Jens Langhammer
|
9bd613a31d
|
stages/authenticator_duo: fix component not being set in API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-26 20:49:58 +02:00 |
|
|
Jens Langhammer
|
3fe0483dbf
|
core: fix flow background not correctly loading on initial draw
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-26 20:29:45 +02:00 |
|
|
Jens Langhammer
|
b8bdf7a035
|
outposts: fix outpost being re-created when in host mode
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-25 15:15:18 +02:00 |
|
|
Jens Langhammer
|
a3ff7cea23
|
providers/oauth2: fix usage of timedelta.seconds
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-25 11:55:00 +02:00 |
|
|
Jens Langhammer
|
bb776c2710
|
outposts: check docker container ports match
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-25 11:54:35 +02:00 |
|
|
Jens Langhammer
|
6930c84425
|
events: only create SYSTEM_EXCEPTION event when error would've been sent to sentry
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-24 13:01:41 +02:00 |
|
|
Jens Langhammer
|
1554dc9feb
|
outposts: make outpost managed
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-23 21:26:24 +02:00 |
|
|
Jens Langhammer
|
2b98637ca5
|
lib: fix regex_match result being inverted, add tests
closes #1073
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-23 20:06:43 +02:00 |
|
|
Jens Langhammer
|
d1198fc6c1
|
sources/ldap: improve error handling when checking for password complexity on non-ad setups
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#1067
|
2021-06-23 00:24:05 +02:00 |
|
|
Jens Langhammer
|
31a58e2c25
|
release: 2021.6.2
|
2021-06-22 23:35:10 +02:00 |
|
|
Jens Langhammer
|
b69248dd55
|
stages/authenticator_validate: fix error when using not_configured_action=configure
closes #1048
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-22 20:08:58 +02:00 |
|
|
Jens Langhammer
|
5ff5edf769
|
outposts: improve logging
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-22 18:51:02 +02:00 |
|
|
Jens Langhammer
|
939889e0ec
|
tenants: fix footer_links for moved config
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-22 15:48:17 +02:00 |
|
|
Jens Langhammer
|
19ae6585dc
|
lib: add tests for config loader
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-22 13:12:07 +02:00 |
|
|
Jens Langhammer
|
c6ede78fba
|
core: add support for custom urls for avatars
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-22 12:25:24 +02:00 |
|
|
Jens Langhammer
|
9b5e3921cb
|
providers/saml: better handle decoding errors
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-21 22:48:34 +02:00 |
|
|
Jens Langhammer
|
f6026fdb13
|
root: allow loading local /static files without debug flag
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-21 21:21:35 +02:00 |
|
|
Jens Langhammer
|
a4856969f4
|
outposts: fix port and inner_port being mixed on docker controller
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-21 19:19:06 +02:00 |
|
|
Jens Langhammer
|
2aa7266688
|
crypto: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-21 16:24:03 +02:00 |
|
|
Jens Langhammer
|
c0c246edab
|
crypto: catch error when loading private key
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-21 15:57:48 +02:00 |
|
|
Jens Langhammer
|
831b32c279
|
core: fix PropertyMapping's globals not matching Expression policy
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-21 15:54:43 +02:00 |
|
|
Jens Langhammer
|
70ccc63702
|
core: remove default flow background from default css, set static in base_full and dynamically in if/flow
closes #1056
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-21 10:37:34 +02:00 |
|
|
Jens Langhammer
|
de954250e5
|
root: make general cache timeouts configurable
closes #974
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-21 10:18:49 +02:00 |
|
|
Jens Langhammer
|
f268bd4c69
|
policies: make policy result cache timeout configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-21 10:17:58 +02:00 |
|
|
Jens Langhammer
|
57a48b6350
|
flows: make flow plan cache timeout configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-21 10:17:11 +02:00 |
|
|
Jens Langhammer
|
9aac114115
|
root: save temporary database dump in /tmp
closes #1055
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-21 09:58:19 +02:00 |
|
|
Jens Langhammer
|
4327b35bc3
|
tenants: fix tenant not being queried correctly when using accessing over a child domain
closes #1044
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-20 14:39:21 +02:00 |
|
|
Jens Langhammer
|
f7047df40e
|
policies: don't use policy cache when checking application access
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-20 13:30:07 +02:00 |
|
|
Jens Langhammer
|
ede072889e
|
core: deepmerge user.group_attributes, use group_attributes for user settings
closes #1051
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-19 19:52:55 +02:00 |
|
|
Jens Langhammer
|
9cb7e6c606
|
root: set outposts.docker_image_base to gh-master for tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-19 15:49:49 +02:00 |
|
|
Jens Langhammer
|
fe6963c428
|
release: 2021.6.1
|
2021-06-17 22:14:52 +02:00 |
|
|
Jens Langhammer
|
19cac4bf43
|
providers/saml: fix error when getting transient user identifier
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-17 13:52:10 +02:00 |
|
|
Jens Langhammer
|
4ca564490e
|
providers/saml: add support for NameID type unspecified
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-17 12:45:53 +02:00 |
|
|
Jens Langhammer
|
fcb795c273
|
providers/saml: fix NameIDPolicy not being parsed correctly, improve error handling
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-17 12:22:40 +02:00 |
|
|
Jens Langhammer
|
cbea51ae5b
|
stages/authenticator_duo: make Duo-admin viewset writeable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-16 23:17:26 +02:00 |
|
|
Jens Langhammer
|
e743f13f81
|
recovery: fix error when creating multiple keys for the same user
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-16 23:04:35 +02:00 |
|
|
Jens Langhammer
|
b20a8b7c17
|
stages/authenticator_duo: fix error when enrolling an existing user
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-16 23:04:24 +02:00 |
|
|
Jens Langhammer
|
b53c94d76a
|
flows: fix error when stage has incorrect type
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-16 22:52:00 +02:00 |
|
|
Jens Langhammer
|
d4419d66c1
|
core: fix error when creating AuthenticatedSession without key
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-16 22:51:48 +02:00 |
|
|
Jens Langhammer
|
79044368d2
|
core: fix error getting stages when enrollment flow isn't set
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-16 22:45:42 +02:00 |
|
|
Jens Langhammer
|
d9287d0c0e
|
Merge branch 'next'
|
2021-06-15 23:43:44 +02:00 |
|
|
Jens Langhammer
|
dec7a9cfb9
|
website/docs: add docs for flow executor
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-15 22:14:23 +02:00 |
|
|
Jens Langhammer
|
e0f48a30b7
|
release: 2021.6.1-rc6
|
2021-06-15 21:18:33 +02:00 |
|
|
Jens Langhammer
|
e8978adc1b
|
outpost: fix syntax error when creating an outpost with connection
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-15 18:39:51 +02:00 |
|
|
Jens Langhammer
|
800df332b5
|
stages/authenticator_duo: don't create default duo stage
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-14 22:55:37 +02:00 |
|
|
Jens Langhammer
|
16c194d2dc
|
core: fix upload api not checking clear properly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-14 22:34:47 +02:00 |
|
|
Jens Langhammer
|
53100a72fe
|
stages/identification: fix challenges not being annotated correctly and API client not loading data correctly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-14 22:28:11 +02:00 |
|
|
Jens Langhammer
|
ec4c3f44cb
|
events: don't create system exception event in debug
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-14 22:16:27 +02:00 |
|
|
Jens Langhammer
|
f10bd432b3
|
policies/reputation: fix race condition in tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-14 20:40:40 +02:00 |
|
|
Jens Langhammer
|
74e578c2bf
|
events: add tenant to event
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-14 18:43:29 +02:00 |
|
|
Jens Langhammer
|
e584fd1344
|
