mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-09 15:17:39 +02:00
dbd7f55b20
* databroker: add databroker, identity manager, update cache (#864) * databroker: add databroker, identity manager, update cache * fix cache tests * directory service (#885) * directory: add google and okta * add onelogin * add directory provider * initialize before sync, upate google provider, remove dead code * add azure provider * fix azure provider * fix gitlab * add gitlab test, fix azure test * hook up okta * remove dead code * fix tests * fix flaky test * authorize: use databroker data for rego policy (#904) * wip * add directory provider * initialize before sync, upate google provider, remove dead code * fix flaky test * update authorize to use databroker data * implement signed jwt * wait for session and user to appear * fix test * directory service (#885) * directory: add google and okta * add onelogin * add directory provider * initialize before sync, upate google provider, remove dead code * add azure provider * fix azure provider * fix gitlab * add gitlab test, fix azure test * hook up okta * remove dead code * fix tests * fix flaky test * remove log line * only redirect when no session id exists * prepare rego query as part of create * return on ctx done * retry on disconnect for sync * move jwt signing * use != * use parent ctx for wait * remove session state, remove logs * rename function * add log message * pre-allocate slice * use errgroup * return nil on eof for sync * move check * disable timeout on gRPC requests in envoy * fix gitlab test * use v4 backoff * authenticate: databroker changes (#914) * wip * add directory provider * initialize before sync, upate google provider, remove dead code * fix flaky test * update authorize to use databroker data * implement signed jwt * wait for session and user to appear * fix test * directory service (#885) * directory: add google and okta * add onelogin * add directory provider * initialize before sync, upate google provider, remove dead code * add azure provider * fix azure provider * fix gitlab * add gitlab test, fix azure test * hook up okta * remove dead code * fix tests * fix flaky test * remove log line * only redirect when no session id exists * prepare rego query as part of create * return on ctx done * retry on disconnect for sync * move jwt signing * use != * use parent ctx for wait * remove session state, remove logs * rename function * add log message * pre-allocate slice * use errgroup * return nil on eof for sync * move check * disable timeout on gRPC requests in envoy * fix dashboard * delete session on logout * permanently delete sessions once they are marked as deleted * remove permanent delete * fix tests * remove groups and refresh test * databroker: remove dead code, rename cache url, move dashboard (#925) * wip * add directory provider * initialize before sync, upate google provider, remove dead code * fix flaky test * update authorize to use databroker data * implement signed jwt * wait for session and user to appear * fix test * directory service (#885) * directory: add google and okta * add onelogin * add directory provider * initialize before sync, upate google provider, remove dead code * add azure provider * fix azure provider * fix gitlab * add gitlab test, fix azure test * hook up okta * remove dead code * fix tests * fix flaky test * remove log line * only redirect when no session id exists * prepare rego query as part of create * return on ctx done * retry on disconnect for sync * move jwt signing * use != * use parent ctx for wait * remove session state, remove logs * rename function * add log message * pre-allocate slice * use errgroup * return nil on eof for sync * move check * disable timeout on gRPC requests in envoy * fix dashboard * delete session on logout * permanently delete sessions once they are marked as deleted * remove permanent delete * fix tests * remove cache service * remove kv * remove refresh docs * remove obsolete cache docs * add databroker url option * cache: use memberlist to detect multiple instances * add databroker service url * remove cache service * remove kv * remove refresh docs * remove obsolete cache docs * add databroker url option * cache: use memberlist to detect multiple instances * add databroker service url * wip * remove groups and refresh test * fix redirect, signout * remove databroker client from proxy * remove unused method * remove user dashboard test * handle missing session ids * session: reject sessions with no id * sessions: invalidate old sessions via databroker server version (#930) * session: add a version field tied to the databroker server version that can be used to invalidate sessions * fix tests * add log * authenticate: create user record immediately, call "get" directly in authorize (#931)
69 lines
1.6 KiB
Protocol Buffer
69 lines
1.6 KiB
Protocol Buffer
syntax = "proto3";
|
|
|
|
package databroker;
|
|
option go_package = "github.com/pomerium/pomerium/internal/grpc/databroker";
|
|
|
|
import "google/protobuf/any.proto";
|
|
import "google/protobuf/empty.proto";
|
|
import "google/protobuf/timestamp.proto";
|
|
|
|
message Record {
|
|
string version = 1;
|
|
string type = 2;
|
|
string id = 3;
|
|
google.protobuf.Any data = 4;
|
|
google.protobuf.Timestamp created_at = 5;
|
|
google.protobuf.Timestamp modified_at = 6;
|
|
google.protobuf.Timestamp deleted_at = 7;
|
|
}
|
|
|
|
message DeleteRequest {
|
|
string type = 1;
|
|
string id = 2;
|
|
}
|
|
|
|
message GetRequest {
|
|
string type = 1;
|
|
string id = 2;
|
|
}
|
|
message GetResponse { Record record = 1; }
|
|
|
|
message GetAllRequest { string type = 1; }
|
|
message GetAllResponse {
|
|
repeated Record records = 1;
|
|
string server_version = 2;
|
|
string record_version = 3;
|
|
}
|
|
|
|
message SetRequest {
|
|
string type = 1;
|
|
string id = 2;
|
|
google.protobuf.Any data = 3;
|
|
}
|
|
message SetResponse {
|
|
Record record = 1;
|
|
string server_version = 2;
|
|
}
|
|
|
|
message SyncRequest {
|
|
string server_version = 1;
|
|
string record_version = 2;
|
|
string type = 3;
|
|
}
|
|
message SyncResponse {
|
|
string server_version = 1;
|
|
repeated Record records = 2;
|
|
}
|
|
|
|
message GetTypesResponse { repeated string types = 1; }
|
|
|
|
service DataBrokerService {
|
|
rpc Delete(DeleteRequest) returns (google.protobuf.Empty);
|
|
rpc Get(GetRequest) returns (GetResponse);
|
|
rpc GetAll(GetAllRequest) returns (GetAllResponse);
|
|
rpc Set(SetRequest) returns (SetResponse);
|
|
rpc Sync(SyncRequest) returns (stream SyncResponse);
|
|
|
|
rpc GetTypes(google.protobuf.Empty) returns (GetTypesResponse);
|
|
rpc SyncTypes(google.protobuf.Empty) returns (stream GetTypesResponse);
|
|
}
|