* Actions multimethod refactor.

* Fix function called with wrong number of args

* Test fixes

* Bulk create action (second pass)

* Appease clj-kondo

* Fix bulk insert happy path

* Implement/fix everything

* Linter and test fixes 



* Fix bad metadata (thanks Eastwood!)

* Add some comments about why we're doing what we're doing

* Serdes v2 for Native Query Snippets (#23961)

Also standardizes date/time output to `ZonedDateTime`, rather than whatever the JDBC happens to return.

Co-authored-by: Braden Shepherdson <Braden.Shepherdson@gmail.com>

This reverts commit 1088634f.

Co-authored-by: Alexander Polyankin <alexander.polyankin@metabase.com>

* logout when session expires, login when session appears

* add setting UI

* Add last_activity column to session table

* Start implementing session middleware to check for expired sessions

* Change last_activity field to include timezone offset

* Update session middleware to check user activity timeout

* Update last_activity after checking the timeout, or not at all if the setting is nil

* Move session-timeout settings to server.middleware.session

* Handcode timeout for testing

* Fix migrations validation error

* Fix whitespace

* Change session timeout to use metabase.TIMEOUT cookie with expiry

* Remove migration for last_activity column on session table

* Revert changes to logout endpoint

* Revert change to Session model pre-update

* Remove tap>

* Fix tests to include cookie value

* Fix timeout when user is logged out. Timeout loop should only start when a user is logged in

* Update comment and date format

* Store the session-timeout setting as json and convert it to seconds on the fly

* Set zoned date time to use GMT instead of default time zone

* Refactor for testing

* refactor session listener (#23686)

* remove old session listener

* Clear the timeout cookie when user signs out

* Clear session cookie if the timeout cookie expires

* fe tweaks

* Update expires attribute for session and timeout cookies together

* Reapply minimum limit on session-timeout

* Rename functions and fix lint warnings

* Fix resetting session-timeout

* Fix sign out

* Fix tests

* Whitespace

* Get full-app-embeds working

* Add test for embedded session

* session timeout ui tweaks

* fix security issue

* Fix test

* Fix tests

* Do not redirect to "/" if there isn't any redirect URL

* Add test for session-cookies setting

* Fix bug when toggling off timeout and adjust tests

Co-authored-by: Aleksandr Lesnenko <alxnddr@gmail.com>
Co-authored-by: Aleksandr Lesnenko <alxnddr@users.noreply.github.com>

* Actions multimethod refactor.

* Fix function called with wrong number of args

* Test fixes

* Appease clj-kondo

* Remove u/optional

* Spec => `s/` and Schema => `schema/`

* Fix docstring generation.

* Another test fix 

* Remove unused namespaces

* Parallelize some of the defendpoint tests

* Remove u/optional

* Spec => `s/` and Schema => `schema/`

* Fix docstring generation.

* Another test fix 

* Remove unused namespaces

* Parallelize some of the defendpoint tests

This reverts commit a9a1a49c.

* Handle archived and models reverted to regular questions

Should not refresh these and should unpersist them

Updated the signature of `refresh!` in the `Refresher` protocol to take
a card instead of a dataset query so that the tests could use the card's
id for checks. The `dispatching-refresher` then calls the
`ddl.i/refresh!` multimethod with the dataset_query from the card so its
a very surface level refactoring.

Updated the stats from refreshing to be a bit smarter. It used to have a
`when` block for its check against the model's state. this meant on a
state change that prevented refreshing it would throw away accumulated
stats. Whoops. Now it records that as a skip. The check itself has grown
to check archived and dataset status of the underlying card.

* Block api/card/card-id/refresh from refreshing archived/unmodeled

From page http://localhost:3000/admin/tools/model-caching we have a list
of PersistedInfo records and a way to refresh them. We've already
prevented the scheduled tasks from refreshing archived/unmodeled
questions and now the api won't let a user manually do it either.

* ns linter demands allegiance

* Include card archived and dataset information on api/persist

Include information so that the frontend can disallow refreshing models
based on cards that are archived or no longer archived. The response
from `http://localhost:3000/api/persist?limit=20&offset=0`

 now includes
two new attributes on the items in the data array: `"card_archived"` and
`"card_dataset"`. I'm happy to rename if desired.

These are present so that if `card_archived=true` or
`card_dataset=false` we should not allow refreshing the persisted
model. The API will already reject this request with a 400 so we should
let the user know why this is no longer valid.

