Commit graph

45 commits

Author SHA1 Message Date
abhishek9686
ebc3e90301 add extclient egress ranges 2024-10-29 12:41:40 +04:00
abhishek9686
2cc54d949c remove user role from policy types 2024-10-29 08:51:27 +04:00
abhishek9686
4eacadbb27 convert network roles to groups, deprecate RAG roles 2024-10-28 16:18:50 +04:00
abhishek9686
f7b78ccad6 remove user role from acl policy types 2024-10-28 11:39:16 +04:00
abhishek9686
bf88a80ea2 avoid gateway role migration 2024-10-27 23:31:30 +04:00
abhishek9686
514e785f7b ignore disabled policies for users 2024-10-25 16:15:41 +04:00
abhishek9686
148c1fdc8f return all gws for admins 2024-10-22 15:12:05 +04:00
abhishek9686
6b93163bd5 fix user policy acls 2024-10-19 13:50:54 +04:00
abhishek9686
57378d255a fix user policies 2024-10-19 13:16:52 +04:00
abhishek9686
5be8939e6e use acl policies to fetch rac nodes 2024-10-19 11:57:11 +04:00
abhishek9686
fc2b765d8e fix rac gws via policies 2024-10-18 17:58:47 +04:00
abhishek9686
c37cf2b7e3 create default user policies 2024-10-18 16:53:39 +04:00
abhishek9686
67563ab753 resolve merge conflicts 2024-10-17 15:15:00 +04:00
abhishek9686
66871ab210 resolve merge conflict 2024-10-16 18:41:07 +04:00
abhishek9686
6ccafe82ed set static nodes to list 2024-10-15 19:36:46 +04:00
abhishek9686
b41353b415 add static nodes to api resp 2024-10-14 16:36:25 +04:00
Abhishek K
1f9808ff59
NET-1604: New Simplified RAC Apis (#3147)
* ipv6 fix for mobile apps

* simplified RAC APIs

* add response to invite api

* fix get config api

* fix middleware for auth

* add separate controller for rac apis

* Revert "ipv6 fix for mobile apps"

This reverts commit dc84d90be2.
2024-10-01 17:48:36 +04:00
abhishek9686
add378cad5 fix api resp on group list api 2024-09-27 13:37:23 +04:00
abhishek9686
3d327bb89e fetch user gw via access policy 2024-09-25 18:18:23 +04:00
abhishek9686
00b082d11c add validation check for tags 2024-09-25 13:01:40 +04:00
abhishek9686
b3a9ffd260 Merge branch 'develop' of https://github.com/gravitl/netmaker into ACC-638 2024-09-06 12:04:22 +04:00
Abhishek K
a39da31fa6
add list roles to pro and ce (#3072) 2024-08-27 11:51:13 +05:30
Abhishek K
936e1b4d45
Net 1227 v1 (#3066)
* generalise smtp config

* copy over smtp vars

* env new line

* fix master key api access

* comment user tests

* fix network and user invite for master key access

* remove email sender type

* user mgmt commands

* check user role on CE

* user role nmtcl cmds

* user groups commands

* fix role and groups command

* fix user create cmd

* add usage info

* rm user role check

* fix user update cmd

* fix static check

* add backwards comptability support for extclient api for mobile

* rm debug logs

* set frontend url from base domain if empty
2024-08-26 18:27:45 +05:30
abhishek9686
27ceaed739 resolve merge conflicts 2024-08-20 18:32:49 +05:30
Abhishek K
2e8d95e80e
NET-1227: User Mgmt V2 (#3055)
* user mgmt models

