Commit graph

72 commits

Author SHA1 Message Date
Dimitri POSTOLOV
bd5496ebff
[🔧 ESLint] several different rules fixes (#737) 2022-12-28 21:38:03 +01:00
Dimitri POSTOLOV
7ad5e26c34
[🔧 ESLint] import sort (#736) 2022-12-28 20:22:54 +01:00
Dotan Simha
20edc8c5e5
Partial dependencies upgrade and cleanup for old packages (#904) 2022-12-28 00:36:08 +02:00
Dotan Simha
a84d68bd43
Remove unused dependecy @pulumi/azure (#882) 2022-12-24 07:46:58 +00:00
renovate[bot]
0f2500c147
fix(deps): update dependency @pulumi/pulumi to v3.50.2 (#866)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-12-24 09:21:56 +02:00
Dotan Simha
1171b6fa34
Adjustments to Pulumi code to support more pre-prod envs (#845) 2022-12-22 14:00:10 +02:00
renovate[bot]
727bd88f37
fix(deps): update dependency @pulumi/kubernetes to v3.23.1 (#849)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-12-22 09:46:10 +02:00
Dotan Simha
69ff4d3a24
Replace tgz artifacts with Docker images and refactor all CI pipelines (#808) 2022-12-20 16:34:46 +02:00
Kamil Kisiela
137c9ae2c6
Update cloudflare.ts 2022-12-19 10:34:58 +01:00
Kamil Kisiela
2a28fd5826
Use Engine Analytics in CDN Worker (#681) 2022-12-19 10:01:37 +01:00
Dotan Simha
b3b7a68df1
Latest pulumi deps (#807) 2022-12-14 12:59:39 +01:00
Dotan Simha
deb4a7ff92
Ignore CSP and security headers for CDN endpoints (#785) 2022-12-12 12:45:45 +01:00
Dimitri POSTOLOV
01124cd5a3
[🔧 ESLint] fixes for unicorn/numeric-separators-style rule (#735) 2022-12-08 08:18:48 +01:00
Kamil Kisiela
3c88797dd6
Add www to youtube.com in the frame-src 2022-12-07 12:59:03 +01:00
Kamil Kisiela
6829d7a981
Allow YouTube 2022-12-07 12:29:40 +01:00
Dotan Simha
3a37286215
Remove landing page from deployment configuration (#747) 2022-12-06 11:32:43 +00:00
Kamil Kisiela
1d9f6225aa
Customize app's url when self-hosting (#734) 2022-12-06 10:25:12 +01:00
Laurin Quast
265313cd8d
feat: show cdn stuff for self-hosted version (#725) 2022-12-02 09:19:57 +01:00
Laurin Quast
8412a34e1a
new artifacts API (#692)
Co-authored-by: Kamil Kisiela <kamil.kisiela@gmail.com>
2022-12-01 11:08:52 +01:00
renovate[bot]
b2bb73031e
Update clickhouse/clickhouse-server Docker tag to v22.11 (#695)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Kamil Kisiela <kamil.kisiela@gmail.com>
2022-11-26 14:50:59 +01:00
renovate[bot]
1afe0ec73a
Update dependency @theguild/prettier-config to v1 (#676)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Kamil Kisiela <kamil.kisiela@gmail.com>
2022-11-24 10:00:41 +00:00
Kamil Kisiela
83343333e8 Include *.google-analytics.com in CSP 2022-11-22 13:00:57 +01:00
Dotan Simha
3ccff46f0f
Added missing PodDisruptionBudget, upgrade cert-manager to latest (#656) 2022-11-18 11:15:14 +02:00
Laurin Quast
8a93ed28b8
update supertokens to 4.2 (#618) 2022-11-09 11:07:10 +01:00
Laurin Quast
0c3acec055
feat: revoke all sessions after a password reset (#606) 2022-11-08 16:45:21 +01:00
Kamil Kisiela
a959522d03
envoy - bump timeoutPolicy to 60s and retry twice on reset (#614)
I updated the helm chart `7.8.0 -> 10.0.0`
Whenever a request is dropped because of connection reset, we do a retry (max 2) now.
The timeout (response) is higher `60s -> 15s` for all upstream routes.
2022-11-08 15:12:22 +01:00
Laurin Quast
9f40dc4cea
Update cloudflare-security.ts (#607) 2022-11-08 13:28:18 +01:00
Kamil Kisiela
51cb4bb412
Request Proxy in CF Worker (#517) 2022-11-07 14:27:19 +01:00
Laurin Quast
bf11f56469
enable organization <-> oidc linking feature (#605) 2022-11-07 11:51:01 +01:00
Kamil Kisiela
6745322c17
Enable OIDC 2022-11-04 17:07:32 +01:00
Kamil Kisiela
67da4494f4
Revert "enable feature in deployment (#601)" (#602)
This reverts commit f91cb55508.
2022-11-04 16:40:37 +01:00
Laurin Quast
f91cb55508
enable feature in deployment (#601) 2022-11-04 15:07:19 +00:00
Laurin Quast
d5c9a8fad5
remove okta deployment config (#599) 2022-11-04 12:37:21 +00:00
Laurin Quast
991c82693b
feat: OIDC organisation integration (#524)
* feat: support login via okta

