trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
4625 commits 95 branches 330 tags 336 MiB
Commit graph

4625 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jens Langhammer ac9cac302c outposts: fix outpost state showing last time without version 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 20:49:13 +02:00
Jens Langhammer 701c140cfd providers/proxy: fix logic error for ingress lookup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 20:28:13 +02:00
Jens Langhammer ca5761652c lifecycle: show errors when initial db check fails 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 20:15:01 +02:00
Jens Langhammer 553872e8dd website: fix layout on mobile 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 20:05:07 +02:00
Jens Langhammer adc9b67a9c website/docs: move configuration to its own document 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 19:52:07 +02:00
Jens Langhammer fa2ff5fc2b sources/plex: save user's plex token, add option to allow friends 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 19:37:59 +02:00
Jens Langhammer d5cab5d580 sources/plex: fix default for client_id 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 19:23:51 +02:00
Jens Langhammer 9e3b5d313b web/admin: rewrite sidebar to use full components, switch to categories 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 19:14:37 +02:00
Jens Langhammer be8b2bf6f6 providers/proxy: don't create ingress for domains which use forwardAuth, don't create ingress at all if all providers are forward auth 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 17:53:12 +02:00
Jens Langhammer 3f8cd7ff13 website/docs: link correct docker-compose file 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 17:30:44 +02:00
Jens Langhammer b266a2cdfb outposts: make k8s service type configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 15:37:56 +02:00
Jens Langhammer 9a15a66d85 outposts: make k8s object naming configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 15:36:27 +02:00
Jens Langhammer 446f104c90 core: add user UID to API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 11:54:28 +02:00
Jens Langhammer 2cad9a3d07 website/docs: add LDAP Outpost docs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 11:48:07 +02:00
Jens L ee48b8c225
Merge pull request #828 from goauthentik/dependabot/npm_and_yarn/web/typescript-eslint/parser-4.22.1 
build(deps): bump @typescript-eslint/parser from 4.22.0 to 4.22.1 in /web
 2021-05-05 11:09:08 +02:00
dependabot[bot] a91649a7d4
build(deps): bump @typescript-eslint/parser in /web 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 4.22.0 to 4.22.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.22.1/packages/parser)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-05-05 08:53:54 +00:00
Jens L ca89201bd8
Outpost LDAP (#784) 
* outposts: initial ldap outpost implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: add LDAP Binding using flows

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add API to check access to single application by slug

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: check application access

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/ldap: add LDAP provider

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: add ability to use multiple providers on the same outpost

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add UI for LDAP Provider

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: fix linting

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: add controllers

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: fix type not being configurable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: use authorization_flow instead of separate field

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: add dockerfile

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/ldap: fix lint error

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add groups to users

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/ldap: add search_group to limit who can do search requests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: improve logging,return success for empty DN

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: allow outposts to have non-object specific permissions

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: use forked version of ldap library

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: save user DN to determine who can search

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* */api: fix lookups per user

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: only show plex servers you own

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* lib: add support for file:// protocol in config file

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: hide oauth client secret if not updating

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost/ldap: check access based on Group Membership

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: show users and groups when user has overall user permissions

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* lib: handle errors when reading config from file://

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix package json failing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* ci: bump node spec to 16x for npm version and lockfile v2