events: catch unhandled exceptions from request as event, add button to open github issue
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-14 17:22:58 +02:00 |
|
|
Jens Langhammer
|
0e02925a3d
|
stages/authenticator_validate: add tests for authenticator validation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-14 16:32:36 +02:00 |
|
|
Jens Langhammer
|
5b837c3ccc
|
providers/saml: improve error handling for signature errors
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-14 12:51:42 +02:00 |
|
|
Jens Langhammer
|
2580371f94
|
outposts: fix error when getting component for base service connection
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-14 12:38:29 +02:00 |
|
|
Jens Langhammer
|
4e9be85353
|
website/docs: add docs for outpost configuration
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-14 09:21:35 +02:00 |
|
|
Jens Langhammer
|
79508e1965
|
core: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-13 23:41:50 +02:00 |
|
|
Jens Langhammer
|
3a88dde545
|
web: fix declaration of Intl
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-13 23:13:43 +02:00 |
|
|
Jens Langhammer
|
cabbd18880
|
core: revert check_access API to get to prevent CSRF errors
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-13 21:47:49 +02:00 |
|
|
Jens Langhammer
|
bb8559ee18
|
web: remove base interface
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-13 19:54:27 +02:00 |
|
|
Jens Langhammer
|
afb84c7bc5
|
flows: fix error clearing flow background when no files have been uploaded
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-13 14:14:41 +02:00 |
|
|
Jens Langhammer
|
fc8004db2b
|
outposts: fix integrity error with tokens
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-13 13:36:54 +02:00 |
|
|
Jens Langhammer
|
ddfc943bba
|
root: fix build_hash being set incorrectly for tagged versions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-13 13:32:18 +02:00 |
|
|
Jens Langhammer
|
572b8d87b5
|
api: fix import error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-13 12:59:28 +02:00 |
|
|
Jens Langhammer
|
31d2ea65fd
|
provider/proxy: mark forward_auth flag as deprecated
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-13 12:39:25 +02:00 |
|
|
Jens Langhammer
|
f4ac2f50e2
|
sources/saml: check sessions before deleting user
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-13 12:39:10 +02:00 |
|
|
Jens Langhammer
|
f10286edf8
|
Merge branch 'version-2021.6' into next
|
2021-06-12 20:43:12 +02:00 |
|
|
Jens Langhammer
|
d789dcc28f
|
core: fix impersonation not working with inactive users
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-12 20:41:02 +02:00 |
|
|
Jens Langhammer
|
74e4e8f6aa
|
core: delete real session when AuthenticatedSession is deleted
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-12 17:37:32 +02:00 |
|
|
Jens Langhammer
|
d78fda990a
|
release: 2021.6.1-rc5
|
2021-06-12 15:19:24 +02:00 |
|
|
Jens Langhammer
|
10d949f7a9
|
stages/password: add constants for password backends
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-12 12:14:55 +02:00 |
|
|
Jens Langhammer
|
676b77aa7c
|
stages/identification: add UPN
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-10 22:48:39 +02:00 |
|
|
Jens Langhammer
|
e35e096266
|
stages/authenticator_webauthn: use tenant title as RP_NAME
closes #1004
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-10 22:17:25 +02:00 |
|
|
Jens Langhammer
|
7af12d4fec
|
stages/authenticator_totp: set TOTP issuer based on slug'd tenant title
closes #1004
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-10 22:16:37 +02:00 |
|
|
Jens Langhammer
|
8d6db0fabf
|
flows: fix configuration URL being set when no flow is configure
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-10 22:07:26 +02:00 |
|
|
Jens Langhammer
|
e25f6aea8c
|
release: 2021.6.1-rc4
|
2021-06-10 18:59:00 +02:00 |
|
|
Jens Langhammer
|
2c15ab9995
|
release: 2021.6.1-rc3
|
2021-06-10 18:04:59 +02:00 |
|
|
Jens Langhammer
|
6c985acb36
|
release: 2021.6.1-rc2
|
2021-06-10 14:10:47 +02:00 |
|
|
Jens Langhammer
|
d878d2140e
|
providers/saml: add metadata download link to api
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-10 14:06:44 +02:00 |
|
|
Jens Langhammer
|
4766d6ff3d
|
flows: add export URL to API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-10 13:52:50 +02:00 |
|
|
Jens Langhammer
|
3a64d97040
|
crypto: add download links as API fields
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-10 13:46:12 +02:00 |
|
|
Jens Langhammer
|
2275ba3add
|
flows: fix get_pending_user returning in-memory user when PLAN_CONTEXT_PENDING_USER_IDENTIFIER is set
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-10 12:17:46 +02:00 |
|
|
Jens Langhammer
|
9f7c941426
|
Merge branch 'master' into next
|
2021-06-10 11:59:10 +02:00 |
|
|
Jens L
|
34ae9e6dab
|
API: add endpoint to show by what objects an object is used (#995)
* core: add used_by API to show what objects are affected before deletion
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/elements: add support for used_by API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: add authentik_used_by_shadows to shadow other models
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: implement used_by API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* *: fix duplicate imports
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: add action field to used_by api
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: add UI for used_by action
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: add notice to tenant form
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: fix naming in used_by
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: check length for used_by
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: fix used_by for non-pk models
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* *: improve __str__ on models
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: add support for many to many in used_by
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-10 11:58:12 +02:00 |
|
|
Jens Langhammer
|
5235e00d3c
|
stages/authenticator_validate: add more logging for challenges
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-09 23:58:08 +02:00 |
|
|
Jens Langhammer
|
d4379ecd31
|
flows: fix configure_url not being set correctly User settings
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-09 19:25:27 +02:00 |
|
|
Jens Langhammer
|
f4a53c89ef
|
release: 2021.6.1-rc1
|
2021-06-09 11:01:14 +02:00 |
|
|
Jens Langhammer
|
2210497569
|
events: add EMAIL_SENT event, show sent emails in event log
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-09 10:28:32 +02:00 |
|
|
Jens Langhammer
|
2addf71f37
|
outposts: add service connection to outpost API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-09 09:45:14 +02:00 |
|
|
Jens L
|
dad24c03ff
|
outposts: set cookies for a domain to authenticate an entire domain (#971)
* outposts: initial cookie domain implementation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: add cookie domain setting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/proxy: replace forward_auth_mode with general mode
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: rebuild proxy provider form
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/proxy: re-add forward_auth_mode for backwards compat
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: fix data.mode not being set
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* root: always set log level to debug when testing
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/proxy: use new mode attribute
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/proxy: only ingress /akprox on forward_domain
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/proxy: fix lint error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: fix error on ProxyProviderForm when not using proxy mode
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: fix default for outpost form's type missing
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: add additional desc for proxy modes
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts: fix service account permissions not always being updated