* add deployment config

* feat: automatically start okta login when visiting /auth with okta provider query parameter

* remove trailing slash from base url

* laurin pls

* ...

* adjust deployment url

* we dont need this

* docs: document how to enabled Google and GitHub social login (#511)

* docs: document how to enabled Google and GitHub social login

* Apply suggestions from code review

* Apply suggestions from code review

* docs: add Okta instructions

* fix typo

* add database migration

* feat: env decoding

* auto generate id

* add generates types for the postgres table

* implement crud graphql fields for the oidc integration entites

* add unique constraint for the oidc domain column

* use correct sql query for updating an oidc integration

* return organization from deleteOIDCIntegration ok result

* add crud forms to the settings page

* update integration test fixture value

* drop unique constraint for oidc_integrations.domain as this would allow a malicous user to block another account from using a domain

* move notice to isolated component

* apply url normalization in a central place

* implement supertokens provider and overrides for dynamic oidc provider integrations

* relocate code to correct files

* prettify oidc crud forms

* replace Query.isOIDCIntegrationFeatureEnabled with the Organization.viewerCanManageOIDCIntegration field

* do not show oidc integrations for personal organizations + disable crud endpoints if the feature is disabled

* load oidc integration for the supertokens flow via trpc from the server

* prepare encryption secret within constructor

* add user to organization upon oidc login

* login via oidc does not create a personal organization

* redirect oidc user to oidc organization

* disallow oidc users to create an organization

* disallow oidc accounts joining another organization

* add test for updating an oidc integration

* enhance ui

* add documentation for OIDC SSO

* add more tests

* import Callout component

* update snapshots

* rename field User.isLinkedToOIDCIntegration to User.canSwitchOrganization to be more decriptive

* add traling new line

* gracefully handle unique constraint

* upgrade supertokens-auth-react and adjust the code in order to remove the global preApiHook

* sync image versions with tests

* remove obsolete comment

* rename database column

* bruv

* add test for oidc user deletion
2022-11-03 16:45:17 +01:00
Denis Badurina
18f435619c
@hive/deployment is a private package (#575) 2022-11-02 03:11:18 +02:00
Dimitri POSTOLOV
12ceda69dc
Use pnpm instead of yarn (#477)
Co-authored-by: enisdenjo <badurinadenis@gmail.com>
Co-authored-by: Denis Badurina <denis@domonda.com>
2022-11-01 02:11:53 +02:00
Dotan Simha
5773754785
Update all Pulumi dependencies to latest and fix deployment tsconfig.json (#541) 2022-10-26 10:27:35 +03:00
Kamil Kisiela
e85d8220a7
Ensure user and personal org creation after successful sign up/in (#518) 2022-10-25 16:12:43 +02:00
Dotan Simha
ed44ec470a
fix env name (#523) 2022-10-21 03:43:29 +00:00
Dotan Simha
846e76cde5
Fixes for CSP on Safari, made hostname inference dynamic, remove headway scripts, update and adjust @pulumi/cloudflare setting to use latest version (#522) 2022-10-21 05:33:50 +03:00
Dotan Simha
e697961d6f
Manage security headers through CloudFlare Transform Rule (for SaaS) (#509)
Co-authored-by: Kamil Kisiela <kamil.kisiela@gmail.com>
2022-10-20 08:04:05 +00:00
Kamil Kisiela
bf4b35c8c8
Scrape non-200 from Envoy (#513) 2022-10-19 15:38:28 +02:00
Kamil Kisiela
57ed1a8edb
Use 6 replicas of usage-ingestor 2022-10-17 17:39:25 +02:00
Kamil Kisiela
79187c8f19
Use Sentry in CF Workers (#460) 2022-10-07 12:08:29 +02:00
Kamil Kisiela
dbb5d7ef0a
Fix missing ClickHouse mirror (cloud) (#461) 2022-10-06 15:05:40 +02:00
Kamil Kisiela
b9d8e2ceac
Fix the new env vars setup (#450)
* Use 5432 as default port of pg

