1178 Commits

Author SHA1 Message Date
Alex Tugarev
bac0eaec6b
[SSO] find organizational accounts by email – WEB-346 (#17614)
* [SSO] find organizational accounts by email

First try to look up accounts by `[subjectID, audience]` as composite key, then try to lookup by email address. The scope of this lookup is limited to the Org owning the SSO configuration.

* fix tests for /session endpoint handler

* rename to findOrganizationalUser

* fix test case

* added logging for "find by email" path
2023-05-16 00:09:00 +08:00
Sven Efftinge
eb9e41c7c2
[server] fix stripe customer information (#17617) 2023-05-15 22:11:00 +08:00
Sven Efftinge
8e952fe821
Update stripe customers during migration (#17574) 2023-05-15 21:14:00 +08:00
Alex Tugarev
4063c75f7d
[server] remove unused code in user-service.ts (#17613) 2023-05-15 19:02:00 +08:00
Milan Pavlik
6e1f8ffef1
[server] Move update user implementation to UserService (#17592)
* [sso] Fix issuer trailing slash

* [server] Move update user implemention to UserService

* fix

* fix
2023-05-15 14:50:00 +08:00
Sven Efftinge
28e3649850
Org slugs are kept in sync with name (#17596) 2023-05-12 20:42:57 +08:00
Sven Efftinge
8967932cc3
[server] adding git authprovider is an org update (#17572) 2023-05-11 19:44:56 +08:00
Milan Pavlik
3ae884f877
[iam] Validate OIDC Create Session Payload - WEB-338 (#17560)
* [iam] Validate OIDC Create Session Payload

* fix

* fix

* fix
2023-05-10 22:38:55 +08:00
Sven Efftinge
b7d01a7e25
Disallow deletion of teams (#17538) 2023-05-10 22:25:55 +08:00
Alex Tugarev
d56375dcb1
[server] Ensure admin user is owner of any Org (#17529) 2023-05-10 18:18:55 +08:00
Brad Harris
2eaf257d89
removing setup intent related code (#17539) 2023-05-10 01:41:54 +08:00
Sven Efftinge
3150879e48
Show usage (#17534) 2023-05-08 22:33:46 +08:00
Alex Tugarev
8d074312ce
[server] Do not allow to remove Org accounts (#17528) 2023-05-08 18:40:46 +08:00
Sven Efftinge
606e74f6c7
[dashboard] invite link for SSO orgs (#17478) 2023-05-05 17:59:43 +08:00
Alex Tugarev
d5b1b9836c
[server] remove admin-user from org on first user sign-in (#17510) 2023-05-05 17:03:43 +08:00
Alex Tugarev
d94c937ca2
Admin user sign-in: redirect to /settings (#17509) 2023-05-05 16:57:43 +08:00
Milan Pavlik
0965bc98a8
[server] Remove grant first user admin (#17301) 2023-05-04 21:16:42 +08:00
Brad Harris
38f033af05
Use getOnboardingState api for dedicated setup flow (#17488)
* check onboaring state for dedicated setup flow

* track dedicated setup completed w/ state

* use ff for loading check too

* remove caching of onboarding state

* wip

* checking for deleted oidc configs too

* trying to drive off onboarding state more

* more wip to handle state of dedicated setup

* reset queries

* set active org id in local storage

* clear query client cache

* removing ff check

* move updateUser from step to flow

---------

Co-authored-by: Alex Tugarev <alex@gitpod.io>
2023-05-04 17:15:43 +08:00
Milan Pavlik
6345469994
[server] Report duration of jobs (#17483) 2023-05-04 04:08:41 +08:00
Alex Tugarev
c2923d8ad3
Add missing await on promise. (#17489)
This fixes the build.
2023-05-04 03:17:41 +08:00
Sven Efftinge
0d85286758
[server] migrate ws without usageattribution (#17485) 2023-05-03 21:26:41 +08:00
Alex Tugarev
af796f2825
[server] Compute state of Dedicated Onboarding (#17466) 2023-05-03 14:27:41 +08:00
Milan Pavlik
9402277686
[server] Unify periodic jobs (#17433)
* [server] Unify periodic jobs

* retest

* migrate token gc

* migrate webhook gc

* fix

* fix

* fix

* fix

* remove multi-bind

* fix

* fix

* fix

* fix

* fix
2023-05-03 14:17:41 +08:00
Alex Tugarev
7ef79efd91
[SSO] Use ClientConfigID & Subject as composite key for identities WEB-279 (#17463)
* [SSO] Use ClientConfigID & Subject as composite key for identities

* Add tests for CreateSession
2023-05-02 21:09:40 +08:00
Milan Pavlik
6f6b0a8d7c
[server] Fix parsing of go duration (#17458) 2023-05-02 21:08:40 +08:00
Sven Efftinge
2960e001fb
[server] fix login regression (#17461) 2023-05-02 18:31:40 +08:00
Sven Efftinge
cbd56c2592
Frictionless login for dedicated (#17432) 2023-05-02 02:12:40 +08:00
Milan Pavlik
8bdff39a79
[server] Use redlock for webhook gc WEB-224 (#17380)
* [server] Use redlock for webhook gc

