values
|
5 years ago |
Rory Powell
|
5835716e9d
|
Deprovision complete
|
5 years ago |
Rory Powell
|
5be2a8489d
|
Deprovisioning working minus apps
|
5 years ago |
Martin McKeaveney
|
6e2508797a
|
adding subdomain checking to tenancy middleware
|
5 years ago |
Rory Powell
|
b8e4824154
|
Set cookie domain to fix logout
|
5 years ago |
Martin McKeaveney
|
e92c2be577
|
Revert "Temp account portal logging"
|
5 years ago |
Rory Powell
|
aa428881e7
|
Temp account portal logging
|
5 years ago |
Rory Powell
|
4813a63439
|
Deprovisioning WIP
|
5 years ago |
mike12345567
|
f836565f69
|
Putting together cloud export and import functionality, still need to test, but basic concept there.
|
5 years ago |
Martin McKeaveney
|
f877244571
|
abstract usagedoc creation into auth, create the doc if it doesn't exist
|
5 years ago |
mike12345567
|
649a33d3c8
|
Getting rid of the concept of permissions hierarchy, roles still have a hierarchy and base permissions still follow the old system, but resources can be given a stack of separate permissions which don't override each other.
|
5 years ago |
Martin McKeaveney
|
b4f9fd4f12
|
changed events to constants, instantiated analytics client at right time
|
5 years ago |
mike12345567
|
efdd78c7fe
|
Removing use of db.post as its dangerous to allow the possibility of _id being auto-generated, these docs would be lost as we couldn't query them out by the usual id mechanism.
|
5 years ago |