trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
7046 commits 95 branches 330 tags 336 MiB
Commit graph

1780 commits

Author SHA1 Message Date
Jens Langhammer 649abddea7 outposts: fallback to known-good outpost image if configured image cannot be pulled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-07 19:10:39 +02:00
Jens Langhammer 67b88595ad stages/prompt: fix sub_text not allowing blank 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-07 19:00:15 +02:00
Jens Langhammer b4ee693a5c stages/user_write: allow recursive writing to user.attributes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-07 18:57:19 +02:00
Jens Langhammer 57e5acaf2f stages/prompt: add sub_text field to add HTML below prompt fields 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-07 18:34:37 +02:00
Jens Langhammer 050ec99c89 flows: fix inspector history not being cleared when executing from API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-07 18:29:28 +02:00
dependabot[bot] cbeee27fc1 build(deps): bump @sentry/tracing from 6.13.2 to 6.13.3 in /web (#1556) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-07 09:39:44 +02:00
Jens Langhammer 8c27616d0c Merge branch 'version-2021.9' 2021-10-06 21:04:16 +02:00
Jens Langhammer e444d0d640 release: 2021.9.7 2021-10-06 20:57:56 +02:00
Jens Langhammer d75c63d38b Merge branch 'version-2021.9' 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	web/src/locales/fr_FR.po
 2021-10-06 00:04:09 +02:00
Jens Langhammer 2b730dec54 release: 2021.9.6 2021-10-05 22:22:54 +02:00
Jens Langhammer 62bf79ce32 root: add docker-native healthcheck for web and celery 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 20:45:38 +02:00
Jens Langhammer d29d161ac6 admin: clear update notification when notification's version matches current version 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 20:45:38 +02:00
Jens Langhammer aee58c8d53 root: add docker-native healthcheck for web and celery 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 20:45:18 +02:00
Jens Langhammer fa6df84de2 admin: clear update notification when notification's version matches current version 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 20:36:38 +02:00
Jens Langhammer 79eec5a3a0 core: include group uuids in self serializer 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 13:49:14 +02:00
Jens Langhammer c1f302fb7c core: only return group names for user_self 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 13:48:53 +02:00
Jens Langhammer 782764ac73 api: ensure viewsets have default ordering 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 13:48:42 +02:00
Jens Langhammer 73d57d6f82 core: make user's name field fully options 
closes #1537

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 13:48:42 +02:00
Jens Langhammer d1a1bfbbc5 web/user: don't show managed tokens in user interface 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 13:47:49 +02:00
Jens Langhammer 1ac4dacc3b outposts: fix error when comparing ports in docker controller when port mapping is disabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 13:47:15 +02:00
Jens Langhammer 9e7e22367b core: include group uuids in self serializer 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 13:10:44 +02:00
Jens Langhammer f5761dc70d core: only return group names for user_self 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 12:31:25 +02:00
Jens Langhammer 16380b3f7a api: ensure viewsets have default ordering 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 11:26:41 +02:00
Jens Langhammer 16f2603130 core: make user's name field fully options 
closes #1537

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 11:23:27 +02:00
Jens Langhammer 847cfed73f web/user: don't show managed tokens in user interface 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 11:11:34 +02:00
Jens Langhammer 05b587ae44 outposts: fix error when comparing ports in docker controller when port mapping is disabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 10:44:07 +02:00
Jens Langhammer a515afae0b recovery: handle error when user doesn't exist 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 10:40:59 +02:00
Jens Langhammer 1c340ddbbd Merge branch 'version-2021.9' 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	web/package-lock.json
#	web/package.json
 2021-10-04 22:02:56 +02:00
Jens Langhammer bcf7e162a4 release: 2021.9.5 2021-10-04 20:08:46 +02:00
Jens Langhammer cb37e5c10e stages/email: add activate_user_on_success flag, add for all example flows 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	web/src/locales/fr_FR.po
 2021-10-04 18:50:19 +02:00
Jens Langhammer 73bb778d62 stages/user_login: add check for user.is_active and tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-04 18:50:00 +02:00
Jens Langhammer b612a82e16 outposts: don't always build permissions on outpost.user access, only in signals and tasks 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-04 18:49:57 +02:00
Jens Langhammer 09f43ca43b events: add missing migration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-04 18:49:50 +02:00
Steven Armstrong 1c91835a26 providers/ldap: use RDN when using posixGroup's memberUid attribute (#1514) 
Use the RDN instead of the FDN when establishing group memberships based on posixGroup's 'memberUid' attribute.

