authentik

Archived

Author	SHA1	Message	Date
Jens Langhammer	1a1434bfda	*: decrease frequency of background tasks, smear tasks based on name and fqdn Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2159	2022-04-20 18:43:40 +02:00
Jens Langhammer	d283a5236c	core: add custom shell command which imports all models and creates events for model events Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-17 18:14:57 +02:00
github-actions[bot]	e4486b98fc	web: Update Web API Client version (#2733 ) Signed-off-by: GitHub <noreply@github.com> Co-authored-by: BeryJu <BeryJu@users.noreply.github.com> Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-17 17:05:43 +02:00
Jens Langhammer	778065f468	core: add flag to globally disable impersonation Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-17 16:52:55 +02:00
Behn	70794d79dd	sources/oauth: Fix wording for OAuth source names (#2732 )	2022-04-17 16:40:10 +02:00
Jens Langhammer	a3bb5d89cc	events: fix created events only being logged as debug level Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-14 22:37:30 +02:00
Jens Langhammer	f4f9f525d7	providers/oauth2: include application in login event Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-14 22:36:45 +02:00
Jens Langhammer	4c14e88a25	flows: pin dependency in migration Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-14 22:28:26 +02:00
Jens Langhammer	7561ea15de	providers/oauth2: add additional tracing to token view	2022-04-14 16:48:17 +00:00
Jens Langhammer	8242b09394	flows: handle flow title formatting error better, add user to flow title context	2022-04-14 13:56:20 +00:00
Jens Langhammer	9b9c0fe663	release: 2022.4.1	2022-04-12 22:07:34 +02:00
Jens Langhammer	5a58f6ee64	providers/oauth2: remove test for non sa user Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-12 20:35:13 +02:00
Jens Langhammer	e84b17d550	providers/oauth2: don't force service accounts for client_credentials flow Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-12 10:23:25 +02:00
Jens Langhammer	9da439623b	stages/authenticator_duo: fix bad request being sent to duo when calling enrollment_status outside a flow Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2666	2022-04-11 21:02:32 +02:00
Jens Langhammer	957bb1c5ef	core: make generated token length configurable closes #2574 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-11 20:57:16 +02:00
Jens Langhammer	2303a97bb9	core: add method to set key of token Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2574	2022-04-11 20:43:39 +02:00
Jens Langhammer	8be04cc013	providers/oauth2: fix elliptic curve keys attempting to use EC256 instead of ES256 closes #2703 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-11 20:05:58 +02:00
Jens Langhammer	cca33a74b6	core: fix error when checking generated users with no expiry Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-10 17:53:46 +02:00
Jens Langhammer	f977bf61eb	providers/oauth2: make exp optional on jwt client_credentials flow Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-10 17:25:35 +02:00
Jens Langhammer	f8f8a9bbb9	providers/oauth2: give keypairs private key preference over certificate in client_credentials jwt flow Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-10 16:27:53 +02:00
Jens Langhammer	e64ca4ab04	core: fix lint error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-08 10:10:30 +02:00
Jens Langhammer	e2f0a76309	outposts: check if docker ports should be mapped before comparing ports Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-07 17:30:33 +02:00
Jens Langhammer	5861d41ad3	tenants: add tenant-level attributes, applied to users based on request Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-06 10:41:35 +02:00
Jens Langhammer	20262f3f4b	core: mark provider_obj as read_only closes #2637 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-04 10:17:59 +02:00
Jens L	633296503d	core: add grouping to applications (#2648 ) * core: add grouping to applications Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * core: add new field to tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-02 23:08:58 +02:00
Jens L	508cec2fd5	web: migrate dropdowns to wizards (#2633 ) * web/admin: add basic wizards for providers Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web: add dark mode for wizard Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/admin: migrate policies to wizard Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * start source Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * policies: sanitze_dict when returning log messages during tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * Revert "web/admin: migrate policies to wizard" This reverts commit `d8b7f62d3e`. Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> # Conflicts: # web/src/locales/zh-Hans.po # web/src/locales/zh-Hant.po # web/src/locales/zh_TW.po * web: rewrite wizard to be element based Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * further cleanup Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * update sources Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web: migrate property mappings Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * migrate stages Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * migrate misc dropdowns Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * migrate outpost integrations Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-02 19:48:17 +02:00
Jens Langhammer	7a93614e4b	policies: fix tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-02 18:31:02 +02:00