I'm happy to leave them as the regular property names `archived` and
`dataset` but put them with the `card_` prefix so it is clear that these
are not properties of a PersistedInfo but the card that the persisted
info references

```
{
  "data": [
    {
      "definition": {
        "table-name": "model_3_model_from",
        "field-definitions": [
          { "field-name": "id", "base-type": "type/Integer" },
          { "field-name": "total", "base-type": "type/Float" },
          { "field-name": "quantity", "base-type": "type/Integer" }
        ]
      },
      "creator": null,
      "schema_name": "metabase_cache_944b9_2",
      "database_id": 2,
      "collection_id": null,
      "database_name": "sample dataset pg",
      "state": "persisted",
      "refresh_begin": "2022-07-07T14:22:51.512016Z",
      "refresh_end": "2022-07-07T14:22:51.52032Z",
      "collection_name": null,
      "collection_authority_level": null,
      "creator_id": null,
      "card_archived": true, <---- new
      "active": true,
      "id": 3,
      "card_dataset": true,  <---- new
      "card_id": 3,
      "error": null,
      "next-fire-time": null,
      "table_name": "model_3_model_from",
      "card_name": "model from orders archived"
    },
    {
      "definition": {
        "table-name": "model_2_model_from",
        "field-definitions": [
          { "field-name": "id", "base-type": "type/Integer" },
          { "field-name": "total", "base-type": "type/Float" },
          { "field-name": "quantity", "base-type": "type/Integer" }
        ]
      },
      "creator": null,
      "schema_name": "metabase_cache_944b9_2",
      "database_id": 2,
      "collection_id": null,
      "database_name": "sample dataset pg",
      "state": "persisted",
      "refresh_begin": "2022-07-07T14:22:33.509687Z",
      "refresh_end": "2022-07-07T14:22:33.517815Z",
      "collection_name": null,
      "collection_authority_level": null,
      "creator_id": null,
      "card_archived": false,  <---- new
      "active": true,
      "id": 2,
      "card_dataset": false,   <---- new
      "card_id": 2,
      "error": null,
      "next-fire-time": null,
      "table_name": "model_2_model_from",
      "card_name": "model from orders no longer model"
    },
    {
      "definition": {
        "table-name": "model_1_model_from",
        "field-definitions": [
          { "field-name": "id", "base-type": "type/Integer" },
          { "field-name": "total", "base-type": "type/Float" },
          { "field-name": "quantity", "base-type": "type/Integer" }
        ]
      },
      "creator": null,
      "schema_name": "metabase_cache_944b9_2",
      "database_id": 2,
      "collection_id": null,
      "database_name": "sample dataset pg",
      "state": "persisted",
      "refresh_begin": "2022-07-07T14:22:33.476072Z",
      "refresh_end": "2022-07-07T14:22:33.504025Z",
      "collection_name": null,
      "collection_authority_level": null,
      "creator_id": null,
      "card_archived": false, <---- new
      "active": true,
      "id": 1,
      "card_dataset": true,   <---- new
      "card_id": 1,
      "error": null,
      "next-fire-time": null,
      "table_name": "model_1_model_from",
      "card_name": "model from orders"
    }
  ],
  "total": 3,
  "limit": 20,
  "offset": 0
}
```

* Add conditions to checkCanRefreshModelCache (#23778)

Co-authored-by: Gustavo Saiani <gustavo@poe.ma>

* Fix `is_write` reset when updating action query

* Handle `text` template tag type for parameters

* Make radio group row wrap

* Use text input for `type/Name` fields

* Fix template tag type handling

* Allow UUIDs in dashboard ID filters

* Extend `EditableText`

* Parametrize dashboard titles

* Log data app context structure

Pursuant to #23451.

The end effect of whitespace existing in a SAML response is us choking on it as reported in #23451. Two possible interpretations of causes of this bug:

There was an upstream change in our fork of the clojure SAML lib as flamber noted,
The decoding of base64 in our SAML endpoint (which uses the SAML lib) chokes on whitespace.
The proximate cause is the second one and ultimate cause is the first. However, I tend to believe that fixing the second one would be the better fix. For comparison, onelogin's first party SAML thing for java decodes base64 (https://github.com/onelogin/java-saml/blob/master/core/src/main/java/com/onelogin/saml2/util/Util.java) via apache's lib, which seems to do the thing that a lot of base64 decoders do of skipping whitespace.

- adds http_action PUT
- returns the http_action data on h2.