trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
6,217 Commits 95 Branches 330 Tags 336 MiB
Commit Graph

139 Commits

Author SHA1 Message Date
Jens Langhammer 320dab3425 core: only show `Reset password` link when recovery flow is configured 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-04 12:59:41 +02:00
Jens Langhammer d07704fdf1 crypto: show both sha1 and sha256 fingerprints 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-03 19:25:27 +02:00
Jens Langhammer 91f7b289cc web/admin: show oauth2 token revoked status 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-03 16:04:24 +02:00
Jens Langhammer 3dc9e247d5 Merge branch 'master' into inbuilt-proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	internal/constants/constants.go
#	outpost/pkg/version.go
 2021-07-02 16:23:30 +02:00
Jens Langhammer 014d93d485 root: fix mismatched version in openapi schema 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-29 16:34:42 +02:00
Jens Langhammer 8429dd19b2 Merge branch 'master' into inbuilt-proxy 2021-06-29 16:20:24 +02:00
Jens Langhammer c19da839b1 stages/user_write: add create_users_as_inactive flag 
close #1086

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-28 23:24:54 +02:00
Jens Langhammer 2b1356bb91 flows: add invalid_response_action to configure how the FlowExecutor should handle invalid responses 
closes #1079

Default value of `retry` behaves like previous version.

`restart` and `restart_with_context` restart the flow upon an invalid response. `restart_with_context` keeps the same context of the Flow, allowing users to bind policies that maybe aren't valid on the first execution, but are after a retry, like a reputation policy with a deny stage.

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-28 00:22:09 +02:00
Jens Langhammer 7d9c74ce04 tenants: include all default flows in current_tenant 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-26 23:47:49 +02:00
Jens Langhammer 60c3cf890a events: add ability to create events via API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-26 23:37:03 +02:00
Jens Langhammer 1554dc9feb outposts: make outpost managed 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-23 21:26:24 +02:00
Jens Langhammer 2b98637ca5 lib: fix regex_match result being inverted, add tests 
closes #1073

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-23 20:06:43 +02:00
Jens Langhammer f7047df40e policies: don't use policy cache when checking application access 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-20 13:30:07 +02:00
Jens Langhammer cbea51ae5b stages/authenticator_duo: make Duo-admin viewset writeable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-16 23:17:26 +02:00
Jens Langhammer d9c2b64116 root: update schema 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-15 23:38:03 +02:00
Jens Langhammer 53100a72fe stages/identification: fix challenges not being annotated correctly and API client not loading data correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-14 22:28:11 +02:00
Jens Langhammer 74e578c2bf events: add tenant to event 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-14 18:43:29 +02:00
Jens Langhammer e584fd1344 events: catch unhandled exceptions from request as event, add button to open github issue 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-14 17:22:58 +02:00
Jens Langhammer cabbd18880 core: revert check_access API to get to prevent CSRF errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-13 21:47:49 +02:00
Jens Langhammer 572b8d87b5 api: fix import error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-13 12:59:28 +02:00
Jens Langhammer 676b77aa7c stages/identification: add UPN 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-10 22:48:39 +02:00
Jens Langhammer 8d6db0fabf flows: fix configuration URL being set when no flow is configure 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-10 22:07:26 +02:00
Jens Langhammer d878d2140e providers/saml: add metadata download link to api 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-10 14:06:44 +02:00
Jens Langhammer 4766d6ff3d flows: add export URL to API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-10 13:52:50 +02:00
Jens Langhammer 3a64d97040 crypto: add download links as API fields 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-10 13:46:12 +02:00
Jens L 34ae9e6dab
API: add endpoint to show by what objects an object is used (#995) 
* core: add used_by API to show what objects are affected before deletion

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/elements: add support for used_by API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add authentik_used_by_shadows to shadow other models

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: implement used_by API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: fix duplicate imports

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add action field to used_by api

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: add UI for used_by action

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: add notice to tenant form

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: fix naming in used_by

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: check length for used_by

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: fix used_by for non-pk models

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: improve __str__ on models

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add support for many to many in used_by