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 10:40:56 +02:00
dependabot[bot] e3a8fc0746
build(deps): bump @typescript-eslint/eslint-plugin in /web (#829) 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 4.22.0 to 4.22.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.22.1/packages/eslint-plugin)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2021-05-05 10:13:10 +02:00
dependabot[bot] 5e3a6b802b
build(deps): bump rollup from 2.46.0 to 2.47.0 in /web (#830) 
Bumps [rollup](https://github.com/rollup/rollup) from 2.46.0 to 2.47.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v2.46.0...v2.47.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2021-05-05 10:12:59 +02:00
dependabot[bot] e8d9f992b9
build(deps): bump boto3 from 1.17.65 to 1.17.66 (#831) 
Bumps [boto3](https://github.com/boto/boto3) from 1.17.65 to 1.17.66.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.17.65...1.17.66)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2021-05-05 10:12:48 +02:00
Jens Langhammer 260b2c8ca8 ci: bump node spec to 16x for npm version and lockfile v2 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 09:44:15 +02:00
Jens Langhammer 751e77fa9e web: fix package json failing 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 01:24:10 +02:00
Jens Langhammer 86c2a5d69d lib: handle errors when reading config from file:// 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 01:03:00 +02:00
Jens Langhammer 1a02049104 core: show users and groups when user has overall user permissions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 01:02:47 +02:00
Jens Langhammer 32934fcd38 outpost/ldap: check access based on Group Membership 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 00:03:19 +02:00
Jens Langhammer d84d7c26ca Merge branch 'master' into outpost-ldap 2021-05-04 23:34:31 +02:00
Jens Langhammer 2f6e6a3123 core: improve messaging when flow manager denied request 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 23:30:21 +02:00
Jens Langhammer 36b674349a Merge branch 'master' into next 2021-05-04 23:28:04 +02:00
dependabot[bot] 038ef67745
build(deps-dev): bump pytest from 6.2.3 to 6.2.4 (#826) 
Bumps [pytest](https://github.com/pytest-dev/pytest) from 6.2.3 to 6.2.4.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/6.2.3...6.2.4)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2021-05-04 23:14:06 +02:00
dependabot[bot] 53831fa354
build(deps): bump boto3 from 1.17.64 to 1.17.65 (#827) 
Bumps [boto3](https://github.com/boto/boto3) from 1.17.64 to 1.17.65.
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](https://github.com/boto/boto3/compare/1.17.64...1.17.65)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2021-05-04 23:13:56 +02:00
dependabot[bot] be39673f29
Merge pull request #825 from goauthentik/dependabot/pip/django-3.2.1 
build(deps): bump django from 3.2 to 3.2.1
 2021-05-04 23:13:46 +02:00
Jens Langhammer 0f8dbfcc9c web/admin: hide oauth client secret if not updating 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 22:58:52 +02:00
Jens Langhammer ba57bf4fa2 lib: add support for file:// protocol in config file 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 22:53:59 +02:00
Jens Langhammer b1c9126832 web/admin: only show plex servers you own 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 22:51:52 +02:00
Jens Langhammer e674f03064 */api: fix lookups per user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 21:58:20 +02:00
Jens Langhammer 08451c15f4 outposts/ldap: save user DN to determine who can search 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 21:49:15 +02:00
Jens Langhammer 99d161e212 Merge branch 'master' into outpost-ldap 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	authentik/core/api/users.py
#	authentik/policies/event_matcher/migrations/0013_alter_eventmatcherpolicy_app.py
 2021-05-04 21:02:20 +02:00
Jens Langhammer 940ccf9ea8 website/docs: fix formatting for release notes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 20:13:38 +02:00
Jens Langhammer 08cce2ca4e website/docs: update release notes for next 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:50:13 +02:00
Jens Langhammer 4acbda2b77 core: improve messaging on flow_manager, authenticate user when they linked their account after not having been authenticateed 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:49:27 +02:00
Jens Langhammer 83cfb5f8c2 stages/email: improve error handling 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:30:23 +02:00
Jens Langhammer 0d370ef0a9 web/admin: filter out service accounts by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:23:13 +02:00
Jens Langhammer a335ca0895 web/admin: use history.replaceState in Tabs to prevent double history entries 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:13:20 +02:00
Jens Langhammer 8a666535a8 website/docs: update container explanation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 17:49:21 +02:00
Jens Langhammer e6431593f7 web/admin: auto-select keypair in oauth provider creation when only 1 keypair exists 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 17:09:04 +02:00
Jens Langhammer 928c2bf0d6 web/admin: add launch button to application view page 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 17:08:46 +02:00
Jens Langhammer 68388e9551 helm: fix typo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 16:27:05 +02:00
Jens Langhammer 5d26fa0403 gproxy: add sentry integration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 14:28:48 +02:00
Jens Langhammer 42f9ba8efe gproxy: load default config file for debug and listen statements 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 14:10:34 +02:00
Jens Langhammer 0440ad7c09 web/admin: add missing plex source view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 12:09:35 +02:00