539e8242ff
web: fix overflow glitch on ak-page-header (cherry-pick #7883 ) ( #7931 )
...
web: fix overflow glitch on ak-page-header (#7883 )
By adding 'grow' but not 'shrink' to the header section, the page was allowed to allocate
as much width as was available when the window opened, but not allowed to resize the width
if it was pushed closed by zoom, page resize, or summon sidebar.
This commit adds 'shrink' to the capabilities of the header.
Co-authored-by: Ken Sternberg <133134217+kensternberg-authentik@users.noreply.github.com>
2023-12-19 18:30:04 +01:00
2648333590
providers/scim: change familyName default (cherry-pick #7904 ) ( #7930 )
...
providers/scim: change familyName default (#7904 )
* Update providers-scim.yaml
* fix: add formatted to match the givenName & familyName
* fix, update tests
---------
Signed-off-by: Antoine <antoine+github@jiveoff.fr>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
Co-authored-by: Antoine <antoine+github@jiveoff.fr>
2023-12-19 18:29:55 +01:00
fe828ef993
tests: fix flaky tests (cherry-pick #7676 ) ( #7939 )
...
tests: fix flaky tests (#7676 )
* tests: fix flaky tests
* make test-from-stable use actual latest version
* fix checkout
* remove hardcoded seed
* ignore tests for now i guess idk
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-12-19 18:29:44 +01:00
29a6530742
web: dark/light theme fixes ( #7872 )
...
* web: fix css for user tree-view
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix unrelated things
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix header button colors
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix missing fallback not showing default slant
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* move global theme-dark css to only use for SSR rendered pages
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
# Conflicts:
# .github/workflows/ci-main.yml
# web/xliff/fr.xlf
2023-12-19 18:18:19 +01:00
a6b9274c4f
web/admin: always show oidc well-known URL fields when they're set ( #7560 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
# Conflicts:
# web/xliff/de.xlf
# web/xliff/en.xlf
# web/xliff/es.xlf
# web/xliff/fr.xlf
# web/xliff/pl.xlf
# web/xliff/pseudo-LOCALE.xlf
# web/xliff/tr.xlf
# web/xliff/zh-Hans.xlf
# web/xliff/zh-Hant.xlf
# web/xliff/zh_TW.xlf
2023-12-19 18:10:40 +01:00
a2a67161ac
release: 2023.10.4
2023-11-21 18:38:24 +01:00
2e8263a99b
web: fix locale
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-11-21 18:20:41 +01:00
6b9afed21f
security: fix CVE-2023-48228 (cherry-pick #7666 ) ( #7668 )
...
security: fix CVE-2023-48228 (#7666 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-21 18:13:54 +01:00
1eb1f4e0b8
web/admin: fix admins not able to delete MFA devices ( #7660 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
# Conflicts:
# web/xliff/zh-Hans.xlf
2023-11-21 15:24:37 +01:00
7c3d60ec3a
events: don't update internal service accounts unless needed (cherry-pick #7611 ) ( #7640 )
...
events: stop spam (#7611 )
* events: don't log updates to internal service accounts
* dont log reputation updates
* don't actually ignore things, stop updating outpost user when not required
* prevent updating internal service account users
* fix setattr call
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-20 19:43:30 +01:00
a494c6b6e8
root: specify node and python versions in respective config files, deduplicate in CI ( #7620 )
...
* root: specify node and python versions in respective config files, deduplicate in CI
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix engines missing for wdio
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* bump setup python version
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* actually don't bump a bunch of things
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
# Conflicts:
# poetry.lock
# website/package.json
2023-11-19 00:35:55 +01:00
6604d3577f
core: bump golang from 1.21.3-bookworm to 1.21.4-bookworm (cherry-pick #7483 ) ( #7622 )
...
core: bump golang from 1.21.3-bookworm to 1.21.4-bookworm
Bumps golang from 1.21.3-bookworm to 1.21.4-bookworm.
---
updated-dependencies:
- dependency-name: golang
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-19 00:33:07 +01:00
f8bfa7e16a
ci: fix permissions for release pipeline to publish binaries (cherry-pick #7512 ) ( #7621 )
...
ci: fix permissions for release pipeline to publish binaries (#7512 )
ci: fix permissions
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-19 00:31:20 +01:00
ea6cf6eabf
events: fix missing model_* events when not directly authenticated (cherry-pick #7588 ) ( #7597 )
...
events: fix missing model_* events when not directly authenticated (#7588 )
* events: fix missing model_* events when not directly authenticated
* defer accessing database
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-16 12:59:41 +01:00
769ce3ce7b
providers/scim: fix missing schemas attribute for User and Group (cherry-pick #7477 ) ( #7596 )
...
providers/scim: fix missing schemas attribute for User and Group (#7477 )
* providers/scim: fix missing schemas attribute for User and Group
* make things actually work
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-16 12:06:01 +01:00
3891fb3fa8
events: sanitize functions (cherry-pick #7587 ) ( #7589 )
...
events: sanitize functions (#7587 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-15 23:24:13 +01:00
41eb965350
stages/email: use uuid for email confirmation token instead of username (cherry-pick #7581 ) ( #7584 )
...
stages/email: use uuid for email confirmation token instead of username (#7581 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-15 21:57:05 +01:00
8d95612287
providers/proxy: Fix duplicate cookies when using file system store. (cherry-pick #7541 ) ( #7544 )
...
providers/proxy: Fix duplicate cookies when using file system store. (#7541 )
Fix duplicate cookies when using file system store.
