897f6f3473
release: 2021.8.1
2021-08-26 16:03:45 +02:00
ffbab2cd68
outpost/ldap: set request_id in sentry
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-25 22:36:08 +02:00
4d27694706
release: 2021.8.1-rc2
2021-08-24 21:29:29 +02:00
58712047e1
root: add ASGI Error handler
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-23 15:15:12 +02:00
7639cdad0a
release: 2021.8.1-rc1
2021-08-22 20:17:35 +02:00
294d70ae4d
outposts/ldap: move virtual groups to other OU for lookups, conditionally skip requests based on search filter
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-21 17:53:09 +02:00
23fd257624
outposts/ldap: fix nil pointer dereference when search self
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-21 16:51:47 +02:00
3e909ae6bb
core: allow filtering users by the groups they are in
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-21 16:27:48 +02:00
ff24bc8cb8
outpost/ldap: regularly pre-heat flow executor cache to increase bind performance
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-21 16:17:30 +02:00
2015d91484
outpost: load global config
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-21 14:14:18 +02:00
54b7ef42f5
outpost/ldap: add sAMAccountName on groups for compatibility
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-15 15:59:24 +02:00
7e62b82d56
outpost/embedded: fix login URL not being set correctly from outpost config
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-11 12:39:27 +02:00
93de363c86
website/developer-docs: add notice for translation requirements
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-10 21:42:59 +02:00
80df444067
outposts/ldap: add sAMAccountName field for compatibility
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-09 21:00:02 +02:00
fe91bff854
outpost/embedded: fix schema
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-08 23:09:35 +02:00
03958d170b
outpost/proxy: fix string substitution for internal
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-08 22:24:10 +02:00
16f0f89a9d
outpost/embedded: fix embedded outpost redirecting to localhost
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-08 15:39:52 +02:00
e02207f38d
outpost/embedded: use redis session backend
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-07 22:12:22 +02:00
a43fb026a0
Merge branch 'version-2021.7'
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# authentik/core/api/users.py
# authentik/providers/saml/processors/metadata_parser.py
# web/src/pages/sources/oauth/OAuthSourceForm.ts
# web/src/pages/sources/plex/PlexSourceForm.ts
# web/src/pages/users/UserForm.ts
2021-08-05 20:23:32 +02:00
18211a2033
release: 2021.7.3
2021-08-05 19:23:03 +02:00
6af2c6a014
outpost/ldap: fix errors with new UserSelf serializer
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-05 18:20:24 +02:00
8e797fa76b
outpost/ldap: fix errors with new UserSelf serializer
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-05 18:16:06 +02:00
9c9bcb7a01
Merge branch 'version-2021.7'
2021-08-01 19:23:22 +02:00
add7a80fdc
release: 2021.7.2
2021-08-01 19:11:50 +02:00
7ecd57ecff
outpost: bump timer for periodic config reloads
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-01 12:33:20 +02:00
66c3535bcb
outpost: bump timer for periodic config reloads
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-31 21:57:33 +02:00
f01bc20d44
Embedded outpost ( #1193 )
...
