1465 Commits

Author SHA1 Message Date
Gero Posmyk-Leinemann
8a2be48db9
[server] Make sure to re-add project -> org relation on failed deletion (#18055) 2023-06-26 20:12:51 +08:00
Milan Pavlik
01117568d7
[perms] Implement getTeams WEB-501 (#18039)
* [perms] Implement getTeams

* fix
2023-06-26 19:09:50 +08:00
Gero Posmyk-Leinemann
427ed104de
[server] Guard org authProvider-related API calls centralizedPermissions (#18041)
* [spicedb] Introduce read-/write_git_provider permissions

* [server] Guard org authProvider-related API calls centralizedPermissions
2023-06-26 17:54:49 +08:00
Gero Posmyk-Leinemann
f49be2267c
[server] Add/remove project -> org relation on creation/deletion (#18037) 2023-06-26 15:21:16 +08:00
Milan Pavlik
50ba64bbb7
[perms] Check & Update relationships on removeTeamMember (#18008) 2023-06-23 21:25:13 +08:00
Milan Pavlik
dd4b30c7c3
[perms] Grant owner/member on role change WEB-505, WEB-507 (#17993)
* fix

* fix

* fix

* fix

* fix

* fix

* fix?

* fix

* fix

* fix

* fix

* fix

* Fix

* fix

* fix

* fix

* fix

* fix

* fix

* remove migration

* fix

* fix

* fix

* fix

* fix

* fix

* fix
2023-06-23 20:22:13 +08:00
Sven Efftinge
7248f9b40f
[server] private members cleanup (#18027) 2023-06-23 18:22:13 +08:00
Milan Pavlik
f8cfaaf6f6
[perms] Everyone has member in an org, plus they can have owner (#18021)
* [perms] Everyone has member in an org, plus they can have owner

* fix

* fix
2023-06-23 15:35:13 +08:00
Alex Tugarev
fba93b7018
Remove hostname from callback URL – WEB-398 (#17935)
* [git auth] extract host from flow state JWT

* Use /auth/callback

* deduplicate parseState function
2023-06-23 15:11:13 +08:00
Alex Tugarev
d53077d0ce
[perms] check for read/write permissions on orgs – WEB-512 (#18016)
* [perms] adding permissions for getOrgSettings

* [perms] check for read/write permissions of org
2023-06-22 22:26:12 +08:00
Milan Pavlik
6c772f90a1
[perms] Simplify guard operations (#18004)
* [perms] Simplify guard operations

* Fix
2023-06-22 17:52:12 +08:00
Sven Efftinge
248a00eaa8
[server] clean up org-only migration code (#17939) 2023-06-22 15:03:12 +08:00
Milan Pavlik
0777246800
Remove getContentBlob Upload/Download URL (#17983)
* Remove getContentBlob Upload/Download URL

* fix
2023-06-21 16:18:11 +08:00
Gero Posmyk-Leinemann
909955d2c4
[db, ts] Introduce a generic db.transaction() (#17980)
* [ts] Upgrade inversify 5.0.1 -> 6.0.1

* [server, db] Introduce TransactionalDB for User, Workspace, Projects

* Fix tests
2023-06-21 16:12:11 +08:00
Milan Pavlik
c072017131
[perms] Helpers for relationship, object ref and subject (#17991)
* fix

* Fix
2023-06-20 22:11:10 +08:00
Milan Pavlik
2c7b0425c3
[perms] Add constants and types for resources and perms (#17989)
* [perms] Add constants and types for resources and perms

* Fix

* fix
2023-06-20 21:40:10 +08:00
Milan Pavlik
cf84bf01a7
[server] Remove hasPermission rpc (#17981) 2023-06-20 21:24:11 +08:00
Milan Pavlik
96821b61af
[perms] Align perm checks with permissions in model (#17987) 2023-06-20 21:08:10 +08:00
Sven Efftinge
fb0b7c4980
[usage] compute correct spending limit (#17947) 2023-06-20 17:39:10 +08:00
Milan Pavlik
67d011f198
[server] Remove mayStartWorkspaceOnRepo (#17979) 2023-06-20 17:35:10 +08:00
Sven Efftinge
2a6282e82c
[server] mark orphaned instances stopped (#17972) 2023-06-20 03:59:09 +08:00
Gero Posmyk-Leinemann
54307a551e
[server] Remove dead permissions code (#17918) 2023-06-19 17:45:10 +08:00
Gero Posmyk-Leinemann
1f42bd03d9
Allow user env vars for GitLab subgroups (#17831)
* [server] Move from owner/repo to potentially longer env var patterns