fixes #1436

Signed-off-by: Steven Armstrong <steven@armstrong.cc>
 2021-10-04 18:49:45 +02:00
Jens Langhammer 3634bf4629 tests/integration: fix tests failing due to incorrect comparison 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-04 18:49:10 +02:00
Jens Langhammer 0692663537 stages/email: add activate_user_on_success flag, add for all example flows 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-04 18:47:51 +02:00
Jens Langhammer b5649bdcc4 stages/user_login: add check for user.is_active and tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-04 18:37:05 +02:00
Jens Langhammer fab9a10487 outposts: don't always build permissions on outpost.user access, only in signals and tasks 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-04 18:04:19 +02:00
Jens Langhammer 0f00b27384 events: add missing migration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-04 17:51:31 +02:00
Steven Armstrong ab5981836d
providers/ldap: use RDN when using posixGroup's memberUid attribute (#1514) 
Use the RDN instead of the FDN when establishing group memberships based on posixGroup's 'memberUid' attribute.

fixes #1436

Signed-off-by: Steven Armstrong <steven@armstrong.cc>
 2021-10-04 10:56:06 +02:00
Jens Langhammer 036a4e86e2 tests/integration: fix tests failing due to incorrect comparison 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 22:54:07 +02:00
Jens Langhammer 45f99fbaf0 outposts: fix circular import in kubernetes controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 19:25:26 +02:00
Jens Langhammer 83150d9920 outposts: fix circular import in kubernetes controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 19:25:18 +02:00
Jens Langhammer e31a3307b5 providers/proxy: always check ingress secret in kubernetes controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 19:14:42 +02:00
Jens Langhammer d28fcca344 outposts: check ports of deployment in kubernetes outpost controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 19:14:42 +02:00
Jens Langhammer c296e1214c web: fix package lock 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 19:14:37 +02:00
Jens Langhammer d30dcda814 providers/proxy: always check ingress secret in kubernetes controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 19:14:27 +02:00
Jens Langhammer c720c9f41b outposts: check ports of deployment in kubernetes outpost controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 19:09:52 +02:00
Jens Langhammer 39d87841d0 outposts/proxy: add new headers with unified naming 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 18:20:44 +02:00
Jens Langhammer b285814e24 sources/ldap: fix logic error in Active Directory account disabled status 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 18:19:07 +02:00
Jens Langhammer 1c52836060 web: fix package lock 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 01:17:41 +02:00
Jens Langhammer 8dd77793a0 sources/ldap: fix logic error in Active Directory account disabled status 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-03 00:30:35 +02:00
Jens Langhammer 3c1ac4c7ec outposts/proxy: add new headers with unified naming 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-02 22:00:23 +02:00
Jens Langhammer faca127217 Merge branch 'version-2021.9' 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	Pipfile.lock
 2021-10-01 12:19:11 +02:00
Jens Langhammer 1a6ea72c09 release: 2021.9.4 2021-10-01 09:51:51 +02:00
Jens Langhammer c251b87f8c sources/ldap: add support for Active Directory userAccountControl attribute 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-30 19:34:43 +02:00
Jens Langhammer 21a9aa229a sources/ldap: don't sync ldap source when no property mappings are set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-30 19:34:43 +02:00
Jens Langhammer 53e15bfbca sources/ldap: add support for Active Directory userAccountControl attribute 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-30 19:13:48 +02:00
Jens Langhammer 8bce16e6b4 sources/ldap: don't sync ldap source when no property mappings are set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-30 18:49:18 +02:00
Jens Langhammer 10b45d954e outposts: allow disabling of docker controller port mapping 
closes #1474

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-30 00:11:50 +02:00
Jens Langhammer 4cb8ae760a outposts: allow disabling of docker controller port mapping 
closes #1474

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-29 23:55:22 +02:00
Jens L f9ad102915
flows: inspector (#1469) 
* flows: add initial inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: change naming a bit

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flow: add inspector frame

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: don't use shadydom when inspecting

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add current stage to api

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/*: fix imports

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: deep-copy plan instead of just adding

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: ui

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: restrict inspector to admin

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add buttons to launch flow with inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: don't automatically follow redirects when inspector is open

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: make current_plan optional, only require historry