Co-authored-by: thijs_a <thijs@thijsalders.nl>
2023-11-13 16:02:35 +01:00
82b5274b15
release: 2023.10.3
2023-11-09 18:37:22 +01:00
af56ce3d78
core: fix worker beat toggle inverted (cherry-pick #7508 ) ( #7509 )
...
core: fix worker beat toggle inverted (#7508 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-09 18:36:56 +01:00
f5c6e7aeb0
Web: bugfix: broken backchannel selector (cherry-pick #7480 ) ( #7507 )
...
Web: bugfix: broken backchannel selector (#7480 )
* web: break circular dependency between AKElement & Interface.
This commit changes the way the root node of the web application shell is
discovered by child components, such that the base class shared by both
no longer results in a circular dependency between the two models.
I've run this in isolation and have seen no failures of discovery; the identity
token exists as soon as the Interface is constructed and is found by every item
on the page.
* web: fix broken typescript references
This built... and then it didn't? Anyway, the current fix is to
provide type information the AkInterface for the data that consumers
require.
* web: rollback dependabot's upgrade of context
The most frustrating part of this is that I RAN THIS, dammit, with the updated
context and the current Wizard, and it finished the End-to-End tests without
complaint.
* web: bugfix: broken backchannel selector
There were two bugs here, both of them introduced by me because I didn't understand the
system well enough the first time through, and because I didn't test thoroughly enough.
The first is that I was calling the wrong confirmation code; the resulting syntax survived
because `confirm()` is actually a legitimate function call in the context of the DOM Window,
a legacy survivor similar to `alert()` but with a yes/no return value. Bleah.
The second is that the confirm code doesn't appear to pass back a dictionary with the
`{ items: Array<Provider> }` list, it passes back just the `items` as an Array.
Co-authored-by: Ken Sternberg <133134217+kensternberg-authentik@users.noreply.github.com>
2023-11-09 17:58:38 +01:00
3809400e93
events: fix gdpr compliance always running (cherry-pick #7491 ) ( #7505 )
...
events: fix gdpr compliance always running
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2023-11-09 17:57:25 +01:00
1def9865cf
web/flows: attempt to fix bitwareden android compatibility (cherry-pick #7455 ) ( #7457 )
...
web/flows: attempt to fix bitwareden android compatibility (#7455 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-06 23:58:44 +01:00
3716298639
sources/oauth: fix patreon (cherry-pick #7454 ) ( #7456 )
...
sources/oauth: fix patreon (#7454 )
* web/admin: add note for potentially confusing consumer key/secret
* sources/oauth: fix patreon default scopes
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-06 16:36:22 +01:00
c16317d7cf
providers/proxy: fix closed redis client (cherry-pick #7385 ) ( #7429 )
...
providers/proxy: fix closed redis client (#7385 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-03 15:46:17 +01:00
bbb8fa8269
ci: explicitly give write permissions to packages (cherry-pick #7428 ) ( #7430 )
...
ci: explicitly give write permissions to packages (#7428 )
* ci: explicitly give write permissions to packages
* run full CI on cherry-picks
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-03 15:46:00 +01:00
e4c251a178
web/admin: fix html error on oauth2 provider page (cherry-pick #7384 ) ( #7424 )
...
web/admin: fix html error on oauth2 provider page (#7384 )
* web: break circular dependency between AKElement & Interface.
This commit changes the way the root node of the web application shell is
discovered by child components, such that the base class shared by both
no longer results in a circular dependency between the two models.
I've run this in isolation and have seen no failures of discovery; the identity
token exists as soon as the Interface is constructed and is found by every item
on the page.
* web: fix broken typescript references
This built... and then it didn't? Anyway, the current fix is to
provide type information the AkInterface for the data that consumers
require.
* \# Details
Extra `>` symbol screwed up the reading of the rest of the component. Unfortunately,
too many fields in an input are optional, so it was easy for this bug to bypass any
checks by the validators. I should have caught it myself, though.