* api: allow API requests as managed outpost's account when using secret_key
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* root: load secret key from env
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts: make listener IP configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outpost/proxy: run outpost in background and pass requests conditionally
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outpost: unify branding to embedded
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: fix embedded outpost not being editable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: fix mismatched host detection
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* tests/e2e: fix LDAP test not including user for embedded outpost
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* tests/e2e: fix user matching
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* api: add tests for secret_key auth
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* root: load environment variables using github.com/Netflix/go-env
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-29 11:30:30 +02:00
e6b515e3f7
release: 2021.7.1
2021-07-27 10:35:45 +02:00
3041a30193
release: 2021.7.1-rc2
2021-07-24 18:32:05 +02:00
5ff3e9b418
outposts/ldap: add support for member query
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-23 20:00:23 +02:00
f6e1bfdfc8
outpost: fix 100% CPU Usage when not connected to websocket
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-23 18:57:26 +02:00
aca3a5c458
outpost: add tracing for http client
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-23 17:37:06 +02:00
6a8be0dc71
outposts/ldap: improve parsing of LDAP filters
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-23 15:41:09 +02:00
34189fcc06
outposts/ldap: search users and group in parallel
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-22 22:55:23 +02:00
0d0dcf8de0
outposts/ldap: optimise backend Search API requests
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-22 20:38:30 +02:00
1b4654bb1d
outposts/ldap: add tracing for LDAP bind and search
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-22 19:23:56 +02:00
66bfa6879d
outposts/proxy: add X-Auth-Groups header to pass groups
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-22 10:47:58 +02:00
253f345fc4
outposts: save certificate fingerprint and check before re-fetching to cleanup logs
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-21 23:53:43 +02:00
39ad9d7c9d
release: 2021.7.1-rc1
2021-07-21 10:44:40 +02:00
d89266a9d2
outposts/ldap: fix order of Listeners
...
TCP -> PROXY -> TLS
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-20 15:25:11 +02:00
d678d33756
root: add support for PROXY protocol on listeners
...
closes #1161
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-20 11:03:09 +02:00
de4710ea71
outpost: minor cleanup
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-19 17:19:48 +02:00
d55b31dd82
outposts/proxy: set server header
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-19 17:11:11 +02:00
d87871f806
outposts/ldap: improve logging, add request ID
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-19 13:41:29 +02:00
a2c587be43
outposts: don't authenticate as service user for flows to set remote-ip
...
set outpost token as additional header and check that token (user) if they can override remote-ip
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-19 13:17:13 +02:00
4029e19b72
outposts/ldap: fix order of flow check
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-18 22:22:35 +02:00
322a343c81
root: fix log level not being set to DEBUG for tests
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-18 21:45:08 +02:00
6ddd6bfa72
root: fix linting errors
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-18 20:54:34 +02:00
36de302250
outposts: separate CLI flow executor from ldap
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-18 15:51:48 +02:00
cffc6a1b88
outpost/ldap: fix import
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-17 20:02:36 +02:00
a0b63f50bf
outposts: fix import for self-signed cert on ldap
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-17 19:38:04 +02:00
05161db458
cmd: fix shutdown not being signaled properl
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-17 18:04:09 +02:00
311ffa9f79
internal: don't send kill signal to child as we mange it
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-17 17:07:35 +02:00
7cbe33d65d
internal: fix gunicorn not being restarted correctly
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-17 16:59:31 +02:00
b3159a74e5
Merge branch 'master' into inbuilt-proxy
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# Dockerfile