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: handle error messages in inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: improve UI when flow is done

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add is_completed flag to inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: fix monkeypatches for tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add inspector tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* ci: re-enable cache

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-28 09:36:48 +02:00
Jens Langhammer 941bc61b31 release: 2021.9.3 2021-09-27 17:31:50 +02:00
Jens Langhammer 282b364606 stages/prompt: fix inconsistent policy context for validation policies 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-27 17:05:26 +02:00
pemontto 674bd9e05c
web/admin: Fix typo 'username address' -> 'username' (#1473) 2021-09-26 12:53:37 +02:00
Jens Langhammer b248f450dd outposts: make AUTHENTIK_HOST_BROWSER configurable from central config 
closes #1471

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-26 12:00:51 +02:00
pemontto aea1736f70
outposts/proxy: Fix failing traefik healtcheck (#1470) 2021-09-26 11:33:18 +02:00
Jens Langhammer 4f3583cd7e providers/proxy: make token_validity float and optional for backwards compat 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-25 15:54:32 +02:00
Jens Langhammer f7408626a8 providers/proxy: return token_validity as total seconds instead of expression 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-25 15:44:16 +02:00
Jens Langhammer 28eeb4798e providers/proxy: add token_validity field for outpost configuration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1462
 2021-09-25 15:00:06 +02:00
Jens Langhammer 79b92e764e *: fix typos in code 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-25 00:01:11 +02:00
Jens Langhammer 919336a519 outposts: ensure service is always re-created with mismatching ports 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-24 23:45:15 +02:00
Jens Langhammer 93bdea3769 core: fix api return code for user self-update 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-24 11:51:03 +02:00
Jens Langhammer 64b4e851ce events: add additional validation for event transport 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-23 16:29:58 +02:00
Jens Langhammer eddca478dc release: 2021.9.2 2021-09-23 12:34:02 +02:00
Jens Langhammer 74169860cf api: add logging to sentry proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-23 09:57:42 +02:00
Jens Langhammer 2fe6de0505 release: 2021.9.1 2021-09-22 19:11:20 +02:00
Jens Langhammer ae07f13a87 outposts: don't map port 9300 on docker, only expose port 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-21 21:40:08 +02:00
Jens Langhammer e6b275add3 stages/invitation: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 20:41:05 +02:00
Jens Langhammer 27016a5527 stages/invitation: fix tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 20:30:51 +02:00
Jens Langhammer 4c29d517f0 stages/email: use different query arguments for email and invitation tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 19:55:53 +02:00
Jens Langhammer 180d27cc37 outposts: don't restart container when health checks are starting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 19:46:05 +02:00
Jens Langhammer 3195640776 stages/email: slugify token identifier 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 19:26:25 +02:00
Jens Langhammer d900a2b6a9 *: fix lookup_fields 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 19:19:36 +02:00
Jens Langhammer 95a2fddfa8 policies/expression: add ak_user_has_authenticator 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 19:13:41 +02:00
Jens Langhammer 8f7d21b692 stages/email: don't throw 404 when token can't be found 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 19:01:25 +02:00
Jens Langhammer 3f84abec2f core: fix token identifier not being slugified when created with user-controller input 
closes #1390

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 13:43:25 +02:00
Jens Langhammer b5c857aff4 api: add explicit lookup_value_regex, disable include_format_suffixes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 13:42:56 +02:00
Jens Langhammer ac52667327 release: 2021.9.1-rc3 2021-09-19 21:52:49 +02:00
Jens Langhammer f6e0f0282d core: fix tokens not being viewable but superusers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-19 16:11:20 +02:00
Jens Langhammer 3f42067a8f web: improve display of action buttons with non-primary classes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-19 15:57:12 +02:00
Jens Langhammer ed6f5b98df sources/ldap: improve messages of sync tasks in UI 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-19 15:54:22 +02:00
Jens Langhammer c85484fc00 core: allow admins to create tokens with all parameters, re-add user to token form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-19 15:25:48 +02:00
Jens Langhammer 8279690a8f sources/ldap: prevent error when retrying old system task with no arguments 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-17 16:49:26 +02:00
Jens Langhammer 3d8d93ece5 root: log failed celery tasks to event log 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-17 12:42:42 +02:00
Jens Langhammer 06af306e8a sources/ldap: bump timeout, run each sync component in its own task 
closes #1411

