Spike Curtis 1a41608035 fix: stop extending API key access if OIDC refresh is available (#17878) ...

fixes #17070

Cleans up our handling of APIKey expiration and OIDC to keep them separate concepts. For an OIDC-login APIKey, both the APIKey and OIDC link must be valid to login. If the OIDC link is expired and we have a refresh token, we will attempt to refresh.

OIDC refreshes do not have any effect on APIKey expiry.

https://github.com/coder/coder/issues/17070#issuecomment-2886183613 explains why this is the correct behavior.

2025-05-19 12:05:35 +04:00

..

loggermw

chore: update testutil chan helpers (#17408)

2025-04-16 10:37:09 -06:00

patternmatcher

feat: allow external services to be authable (#9996)

2023-10-03 14:04:39 +00:00

actor_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

actor.go

feat: implement provisioner auth middleware and proper org params (#12330)

2024-03-04 15:15:41 -06:00

apikey_test.go

fix: stop extending API key access if OIDC refresh is available (#17878)

2025-05-19 12:05:35 +04:00

apikey.go

fix: stop extending API key access if OIDC refresh is available (#17878)

2025-05-19 12:05:35 +04:00

authorize_test.go

chore: create type for unique role names (#13506)

2024-06-11 08:55:28 -05:00

authz_test.go

fix: exit reset password request before passwords are compared (#13856)

2024-07-09 14:28:39 -05:00

authz.go

chore: add x-authz-checks debug header when running in dev mode (#16873)

2025-04-10 11:36:27 -06:00

chat_test.go

feat: add database tables and API routes for agentic chat feature (#17570)

2025-05-02 17:29:57 +01:00

chat.go

feat: add database tables and API routes for agentic chat feature (#17570)

2025-05-02 17:29:57 +01:00

clitelemetry.go

refactor(coderd/telemetry): move CLI telemetry to cli/telemetry (#9517)

2023-09-04 21:42:45 +03:00

cors_test.go

chore: move app URL parsing to its own package (#11651)

2024-01-17 10:41:42 -06:00

cors.go

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

csp_test.go

chore: add deployment config option to append custom csp directives (#15596)

2024-11-21 11:53:53 -06:00

csp.go

chore: add deployment config option to append custom csp directives (#15596)

2024-11-21 11:53:53 -06:00

csrf_test.go

chore: add custom samesite options to auth cookies (#16885)

2025-04-08 14:15:14 -05:00

csrf.go

chore: add custom samesite options to auth cookies (#16885)

2025-04-08 14:15:14 -05:00

experiments.go

feat: add port-sharing backend (#11939)

2024-02-13 09:31:20 -05:00

externalauthparam_test.go

chore: move /gitauth to /externalauth on the frontend (#9954)

2023-09-30 14:30:01 -05:00

externalauthparam.go

chore: move /gitauth to /externalauth on the frontend (#9954)

2023-09-30 14:30:01 -05:00

groupparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

groupparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

hsts_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

hsts.go

chore: enable exhaustruct linter (#8403)

2023-07-11 14:30:33 +01:00

httpmw_internal_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

httpmw.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

notificationtemplateparam.go

feat: add notification preferences database & audit support (#14100)

2024-08-05 16:18:45 +02:00

oauth2_test.go

chore: add custom samesite options to auth cookies (#16885)

2025-04-08 14:15:14 -05:00

oauth2.go

chore: add custom samesite options to auth cookies (#16885)

2025-04-08 14:15:14 -05:00

organizationparam_test.go

chore: fetch workspaces by username with organization permissions (#17707)

2025-05-08 14:41:17 -05:00

organizationparam.go

chore: fetch workspaces by username with organization permissions (#17707)

2025-05-08 14:41:17 -05:00

prometheus_test.go

chore: add missing prometheus tests for UNKNOWN/STATIC paths (#17446)

2025-04-17 13:50:18 +02:00

prometheus.go

feat: add path & method labels to prometheus metrics for current requests (#17362)

2025-04-16 11:10:39 +02:00

provisionerdaemon.go

chore: improve testing coverage on ExtractProvisionerDaemonAuthenticated middleware (#15622)

2024-11-26 04:02:20 +01:00

provisionerkey.go

chore: add provisioner key crud apis (#13857)

2024-07-16 13:27:12 -04:00

ratelimit_test.go

chore: create type for unique role names (#13506)

2024-06-11 08:55:28 -05:00

ratelimit.go

chore: merge authorization contexts (#12816)

2024-03-29 10:14:27 -05:00

realip_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

realip.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

recover_test.go

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

recover.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

requestid_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

requestid.go

feat: add request_id to HTTP trace spans (#10145)

2023-10-09 14:05:10 -05:00

templateparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

templateparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

templateversionparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

templateversionparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

userparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

userparam.go

feat: remove site wide perms from creating a workspace (#17296)

2025-04-09 14:35:43 -05:00

workspaceagent_test.go

chore: join owner, template, and org in new workspace view (#15116)

2024-10-22 09:20:54 -05:00

workspaceagent.go

feat: add API key scope to restrict access to user data (#17692)

2025-05-15 15:32:52 +01:00

workspaceagentparam_test.go

chore: join owner, template, and org in new workspace view (#15116)

2024-10-22 09:20:54 -05:00

workspaceagentparam.go

feat: extend request logs with auth & DB info (#17304)

2025-04-15 13:27:23 +02:00

workspacebuildparam_test.go

chore: join owner, template, and org in new workspace view (#15116)

2024-10-22 09:20:54 -05:00

workspacebuildparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

workspaceparam_test.go

chore: join owner, template, and org in new workspace view (#15116)

2024-10-22 09:20:54 -05:00

workspaceparam.go

feat: extend request logs with auth & DB info (#17304)

2025-04-15 13:27:23 +02:00

workspaceproxy_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

workspaceproxy.go

ci: bump the github-actions group with 4 updates (#15359)

2024-11-05 19:43:41 +11:00

workspaceresourceparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

workspaceresourceparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00