2303a97bb9
core: add method to set key of token
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#2574
2022-04-11 20:43:39 +02:00
8be04cc013
providers/oauth2: fix elliptic curve keys attempting to use EC256 instead of ES256
...
closes #2703
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-11 20:05:58 +02:00
cca33a74b6
core: fix error when checking generated users with no expiry
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-10 17:53:46 +02:00
f977bf61eb
providers/oauth2: make exp optional on jwt client_credentials flow
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-10 17:25:35 +02:00
f8f8a9bbb9
providers/oauth2: give keypairs private key preference over certificate in client_credentials jwt flow
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-10 16:27:53 +02:00
e64ca4ab04
core: fix lint error
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-08 10:10:30 +02:00
e2f0a76309
outposts: check if docker ports should be mapped before comparing ports
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-07 17:30:33 +02:00
5861d41ad3
tenants: add tenant-level attributes, applied to users based on request
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-06 10:41:35 +02:00
20262f3f4b
core: mark provider_obj as read_only
...
closes #2637
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-04 10:17:59 +02:00
633296503d
core: add grouping to applications ( #2648 )
...
* core: add grouping to applications
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: add new field to tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-02 23:08:58 +02:00
508cec2fd5
web: migrate dropdowns to wizards ( #2633 )
...
* web/admin: add basic wizards for providers
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: add dark mode for wizard
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: migrate policies to wizard
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* start source
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* policies: sanitze_dict when returning log messages during tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* Revert "web/admin: migrate policies to wizard"
This reverts commit d8b7f62d3e
2022-04-02 19:48:17 +02:00
7a93614e4b
policies: fix tests
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-02 18:31:02 +02:00
4f319eaa4f
policies/dummy: bump to info to always get message
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-02 17:28:51 +02:00
86a8d00b3f
policies: sanitze_dict when returning log messages during tests
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-02 17:15:44 +02:00
5fe8c1f3d7
policies: fix missing default for log_messages
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-02 16:44:49 +02:00
d84ff2bbca
policies: add policy log messages to test endpoints
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-04-01 22:07:35 +02:00
4be238018b
providers/oauth2: pass scope and other parameters to access policy request context
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#2641
2022-04-01 21:39:05 +02:00
99008252f8
providers/oauth2: fix verification_keys being required
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-31 20:19:13 +02:00
8689444954
providers/oauth2: add password grant support (treated as client_credentials)
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-31 18:02:17 +02:00
bb8af2f19b
providers/oauth2: add client_assertion_type jwt bearer support ( #2618 )
2022-03-31 00:30:55 +02:00
996bd05ba6
api: fix API header auth not passing to next auth method
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-31 00:06:01 +02:00
a1a64e25ee
api: remove legacy http basic auth
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-30 23:39:08 +02:00
993c6472db
crypto: only count discovered when cert was loaded successfully
2022-03-28 08:58:23 +00:00
123b0b2f05
core: fix pylint renamed variable
2022-03-28 08:58:13 +00:00
7cbd5174f0
stages/invitation: fix tests
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-26 19:12:22 +01:00
c7a83e6182
stages/invitation: add invitation name
...
closes #2583
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-26 18:32:59 +01:00
74ff9d04dd
stages/prompt: set field default based on placeholder, fix duplicate fields
...
closes #2572
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-23 22:26:06 +01:00
969902f503
stages/prompt: filter rest_framework.fields.empty when field is not required
...
closes #2572
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-23 20:21:12 +01:00
04372e21dd
events: handle types in event contexts
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#2572
2022-03-23 19:49:55 +01:00
d75a864f0e
providers/oauth2: map internal groups to GitHub teams in GHE OAuth emulation ( #2497 )
...
* providers/oauth2: impl `/user/teams` endpoint for Github OAuth2
This commit adds a functional `/user/teams` endpoint for the emulated Github OAuth2 service.
The teams a user is part of are based on the user's groups in Authentik.
* providers/oauth2: Move org template inside loop; Change slug to use Django slugify
* providers/oauth2: Remove placeholder replacement
* Possibly fix complaints from the linters
* Update github.py
* Change organization name
* Update github.py
2022-03-23 12:05:20 +01:00
0c2b32da31
core: add num_pk to group for applications that need a numerical group id
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#2497
2022-03-22 21:37:11 +01:00
9ad4c736f1
stages/email: allow overriding of destination email in plan context
...
closes #2445
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-22 21:19:34 +01:00
4154b62565
stages/prompt: fix non-required fields not allowing blank values, add more tests
...
closes #2544
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-22 20:38:04 +01:00
86a4a7dcee
release: 2022.3.3
2022-03-21 22:37:13 +01:00
8b95e9f97a
crypto: open files in read-only mode for importing ( #2536 )
...
closes #2535
2022-03-21 10:46:09 +01:00
be232e2b77
core: fix provider launch URL being prioritised over manually configured launch URL
...
closes #2493
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-16 10:26:55 +01:00
53d0205e86
outposts/proxy: use Prefix in ingress for k8s
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-15 19:01:08 +01:00
260a7aac63
release: 2022.3.2
2022-03-15 00:01:01 +01:00
a3df414f24
sources/ldap: fix parent_group not being applied
...
closes #2464
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-14 22:13:20 +01:00
dcaa8d6322
flows: revert default flow user change
...
closes #2483
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-14 22:05:30 +01:00
ceb894039e
stages/authenticator_validate: fix passwordless flows not working
...
closes #2484
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-14 21:15:47 +01:00
c7a825c393
lib: lower default sample rate
2022-03-14 12:38:14 +00:00
54f170650a
core: replace uid with uuid search
...
uid can't be searched it as its a computed field
closes #2480
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-14 10:35:55 +01:00
fedb81571d
release: 2022.3.1
2022-03-10 19:12:29 +01:00
37528e1bba
stages/authenticator_validate: fix lint
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-10 09:56:04 +01:00
cc1509cf57
stages/authenticator_validate: fix logic error when multiple authenticator devices can be selected
...
closes #2290
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-10 00:46:42 +01:00
0dfecc6ae2
stages/authenticator_*: fix device.confirmed being set incorrectly
...
closes #2330
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-10 00:19:49 +01:00
de17207c68
lib: fix default geoip path
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#2453
2022-03-09 21:57:29 +01:00
920d1f1b0e
providers/oauth2: initial client_credentials grant support ( #2437 )
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-03-05 23:24:55 +01:00
b1fd801ceb
tenants: fix syntax error in expression for locale
2022-03-03 11:50:46 +00:00
Jens Langhammer
Adam G
Angel Nunez Mencias