* feat(workspaces): add workspace sso feature flag
* feat(workspaceSso): wip validate sso
* feat(workspaces): validate and add sso provider to the workspace with user sso sessions
* feat(workspaces): validate and add sso provider to the workspace with user sso sessions
* WIP
* fix(sso): restructure to handle all branches at end of flow
* fix(sso): add and validate emails used for sso
* fix(sso): park progress
* chore(workspaces): review sso login/valdate
* fix(sso): adjust validate url
* chore(sso): auth header puzzle
* fix(sso): happy-path config
* chore(gql): gqlgen
* fix(sso): almost almost
* fix(sso): auth endpoint
* a lil more terse
* fix(sso): light at the end of the tunnel
* fix(sso): improve catch block error messages
* fix(sso): session lifespan => validUntil
* fix(sso): I think we've got it
* feat(sso): limited workspace values for public sso login
* fix(sso): use factory functions
* fix(sso): til decrypt is single-use
* fix(sso): correct usage of access codes
* fix(sso): use finalize middleware in all routes
* chore(sso): cheeky tweak
* fix(sso): move some types around
* fix(sso): stencil final shape I'm sleepy
* fix(sso): more factories more factories
* fix(sso): on to final boss of factories
* fix(sso): needs a haircut but she works
* fix(sso): init rest w function, not side-effects
* fix(sso): /authn => /sso
* chore(sso): errors
* chore(sso): test test test
* chore(sso): test all the corners
---------
Co-authored-by: Gergő Jedlicska <gergo@jedlicska.com>
Co-authored-by: Mike Tasset <mike.tasset@gmail.com>
* basic raygun setup
* testing seq logging
* minor fixes
* more accurate user identification
* logrocket adjustments
* speedcurve seems to work?
* added debugbear
* minor cleanup
* chore(helm chart): adds new web app analytics ids/keys to fe2 env vars
- assumes none are secrets
* Quote all secrets to prevent interpretation as digits
---------
Co-authored-by: Iain Sproat <68657+iainsproat@users.noreply.github.com>
* feat(server): adding userId to req logs
* feat(server): adding userId to gql logs
* feat(fe2): adding userId to logger calls
* feat(fe2): more userId logging additions
* even more thorough logging in FE2
* more adjustments
* add country to fe2 logs
* added prop to help distinguish gql req time logs
* get initial SSR req id in CSR logs
* improved 'fetch failed' error
* better rate limit error message
* minor improvements
* fix: fe2 auth error page + various minor UI bugs
* clean up & reporting failing email to fe
* new mutation to resend verification as guest
* email text updates
* fixing issues brought up by agi
* more text fixes
* swapping out space-XXX for gap-XXX
* feat: user guest role switching in FE1
* removed stream create buttons
* fe1 done
* fe1 - specifying role in invite dialogs
* fe1 - bulk invites
* WIP FE2 changes
* fe1: allow role select condition fixes
* xtra limitations on createForOnboarding
* more invite creation validations
* no longer able to set guest as project owner in invite
* preparations for server role select in invite dialog
* team management dialog done
* server invite dialog updated
* hiding invite dialog
* fixed mocks
* fix(fe2): log out on invalid auth token on any GQL call
* fix(fe1): redirecting to login page on any 403 GQL req
* WIP invalid token
* stricter toker invalidation checks in FE1
* stricter token check in FE2 as well