* Fix

* fix
2023-04-28 16:59:36 +08:00
Milan Pavlik
be74b192cc
[server] Parse incoming JWT sessions WEB-247 (#17403)
* [server] Parse incoming JWT sessions

* Fix

* fix

* fix

* Fix

* Fix

* fix

* fix
2023-04-28 16:55:36 +08:00
Milan Pavlik
4de4a8b2f0
[server] Remove EntitlementServiceLicense, return directly (#17420)
* [server] Remove EntitlementServiceLicense, return directly

* fix

* fix
2023-04-28 16:47:36 +08:00
Milan Pavlik
a047e1aad8
[server] Use Redlock for token gc WEB-226 (#17379)
* [server] Use Redlock for token gc

* fix

* fix

* fix
2023-04-28 16:35:36 +08:00
Milan Pavlik
809b5a5316
[server] Use redlock for periodic db deleter (#17381)
* [server] Use redlock for periodic db deleter

* Fix

* fix
2023-04-28 16:34:36 +08:00
Milan Pavlik
77578486ec
[serer] Fix capture of ExecutionError error message comparison (#17411) 2023-04-28 14:40:36 +08:00
Alex Tugarev
341491a1da
Removing ONBOARDING_IN_PROGRESS condition (#17417)
because it blocks all API calls needed during the onboarding.
2023-04-28 03:07:35 +08:00
Anton Kosyakov
8f1640ed0b
[supervisor-frontend] fix metrics reporting (#17361)
* [supervisor-frontend] fix metrics reporting

when workspace URL contains search, hash or path

* ensure that GitpodHostUrl always trim search, hash, path

+ remove unused arg type and function
2023-04-28 02:55:36 +08:00
Milan Pavlik
23ad22a6ed
[server] Move payment/stripe out of EE, remove EE (#17357)
* [server] Move payment out of EE, remove EE

* fix

* [server] Fix config/import issues

* [server] Delete superfluous CommunityEntitlementService

---------

Co-authored-by: Gero Posmyk-Leinemann <gero@gitpod.io>
2023-04-27 21:36:35 +08:00
Milan Pavlik
3454003800
[server] Fix setting jwt cookie maxAge (#17409) 2023-04-27 21:34:35 +08:00
Sven Efftinge
f840049dbf
[db] directly delete workspaces (#17400) 2023-04-27 15:30:35 +08:00
Gero Posmyk-Leinemann
2cd33be984
[server] Disable new setup modal as long as it's an dead end (#17397) 2023-04-26 21:54:35 +08:00
Milan Pavlik
64fa8a4222
[server] Run workspace gc concurrently (#17396) 2023-04-26 21:14:35 +08:00
Milan Pavlik
ed37cb777f
[server] Wrap using redis mutex API and catch quorum error WEB-229 (#17391)
* [server] Wrap using redis mutex API and catch quorum error

* Fix
2023-04-26 20:28:34 +08:00
Milan Pavlik
4459bff743
[server] Make redis client reusable, stop creating new one on each mutex WEB-230 (#17384)
* [server] Make redis client reusable

* fix

* fix
2023-04-26 17:30:35 +08:00
Milan Pavlik
a314926487
[server] Increase initial lock duration for wsgc WEB-229 (#17387)
* [server] Increase initial lock duration for wsgc

* fix

* fix
2023-04-26 17:07:34 +08:00
Sven Efftinge
21ce5b309a
Fixes #10261: Stop running workspaces on logout (#17383) 2023-04-26 16:54:34 +08:00
Milan Pavlik
190b1696c0
[server] Use redis mutex for wsgc WEB-223 (#17370)
* [server]  Use redis mutex for wsgc

* ensure mutex func is awaited
2023-04-26 03:19:46 +08:00
Milan Pavlik
6328d8f602
[server] Setup redis mutex to replace leader election (#17369)
* [server] Setup redis mutex to replace leader election

* injectable

* fix

* fix

* fix
2023-04-26 02:16:46 +08:00
Mirco Kater
6c73ccaf4a
New roles (#17059)
* draft

* Update permission.ts

changed admin-role into admin-permissions

* Update gitpod-server-impl.ts

changed admin-role into admin-permissions

* [server] Grant "admin" and "admin-permissions" for first user

---------

Co-authored-by: Gero Posmyk-Leinemann <gero@gitpod.io>
2023-04-25 23:05:46 +08:00
Milan Pavlik
bcca71039c
[server] Remove enforcement endpoint WEB-219 (#17367)
* [server] Remove enforcement endpoint

* fix

* fix

* Fix
2023-04-25 22:05:46 +08:00
Milan Pavlik
38db32d9ff
[server] Remove unused checkSignup (#17364)
* [server] Remove unused checkSignup

* fix
2023-04-25 20:20:46 +08:00
Sven Efftinge
d18edfe28c
[orgs-only] Show Information before migration. (#17319) 2023-04-25 15:39:45 +08:00