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outpost/proxy: fix redirecting to incorrect host for domain mode
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: improve error handling for network errors
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outpost: fix image naming not matching main imaeg
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts/proxy: fix redirects for domain mode and traefik
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: fix colour for paragraphs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/flows: fix consent stage not showing permissions correctly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* website/docs: add domain-level docs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* website/docs: fix broken links
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts/proxy: remove dead code
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/flows: fix missing id for #header-text
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-08 23:10:17 +02:00 |
|
|
Jens Langhammer
|
fb8d67a9d9
|
core: add configure_url to UserSettings for both stages and sources
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-08 19:21:27 +02:00 |
|
|
Jens Langhammer
|
029d58191e
|
sources/saml: include metadata download link in API response
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-08 17:22:03 +02:00 |
|
|
Jens Langhammer
|
75404f1345
|
web/admin: pass full configure flow URL instead of just boolean
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-08 17:14:54 +02:00 |
|
|
Jens Langhammer
|
ba1b23c879
|
flows: move flow relevant info into ContextualFlowInfo
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-08 16:53:28 +02:00 |
|
|
Jens Langhammer
|
25f987ba2b
|
stages/prompt: add more tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-07 17:40:06 +02:00 |
|
|
Jens Langhammer
|
f23111beff
|
stages/user_write: add tests for duplicate data
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-07 16:42:01 +02:00 |
|
|
Jens Langhammer
|
0f693158b6
|
stages/email: add tests for inaccessible email templates
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-07 16:09:39 +02:00 |
|
|
Jens Langhammer
|
fceab788d2
|
outposts: fix error during outpost disconnect
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-06 19:25:09 +02:00 |
|
|
Jens Langhammer
|
88cc38394e
|
root: improve sentry tags to simplify queries
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-06 14:51:43 +02:00 |
|
|
Jens Langhammer
|
90a5c84ac8
|
core: make EndSessionView inherit PolicyAccessView
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-06 14:07:50 +02:00 |
|
|
Jens Langhammer
|
9180d448df
|
core: move end-session to core
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-06 13:56:38 +02:00 |
|
|
Jens Langhammer
|
1f35f73c66
|
api: add CAN_BACKUP capability
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-06 12:44:43 +02:00 |
|
|
Jens Langhammer
|
0032f535da
|
core: add minor tests for users api
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-06 01:23:04 +02:00 |
|
|
Jens Langhammer
|
17326615b7
|
events: rewrite GeoIP to a wrapper, reload file every 8 hours
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-06 00:42:41 +02:00 |
|
|
Jens Langhammer
|
f5dbdbd48b
|
*: add clear param to file upload API to delete stored file and reset field
closes #949
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-05 21:33:03 +02:00 |
|
|
Jens Langhammer
|
277c2f4aad
|
core: make application.meta_icon nullable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#949
|
2021-06-05 21:06:52 +02:00 |
|
|
Jens Langhammer
|
ba3e0a0586
|
core: fix flow query
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-05 20:30:56 +02:00 |
|
|
Jens Langhammer
|
7581c84a37
|
flows: fix tests using flow.background.url
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-05 20:29:31 +02:00 |
|
|
Jens Langhammer
|
86b450c6d1
|
flows: add compatibility_mode to toggle ShadyDOM
closes #894
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-05 20:04:30 +02:00 |
|
|
Jens Langhammer
|
0b90cfcec4
|
flows: set default background in code not model
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-05 19:38:13 +02:00 |
|
|
Jens Langhammer
|
cefe3fa6dd
|
outposts: fix docker controller always replacing beta images
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-05 16:08:20 +02:00 |
|
|
Jens Langhammer
|
24da24b5d5
|
stages/identification: allow setting of a password stage to check password and identity in a single step
closes #970
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-05 16:05:03 +02:00 |
|
|
Jens Langhammer
|
f996f9d4e3
|
tests/e2e: ensure outpost service account has correct permissions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-04 09:46:31 +02:00 |
|
|
Jens Langhammer
|
7b39718bd1
|
tenants: fix fallback for unittests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 22:40:01 +02:00 |
|
|
Jens Langhammer
|
e9621bae06
|
tests: show logs for containers on failed e2e tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 22:17:18 +02:00 |
|
|
Jens Langhammer
|
0eaabbc0f3
|
admin: fix upgrading deletion of tasks when listing
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 17:42:13 +02:00 |
|
|
Jens Langhammer
|
5e3628bea6
|
core: add fallback URLs for websocket to cleanup test logs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 17:26:18 +02:00 |
|
|
Jens Langhammer
|
290ebef8e3
|
core: instead of migrating sessions, clear cache on initial upgrade
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 17:20:25 +02:00 |
|
|
Jens Langhammer
|
46ab1d20df
|
stages/email: fix token being created without identifier
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 14:54:07 +02:00 |
|
|
Jens Langhammer
|
48e68d6852
|
core: fix token identifier not being set to unique
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 11:45:48 +02:00 |
|
|
Jens Langhammer
|
ed3859800c
|
core: improve API validation for Application's set_icon_url (fix JSON Syntax Error)
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 00:39:56 +02:00 |
|
|
Jens Langhammer
|
06b7f62a40
|
core: make app's meta_launch_url textfield
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 00:21:20 +02:00 |
|
|
Jens Langhammer
|
d32e40b1f8
|
tenants: fix unittests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 22:38:30 +02:00 |
|
|
Jens Langhammer
|
cec47c3cfc
|
providers/oauth2: show id_token issues for refresh token
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 22:05:04 +02:00 |
|
|
Jens Langhammer
|
3ea2b16a12
|
tenants: add separate field for favicon url
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 21:31:04 +02:00 |
|
|
Jens Langhammer
|
974ddc07f7
|
web: improve loading of custom favicon
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 21:19:39 +02:00 |
|
|
Jens Langhammer
|
2f64b76eba
|
flows: fix invalid background URL when using manually set static or http
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 21:09:54 +02:00 |
|
|
Jens Langhammer
|
b50ac96605
|
providers/oauth2: remove size limit on Access code nonce
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 20:20:07 +02:00 |
|
|
Jens Langhammer
|
6d0e0cbe5a
|
outposts: improve validation of providers (must match outpost type)
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 16:04:41 +02:00 |
|
|
Jens Langhammer
|
4f04ab7a5f
|
sources/oauth: fix azure AD get_profile_info not working
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 11:34:59 +02:00 |
|
|
Jens Langhammer
|
35bcd5d174
|
sources/oauth: improve debug logging
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 11:34:18 +02:00 |
|
|
Jens Langhammer
|
644ff4a90c
|
outposts: fix error when validating kubeconfig
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 10:25:59 +02:00 |
|
Alex
|
ef8b26db13
|
Fix typo in migrations for authenticator_webauthn (#950)
|
2021-06-01 00:24:20 +02:00 |
|
|
Jens Langhammer
|
e24a9e3119
|
policies: fix missing negate flag of policy bindings
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-31 11:50:29 +02:00 |
|
|
Jens Langhammer
|
80adafdb48
|
admin: fix attribute error when loading old taskinfo
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 16:22:13 +02:00 |
|
|
Jens Langhammer
|
72f5a4c460
|
outposts: fix possible recursion error in docker controller
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 16:22:02 +02:00 |
|
|
Jens L
|
fb6242d2d3
|
Merge pull request #941 from goauthentik/authenticated-sessions
Session management
|
2021-05-30 15:12:49 +02:00 |
|
|
Jens Langhammer
|
b9773d39c0
|
core: add tests for authenticated sessions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 14:43:00 +02:00 |
|
|
Jens Langhammer
|
0e8d9aa45d
|
api: add System info API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 14:01:20 +02:00 |
|
|
Jens Langhammer
|
fc45d35699
|
core: add migration for sessions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 13:08:29 +02:00 |
|
|
Jens Langhammer
|
7e8044619c
|
lib: return default IP if none could be extracted
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 12:49:44 +02:00 |
|
|
Jens Langhammer
|
66a04aeec5
|
api: add can_geo_ip capability
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 01:02:03 +02:00 |
|
|
Jens Langhammer
|
73338bdf32
|
core: add geo_ip to authenticated sessions if enabled
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 01:01:20 +02:00 |
|
|
Jens Langhammer
|
059da74d1c
|
core: add current attribute to authenticated_session API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 00:31:41 +02:00 |
|
|
Jens Langhammer
|
45b8b1e198
|
core: delete AuthenticatedSession on logout
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 00:27:33 +02:00 |
|
|
Jens Langhammer
|
133fc38c05
|
core: initial authenticated sessions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 00:15:16 +02:00 |
|
|
Jens Langhammer
|
f51ab7a878
|
policies/reputation: fix tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 23:46:13 +02:00 |
|
|
Jens Langhammer
|
31ad09c391
|
stages/identification: add signal which is sent upon identification failure
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 22:58:32 +02:00 |
|
|
Jens Langhammer
|
05b3c4ddb3
|
policies/reputation: save username instead of user object
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 22:49:58 +02:00 |
|
|
Jens Langhammer
|
a4c28a28b4
|
website/docs: improve docs for expressions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 21:47:35 +02:00 |
|
|
Jens Langhammer
|
a1203cf4b2
|
flows: fix ToDefaultFlow not using tenants
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 20:32:42 +02:00 |
|
|
Jens Langhammer
|
8427fb87f6
|
tenants: add tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 19:47:55 +02:00 |
|
|
Jens Langhammer
|
e3578eb7ae
|
Merge branch 'master' into tenant
|
2021-05-29 19:17:23 +02:00 |
|
|
Jens Langhammer
|
5990b8d4de
|
outposts: fix docker container not being stopped correctly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 19:16:39 +02:00 |
|
|
Jens Langhammer
|
3b31b7ce83
|
core: add http host in log messages
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 19:07:54 +02:00 |
|
|
Jens Langhammer
|
4d9b362dbf
|
tenants: add migration to add default tenant
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 19:06:35 +02:00 |
|
|
Jens Langhammer
|
477ff85109
|
flows: migrate flow_unenrollment to tenant
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 18:44:02 +02:00 |
|
|
Jens Langhammer
|
fae8b80ceb
|
core: fix usage of config on templates
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 18:31:05 +02:00 |
|
|
Jens Langhammer
|
df92f01719
|
flows: remove default-recovery
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 18:30:55 +02:00 |
|
|
Jens Langhammer
|
9dd6b7d436
|
flows: remove default-enrollment
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 18:14:37 +02:00 |
|
|
Jens Langhammer
|
14f85ec980
|
tenants: migrate context_processor to tenants
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 18:01:48 +02:00 |
|
|
Jens Langhammer
|
ff611f21cd
|
tenants: initial implementation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 17:47:25 +02:00 |
|
|
Jens Langhammer
|
a1b6e09e8a
|
outposts: set restart-policy on docker container
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-28 17:18:11 +02:00 |
|
|
Jens Langhammer
|
02b5742228
|
stages/authenticator_duo: add default setup flow
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-28 16:47:39 +02:00 |
|
|
Jens Langhammer
|
523621daa2
|
core: make application's check_access API return a PolicyResult and accept for_user as superuser
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-26 11:47:23 +02:00 |
|
|
Jens Langhammer
|
c4453f38a2
|
stages/identification: make shown sources configurable
closes #918
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 16:37:53 +02:00 |
|
|
Jens Langhammer
|
6f3eb4c068
|
flows: allow blank on WithUserInfo
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 12:53:48 +02:00 |
|
|
Jens Langhammer
|
58a4b20297
|
outposts: handle disconnects without outpost better
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 12:06:55 +02:00 |
|
|
Jens Langhammer
|
6d3e067a2b
|
stages/user_write: handle integrity error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 11:46:15 +02:00 |
|
|
Jens Langhammer
|
6db2bf2a21
|
api: fix error when authorization header has no spaces
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 11:40:49 +02:00 |
|
|
Jens Langhammer
|
6893948fa0
|
tests/e2e: fix invalid flows
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 11:18:47 +02:00 |
|
|
Jens Langhammer
|
6317a8c5d0
|
Merge branch 'master' into duo
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# Pipfile.lock
|
2021-05-25 09:58:38 +02:00 |
|
|
Jens Langhammer
|
8ecac59eca
|
stages/prompt: annotate PromptChallengeResponse's additionalProperties
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 22:55:24 +02:00 |
|
|
Jens Langhammer
|
8183a51b72
|
stages/authenticator_duo: add missing duo device
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 22:16:29 +02:00 |
|
|
Jens Langhammer
|
127ebed5c6
|
flows: fix mismatched names
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 21:09:18 +02:00 |
|
|
Jens Langhammer
|
716923e17a
|
web/flows: update types
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 20:59:44 +02:00 |
|
|
Jens Langhammer
|
c6bb6709fd
|
flows: add default challenge response
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 20:27:50 +02:00 |
|
|
Jens Langhammer
|
fb4e0723ee
|
stages: fix stage unittests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 17:12:48 +02:00 |
|
|
Jens Langhammer
|
763c3fcfe0
|
outposts/ldap: fix client usage
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 15:58:59 +02:00 |
|
|
Jens Langhammer
|
1b346866da
|
Merge branch 'master' into duo
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# Pipfile.lock
|
2021-05-24 14:54:24 +02:00 |
|
|
Jens Langhammer
|
6f6ae7831e
|
flows: make use of oneOf OpenAPI to annotate all challenge types
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 14:11:23 +02:00 |
|
|
Jens Langhammer
|
3b41c662ed
|
stages/authenticator_validate: add Duo support
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-23 22:31:12 +02:00 |
|
|
Jens Langhammer
|
65522186f1
|
stages/authenticator_duo: improve setup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-23 21:44:52 +02:00 |
|
|
Jens Langhammer
|
9f5a3c396d
|
stages/authenticator_duo: initial duo stage
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-23 21:10:39 +02:00 |
|
|
Jens L
|
53e2b2c784
|
Prometheus metrics (#914)
* admin: add worker metrics
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* admin: add version metrics
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* events: add gauge for system tasks
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts: add gauge for last hello and connection status
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* root: re-add prometheus metrics to database
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* root: allow access to metrics without credentials when debug is on
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* root: add UpdatingGauge to auto-set value on load
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* flows: add metrics for cache and building
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* policies: add metrics for policy engine
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* events: add histogram for task durations
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* events: revert to gauge because values are updated on export view
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: add gauge to count all models
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* events: add metrics for events
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-23 20:29:34 +02:00 |
|
|
Jens Langhammer
|
a5cd9fa141
|
outposts: improve logging for docker controller
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-23 19:27:24 +02:00 |
|
|
Jens Langhammer
|
0768b201a7
|
Merge branch 'version-2021.5'
|
2021-05-22 20:47:48 +02:00 |
|
|
Jens Langhammer
|
2d5c45543b
|
release: 2021.5.4
|
2021-05-22 20:15:23 +02:00 |
|
|
Jens Langhammer
|
9b57f0b81d
|
Merge branch 'version-2021.5' into next
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# web/src/locales/en.po
# web/src/locales/pseudo-LOCALE.po
|
2021-05-22 20:01:16 +02:00 |
|
|
Jens Langhammer
|
2c816e6162
|
providers/proxy: don't use https to communicate with outpost
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-22 18:56:38 +02:00 |
|
|
Jens Langhammer
|
bb89b9b572
|
Merge branch 'version-2021.5' into next
|
2021-05-21 23:50:43 +02:00 |
|
|
Jens Langhammer
|
6600da7d98
|
providers/oauth2: add missing kid header to JWT Tokens
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 23:40:00 +02:00 |
|
|
Jens Langhammer
|
1a0f72d0a8
|
Merge branch 'version-2021.5' into next
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# authentik/stages/authenticator_static/api.py
# swagger.yaml
|
2021-05-21 21:33:18 +02:00 |
|
|
Jens Langhammer
|
a265dd54cc
|
stages/authenticator_*: fix Permission Error when disabling Authenticator as non-superuser
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 21:25:03 +02:00 |
|
|
Jens Langhammer
|
a603f42cc0
|
api: add OwnerFilter
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 20:46:59 +02:00 |
|
|
Jens Langhammer
|
d9a788aac8
|
api: rename auth to authentication, add authorization for rest_framework permission class
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 20:14:03 +02:00 |
|
|
Jens Langhammer
|
7c6185b581
|
api: fix URL names for admin Authenticator Views
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 19:53:40 +02:00 |
|
|
Jens Langhammer
|
41a1305555
|
policies: improve debug logging
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 19:10:47 +02:00 |
|
|
Jens Langhammer
|
75f252b530
|
flows: rename oob to oobe
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 19:10:42 +02:00 |
|
|
Jens Langhammer
|
c526e5fb9a
|
policies: improve debug logging
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 19:10:15 +02:00 |
|
|
Jens Langhammer
|
b826eb264e
|
flows: rename oob to oobe
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 12:06:39 +02:00 |
|
|
Jens Langhammer
|
7666c246c3
|
Merge branch 'version-2021.5'
|
2021-05-20 20:46:18 +02:00 |
|
|
Jens Langhammer
|
bf4cbb25fe
|
release: 2021.5.3
|
2021-05-20 20:17:39 +02:00 |
|
|
Jens Langhammer
|
a925418f60
|
lib: don't send ImproperlyConfigured to sentry
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 19:18:35 +02:00 |
|
|
Jens Langhammer
|
71d112bdcf
|
sources/plex: remove default for plex_token
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 19:13:54 +02:00 |
|
|
Jens Langhammer
|
d2c06c40ea
|
sources/plex: remove default for plex_token
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 19:09:51 +02:00 |
|
|
Jens Langhammer
|
590c7f4c9d
|
outposts: fix error on outpost disconnect
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 18:07:27 +02:00 |
|
|
Jens Langhammer
|
9a48c2fd9a
|
outposts: fix error on outpost disconnect
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 18:07:07 +02:00 |
|
|
Jens Langhammer
|
be5a6c0310
|
api: add set_*_url method for Application and Flow to set icon/background to URL
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 17:18:40 +02:00 |
|
|
Jens Langhammer
|
92106ca4bf
|
api: add capabilities to API, add can_save_media
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 17:00:47 +02:00 |
|
|
Jens Langhammer
|
56f1204c9b
|
outposts: fix update signal not being sent to correct instances
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 15:23:38 +02:00 |
|
|
Jens Langhammer
|
f6f93640c5
|
outposts: fix update signal not being sent to correct instances
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 15:23:18 +02:00 |
|
|
Jens Langhammer
|
92f2a82c03
|
providers/oauth2: fix double login required when prompt=login
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 01:10:08 +02:00 |
|
|
Jens Langhammer
|
dcf074650e
|
providers/proxy: fix redirect_uris not always being set on save
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 01:10:04 +02:00 |
|
|
Jens Langhammer
|
acf1ad91d9
|
providers/oauth2: fix double login required when prompt=login
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-19 23:34:27 +02:00 |
|
|
Jens Langhammer
|
a74419214c
|
providers/proxy: fix redirect_uris not always being set on save
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-19 23:10:00 +02:00 |
|
|
Jens Langhammer
|
bc6aef7af2
|
lib: improve sentry integration
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-18 11:29:36 +02:00 |
|
|
Jens Langhammer
|
788ea46d8c
|
flows: fix formatting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-18 09:23:22 +02:00 |
|
|
Jens Langhammer
|
06dee5d5d8
|
flows: fix lint error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-17 23:38:31 +02:00 |
|
|
Jens Langhammer
|
3cf0f07baf
|
*: fix API Schema for file uploads
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-17 23:12:52 +02:00 |
|
|
Jens Langhammer
|
f016095891
|
Merge branch 'master' into openapi-v3
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# Pipfile.lock
|
2021-05-17 20:37:18 +02:00 |
|
|
Jens Langhammer
|
5a465fbc36
|
release: 2021.5.2
|
2021-05-17 19:54:10 +02:00 |
|
|
Jens Langhammer
|
7f4bd27b85
|
Merge branch 'master' into openapi-v3
|
2021-05-16 23:51:45 +02:00 |
|
|
Jens Langhammer
|
b66626f9c4
|
ci: generate secert_key for CI runs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 23:46:23 +02:00 |
|
|
Jens Langhammer
|
f9ce41229d
|
api: fix unittests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 22:36:26 +02:00 |
|
|
Jens Langhammer
|
ae6a406b1d
|
Merge branch 'master' into openapi-v3
|
2021-05-16 22:29:39 +02:00 |
|
|
Jens Langhammer
|
45c1a603e7
|
root: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 22:29:28 +02:00 |
|
|
Jens Langhammer
|
330219e76f
|
Merge branch 'master' into openapi-v3
|
2021-05-16 22:26:07 +02:00 |
|
|
Jens Langhammer
|
583271d5ed
|
root: only load debug secret key when debug is enabled
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 22:25:55 +02:00 |
|
|
Jens Langhammer
|
0db17b9729
|
root: remove yasg
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 22:18:04 +02:00 |
|
|
Jens Langhammer
|
9f9ee66cc4
|
api: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 21:57:04 +02:00 |
|
|
Jens Langhammer
|
ab2bd622a8
|
Merge branch 'master' into openapi-v3
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# outpost/pkg/ak/api.go
# outpost/pkg/ak/global.go
# outpost/pkg/ldap/instance_bind.go
|
2021-05-16 21:36:24 +02:00 |
|
Tom Pansino
|
8d2a3b67b9
|
lib: Fix config loading of secrets from files (#887)
|
2021-05-16 21:10:31 +02:00 |
|
|
Jens Langhammer
|
8b6292b3de
|
api: don't overwrite 400 and 403
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 20:54:58 +02:00 |
|
|
Jens Langhammer
|
cbed5a6522
|
api: fix missing error definitions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 19:53:04 +02:00 |
|
|
Jens Langhammer
|
589f806b7c
|
flows: fix schema for flow executor
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 19:13:31 +02:00 |
|
|
Jens Langhammer
|
07dc648470
|
web: fix mixed Static/TOTP pages
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:59:33 +02:00 |
|
|
Jens Langhammer
|
41f6d3b6e7
|
stages/authenticator_static: add serializer for tokens
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:55:47 +02:00 |
|
|
Jens Langhammer
|
d0f1daf025
|
admin: make tasks's retry api not ask for a body
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:43:47 +02:00 |
|
|
Jens Langhammer
|
d38fd603dd
|
web: fix more special API Calls
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:41:02 +02:00 |
|
|
Jens Langhammer
|
ba5374f6e1
|
web: mass update API calls
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:24:15 +02:00 |
|
|
Jens Langhammer
|
7152d7ee01
|
outposts: fix schema for outposts health
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:10:11 +02:00 |
|
|
Jens Langhammer
|
ab07113530
|
admin: migrate WorkerViewSet to APIView
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:06:46 +02:00 |
|
|
Jens Langhammer
|
a7d7b46747
|
admin: migrate version view to APIView
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:00:02 +02:00 |
|
|
Jens Langhammer
|
9a44088d2b
|
admin: migrate metrics viewset to APIView
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 17:49:37 +02:00 |
|
|
Jens Langhammer
|
b351ae12c5
|
api: make config viewset single view
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 17:44:19 +02:00 |
|
|
Jens Langhammer
|
759bf59780
|
core: make filefields readonly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 17:34:55 +02:00 |
|
|
Jens Langhammer
|
10cb60f48e
|
api: fix pagination not being required in schema
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 17:32:13 +02:00 |
|
|
Jens Langhammer
|
ef9f08553c
|
*: linting pass, rename from swagger to schema
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 15:22:57 +02:00 |
|
|
Jens Langhammer
|
4fb71a6bdd
|
api: fix pagination schema
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 15:08:51 +02:00 |
|
|
Jens Langhammer
|
cac1f242dc
|
*: replace swagger with openapi
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 14:23:05 +02:00 |
|
|
Jens Langhammer
|
0bac738090
|
*: fix static response descriptions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 14:07:29 +02:00 |
|
|
Jens Langhammer
|
1324d03815
|
*: initial migration to openapi v3
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 23:57:28 +02:00 |
|
|
Jens Langhammer
|
c55f2ad10a
|
root: set additional sentry tags
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 19:53:43 +02:00 |
|
|
Jens Langhammer
|
a30b32fbbf
|
outposts: fix missing default for OutpostState.for_channel
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 17:46:53 +02:00 |
|
|
Jens Langhammer
|
1745306cc6
|
outposts: fix error when controller loads from cache but cache has expired
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 17:45:33 +02:00 |
|
|
Jens Langhammer
|
8925787a13
|
flows: fix error when using cancel flow
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 17:42:37 +02:00 |
|
|
Jens Langhammer
|
968b7ec17a
|
lib: fix parsing of remote IP header when behind multiple reverse proxies
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 15:08:53 +02:00 |
|
|
Jens Langhammer
|
6600d5bf69
|
providers/oauth2: use user.uid
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 14:08:49 +02:00 |
|
|
Jens Langhammer
|
a4278833d8
|
providers/proxy: fix ingress not being created with full https
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 13:45:41 +02:00 |
|
|
Jens Langhammer
|
942905b9b1
|
providers/proxy: fix formatting issue
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-14 16:24:35 +02:00 |
|
|
Jens Langhammer
|
8d7bb7da17
|
providers/proxy: connect ingress to https instead of http
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#882
|
2021-05-14 11:42:03 +02:00 |
|
|
Jens Langhammer
|
9939db13c3
|
outposts: fix reload notification not working due to wrong ID being saved
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-14 11:13:04 +02:00 |
|
|
Jens Langhammer
|
465750276c
|
core: fix application's slug field not being set to unique
closes #881
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-14 10:49:42 +02:00 |
|
|
Jens Langhammer
|
0b7ebf0e07
|
release: 2021.5.1
|
2021-05-13 20:50:31 +02:00 |
|
|
Jens Langhammer
|
709581f5a8
|
root: use ghcr images by default
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-13 20:15:29 +02:00 |
|
|
Jens Langhammer
|
1df8790050
|
stages/authenticator_static: fix error when listing devices
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-13 18:09:55 +02:00 |
|
|
Jens Langhammer
|
3c23ad340f
|
web/admin: improve diagram api for flows
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-13 18:01:40 +02:00 |
|
|
Jens Langhammer
|
f9f2e00913
|
core: improve error handling for backups
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-13 17:56:49 +02:00 |
|
|
Jens Langhammer
|
8f99891a9d
|
release: 2021.5.1-rc10
|
2021-05-12 21:25:18 +02:00 |
|
|
Jens Langhammer
|
97a3c2d88b
|
release: 2021.5.1-rc9
|
2021-05-12 20:50:29 +02:00 |
|
|
Jens Langhammer
|
e91ff4566d
|
Merge branch 'next' into version-2021.5
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# outpost/pkg/version.go
|
2021-05-12 20:49:58 +02:00 |
|
|
Jens Langhammer
|
a3fccbdaff
|
outposts: add build_hash for docker image
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 20:36:18 +02:00 |
|
|
Jens Langhammer
|
bdf9f26d07
|
outposts: compare build hash in outdated check
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 19:05:29 +02:00 |
|
|
Jens Langhammer
|
9a0aa4c79b
|
outposts/ldap: add infinite loop prevention
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 18:31:44 +02:00 |
|
|
Jens Langhammer
|
52cf4890cf
|
root: remove servername from backup files
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 17:53:23 +02:00 |
|
|
Jens Langhammer
|
8e5d03cb86
|
outposts: remove legacy API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 16:41:54 +02:00 |
|
|
Jens Langhammer
|
2190fa555b
|
events/api: fix error when updating transports
closes #866
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 16:41:30 +02:00 |
|
|
Jens Langhammer
|
3665e2fefa
|
release: 2021.5.1-rc8
|
2021-05-12 14:52:34 +02:00 |
|
|
Jens Langhammer
|
3dbe35cf9e
|
stages/invitation: fix wrong serializer used for user model
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# swagger.yaml
|
2021-05-12 14:22:16 +02:00 |
|
|
Jens Langhammer
|
c7f0ea8a4b
|
root: update dbbackup to git version
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 01:20:31 +02:00 |
|
|
Jens Langhammer
|
0620324702
|
root: bump version of psf black
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 00:42:46 +02:00 |
|
|
Jens Langhammer
|
5a0e78c698
|
outposts: fix issue with duplicate outpost health
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 21:46:30 +02:00 |
|
|
Jens Langhammer
|
84dfbcaaae
|
providers/api: return redirect_uris for proxy provider
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 20:02:17 +02:00 |
|
|
Jens Langhammer
|
e649e9fb03
|
core: don't use self.get_object for application permission check to prevent 404 when view permission is missing
closes #864
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 17:35:11 +02:00 |
|
|
Jens Langhammer
|
266ef66a6f
|
Merge branch 'master' into next
|
2021-05-11 14:57:52 +02:00 |
|
Andreas Egli
|
842fdb0b0c
|
fixed session durations of more than 1 day (#863)
|
2021-05-11 14:57:33 +02:00 |
|
|
Jens L
|
36f7cad23b
|
Merge pull request #862 from goauthentik/form-refresh-on-save
Form refresh on save
|
2021-05-11 14:23:32 +02:00 |
|
|
Jens Langhammer
|
24f2932777
|
crypto: add ?download flag
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#861
|
2021-05-11 14:21:35 +02:00 |
|
|
Jens Langhammer
|
124ce80694
|
sources/plex: make plex_token readable from API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 13:32:28 +02:00 |
|
|
Jens Langhammer
|
4e2443d60b
|
flows: make cancel link always logout user
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 13:13:05 +02:00 |
|
|
Jens Langhammer
|
17b65adcc5
|
lib: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 13:07:47 +02:00 |
|
|
Jens Langhammer
|
96ea7ae09c
|
root: allow configuration of s3 backup location
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 02:10:00 +02:00 |
|
|
Jens Langhammer
|
172bfceb31
|
root: fix db backup failing when password has special chars