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-17 12:42:20 +02:00
dependabot[bot] 3e4ce62dfe
build(deps-dev): bump pylint from 2.10.2 to 2.11.1 (#1409) 
* build(deps-dev): bump pylint from 2.10.2 to 2.11.1

Bumps [pylint](https://github.com/PyCQA/pylint) from 2.10.2 to 2.11.1.
- [Release notes](https://github.com/PyCQA/pylint/releases)
- [Changelog](https://github.com/PyCQA/pylint/blob/main/ChangeLog)
- [Commits](https://github.com/PyCQA/pylint/compare/v2.10.2...v2.11.1)

---
updated-dependencies:
- dependency-name: pylint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* root: update pylint config

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-17 09:46:39 +02:00
Jens Langhammer 28189bdddf release: 2021.9.1-rc2 2021-09-16 23:23:36 +02:00
Jens L 13e2eea72f
web/user: new end-user interface (#1404) 
* web/user: migrate to top navbar

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: prepare config from server

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* re-sort

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove old interface

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update issue template

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* use notification badge

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: re-add go-to-admin button

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: fix remaining redirects directly to admin

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* make settings better

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: ensure sources and stages are sorted

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: add sessions and consent

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/oauth2: add post wrapper to stage

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: add new interface to release notes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-16 22:17:05 +02:00
Jens L 9441be1ee2
interface split (#943) 2021-09-16 17:30:16 +02:00
Jens Langhammer 17503365f7 policies: improve error handling when using bindings without policy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-16 11:04:31 +02:00
Jens Langhammer ebf9f0ca63 stages/email: don't crash when testing stage does not exist 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-16 11:04:08 +02:00
Jens Langhammer ae26d2756f providers/saml: improved error handling 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-16 10:58:51 +02:00
Jens Langhammer 124071f9be root: remove python requirement from pipfile 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-16 10:37:43 +02:00
Jens Langhammer 341c58a722 core: fix token expiry for service accounts being only 30 minutes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-16 09:57:34 +02:00
Jens Langhammer bdd5e16db1 release: 2021.9.1-rc1 2021-09-15 20:20:54 +02:00
Jens Langhammer d4672bfe79 events: log parsed query string instead of just full path 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 20:15:04 +02:00
Jens Langhammer abd9fab41a api: fix call of sentry proxy task 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 19:39:58 +02:00
Jens Langhammer 7c8bf42ef9 api: send proxied sentry events in background 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 19:12:20 +02:00
Jens Langhammer 274b555912 api: add timeout for sentry proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 18:59:27 +02:00
Jens Langhammer 916530f0d8 providers/oauth2: use access_code_validity for id_tokens generated when using an implicit flow, improve wording in web ui 
closes #1369

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 17:14:53 +02:00
Jens Langhammer 95efd47f65 root: remove asgi error handler 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 12:23:14 +02:00
Jens Langhammer 90ecb1af7f outposts: fix service account's permissions being checked twice 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 09:55:27 +02:00
Jens Langhammer d7fdca1b44 stages/email: fix error when retrying email delivery after stage has been deleted 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 09:50:11 +02:00
Denis Teyssier 37346763dc
sources/oauth: Updating token url to new google url (#1397) 
the present url goes to a 404
google openid (https://accounts.google.com/.well-known/openid-configuration) says the new url is `https://oauth2.googleapis.com/token`

not using the new url makes authentik fallback on the default auth flow
 2021-09-15 09:15:19 +02:00
Jens Langhammer ef341dd405 stages/user_write: add option to add newly created users to a group 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-14 21:45:34 +02:00
Jens Langhammer 3ddf2d6f85 sources/oauth: fix type lookup for openid not matching 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-14 14:38:35 +02:00
Jens Langhammer ba6849f29c *: remove string.format() 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-14 12:06:47 +02:00
Jens Langhammer 942170f902 Revert "sources/oauth: fix access_token being sent as query param and not authorization header" 
This reverts commit 248f993541.
 2021-09-14 11:59:32 +02:00
Jens Langhammer 248f993541 sources/oauth: fix access_token being sent as query param and not authorization header 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-14 11:07:36 +02:00
Jens Langhammer 3a700a449a sources/oauth: don't try to load azure AD user ID as UUID 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-14 09:33:44 +02:00
Jens Langhammer 23444f4df0 core: fix lint error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-13 18:19:28 +02:00
Jens Langhammer 71e68b498e core: optimise groups api by removing member superuser status 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-13 18:06:37 +02:00
Jens Langhammer fb267ee223 tenants: optimise db queries in middleware 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-13 17:54:37 +02:00
Jens Langhammer a4b3519428 api: fix possible error in sentry proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-13 16:36:04 +02:00
Jens Langhammer 9a7fa39de4 events: allow setting a mapping for webhook transport to customise request payloads 
closes #1383

