Daniel Nephin

draft: Demonstrate version handlers as alternative to apimigrator

1

This approach is functionally a superset to apimigrators. It supports every possible migration, because everything is simply a gin handler. It continues to use the existing version header. With this...

In #2584 we identified `gorm.AutoMigrate` is the most significant source of time when running tests against postgreSQL. By replacing `AutoMigrate` we can more easily run all of our tests against...

api: include user/group name in ListGrants response

3

The `ListGrants` api response includes a subject, but the subject is the ID of an identity. In the connector we have to lookup group, user, group, and/or provider to get...

@j-sneh noticed this while working on #2767 Today we have the following: * `access.DeleteIdentity` - handles removing credentials, access keys, and grants associated with the identity, and #2767 adds removal...

security: Native key provider is incompatible with some secret providers

1

## Describe the bug The `native` key provider (currently called `NativeSecretProvider`) accepts a `secretProvider` , but is partially incompatible with the `env` provider and incompatible with the `plaintext` provider because...

Proposal: change how we accept secrets from config

1

### Background Today we can accept secrets (sensitive values that should not be checked into git) from config, command line flags, or environment vars using a micro-format. The format is...

PR #2702 introduced a new `RequestContext` type. This struct allows us to communicate details about the request using a strongly typed interface (as apposed to `gin.Context` which is mutable and...

api: remove or replace package-level static cache of InfraProvider and ConnectorIdentity

2

`data.infraConnectorCache` and `data.infraProviderCache` are package-level (aka static) variables that cache the ID of these models. Static variables like this make testing more difficult, because every test that uses them has...

docs: add a section to the API reference for introducing common concepts

3

Most API reference docs start with some introduction to concepts like versioning, common headers, and authentication. Ex: * https://docs.github.com/en/rest/overview/other-authentication-methods * https://stripe.com/docs/api * https://www.consul.io/api-docs Right now we don't have a place...