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-10 11:58:12 +02:00
Jens Langhammer 2210497569 events: add EMAIL_SENT event, show sent emails in event log 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-09 10:28:32 +02:00
Jens Langhammer 2addf71f37 outposts: add service connection to outpost API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-09 09:45:14 +02:00
Jens L dad24c03ff
outposts: set cookies for a domain to authenticate an entire domain (#971) 
* outposts: initial cookie domain implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add cookie domain setting

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: replace forward_auth_mode with general mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: rebuild proxy provider form

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: re-add forward_auth_mode for backwards compat

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix data.mode not being set

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: always set log level to debug when testing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: use new mode attribute

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: only ingress /akprox on forward_domain

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: fix lint error

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix error on ProxyProviderForm when not using proxy mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix default for outpost form's type missing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add additional desc for proxy modes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: fix service account permissions not always being updated

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost/proxy: fix redirecting to incorrect host for domain mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: improve error handling for network errors

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: fix image naming not matching main imaeg

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/proxy: fix redirects for domain mode and traefik

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix colour for paragraphs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: fix consent stage not showing permissions correctly

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: add domain-level docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: fix broken links

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/proxy: remove dead code

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: fix missing id for #header-text

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 23:10:17 +02:00
Jens Langhammer fb8d67a9d9 core: add configure_url to UserSettings for both stages and sources 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 19:21:27 +02:00
Jens Langhammer 029d58191e sources/saml: include metadata download link in API response 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 17:22:03 +02:00
Jens Langhammer 75404f1345 web/admin: pass full configure flow URL instead of just boolean 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 17:14:54 +02:00
Jens Langhammer ba1b23c879 flows: move flow relevant info into ContextualFlowInfo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 16:53:28 +02:00
Jens Langhammer 1f35f73c66 api: add CAN_BACKUP capability 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-06 12:44:43 +02:00
Jens Langhammer 0032f535da core: add minor tests for users api 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-06 01:23:04 +02:00
Jens Langhammer f5dbdbd48b *: add clear param to file upload API to delete stored file and reset field 
closes #949

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 21:33:03 +02:00
Jens Langhammer 86b450c6d1 flows: add compatibility_mode to toggle ShadyDOM 
closes #894

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 20:04:30 +02:00
Jens Langhammer 0b90cfcec4 flows: set default background in code not model 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 19:38:13 +02:00
Jens Langhammer 24da24b5d5 stages/identification: allow setting of a password stage to check password and identity in a single step 
closes #970

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 16:05:03 +02:00
Jens Langhammer ed3859800c core: improve API validation for Application's set_icon_url (fix JSON Syntax Error) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-03 00:39:56 +02:00
Jens Langhammer cec47c3cfc providers/oauth2: show id_token issues for refresh token 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 22:05:04 +02:00
Jens Langhammer 3ea2b16a12 tenants: add separate field for favicon url 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 21:31:04 +02:00
Jens Langhammer 6d0e0cbe5a outposts: improve validation of providers (must match outpost type) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 16:04:41 +02:00
Jens Langhammer e24a9e3119 policies: fix missing negate flag of policy bindings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-31 11:50:29 +02:00
Jens L fb6242d2d3
Merge pull request #941 from goauthentik/authenticated-sessions 
Session management
 2021-05-30 15:12:49 +02:00
Jens Langhammer 0e8d9aa45d api: add System info API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 14:01:20 +02:00
Jens Langhammer 66a04aeec5 api: add can_geo_ip capability 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 01:02:03 +02:00
Jens Langhammer 73338bdf32 core: add geo_ip to authenticated sessions if enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 01:01:20 +02:00
Jens Langhammer 059da74d1c core: add current attribute to authenticated_session API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 00:31:41 +02:00
Jens Langhammer 133fc38c05 core: initial authenticated sessions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 00:15:16 +02:00
Jens Langhammer 05b3c4ddb3 policies/reputation: save username instead of user object 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 22:49:58 +02:00
Jens Langhammer 8427fb87f6 tenants: add tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 19:47:55 +02:00
Jens Langhammer 477ff85109 flows: migrate flow_unenrollment to tenant 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 18:44:02 +02:00
Jens Langhammer 9dd6b7d436 flows: remove default-enrollment 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 18:14:37 +02:00
Jens Langhammer ff611f21cd tenants: initial implementation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 17:47:25 +02:00
Jens Langhammer 523621daa2 core: make application's check_access API return a PolicyResult and accept for_user as superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-26 11:47:23 +02:00
Jens Langhammer c4453f38a2 stages/identification: make shown sources configurable 
closes #918

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 16:37:53 +02:00
Jens Langhammer 8ecac59eca stages/prompt: annotate PromptChallengeResponse's additionalProperties 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 22:55:24 +02:00
Jens Langhammer 8183a51b72 stages/authenticator_duo: add missing duo device 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 22:16:29 +02:00
Jens Langhammer 127ebed5c6 flows: fix mismatched names 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 21:09:18 +02:00
Jens Langhammer 716923e17a web/flows: update types 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 20:59:44 +02:00
Jens Langhammer c6bb6709fd flows: add default challenge response 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 20:27:50 +02:00
Jens Langhammer 6f6ae7831e flows: make use of oneOf OpenAPI to annotate all challenge types 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 14:11:23 +02:00
Jens Langhammer 3b41c662ed stages/authenticator_validate: add Duo support 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 22:31:12 +02:00
Jens Langhammer 9f5a3c396d stages/authenticator_duo: initial duo stage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 21:10:39 +02:00
Jens Langhammer 1a0f72d0a8 Merge branch 'version-2021.5' into next 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	authentik/stages/authenticator_static/api.py
#	swagger.yaml
 2021-05-21 21:33:18 +02:00
Jens Langhammer b3390f0ab4 website/docs: update nginx config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 22:06:55 +02:00
Jens Langhammer be5a6c0310 api: add set_*_url method for Application and Flow to set icon/background to URL 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 17:18:40 +02:00
Jens Langhammer 92106ca4bf api: add capabilities to API, add can_save_media 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 17:00:47 +02:00
Jens Langhammer 3cf0f07baf *: fix API Schema for file uploads 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-17 23:12:52 +02:00
Jens Langhammer 9e7c9ae649 web: fix API Path 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-17 20:48:58 +02:00
Jens Langhammer 8b6292b3de api: don't overwrite 400 and 403 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 20:54:58 +02:00
Jens Langhammer cbed5a6522 api: fix missing error definitions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 19:53:04 +02:00
Jens Langhammer 589f806b7c flows: fix schema for flow executor 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 19:13:31 +02:00
Jens Langhammer 41f6d3b6e7 stages/authenticator_static: add serializer for tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:55:47 +02:00
Jens Langhammer d0f1daf025 admin: make tasks's retry api not ask for a body 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:43:47 +02:00
Jens Langhammer d38fd603dd web: fix more special API Calls 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:41:02 +02:00
Jens Langhammer ba5374f6e1 web: mass update API calls 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:24:15 +02:00
Jens Langhammer 7152d7ee01 outposts: fix schema for outposts health 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:10:11 +02:00
Jens Langhammer ab07113530 admin: migrate WorkerViewSet to APIView 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:06:46 +02:00
Jens Langhammer a7d7b46747 admin: migrate version view to APIView 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:00:02 +02:00
Jens Langhammer 9a44088d2b admin: migrate metrics viewset to APIView 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:49:37 +02:00
Jens Langhammer b351ae12c5 api: make config viewset single view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:44:19 +02:00
Jens Langhammer 759bf59780 core: make filefields readonly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:34:55 +02:00
Jens Langhammer ef9f08553c *: linting pass, rename from swagger to schema 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 15:22:57 +02:00
Jens Langhammer 4fb71a6bdd api: fix pagination schema 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 15:08:51 +02:00
Jens Langhammer 3ab7588b73 web: Read() to Retrieve() 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 14:43:42 +02:00
Jens Langhammer 0bac738090 *: fix static response descriptions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 14:07:29 +02:00
Jens Langhammer 1324d03815 *: initial migration to openapi v3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 23:57:28 +02:00