Skip to content

Conversation

@grafana-delivery-bot
Copy link
Contributor

Backport 53f4803 from #111636


What is this feature?
Refactor oauth_token handling to support the OAuth passthrough when Grafana is called from the image renderer.

Why do we need this feature?
Unfortunately, this use case was not handled with the changes introduced in Grafana v11.5.

Who is this feature for?

Which issue(s) does this PR fix?:

Fixes #

Special notes for your reviewer:

Please check that:

  • It works as expected from a user's perspective.
  • If this is a pre-GA feature, it is behind a feature toggle.
  • The docs are updated, and if this is a notable improvement, it's added to our What's New doc.

@grafana-delivery-bot grafana-delivery-bot bot requested a review from a team as a code owner October 7, 2025 09:02
@grafana-delivery-bot grafana-delivery-bot bot requested review from colin-stuart and dmihai and removed request for a team October 7, 2025 09:02
@github-actions

This comment has been minimized.

* devenv: fix volumes section when sources don't contain one

* wip

* Working correctly with improvedExternalSessionHandling on

* Remove not needed lines

* Working with the old flow, tests

* Handle compatibility with the feature toggle, tests wip

* Tests

* Cleanup

* Address feedback

* Align tests

* Add comment

* Fix issue with session removal after the invalidation of tokens

* Remove commented out code

* clean up

(cherry picked from commit 53f4803)
@mgyongyosi mgyongyosi force-pushed the backport-111636-to-release-12.2.1 branch from f19e752 to 6211632 Compare October 9, 2025 13:03
@github-actions
Copy link
Contributor

github-actions bot commented Oct 9, 2025

😢 zizmor failed with exit code 14.

Expand for full output
error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/storybook-a11y.yml:42:7
   |
 2 | / on:
 3 | |   pull_request:
 4 | |   push:
 5 | |     branches:
 6 | |       - main
 7 | |       - release-*.*.*
   | |_____________________- generally used when publishing artifacts generated at runtime
...
42 |       - uses: actions/setup-node@v4
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^ cache enabled by default here
   |
   = note: audit confidence → Low

303 findings (76 ignored, 226 suppressed): 0 informational, 0 low, 0 medium, 1 high

@mgyongyosi mgyongyosi merged commit 05e3bef into release-12.2.1 Oct 9, 2025
162 of 165 checks passed
@mgyongyosi mgyongyosi deleted the backport-111636-to-release-12.2.1 branch October 9, 2025 13:47
@grafana-delivery-bot
Copy link
Contributor Author

🚀 Your submission is now being built and packaged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant