website: make default login-2fa flow ignore 2fa with app passwords

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
This commit is contained in:
Jens Langhammer 2021-08-23 17:50:42 +02:00
parent e27a6fdeeb
commit 1b8750e13b
1 changed files with 30 additions and 1 deletions

View File

@ -13,6 +13,18 @@
"designation": "authentication" "designation": "authentication"
} }
}, },
{
"identifiers": {
"pk": "7db93f1e-788b-4af6-8dc6-5cdeb59d8be7"
},
"model": "authentik_policies_expression.expressionpolicy",
"attrs": {
"name": "test-not-app-password",
"execution_logging": false,
"bound_to": 1,
"expression": "return auth_method != \"app_password\""
}
},
{ {
"identifiers": { "identifiers": {
"pk": "69d41125-3987-499b-8d74-ef27b54b88c8", "pk": "69d41125-3987-499b-8d74-ef27b54b88c8",
@ -91,7 +103,10 @@
}, },
"model": "authentik_flows.flowstagebinding", "model": "authentik_flows.flowstagebinding",
"attrs": { "attrs": {
"re_evaluate_policies": false "evaluate_on_plan": false,
"re_evaluate_policies": true,
"policy_engine_mode": "any",
"invalid_response_action": "retry"
} }
}, },
{ {
@ -105,6 +120,20 @@
"attrs": { "attrs": {
"re_evaluate_policies": false "re_evaluate_policies": false
} }
},
{
"identifiers": {
"pk": "6e40ae4d-a4ed-4bd7-a784-27b1fe5859d2",
"policy": "7db93f1e-788b-4af6-8dc6-5cdeb59d8be7",
"target": "688aec6f-5622-42c6-83a5-d22072d7e798",
"order": 0
},
"model": "authentik_policies.policybinding",
"attrs": {
"negate": false,
"enabled": true,
"timeout": 30
}
} }
] ]
} }