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 02:01:22 +02:00 |
|
|
Jens Langhammer
|
932b19999e
|
providers/proxy: missing @property for noop
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 01:26:01 +02:00 |
|
|
Jens Langhammer
|
788fd00390
|
outposts: use noop flag in each reconciler instead of raising Disabled and force use of get_referecen_object
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 00:27:29 +02:00 |
|
|
Jens Langhammer
|
a293a14f2a
|
outposts: re-add _config for backwards compat
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 22:28:46 +02:00 |
|
|
Jens Langhammer
|
51e3453dca
|
admin: fix linting in api tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 20:14:21 +02:00 |
|
|
Jens Langhammer
|
6f58fdf158
|
api: add more tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 19:51:29 +02:00 |
|
|
Jens Langhammer
|
219b8d1a57
|
outposts: allow individual components of managed outposts to be disabled
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 19:27:48 +02:00 |
|
|
Jens Langhammer
|
c7d4e69669
|
root: make database port configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 19:25:15 +02:00 |
|
|
Jens Langhammer
|
cd629dfbaa
|
outposts: improve API validation for config attribute, ensure all required attributes are set
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 19:24:42 +02:00 |
|
|
Jens Langhammer
|
3d0a853449
|
Merge branch 'version-2021.5' into next
|
2021-05-10 18:07:39 +02:00 |
|
|
Jens Langhammer
|
c2f8ff55cf
|
outposts: fix outpost delete hanging thread, run cleanup in async task with info from cache with ability to retry
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 17:11:31 +02:00 |
|
|
Jens Langhammer
|
80fae44f47
|
release: 2021.5.1-rc7
|
2021-05-10 12:13:10 +02:00 |
|
|
Jens Langhammer
|
73eb97ca6e
|
release: 2021.5.1-rc6
|
2021-05-10 11:44:23 +02:00 |
|
|
Jens Langhammer
|
ebe90d8886
|
Merge branch 'next' into version-2021.5
|
2021-05-10 11:43:50 +02:00 |
|
|
Jens Langhammer
|
a1a1b113b1
|
release: 2021.5.1-rc5
|
2021-05-10 11:34:00 +02:00 |
|
|
Jens Langhammer
|
1fb3642701
|
sources/oauth: fix google tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 00:27:37 +02:00 |
|
|
Jens Langhammer
|
847d97b813
|
sources/oauth: fix google tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 00:27:20 +02:00 |
|
|
Jens Langhammer
|
1f1d322958
|
*: fix api results when non-superuser
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 00:01:35 +02:00 |
|
|
Jens Langhammer
|
e4841ce1a4
|
Merge branch 'version-2021.5' into next
|
2021-05-09 23:41:23 +02:00 |
|
|
Jens Langhammer
|
e33a5528f7
|
core: catch IntegrityError in flow_manager and deny request
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 23:31:39 +02:00 |
|
|
Jens Langhammer
|
b7d828702d
|
sources/oauth: don't set username on google source
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 22:56:44 +02:00 |
|
|
Jens Langhammer
|
f7fd31cc84
|
release: 2021.5.1-rc4
|
2021-05-09 21:43:38 +02:00 |
|
|
Jens Langhammer
|
04aae8f584
|
sources/oauth: make secret write_only
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 21:40:25 +02:00 |
|
|
Jens Langhammer
|
bbca90c93a
|
Merge branch 'next' into version-2021.5
|
2021-05-09 20:57:23 +02:00 |
|
|
Jens Langhammer
|
dda1d4e0fb
|
core: add more logs to flow_manager
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 20:27:37 +02:00 |
|
|
Jens Langhammer
|
f072c600cc
|
lifecycle: use URl for redis on startup to prevent errors with no paswords
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 20:13:58 +02:00 |
|
|
Jens Langhammer
|
92537a6c8d
|
Merge branch 'next' into version-2021.5
|
2021-05-09 18:46:26 +02:00 |
|
|
Jens Langhammer
|
72836ecd9d
|
outposts: default to currently running namespace if possible
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 18:44:32 +02:00 |
|
|
Jens Langhammer
|
251a97c77e
|
Merge branch 'next' into version-2021.5
|
2021-05-09 18:13:52 +02:00 |
|
|
Jens Langhammer
|
7f7046f0e4
|
outposts: lowercase k8s object names
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 18:13:21 +02:00 |
|
|
Jens Langhammer
|
cd3f02fd3b
|
release: 2021.5.1-rc3
|
2021-05-09 17:25:48 +02:00 |
|
|
Jens Langhammer
|
d3feab9463
|
release: 2021.5.1-rc2
|
2021-05-09 16:43:36 +02:00 |
|
|
Jens Langhammer
|
70c25692eb
|
release: 2021.5.1-rc1
|
2021-05-09 16:07:50 +02:00 |
|
|
Jens Langhammer
|
a6a8eddf7c
|
providers/proxy: create ingress for forward_auth /akprox path
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 12:40:44 +02:00 |
|
|
Jens Langhammer
|
8c0a87b710
|
outposts: improve logging for outpost controller
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 12:34:44 +02:00 |
|
|
Jens Langhammer
|
5cad59a9f8
|
providers/proxy: fix being able to set empty internal_host
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 00:07:34 +02:00 |
|
|
Jens Langhammer
|
5ac6a6910e
|
outposts: check if traefik CRD exists before attempting to delete
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-08 21:59:13 +02:00 |
|
|
Jens Langhammer
|
d751a7fc4c
|
lib: add user attribute "goauthentik.io/user/override-ips" to allow overriding of client ips
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-08 21:42:31 +02:00 |
|
|
Jens Langhammer
|
1b87375661
|
lib: add default to config from file://
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-08 17:13:13 +02:00 |
|
|
Jens Langhammer
|
6868b7722c
|
outposts: delete old outpost deployment when name or namespace is changed
closes #845
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-08 16:11:38 +02:00 |
|
|
Jens Langhammer
|
7a1935b4e2
|
outposts: fix error on k8s when name has spaces
closes #846
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-08 14:09:21 +02:00 |
|
|
Jens Langhammer
|
5e7521915a
|
stages/password: fix configure_flow not being set on initial setup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 14:08:43 +02:00 |
|
|
Jens Langhammer
|
9fc072e4df
|
outposts: fix lint
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 11:56:44 +02:00 |
|
|
Jens Langhammer
|
55ea9afeec
|
core: fix dark mode on server-side rendered pages
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 11:53:53 +02:00 |
|
|
Jens Langhammer
|
9485f0b8cc
|
outpost/ldap: make users and groups OU instead of CN
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 11:46:26 +02:00 |
|
|
Jens Langhammer
|
e6dfa8294e
|
providers/proxy: use name.namespace for middleware service
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 10:07:30 +02:00 |
|
|
Jens Langhammer
|
e5a5a5c603
|
outposts: fix k8s controller not handing Disabled() in static deployment
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 09:52:43 +02:00 |
|
|
Jens Langhammer
|
ea7f9f291f
|
outposts: create traefikmiddleware if forwardAuth is enabled
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 00:01:35 +02:00 |
|
|
Jens Langhammer
|
241d790e69
|
stages/user_write: if any connection is being sent in the plan context, save it to the user
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 22:10:20 +02:00 |
|
|
Jens Langhammer
|
83e08f12ae
|
core: fix arguments not being passed in FlowManager
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 22:07:48 +02:00 |
|
|
Jens Langhammer
|
6526659b51
|
sources/plex: allow auth for owner (when identifier of source plex token matches)
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 21:50:15 +02:00 |
|
|
Jens Langhammer
|
6c3b7c8d3e
|
events: handle error when notifications are triggered and no users exist
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 20:13:04 +02:00 |
|
|
Jens Langhammer
|
d51ecc4554
|
sources/saml: handle internal error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 20:10:56 +02:00 |
|
|
Jens Langhammer
|
ef63e35ad2
|
outposts: improve messaging from controller on k8s
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 20:07:29 +02:00 |
|
|
Jens Langhammer
|
4e9176ed2e
|
outposts: support different port on container vs exposed port
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 19:59:49 +02:00 |
|
|
Jens Langhammer
|
d1296e9cc7
|
outposts: fix deployments referencing the wrong secret
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 19:51:14 +02:00 |