* review suggestions

* fix and double-wildcard

* Adjust TestsEnvVarService for double wild card
2023-06-15 22:52:06 +08:00
Sven Efftinge
79752d785f
[job] drop job state feature (#17948) 2023-06-15 18:52:05 +08:00
Sven Efftinge
fc87228ecf
[server] fix stripe job (#17951) 2023-06-15 18:34:05 +08:00
Milan Pavlik
74143f71cf
[server] Cache refreshes TTL on cache hit (#17946) 2023-06-15 15:55:05 +08:00
Sven Efftinge
72fdb67d63
[server] add organizationId to old workspaces (#17936) 2023-06-14 21:16:04 +08:00
Sven Efftinge
fb3f55ad51
[db/server] cache the user object using redis (#17906) 2023-06-14 13:50:04 +08:00
Sven Efftinge
097d178910
[server] remove user relation from gitpod_token (#17923) 2023-06-14 03:53:04 +08:00
Anton Kosyakov
9e9b4c63ba
fix IDE-133: enrich workspace events (#17794)
In order to avoid relying on DB:
- align with DB timestamps
- add info about stopping time, timeout and conditions to stopped event
2023-06-13 19:21:03 +08:00
Sven Efftinge
2e8e6ac9c3
[gitpod-db] don't leak DBUser (#17912) 2023-06-13 16:58:03 +08:00
Sven Efftinge
e6f959dbf7
[server] allow debugging (#17911) 2023-06-13 16:37:03 +08:00
Alex Tugarev
4fd4f66667
Remove unused workspace port auth (#17870)
* remove unused worspace port auth

* fix
2023-06-13 14:27:03 +08:00
Brad Harris
27f539cbad
track a verificaitonId during phone verification (#17898)
* track a verificaitonId during phone verification

* use snake case property names for tracking

* validate verificationId is uuid

* move validation into service

* typo in error msg
2023-06-12 22:42:02 +08:00
Wouter Verlaek
a18361e5a0
Return and show error when stopping workspace in maintenance mode (#17880)
* Show error when stopping workspace in maintenance mode

* Fix import

* Feedback

* Fix return

* Fix mutate error catch, use try/catch for stopWs
2023-06-12 21:55:03 +08:00
Milan Pavlik
e49e61c469
[server] Store only User ID on WS connection instance - WEB-460 (#17905)
* [server] Store only User ID on WS connection instance

* Fix

* Fix
2023-06-12 20:07:02 +08:00
Gero Posmyk-Leinemann
e4078937f6
[server] Add tests for resource-access and env-var-service (#17833)
* [server] Removed deprecated api.getEnvVars

* [server] Add tests for resource-access and env-var-service
2023-06-12 17:57:02 +08:00
Alex Tugarev
88f4790f9e
[server] fix login into existing accounts (#17893) 2023-06-09 21:49:00 +08:00
Milan Pavlik
6a74c191e1
[server] Fix perms for org auth provider delete (#17894) 2023-06-09 21:46:00 +08:00
Milan Pavlik
8b382eba78
[server] Fix org git auth (#17889)
* retest

* Fix

* fix

* fix

* fix

* Fix

* fix

* Fix

* fix

* fix

* fix

* Fix

* fix

* Fix

* [server] Fix org git auth provider

* fix

* Fix
2023-06-09 17:21:59 +08:00
Brad Harris
7777da8344
Add phone verification analytics events (#17873)
* add phone verification analytics events

* use 2 distinct events

* adding a log stmt for channel mismatch case

* Update components/server/src/auth/verification-service.ts

Co-authored-by: Milan Pavlik <milan@gitpod.io>

---------

Co-authored-by: Milan Pavlik <milan@gitpod.io>
2023-06-09 04:59:59 +08:00
Brad Harris
2a8a6f4d6e
Add voice calls for phone verification (#17853)
* verify via call if flag enabled

* adjust verify copy based on flag
2023-06-07 23:59:58 +08:00
Thomas Schubart
325ec9f85f
[server] Remove stale workspace feature flags (#17865) 2023-06-07 20:34:57 +08:00
Milan Pavlik
314159065a
[server] Remove old session cookies - WEB-103 (#17846)
* [server] Remove Session ID from logs, ahead of session removal

* [server] Remove sessions - take 2

* fix up

* fix

* fix

* fix

* fix

* Fix

* retest

* add ws handler

* fix

* fix

* retest

* fix

* clean up

* fix
2023-06-07 20:01:57 +08:00
Gero Posmyk-Leinemann
f0f3dfe7bb
[server] Removed deprecated api.getEnvVars (#17832) 2023-06-07 19:01:58 +08:00
jakobhero
043e405b62
add instance class and ideConfig to workpsace_started (#17845) 2023-06-06 23:58:57 +08:00
Milan Pavlik
e29d47408b
[server] Issue JWT cookie when authenticating with admin creds or OTS (#17837)
* [server] Issue JWT cookie when authenticating with admin creds

* fix

* fiux

* Add JWT into ots cookies
2023-06-06 21:44:57 +08:00
Milan Pavlik
b5a34c9b12
[jwt] OIDC Sessions are JWT only WEB-103 (#17839)
* [jwt] OIDC Sessions are JWT only

* Fix
2023-06-06 21:04:57 +08:00
Alex Tugarev
f7fd787088
Read email from SSO profile – WEB-437 (#17819)
* [protocol] remove unnecessary User.censor

* Read email from SSO profile

* [gitpod-db] Add Identity.lastSigninTime

* revert useOIDCClientsQuery changes

* make use of lastSigninTime on Account page

* [server] update lastSigninTime on signin

* fixup tests

* fixup update of lastSigninTime
2023-06-06 16:50:57 +08:00
Milan Pavlik
01a97507fa
[iam] Drop compatibility lookup (#17828)
* [iam] Drop compatibility lookup

* fix
2023-06-05 22:56:56 +08:00