perf(oidc): optimize the introspection endpoint (#6909)

* get key by id and cache them

* userinfo from events for v2 tokens

* improve keyset caching

* concurrent token and client checks

* client and project in single query

* logging and otel

* drop owner_removed column on apps and authN tables

* userinfo and project roles in go routines

* get  oidc user info from projections and add actions

* add avatar URL

* some cleanup

* pull oidc work branch

* remove storage from server

* add config flag for experimental introspection

* legacy introspection flag

* drop owner_removed column on user projections

* drop owner_removed column on useer_metadata

* query userinfo unit test

* query introspection client test

* add user_grants to the userinfo query

* handle PAT scopes

* bring triggers back

* test instance keys query

* add userinfo unit tests

* unit test keys

* go mod tidy

* solve some bugs

* fix missing preferred login name

* do not run triggers in go routines, they seem to deadlock

* initialize the trigger handlers late with a sync.OnceValue

* Revert "do not run triggers in go routines, they seem to deadlock"

This reverts commit 2a03da2127.

* add missing translations

* chore: update go version for linting

* pin oidc version

* parse a global time location for query test

* fix linter complains

* upgrade go lint

* fix more linting issues

---------

Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com>
This commit is contained in:
Tim Möhlmann
2023-11-21 14:11:38 +02:00
committed by GitHub
parent ad3563d58b
commit ba9b807854
103 changed files with 3528 additions and 808 deletions

View File

@@ -441,6 +441,7 @@ Errors:
UserSession:
NotFound: UserSession не е намерена
Key:
NotFound: Ключът не е намерен
ExpireBeforeNow: Срокът на годност е в миналото
Login:
LoginPolicy:

View File

@@ -428,6 +428,7 @@ Errors:
UserSession:
NotFound: UserSession nenalezena
Key:
NotFound: Klíč nenalezen
ExpireBeforeNow: Datum expirace je v minulosti
Login:
LoginPolicy:

View File

@@ -429,6 +429,7 @@ Errors:
UserSession:
NotFound: Benutzer Sitzung konnte nicht gefunden werden
Key:
NotFound: Schlüssel nicht gefunden
ExpireBeforeNow: Das Ablaufdatum liegt in der Vergangenheit
Login:
LoginPolicy:

View File

@@ -429,6 +429,7 @@ Errors:
UserSession:
NotFound: UserSession not found
Key:
NotFound: Key not found
ExpireBeforeNow: The expiration date is in the past
Login:
LoginPolicy:

View File

@@ -429,6 +429,7 @@ Errors:
UserSession:
NotFound: UserSession no encontrado
Key:
NotFound: Clave no encontrada
ExpireBeforeNow: La fecha de caducidad está en el pasado
Login:
LoginPolicy:

View File

@@ -429,6 +429,7 @@ Errors:
UserSession:
NotFound: UserSession non trouvé
Key:
NotFound: Clé introuvable
ExpireBeforeNow: La date d'expiration est dans le passé
Login:
LoginPolicy:

View File

@@ -430,6 +430,7 @@ Errors:
UserSession:
NotFound: Sessione non trovata
Key:
NotFound: Chiave non trovata
ExpireBeforeNow: La data di scadenza è passata
Login:
LoginPolicy:

View File

@@ -418,6 +418,7 @@ Errors:
UserSession:
NotFound: ユーザーが見つかりません
Key:
NotFound: キーが見つかりません
ExpireBeforeNow: 有効期限が過去です
Login:
LoginPolicy:

View File

@@ -429,6 +429,7 @@ Errors:
UserSession:
NotFound: Корисничката сесија не е пронајдена
Key:
NotFound: Клучот не е пронајден
ExpireBeforeNow: Датумот на истекување е во минатото
Login:
LoginPolicy:

View File

@@ -429,6 +429,7 @@ Errors:
UserSession:
NotFound: Sesja użytkownika nie znaleziona
Key:
NotFound: Klucz nie odnaleziony
ExpireBeforeNow: Data ważności jest już przeszła
Login:
LoginPolicy:

View File

@@ -427,6 +427,7 @@ Errors:
UserSession:
NotFound: Sessão do usuário não encontrada
Key:
NotFound: Chave não encontrada
ExpireBeforeNow: A data de expiração está no passado
Login:
LoginPolicy:

View File

@@ -418,6 +418,7 @@ Errors:
UserSession:
NotFound: UserSession не найден
Key:
NotFound: Ключ не найден
ExpireBeforeNow: Срок годности в прошлом
Login:
LoginPolicy:

View File

@@ -429,6 +429,7 @@ Errors:
UserSession:
NotFound: 用户会话不存在
Key:
NotFound: 找不到钥匙
ExpireBeforeNow: 过期日期是过去的无效日期
Login:
LoginPolicy: