00ae97944a
providers/oauth2: fix CVE-2024-21637 (cherry-pick #8104 ) ( #8105 )
...
* providers/oauth2: fix CVE-2024-21637 (#8104 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update changelog
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2024-01-09 18:32:03 +01:00
6b9afed21f
security: fix CVE-2023-48228 (cherry-pick #7666 ) ( #7668 )
...
security: fix CVE-2023-48228 (#7666 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-21 18:13:54 +01:00
261879022d
security: fix oobe-flow reuse when akadmin is deleted ( #7361 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-28 21:24:06 +02:00
2a47ff2977
website/docs: prepare 2023.10.2 release notes ( #7362 )
...
website/docs: prepare 2023.10.2
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-28 21:07:57 +02:00
c3a81a1cce
website/docs: add missing breaking change due to APPEND_SLASH ( #7360 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-28 18:13:56 +02:00
ac2bbd7e2f
website/docs: add warning about Helm breaking change in 2024.x ( #7351 )
...
Co-authored-by: Jens L. <jens@goauthentik.io>
2023-10-27 17:22:02 +00:00
f22daca091
website/docs: add warning about upgrading to 2023.10 ( #7340 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-27 12:51:49 +02:00
eb53c28352
website/docs: update release notes for 2023.10.1 ( #7316 )
...
website/docs: update for 2023.10.1
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-26 20:16:07 +02:00
d9b3e307e3
website/docs: add 2023.10 release notes ( #7309 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-26 15:10:17 +02:00
28053059ff
stages/user_write: allow setting user type when creating new user ( #7293 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-26 14:33:29 +02:00
84fdd3c750
website/docs: RBAC docs ( #7191 )
...
* draft rbac docs
* tweaks
* add a permissions topic
* tweaks
* more changes
* draft permissions topic
* more content on roles
* links
* typo
* more conceptual info
* Optimised images with calibre/image-actions
* more content on roles
* add more x-ref links
* fix links
* more content
* links
* typos
* polishing
* Update website/docs/user-group-role/access-control/permissions.md
Co-authored-by: Jens L. <jens@goauthentik.io>
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com>
* separwate conceptual vs procedural in permissions
* finished groups procedurals
* new page
* added link
* Update website/docs/user-group-role/access-control/permissions.md
Co-authored-by: Jens L. <jens@goauthentik.io>
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com>
* polish
* edits from PR review
* restructured view section to remove repetition
* rest of edits from PR review
* polished flows and stages
* polish
* typo
---------
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com>
Co-authored-by: Tana Berry <tana@goauthentik.io>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
Co-authored-by: Jens L. <jens@goauthentik.io>
2023-10-26 12:31:32 +02:00
e3ac774a18
web: 3 fixes for small typos, annoyances, and improvements ( #7249 )
...
I'm conducting a more comprehensive survey of the UI in order to get a more holistic idea of the
changes that should be implemented. Along the way, I'm finding a few small details that annoy me.
Here are three.
It goes to "User statistics." I have changed both the text of the link and the page to read "User
Statistics" (it's a title, it should be capitalized).
Give people warning when you're about to take them out of the system, especially if you're opening a
new tab along the way.
Just a thing I spotted along the way.
2023-10-23 10:48:16 -07:00
a60f3b4b81
stage/deny: add custom message ( #7144 )
...
* stage/deny: add message
* add migration, tests and schema update
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add form
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
2023-10-18 17:13:33 +02:00
cb915bc86c
website/docs: added Note in Beta docs ( #7203 )
...
typo, shockingly
Co-authored-by: Tana Berry <tana@goauthentik.io>
2023-10-17 21:41:41 +00:00
41bb1ca707
providers/scim: remove preview ( #7166 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-13 19:03:13 +02:00
78af350610
website/docs: Balok pr for User docs ( #7139 )
...
* procedrual docs
* restructure
* new image, edit tweaks
* more tweaks
* edits
* edits for new button labels
* more content in invitations
* tweaks
* Optimised images with calibre/image-actions
* fixed link
* links
* ken's edits
* changed label name
* spelling checks
* fix links
* links again
* fighting with imports
* ugh
* add extensions back
* fix link
* tweak
* rename file again
* more links
* added punctuation
* use generated index
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Tana Berry <tana@goauthentik.io>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
2023-10-12 21:45:21 +02:00
9860ac983c
website/docs: fix typo in providers/scim ( #7076 )
...
chore(docs): typo in providers/scim
Signed-off-by: jon r <jon@allmende.io>
2023-10-06 17:43:03 +02:00
a0f607b5ac
web/flows: bottom-align about text on flows page ( #7051 )
...
* web/flows: bottom-align about text on flows page
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix a bunch of typos
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-03 14:10:10 +02:00
e40a0b1f8b
website/docs: add notice for nginx ingress configuration requirement ( #7027 )
...
* website/docs: add notice for nginx ingress configuration requirement
https://github.com/goauthentik/infrastructure/pull/574
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* Update website/docs/providers/proxy/_nginx_ingress.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens L. <jens@beryju.org>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
2023-10-02 16:04:26 +02:00
6b5200fead
root: fix missing /lifecycle in path
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-09-27 17:49:30 +02:00
0e5952650b
root: make Celery worker concurrency configurable ( #6837 )
...
* root: made Celery worker concurrency configurable
* core: fixed Celery worker command to set autoscaling options to account for worker concurrency setting
* Update website/docs/installation/configuration.md
Signed-off-by: Jens L. <jens@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens L. <jens@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@beryju.org>
2023-09-26 10:37:22 +00:00
a32755b6c8
root: Add setting to adjust database config for pgpool ( #6949 )
2023-09-21 12:54:18 +02:00
99a42c6fd8
website/docs: add info about our docs ( #6936 )
...
add info about our docs
Co-authored-by: Tana Berry <tana@goauthentik.io>
2023-09-19 05:22:09 -05:00
c79e90964a
website/docs: tweak Config page ( #6854 )
...
* used tabs to add k8s info
* tweaks
* changed to mdx
* wording tweaks and rearranged sections
* removed old md file renamed to mdx
* tweak
* added a redirect to toml file
* fix references
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Tana Berry <tana@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
2023-09-12 20:30:40 +00:00
7dc2bf119b
website/docs: prepare 2023.8.3 release notes ( #6843 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-09-11 18:54:36 +02:00
f8b690dbec
website/docs: add missing word to index.mdx ( #6818 )
...
Add missing word to index.mdx
Fix missing word.
Signed-off-by: Michael Barrow <michael@barrow.me>
2023-09-11 13:37:41 +02:00
dda69f2bcc
website/docs: rework user reference page ( #6777 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-09-06 17:56:07 +02:00
c5f0b89a02
website/docs: enterprise: add note about upgrading the amount of users
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2023-09-04 18:06:00 +02:00
3d1bf85587
website/docs: prepare 2023.8.2 release ( #6731 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-09-01 16:09:42 +02:00
f57b3efcaa
policies/reputation: fix reputation not expiring ( #6714 )
...
* policies/reputation: fix reputation not expiring
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix some verbose names for models
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-08-31 13:46:00 +02:00
9d894528e3
website: fix reference to flow stage binding option ( #6701 )
...
the option name was changed a while back but the docs still used the old name
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-08-30 20:10:36 +02:00
6246537e17
website: bump 2023.8.1 release notes ( #6678 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-08-30 00:31:26 +02:00
d291d16aac
website/docs: fix typos ( #6672 )
...
fix typos
Co-authored-by: Tana Berry <tana@goauthentik.io>
2023-08-29 16:49:40 -05:00
782341441a
website: update 2023.8 release notes ( #6666 )
...
* update main release notes
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update sidebar
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens L. <jens@beryju.org>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
2023-08-29 19:57:14 +02:00
aa874dd92a
security: fix CVE-2023-39522 ( #6665 )
...
* stages/email: don't disclose whether a user exists or not when recovering
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update website
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-08-29 19:07:49 +02:00
87f65526e1
website/docs: Enterprise docs ( #6632 )
...
* new ent docs
* first drafts WIP
* Optimised images with calibre/image-actions
* more details added
* further updates
* tweaks
* better image
* Optimised images with calibre/image-actions
* fix typos
* final edits
* fixed formatting fail
---------
Co-authored-by: Tana Berry <tana@goauthentik.io>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
2023-08-29 16:57:29 +00:00
13e5495b55
website: resize images over 1080p
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2023-08-26 02:38:59 +02:00
e467a91f44
website/docs: update 2023.8 actually ( #6591 )
...
* add actual changelog
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix source docs credentials
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-08-22 14:19:37 +02:00
d9f13e89c6
website: update release notes ( #6590 )
...
* move 2023.7 to 2023.8
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* move version dropdown from navbar to sidebar, and only have it on applicable sites
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* remove title instead of just hiding it
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix some styling for the mobile navbar sidebar
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add social image
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* Optimised images with calibre/image-actions
* fix website tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
2023-08-22 13:03:11 +02:00
8bba3c0a9b
core: rework recursive group membership ( #6017 )
...
* rework checking group membership and add `user.all_groups` to get full list of groups
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* refactor some more for better performance
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* migrate things to use all_groups
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update release notes
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix for django 4.2
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-08-18 17:31:39 +02:00
4693c50701
website/docs: Troubleshooting Whitelist Email and Web-Dev Setup Docs ( #6426 )
...
* Whitelist email troubleshooting docs
* update preview website command
* Update website/docs/troubleshooting/whitelist_email.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Sandeep Gadhiya <sandeepgadhiya22@gmail.com>
* Update website/docs/troubleshooting/whitelist_email.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Sandeep Gadhiya <sandeepgadhiya22@gmail.com>
* Update website/docs/troubleshooting/whitelist_email.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Sandeep Gadhiya <sandeepgadhiya22@gmail.com>
* Update website/docs/troubleshooting/whitelist_email.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Sandeep Gadhiya <sandeepgadhiya22@gmail.com>
* Update website/docs/troubleshooting/whitelist_email.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Sandeep Gadhiya <sandeepgadhiya22@gmail.com>
* refactor policies section
* refactor policies section
---------
Signed-off-by: Sandeep Gadhiya <sandeepgadhiya22@gmail.com>
Co-authored-by: sandeepgadhiya <sandeep.gadhiya@turtlemint.com>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
2023-08-09 10:06:41 -05:00
c7537f9f32
web, website: compress images ( #6121 )
...
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
2023-08-02 12:06:03 +00:00
cc6824fd7c
core: bump django from 4.1.7 to 4.2 ( #5238 )
...
* core: bump django from 4.1.7 to 4.2 (#5151 )
* core: bump django from 4.1.7 to 4.2
Bumps [django](https://github.com/django/django ) from 4.1.7 to 4.2.
- [Release notes](https://github.com/django/django/releases )
- [Commits](https://github.com/django/django/compare/4.1.7...4.2 )
---
updated-dependencies:
- dependency-name: django
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* upgrade to psycopg3, use custom engine for prometheus metrics
See https://github.com/korfuri/django-prometheus/issues/350
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* make scripts use pscopg3
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* start changelog
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* initial postgres upgrade guide
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update header
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens L. <jens@beryju.org>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
2023-08-01 19:30:28 +02:00
30d32022e5
website/docs: expand beta beta / install docs ( #6443 )
...
* website/docs: expand beta beta / install docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens L. <jens@beryju.org>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
2023-08-01 18:02:31 +02:00
c0474a83d9
website/docs: update Docker Compose and Kubernetes installation guide ( #6429 )
...
* website/docs: Update docker-compose and beta install guide
* website/docs: Update kubernetes and beta install guide
* Update website/docs/installation/kubernetes.md
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com>
---------
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
2023-07-31 15:17:54 -05:00
33e7903699
website/docs: add architecture and persistence ( #6250 )
...
* website/docs: add architecture and persistence
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>
* add note about kubernetes
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* link to relevant parts
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens L. <jens@beryju.org>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
2023-07-31 11:21:33 +02:00
f2293c0f5b
website/docs: Update syntax in traefik standalone example ( #6303 )
...
* Update syntax in traefik standalone example
Signed-off-by: Thomas Moschny <thomas.moschny@gmx.de>
* One more syntax update
Signed-off-by: Thomas Moschny <thomas.moschny@gmx.de>
---------
Signed-off-by: Thomas Moschny <thomas.moschny@gmx.de>
2023-07-26 10:56:31 +02:00
d435a65cfd
outposts: support json patch for Kubernetes ( #6319 )
2023-07-22 02:29:28 +02:00
9b7c30d44c
sources/ldap: fix ldap_sync cli command not running in foreground ( #6325 )
...
closes #6317
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-07-21 13:03:06 +02:00
77662c9a51
website/docs: re-add goauthentik.io/user/can-change-* ( #6251 )
...
* website/docs: re-add goauthentik.io/user/can-change-*
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* Update website/docs/user-group/user.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens L. <jens@beryju.org>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
2023-07-14 16:28:37 +02:00
gcp-cherry-pick-bot[bot]
Jens L
risson
Tana M Berry
Ken Sternberg
Samir Musali
jon r
Alissa Gerhard
boesr
Michael Barrow
Marc 'risson' Schmitt
Sandeep Gadhiya
r.e.e.c.h.e.e
Thomas Moschny
ChandonPierre