|
|
Jens Langhammer
|
d85e0593f1
|
core: set attributes on users which are enrolled via source
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 19:35:05 +02:00 |
|
|
Jens Langhammer
|
b3a3852a54
|
core: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 13:58:58 +02:00 |
|
|
Jens Langhammer
|
49bf82a0a4
|
core: add user filter by superuser status
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 13:44:42 +02:00 |
|
|
Jens Langhammer
|
73b87a5e3d
|
events: fix error in API when specifying max_n
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 13:15:54 +02:00 |
|
|
Jens Langhammer
|
ac9cac302c
|
outposts: fix outpost state showing last time without version
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 20:49:13 +02:00 |
|
|
Jens Langhammer
|
701c140cfd
|
providers/proxy: fix logic error for ingress lookup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 20:28:13 +02:00 |
|
|
Jens Langhammer
|
fa2ff5fc2b
|
sources/plex: save user's plex token, add option to allow friends
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 19:37:59 +02:00 |
|
|
Jens Langhammer
|
d5cab5d580
|
sources/plex: fix default for client_id
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 19:23:51 +02:00 |
|
|
Jens Langhammer
|
be8b2bf6f6
|
providers/proxy: don't create ingress for domains which use forwardAuth, don't create ingress at all if all providers are forward auth
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 17:53:12 +02:00 |
|
|
Jens Langhammer
|
b266a2cdfb
|
outposts: make k8s service type configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 15:37:56 +02:00 |
|
|
Jens Langhammer
|
9a15a66d85
|
outposts: make k8s object naming configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 15:36:27 +02:00 |
|
|
Jens Langhammer
|
446f104c90
|
core: add user UID to API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 11:54:28 +02:00 |
|
|
Jens Langhammer
|
86c2a5d69d
|
lib: handle errors when reading config from file://
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 01:03:00 +02:00 |
|
|
Jens Langhammer
|
1a02049104
|
core: show users and groups when user has overall user permissions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 01:02:47 +02:00 |
|
|
Jens Langhammer
|
32934fcd38
|
outpost/ldap: check access based on Group Membership
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 00:03:19 +02:00 |
|
|
Jens Langhammer
|
d84d7c26ca
|
Merge branch 'master' into outpost-ldap
|
2021-05-04 23:34:31 +02:00 |
|
|
Jens Langhammer
|
2f6e6a3123
|
core: improve messaging when flow manager denied request
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 23:30:21 +02:00 |
|
|
Jens Langhammer
|
ba57bf4fa2
|
lib: add support for file:// protocol in config file
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 22:53:59 +02:00 |
|
|
Jens Langhammer
|
e674f03064
|
*/api: fix lookups per user
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 21:58:20 +02:00 |
|
|
Jens Langhammer
|
08451c15f4
|
outposts/ldap: save user DN to determine who can search
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 21:49:15 +02:00 |
|
|
Jens Langhammer
|
99d161e212
|
Merge branch 'master' into outpost-ldap
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# authentik/core/api/users.py
# authentik/policies/event_matcher/migrations/0013_alter_eventmatcherpolicy_app.py
|
2021-05-04 21:02:20 +02:00 |
|
|
Jens Langhammer
|
4acbda2b77
|
core: improve messaging on flow_manager, authenticate user when they linked their account after not having been authenticateed
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 18:49:27 +02:00 |
|
|
Jens Langhammer
|
83cfb5f8c2
|
stages/email: improve error handling
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 18:30:23 +02:00 |
|
|
Jens Langhammer
|
0d370ef0a9
|
web/admin: filter out service accounts by default
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 18:23:13 +02:00 |
|
|
Jens Langhammer
|
42f9ba8efe
|
gproxy: load default config file for debug and listen statements
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 14:10:34 +02:00 |
|
|
Jens Langhammer
|
812be495a5
|
Merge branch 'master' into go-proxy
|
2021-05-03 22:53:33 +02:00 |
|
|
Jens Langhammer
|
dbc3df1f63
|
events: handle error when notification rule doesn't exist during task
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 22:52:39 +02:00 |
|
|
Jens Langhammer
|
d330e9ee7f
|
web/flows: fix rendering for plex login
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 22:08:25 +02:00 |
|
|
Jens Langhammer
|
be21a5d172
|
sources/plex: add general tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 21:55:55 +02:00 |
|
|
Jens Langhammer
|
6fc38436f4
|
sources/plex: set better defaults on model
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 21:23:13 +02:00 |
|
|
Jens Langhammer
|
35faf269db
|
sources: rewrite onboarding
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 20:27:52 +02:00 |
|
|
Jens Langhammer
|
e56c3fc54c
|
Merge branch 'master' into plex-auth
|
2021-05-03 18:28:53 +02:00 |
|
|
Jens Langhammer
|
1041718e27
|
sources/saml: fix redirect url dropping non-standard ports
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 14:51:46 +02:00 |
|
|
Jens Langhammer
|
2507c0eec9
|
stages/invitation: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 12:44:19 +02:00 |
|
|
Jens Langhammer
|
4523550422
|
stages/invitation: add single_use flag to delete invitation after use
closes #821
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 09:52:38 +02:00 |
|
|
Jens Langhammer
|
988cf15b71
|
root: initial go proxy, update compose and helm
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 09:39:09 +02:00 |
|
|
Jens Langhammer
|
01d29134b9
|
sources/plex: add API to redeem token
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-02 16:47:20 +02:00 |
|
|
Jens Langhammer
|
55250e88e5
|
sources/*: rewrite UILoginButton to return challenge instead
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-02 16:46:27 +02:00 |
|
|
Jens Langhammer
|
f1b100c8a5
|
sources/plex: initial plex source implementation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-02 14:43:51 +02:00 |
|
|
Jens Langhammer
|
19708bc67b
|
core: add additional_data to UILoginButton to pass additional data
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-02 14:43:26 +02:00 |
|
|
Jens Langhammer
|
c529340d6c
|
*: fix title not being set correctly for server-side rendered views
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-02 12:22:50 +02:00 |
|
|
Jens Langhammer
|
c317efa14c
|
Merge branch 'master' into outpost-ldap
|
2021-05-01 00:26:55 +02:00 |
|
|
Jens Langhammer
|
379fcf9c1f
|
sources/saml: fix error ValueError while decoding XML
closes #812
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-01 00:18:57 +02:00 |
|
|
Jens Langhammer
|
e10a7b48b7
|
sources/saml: fix Redirect bindings when SSO Url already has query params
related to #812
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 23:44:04 +02:00 |
|
|
Jens Langhammer
|
3e666de91d
|
outposts: fix formatting of image name
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 16:52:28 +02:00 |
|
|
Jens Langhammer
|
333758d91f
|
crypto: handle encrypted private keys
closes #811
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 15:25:42 +02:00 |
|
|
Jens Langhammer
|
eb8f52b870
|
stages/identification: fix tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 10:15:27 +02:00 |
|
|
Jens Langhammer
|
9ce49c2089
|
stages/identification: fix unused import
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 09:34:33 +02:00 |
|
|
Jens Langhammer
|
34c45900c2
|
stages/identification: allow selection of no user fields to only allow login via sources
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 01:07:37 +02:00 |
|
|
Jens Langhammer
|
bf7d110af3
|
Merge branch 'version-2021.4'
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# .github/workflows/release.yml
# helm/README.md
# helm/values.yaml
# website/docs/installation/kubernetes.md
|
2021-04-29 23:50:52 +02:00 |
|
|
Jens Langhammer
|
4e5eeacf0a
|
release: 2021.4.5
|
2021-04-29 23:03:09 +02:00 |
|
|
Jens Langhammer
|
b55cb2b40c
|
Merge branch 'master' into outpost-ldap
|
2021-04-29 20:13:47 +02:00 |
|