Commit Graph

7786 Commits

Author SHA1 Message Date
carlosmonastyrski
3668c927a6 Merge pull request #4993 from Infisical/fix/pki-routes-cleanup
fix: improvements on certificate request endpoint
2025-12-09 13:06:04 -03:00
Piyush Gupta
c08cd406ba Merge branch 'main' of https://github.com/Infisical/infisical into feat/suborg-scope-support 2025-12-09 15:22:46 +05:30
varonix
a52a5c22f8 Merge pull request #5004 from Infisical/daniel/react-email-update
fix: update react email
2025-12-09 01:01:39 -05:00
Daniel Hougaard
f88e44fb4b fix: update react email 2025-12-09 09:49:44 +04:00
Victor Hugo dos Santos
29eaa64a1b Merge pull request #4889 from Infisical/feature/mongodb-secret-rotation
feature(secret-rotation): add mongodb app connection and secret rotation
2025-12-08 18:48:43 -03:00
x032205
2c736c7a5d address reviews 2025-12-08 15:45:38 -05:00
x032205
10e9eebc25 Merge branch 'main' into PLATFRM-114 2025-12-08 12:56:20 -05:00
Victor Hugo dos Santos
33b12ad417 Merge pull request #4989 from Infisical/feature/aws-iam-pam
feature(pam): add support to AWS IAM PAM
2025-12-08 14:52:55 -03:00
Victor Santos
2e4a1acd03 fix: enhance error messaging and improve resource selection in PAM components
- Updated error message in AWS IAM resource factory to include the PAM role ARN for better debugging.
- Added functionality to clear the search input when a value is selected in the ResourceSelect component, improving user experience.
- Refactored AwsIamAccountForm to fetch PAM resource details based on account or provided resourceId and resourceType, ensuring accurate role ARN usage in trust policy.
2025-12-08 14:28:05 -03:00
Victor Santos
d09849d9dc refactor: update PAM session status handling and improve enum definitions
- Changed PAM session status from 'Expired' to 'Ended' in the database update logic and service layer for clarity.
- Updated the PamSessionStatus enum to consolidate the definitions of 'Ended' and 'Expired', reflecting that 'Ended' can result from both user action and automatic expiration.
- Removed references to 'Expired' in the frontend components and adjusted related UI elements for consistency.
2025-12-08 12:19:19 -03:00
varonix
a6631217f1 Merge pull request #4990 from Infisical/fix-additional-privilege-old-projects
fix(additional-privileges): return correct project membership ID
2025-12-08 03:25:01 -05:00
x032205
e1ab9d4e42 lint 2025-12-08 00:35:19 -05:00
x032205
1d7ab2af69 request & grant cleanup job 2025-12-08 00:25:51 -05:00
x032205
4f41673c38 audit log all endpoints 2025-12-07 23:51:22 -05:00
x032205
bfb682b715 grant permissions 2025-12-07 22:26:41 -05:00
x032205
2fe316c81c approval request permissions 2025-12-07 22:16:31 -05:00
Victor Santos
a0718321e7 fix: improve error handling in AWS IAM role assumption methods
- Added try-catch blocks to handle errors during role assumption in both assumePamRole and assumeTargetRole functions.
- Enhanced error messages to include specific details about the failure, improving debugging and user feedback.
- Updated console URL generation to directly use the SigninToken from the token response, ensuring correct URL formation.
2025-12-07 20:48:15 -03:00
Victor Santos
3e77c33532 feat: enhance AWS IAM resource handling with new gateway access schema and improved project ID management
- Introduced GatewayAccessResponseSchema for consistent response structures across Postgres, MySQL, and SSH resources.
- Updated PAM account router to utilize the new schema, streamlining response validation.
- Refactored AWS IAM service to improve project ID handling during role assumption and credential management.
- Enhanced AWS IAM resource schemas to support gateway-specific configurations, improving flexibility and type safety.