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-12 01:05:42 +02:00
Jens Langhammer c779ad2e3b *: use common user agent for all outgoing requests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-11 21:08:26 +02:00
Jens Langhammer 7e7ef289ba admin: migrate to new update check, add option to disable update check 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-11 20:35:23 +02:00
Jens Langhammer bf771f8b6c release: 2021.8.5 2021-09-11 19:20:13 +02:00
Jens Langhammer df4c8003b8 api: fix items of list fields having nullable set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-10 18:15:59 +02:00
Jens Langhammer 39b365c6ae sources/oauth: don't cancel flow when redirecting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-10 16:36:10 +02:00
Jens Langhammer e229eda96e outposts/controllers/kubernetes: don't create service monitor for embedded outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-10 15:59:39 +02:00
Jens Langhammer 4448145aa9 providers/proxy: use auth/traefik subpath 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-10 13:53:04 +02:00
Jens Langhammer 7dfbcdbb81 stages/authenticator_duo: add API to "import" devices from duo 
closes #1371

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-10 11:35:09 +02:00
Jens Langhammer 2862b4ecfb core: remove ?v from static files 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-09 20:09:12 +02:00
Jens Langhammer 13d17dc729 lib: fix default listening port for metrics 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-09 16:40:39 +02:00
Jens Langhammer 5cf3a13ca8 flows: fix invalid parameter in tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-09 16:36:51 +02:00
Jens Langhammer d0898a3869 flows: ensure all StageViews accept post, add tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-09 16:30:14 +02:00
Jens L 7158c9d2ea
core: metrics v2 (#1370) 
* outposts: add ldap metrics, move ping to 9100

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: add flow_executor metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* use port 9300 for metrics, add core metrics port

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/controllers/k8s: add service monitor creation support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-09 15:52:24 +02:00
Jens Langhammer da58796768 providers/proxy: fix defaults for old proxy providers (load providers directly) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-09 13:54:24 +02:00
Jens Langhammer d98499a3fa providers/proxy: fix defaults for old proxy providers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-09 13:26:36 +02:00
Jens Langhammer f3ff398a44 providers/proxy: add metrics port to controllers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-08 23:01:22 +02:00
Jens Langhammer 533eb59a04 outposts/controllers: re-create service when mismatched ports to prevent errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-08 23:00:53 +02:00
Jens Langhammer 502393ee56 outpost/proxyv2: allow port offset via yaml 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-08 21:07:06 +02:00
Jens L 3c1b70c355
outposts/proxyv2 (#1365) 
* outposts/proxyv2: initial commit

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add rs256

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

more stuff

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add forward auth an sign_out

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

match cookie name

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

re-add support for rs256 for backwards compat

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add error handler

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

ensure unique user-agent is used

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

set cookie duration based on id_token expiry

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

build proxy v2

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add ssl

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add basic auth and custom header support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add application cert loading

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

implement whitelist

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add redis

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

migrate embedded outpost to v2

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

remove old proxy

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

providers/proxy: make token expiration configurable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

fix tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: only allow one redirect URI

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix docker build for proxy

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove default port offset

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add AUTHENTIK_HOST_BROWSER

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests: fix e2e/integration tests not using proper tags

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove references of old port

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix user_attributes not being loaded correctly

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup dependencies

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-08 18:04:56 +00:00
Jens Langhammer de3e1c3dbc sources/oauth: fix FlowExecutor view call 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-07 11:39:03 +02:00
Jens Langhammer 3c6aac5435 sources/oauth: prevent potentially confidential data from being logged 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-07 11:05:18 +02:00
Jens Langhammer eeb755ab7d root: show location header in logs when redirecting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-07 11:04:00 +02:00
Jens Langhammer 70d0dd51a5 sources/oauth: cancel currently active flows before redirecting out 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-07 11:03:45 +02:00
Jens Langhammer 0bae550520 root: include authentik version in backup naming 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-05 20:25:02 +02:00