Co-authored-by: Ken Sternberg <133134217+kensternberg-authentik@users.noreply.github.com>
2023-11-03 13:17:26 +01:00
0fefd5f522
stages/email: fix duplicate querystring encoding (cherry-pick #7386 ) ( #7425 )
...
stages/email: fix duplicate querystring encoding (#7386 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-03 13:17:18 +01:00
88057db0b0
providers/oauth2: set auth_via for token and other endpoints (cherry-pick #7417 ) ( #7427 )
...
providers/oauth2: set auth_via for token and other endpoints (#7417 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@goauthentik.io>
2023-11-03 13:17:10 +01:00
91cb6c9beb
root: Improve multi arch Docker image build speed (cherry-pick #7355 ) ( #7426 )
...
root: Improve multi arch Docker image build speed (#7355 )
* Improve multi arch Docker image build speed
Use only host architecture for GeoIP database update and for Go cross-compilation
* Speedup Go multi-arch compilation for other images
* Speedup multi-arch ldap image build
Co-authored-by: Philipp Kolberg <39984529+PKizzle@users.noreply.github.com>
2023-11-03 13:16:54 +01:00
8e72fcab59
release: 2023.10.2
2023-10-28 21:43:54 +02:00
261879022d
security: fix oobe-flow reuse when akadmin is deleted ( #7361 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-28 21:24:06 +02:00
2a47ff2977
website/docs: prepare 2023.10.2 release notes ( #7362 )
...
website/docs: prepare 2023.10.2
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-28 21:07:57 +02:00
c3a81a1cce
website/docs: add missing breaking change due to APPEND_SLASH ( #7360 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-28 18:13:56 +02:00
220d739fef
lifecycle: rework otp_merge migration ( #7359 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-28 17:56:04 +02:00
4a57c6f230
translate: Updates for file web/xliff/en.xlf in zh-Hans ( #7354 )
...
Translate web/xliff/en.xlf in zh-Hans
100% translated source file: 'web/xliff/en.xlf'
on 'zh-Hans'.
Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
2023-10-27 20:41:31 +02:00
4a93b97bec
translate: Updates for file web/xliff/en.xlf in zh_CN ( #7353 )
...
Translate web/xliff/en.xlf in zh_CN
100% translated source file: 'web/xliff/en.xlf'
on 'zh_CN'.
Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
2023-10-27 20:41:17 +02:00
ac2bbd7e2f
website/docs: add warning about Helm breaking change in 2024.x ( #7351 )
...
Co-authored-by: Jens L. <jens@goauthentik.io>
2023-10-27 17:22:02 +00:00
ad9f500ad1
crypto: fix race conditions when creating self-signed certificates on startup ( #7344 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-27 16:29:10 +02:00
15d7175750
blueprints: fix entries with state: absent not being deleted if their serializer has errors ( #7345 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-27 16:28:56 +02:00
41d372a340
web/admin: fix @change handler for ak-radio elements ( #7348 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-27 16:28:18 +02:00
83b84e8d26
rbac: handle lookup error ( #7341 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-27 13:38:44 +02:00
f22daca091
website/docs: add warning about upgrading to 2023.10 ( #7340 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-27 12:51:49 +02:00
ae4d5a30f2
web/admin: fix role form reacting to enter ( #7330 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-27 11:39:39 +02:00
9708481005
core: bump github.com/google/uuid from 1.3.1 to 1.4.0 ( #7333 )
...
Bumps [github.com/google/uuid](https://github.com/google/uuid ) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/google/uuid/releases )
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md )
- [Commits](https://github.com/google/uuid/compare/v1.3.1...v1.4.0 )
---
updated-dependencies:
- dependency-name: github.com/google/uuid
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-27 11:13:27 +02:00
1c32c9e06d
core: bump goauthentik.io/api/v3 from 3.2023083.10 to 3.2023101.1 ( #7334 )
...
Bumps [goauthentik.io/api/v3](https://github.com/goauthentik/client-go ) from 3.2023083.10 to 3.2023101.1.
- [Release notes](https://github.com/goauthentik/client-go/releases )
- [Commits](https://github.com/goauthentik/client-go/compare/v3.2023083.10...v3.2023101.1 )
---
updated-dependencies:
- dependency-name: goauthentik.io/api/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-27 11:13:14 +02:00
7a3d92ffdb
core: bump ruff from 0.1.2 to 0.1.3 ( #7335 )
...
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.1.2 to 0.1.3.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/v0.1.2...v0.1.3 )
---
updated-dependencies:
- dependency-name: ruff
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-27 11:13:01 +02:00
a72b36d94d
core: bump pydantic-scim from 0.0.7 to 0.0.8 ( #7336 )
...
Bumps [pydantic-scim](https://chalk.ai ) from 0.0.7 to 0.0.8.
---
updated-dependencies:
- dependency-name: pydantic-scim
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-27 11:12:52 +02:00
6b25f6f592
website/blogs: Blog dockers ( #7328 )
...
* Dockers blog draft
* redo
* renamed dir
* renamed directory
* added email address
* formatting
* title tweak
* Kens edits
* link
---------
Co-authored-by: Tana Berry <tana@goauthentik.io>
2023-10-26 21:19:14 -05:00
7d91842e8a
providers/proxy: attempt to fix duplicate cookie ( #7324 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-10-27 00:41:13 +02:00
gcp-cherry-pick-bot[bot]
Jens L
transifex-integration[bot]
risson
dependabot[bot]
Tana M Berry