# internal/outpost/ak/api.go
# internal/outpost/ak/api_uag.go
# internal/outpost/ak/global.go
# internal/outpost/ldap/api_tls.go
# internal/outpost/ldap/instance_bind.go
# internal/outpost/ldap/utils.go
# internal/outpost/proxy/api_bundle.go
# outpost/go.mod
# outpost/go.sum
# outpost/pkg/ak/cert.go
2021-07-17 12:49:38 +02:00
bdb84b7a8f
root: build bundled docs into helo dir to fix path issue with packaged static files
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-13 19:09:16 +02:00
be5c8341d2
root: add bundled docs
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-13 11:06:51 +02:00
948db46406
Merge branch 'master' into inbuilt-proxy
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# internal/constants/constants.go
# outpost/pkg/version.go
2021-07-05 19:11:26 +02:00
adc4cd9c0d
release: 2021.6.4
2021-07-05 16:59:29 +02:00
30033d1f90
g: fix static and media caching not working properly
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-03 21:43:37 +02:00
3dc9e247d5
Merge branch 'master' into inbuilt-proxy
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# internal/constants/constants.go
# outpost/pkg/version.go
2021-07-02 16:23:30 +02:00
ff42663d3c
root: more code merging
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-29 16:21:00 +02:00
8429dd19b2
Merge branch 'master' into inbuilt-proxy
2021-06-29 16:20:24 +02:00
680b182d95
release: 2021.6.3
2021-06-29 16:19:07 +02:00
1005f341e4
Merge branch 'master' into inbuilt-proxy
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# internal/constants/constants.go
# outpost/pkg/version.go
2021-06-23 20:41:06 +02:00
31a58e2c25
release: 2021.6.2
2021-06-22 23:35:10 +02:00
f6026fdb13
root: allow loading local /static files without debug flag
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-21 21:21:35 +02:00
fe6963c428
release: 2021.6.1
2021-06-17 22:14:52 +02:00
b98895ac2c
root: add more common utils
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-16 17:29:01 +02:00
6dc38b0132
root: start deduplicating code
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-16 12:41:34 +02:00
690b7be1d8
root: initial merging of outpost and main project
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-16 12:02:02 +02:00
e0f48a30b7
release: 2021.6.1-rc6
2021-06-15 21:18:33 +02:00
d78fda990a
release: 2021.6.1-rc5
2021-06-12 15:19:24 +02:00
e25f6aea8c
release: 2021.6.1-rc4
2021-06-10 18:59:00 +02:00
2c15ab9995
release: 2021.6.1-rc3
2021-06-10 18:04:59 +02:00
6c985acb36
release: 2021.6.1-rc2
2021-06-10 14:10:47 +02:00
f4a53c89ef
release: 2021.6.1-rc1
2021-06-09 11:01:14 +02:00
e43e42139a
web: migrate templates back to django
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-05 19:38:24 +02:00
166b98fa34
web/admin: fix BoundPoliciesList's edit policy button not working
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-02 18:00:26 +02:00
2d5c45543b
release: 2021.5.4
2021-05-22 20:15:23 +02:00
9d476a42d1
web: don't set X-Forwarded-Proto when no request TLS Options are set
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-22 19:46:40 +02:00
a9519a4a68
g: set x-forwarded-proto based on upstream TLS Status
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-21 09:41:39 +02:00
bf4cbb25fe
release: 2021.5.3
2021-05-20 20:17:39 +02:00
c58fe18b97
web: remove nginx config, add caching headers to g
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-20 19:11:55 +02:00
5a465fbc36
release: 2021.5.2
2021-05-17 19:54:10 +02:00
0b7ebf0e07
release: 2021.5.1
2021-05-13 20:50:31 +02:00
8f99891a9d
release: 2021.5.1-rc10
2021-05-12 21:25:18 +02:00
97a3c2d88b
release: 2021.5.1-rc9
2021-05-12 20:50:29 +02:00
3665e2fefa
release: 2021.5.1-rc8
2021-05-12 14:52:34 +02:00
80fae44f47
release: 2021.5.1-rc7
2021-05-10 12:13:10 +02:00
73eb97ca6e
release: 2021.5.1-rc6
2021-05-10 11:44:23 +02:00
a1a1b113b1
release: 2021.5.1-rc5
2021-05-10 11:34:00 +02:00
f7fd31cc84
release: 2021.5.1-rc4
2021-05-09 21:43:38 +02:00
cd3f02fd3b
release: 2021.5.1-rc3
2021-05-09 17:25:48 +02:00
d3feab9463
release: 2021.5.1-rc2
2021-05-09 16:43:36 +02:00
70c25692eb
release: 2021.5.1-rc1
2021-05-09 16:07:50 +02:00
4acbda2b77
core: improve messaging on flow_manager, authenticate user when they linked their account after not having been authenticateed
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-04 18:49:27 +02:00
0d370ef0a9
web/admin: filter out service accounts by default
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-04 18:23:13 +02:00
5d26fa0403
gproxy: add sentry integration
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-04 14:28:48 +02:00
42f9ba8efe
gproxy: load default config file for debug and listen statements
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-04 14:10:34 +02:00
6725569ba8
gproxy: listen on tls
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-03 23:19:22 +02:00
988cf15b71
root: initial go proxy, update compose and helm
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-03 09:39:09 +02:00
Jens Langhammer