* define user roles

* define models for new user mgmt and groups

* oauth debug log

* initialize user role after db conn

* print oauth token in debug log

* user roles CRUD apis

* user groups CRUD Apis

* additional api checks

* add additional scopes

* add additional scopes url

* add additional scopes url

* rm additional scopes url

* setup middlleware permission checks

* integrate permission check into middleware

* integrate permission check into middleware

* check for headers for subjects

* refactor user role models

* refactor user groups models

* add new user to pending user via RAC login

* untracked

* allow multiple groups for an user

* change json tag

* add debug headers

* refer network controls form roles, add debug headers

* refer network controls form roles, add debug headers

* replace auth checks, add network id to role model

* nodes handler

* migration funcs

* invoke sync users migration func

* add debug logs

* comment middleware

* fix get all nodes api

* add debug logs

* fix middleware error nil check

* add new func to get username from jwt

* fix jwt parsing

* abort on error

* allow multiple network roles

* allow multiple network roles

* add migration func

* return err if jwt parsing fails

* set global check to true when accessing user apis

* set netid for acls api calls

* set netid for acls api calls

* update role and groups routes

* add validation checks

* add invite flow apis and magic links

* add invited user via oauth signup automatically

* create invited user on oauth signup, with groups in the invite

* add group validation for user invite

* update create user handler with new role mgmt

* add validation checks

* create user invites tables

* add error logging for email invite

* fix invite singup url

* debug log

* get query params from url

* get query params from url

* add query escape

* debug log

* debug log

* fix user signup via invite api

* set admin field for backward compatbility

* use new role id for user apis

* deprecate use of old admin fields

* deprecate usage of old user fields

* add user role as service user if empty

* setup email sender

* delete invite after user singup

* add plaform user role

* redirect on invite verification link

* fix invite redirect

* temporary redirect

* fix invite redirect

* point invite link to frontend

* fix query params lookup

* add resend support, configure email interface types

* fix groups and user creation

* validate user groups, add check for metrics api in middleware

* add invite url to invite model

* migrate rac apis to new user mgmt

* handle network nodes

* add platform user to default role

* fix user role migration

* add default on rag creation and cleanup after deletion

* fix rac apis

* change to invite code param

* filter nodes and hosts based on user network access

* extend create user group req to accomodate users

* filter network based on user access

* format oauth error

* move user roles and groups

* fix get user v1 api

* move user mgmt func to pro

* add user auth type to user model

* fix roles init

* remove platform role from group object

* list only platform roles

* add network roles to invite req

* create default groups and roles

* fix middleware for global access

* create default role

* fix nodes filter with global network roles

* block selfupdate of groups and network roles

* delete netID if net roles are empty

* validate user roles nd groups on update

* set extclient permission scope when rag vpn access is set

* allow deletion of roles and groups

* replace _ with - in role naming convention

* fix failover middleware mgmt

* format oauth templates

* fetch route temaplate

* return err if user wrong login type

* check user groups on rac apis

* fix rac apis

* fix resp msg

* add validation checks for admin invite

* return oauth type

* format group err msg

* fix html tag

* clean up default groups

* create default rag role

* add UI name to roles

* remove default net group from user when deleted

* reorder migration funcs

* fix duplicacy of hosts

* check old field for migration

* from pro to ce make all secondary users admins

* from pro to ce make all secondary users admins

* revert: from pro to ce make all secondary users admins

* make sure downgrades work

* fix pending users approval

* fix duplicate hosts

* fix duplicate hosts entries

* fix cache reference issue

* feat: configure FRONTEND_URL during installation

* disable user vpn access when network roles are modified

* rm vpn acces when roles or groups are deleted

* add http to frontend url

* revert crypto version

* downgrade crytpo version

* add platform id check on user invites

---------

Co-authored-by: the_aceix <aceixsmartx@gmail.com>
2024-08-20 17:08:56 +05:30
abhishek9686
e8e795ce3c fix duplicate hosts 2024-08-16 15:12:20 +05:30
abhishek9686
ecf00dcd25 remove default net group from user when deleted 2024-08-12 14:58:53 +05:30
abhishek9686
ac8cfdf7a4 clean up default groups 2024-08-12 09:39:52 +05:30
abhishek9686
6078639699 format group err msg 2024-08-12 08:10:26 +05:30
abhishek9686
30e1272ae9 fix rac apis 2024-08-07 14:07:01 +05:30
abhishek9686
9eaffd1314 check user groups on rac apis 2024-08-06 23:09:42 +05:30
abhishek9686
239d0dfc6f replace _ with - in role naming convention 2024-08-02 15:02:35 +05:30
abhishek9686
aa6c0aee7b allow deletion of roles and groups 2024-08-02 14:59:51 +05:30
abhishek9686
43a0ca20d7 set extclient permission scope when rag vpn access is set 2024-08-02 14:25:58 +05:30
abhishek9686
9adb36b82c delete netID if net roles are empty 2024-08-02 13:53:41 +05:30
abhishek9686
d673c8ac8e fix nodes filter with global network roles 2024-08-02 13:08:34 +05:30
abhishek9686
c7fb3297fd create default role 2024-08-02 10:06:27 +05:30
abhishek9686
5f53887c0e fix middleware for global access 2024-08-01 17:42:37 +05:30
abhishek9686
3820e7dcfe create default groups and roles 2024-08-01 08:21:46 +05:30
abhishek9686
ce226122ef add network roles to invite req 2024-08-01 00:01:01 +05:30
abhishek9686
ad4b6f9cfc list only platform roles 2024-07-31 12:56:15 +05:30
abhishek9686
eed4a7fa18 remove platform role from group object 2024-07-31 12:33:46 +05:30
abhishek9686
a8c796b735 fix roles init 2024-07-31 11:33:09 +05:30
abhishek9686
0f97dc6c7f move user mgmt func to pro 2024-07-30 18:04:27 +05:30
abhishek9686
a7a431b36b move user roles and groups 2024-07-29 16:41:57 +05:30