2025-12-07 20:32:59 -03:00
=
75de20132e fix: resolved path incorrect joining 2025-12-07 20:09:55 +05:30
=
273a899500 fix: corrected update backend schema 2025-12-07 16:58:27 +05:30
=
2a783d3057 feat: returns the membership group information in permission 2025-12-07 14:40:14 +05:30
x032205
68eef39dd7 grant endpoints 2025-12-06 20:25:42 -05:00
x032205
c60c397e6a get rid of resource from policies, only using account path 2025-12-06 19:48:24 -05:00
x032205
6c7d708c98 generate pam access grant as part of post approval flow 2025-12-06 19:44:57 -05:00
x032205
89c1c5ffc4 cancel requests endpoint 2025-12-06 18:11:41 -05:00
x032205
e82d810ac7 allow resourceId to be undefined 2025-12-06 17:59:01 -05:00
x032205
8b22e7c417 lint & a few fixes 2025-12-06 17:55:07 -05:00
x032205
3694658203 swap durations to string format & a few db migration changes 2025-12-06 16:31:34 -05:00
Piyush Gupta
0aa5dd983c fix: invite to sub-org 2025-12-06 21:39:29 +05:30
Daniel Hougaard
0f3108f6fb fix: removed projectMembershipId entirely 2025-12-06 09:37:25 -05:00
=
6a292838ff fix: corrected folder path 2025-12-06 14:31:33 +05:30
x032205
bb60fb2f08 approval requests 2025-12-06 14:21:49 +05:30
x032205
e34df4c6e5 list policies endpoint 2025-12-06 14:21:49 +05:30
x032205
24f7445d56 fix policy matching 2025-12-06 14:21:49 +05:30
x032205
5859293c33 policy api improvements 2025-12-06 14:20:49 +05:30
x032205
18256d6af2 partial factory, endpoint, and service implementation 2025-12-06 14:20:48 +05:30
x032205
62cd45d0c5 Database schema 2025-12-06 14:11:54 +05:30
Carlos Monastyrski
0eb4f21a92 Clean renew and certificate request endpoints 2025-12-06 02:01:07 -03:00
Victor Santos
8c3b36f15c refactor(mongodb-credentials): replace SSL terminology with TLS and enhance MongoDB client creation logic 2025-12-05 19:35:23 -03:00
Victor Santos
6db5188b36 feat: update AWS IAM session duration handling and improve account access functionality
- Changed session duration parameter from maxSessionDuration to defaultSessionDuration for consistency.
- Refactored AWS STS client creation to use a hardcoded default region, simplifying the configuration.
- Enhanced PAM account access modal to include account path and project ID in the access request.
- Updated various components and schemas to reflect the new session duration naming and improve type safety.
2025-12-05 16:56:55 -03:00
Piyush Gupta
1269e7c245 Merge pull request #4976 from Infisical/chore/external-kms-api-refactor
chore: external-kms API refactor
2025-12-06 01:23:05 +05:30
Piyush Gupta
8b32abaf85 fix: assume privileges 2025-12-06 01:22:50 +05:30
carlosmonastyrski
bf93644ce0 Merge pull request #4992 from Infisical/fix/pki-renewals
fix: renewals for internal CAs and minor improvement on the export certificate modal
2025-12-05 15:03:24 -03:00
Victor Santos
feb1d9b854 Merge branch 'main' into feature/aws-iam-pam 2025-12-05 13:29:30 -03:00
Carlos Monastyrski
d8feb988ea Remove redundant null check 2025-12-05 13:06:56 -03:00
Carlos Monastyrski
c81116ff60 Fix renewal issue for internal CAs and improve export certificate modal 2025-12-05 12:48:25 -03:00
Piyush Gupta
a6255d47b2 fix: review changes 2025-12-05 21:09:37 +05:30
Piyush Gupta
3f70897593 Merge pull request #4970 from Infisical/chore/pam-access-account-with-path
chore: updates pam access account endpoint to use account path instead of id [PAM-64]
2025-12-05 20:03:33 +05:30
Piyush Gupta
fd1a3d5d12 fix: review changes 2025-12-05 19:39:21 +05:30
Piyush Gupta
58fbbe0d91 Merge branch 'main' of https://github.com/Infisical/infisical into chore/external-kms-api-refactor 2025-12-05 18:01:43 +05:30