* Fix ssl

* fix: only set heartbeat env variable if heartbeat is enabled (#446)

* fix: only set heartbeat env variable if heartbeat is enabled

* fix: default port

Co-authored-by: Kamil Kisiela <kamil.kisiela@gmail.com>

* POSTGRES_SSL everywhere

* oh come on

* Fix Kafka connection

* Fix DOCS_URL

* Fix docs url

* But I can feel your heartbeat

I can feel your heartbeat (he said to me)

'I can feel your heartbeat' (running through me)

Feel your heartbeat

She said, 'I can feel your heartbeat' (she said to me)

'I can feel your heartbeat' (she said to me)

'I can feel your heartbeat' (running through me)

Your heartbeat, feel your heartbeat

* Your heartbeat, your heartbeat

Co-authored-by: Laurin Quast <laurinquast@googlemail.com>
2022-10-05 11:48:05 +02:00
Laurin Quast
7656b7957d
feat: clean app env (#422)
* feat: document environment variables

* more env documentation

* wip

* add noop for backend env

* typo

* feat: embed environment validation/parsing in built app

* fix the sentry integration 😌

* feat: use env

* feat: decode the usage service environment

* feat: decode the webhooks service environment

* feat: disallow process.env

* feat: decode the tokens service environment

* feat: decode the stripe-billing service environment

* feat: decode server service environment

* feat: decode schema service environment

* feat: decode rate-limit service environment

* feat: decode usage-estimator service environment

* feat: decode emails service environment

* adjust env

* remove commented out code

* adjust env variable name

* use separate env variables

* env fixes

* more environmental stuff :)

* ...

* replace POSTGRES_CONNECTION_STRING with specific environment variables

* handle optional clickhouse (for now :)

* add missing POSTGRES_DB environment variable

* make ENVIRONMENT optional

* the other matters lol

* feat: support delivering mails via SMTP (#412)

* feat: optional CDN (#410)

* feat: optional CDN

* enable CDN in deployment

* enable the CDN in integration tests

* add sendmail provider

* remove unused env variables from the deployment

* only show login alert when legacy auth0 migration is enabled

* feat: make TOKENS_ENDPOINT mandatory and RATE_LIMIT_ENDPOINT optional for usage service

* feat: upgrade supertokens and enable server side email confirmation (#423)

* feat: upgrade supertokens and enable server side email confirmation

* feat: opt into required email verification

* docs: self hosting (#428)

* docs: self-hosting quick start

* Update packages/web/docs/pages/self-hosting/get-started.mdx

Co-authored-by: Kamil Kisiela <kamil.kisiela@gmail.com>

Co-authored-by: Kamil Kisiela <kamil.kisiela@gmail.com>

Co-authored-by: Kamil Kisiela <kamil.kisiela@gmail.com>

* feat: optional GitHub and Slack environment variables (#440)

* feat: optional github integration environment variables

* feat: optional slack integration (#441)

* use latest stable supertokens

Co-authored-by: Kamil Kisiela <kamil.kisiela@gmail.com>
2022-10-04 14:30:21 +02:00
Laurin Quast
1efe248632
feat: upgrade to supertokens core 4.1 (#432) 2022-10-04 10:47:53 +02:00
Kamil Kisiela
549072506e
Use 4 replicas of usage-ingestor 2022-10-03 20:49:58 +02:00
Kamil Kisiela
2c5a2896bd
Update usage-ingestor.ts 2022-09-30 11:11:30 +02:00