Jens Langhammer	4f319eaa4f	policies/dummy: bump to info to always get message Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-02 17:28:51 +02:00
Jens Langhammer	86a8d00b3f	policies: sanitze_dict when returning log messages during tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-02 17:15:44 +02:00
Jens Langhammer	5fe8c1f3d7	policies: fix missing default for log_messages Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-02 16:44:49 +02:00
Jens Langhammer	d84ff2bbca	policies: add policy log messages to test endpoints Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-04-01 22:07:35 +02:00
Jens Langhammer	4be238018b	providers/oauth2: pass scope and other parameters to access policy request context Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2641	2022-04-01 21:39:05 +02:00
Jens Langhammer	99008252f8	providers/oauth2: fix verification_keys being required Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-31 20:19:13 +02:00
Jens Langhammer	8689444954	providers/oauth2: add password grant support (treated as client_credentials) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-31 18:02:17 +02:00
Jens L	bb8af2f19b	providers/oauth2: add client_assertion_type jwt bearer support (#2618 )	2022-03-31 00:30:55 +02:00
Jens Langhammer	996bd05ba6	api: fix API header auth not passing to next auth method Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-31 00:06:01 +02:00
Jens Langhammer	a1a64e25ee	api: remove legacy http basic auth Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-30 23:39:08 +02:00
Jens Langhammer	993c6472db	crypto: only count discovered when cert was loaded successfully	2022-03-28 08:58:23 +00:00
Jens Langhammer	123b0b2f05	core: fix pylint renamed variable	2022-03-28 08:58:13 +00:00
Jens Langhammer	7cbd5174f0	stages/invitation: fix tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-26 19:12:22 +01:00
Jens Langhammer	c7a83e6182	stages/invitation: add invitation name closes #2583 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-26 18:32:59 +01:00
Jens Langhammer	74ff9d04dd	stages/prompt: set field default based on placeholder, fix duplicate fields closes #2572 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-23 22:26:06 +01:00
Jens Langhammer	969902f503	stages/prompt: filter rest_framework.fields.empty when field is not required closes #2572 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-23 20:21:12 +01:00
Jens Langhammer	04372e21dd	events: handle types in event contexts Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2572	2022-03-23 19:49:55 +01:00
Adam G	d75a864f0e	providers/oauth2: map internal groups to GitHub teams in GHE OAuth emulation (#2497 ) * providers/oauth2: impl `/user/teams` endpoint for Github OAuth2 This commit adds a functional `/user/teams` endpoint for the emulated Github OAuth2 service. The teams a user is part of are based on the user's groups in Authentik. * providers/oauth2: Move org template inside loop; Change slug to use Django slugify * providers/oauth2: Remove placeholder replacement * Possibly fix complaints from the linters * Update github.py * Change organization name * Update github.py	2022-03-23 12:05:20 +01:00
Jens Langhammer	0c2b32da31	core: add num_pk to group for applications that need a numerical group id Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2497	2022-03-22 21:37:11 +01:00
Jens Langhammer	9ad4c736f1	stages/email: allow overriding of destination email in plan context closes #2445 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-22 21:19:34 +01:00
Jens Langhammer	4154b62565	stages/prompt: fix non-required fields not allowing blank values, add more tests closes #2544 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-22 20:38:04 +01:00
Jens Langhammer	86a4a7dcee	release: 2022.3.3	2022-03-21 22:37:13 +01:00
Angel Nunez Mencias	8b95e9f97a	crypto: open files in read-only mode for importing (#2536 ) closes #2535	2022-03-21 10:46:09 +01:00
Jens Langhammer	be232e2b77	core: fix provider launch URL being prioritised over manually configured launch URL closes #2493 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-16 10:26:55 +01:00
Jens Langhammer	53d0205e86	outposts/proxy: use Prefix in ingress for k8s Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-15 19:01:08 +01:00
Jens Langhammer	260a7aac63	release: 2022.3.2	2022-03-15 00:01:01 +01:00
Jens Langhammer	a3df414f24	sources/ldap: fix parent_group not being applied closes #2464 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-14 22:13:20 +01:00
Jens Langhammer	dcaa8d6322	flows: revert default flow user change closes #2483 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-14 22:05:30 +01:00
Jens Langhammer	ceb894039e	stages/authenticator_validate: fix passwordless flows not working closes #2484 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-14 21:15:47 +01:00
Jens Langhammer	c7a825c393	lib: lower default sample rate	2022-03-14 12:38:14 +00:00
Jens Langhammer	54f170650a	core: replace uid with uuid search uid can't be searched it as its a computed field closes #2480 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-14 10:35:55 +01:00
Jens Langhammer	fedb81571d	release: 2022.3.1	2022-03-10 19:12:29 +01:00
Jens Langhammer	37528e1bba	stages/authenticator_validate: fix lint Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-10 09:56:04 +01:00
Jens Langhammer	cc1509cf57	stages/authenticator_validate: fix logic error when multiple authenticator devices can be selected closes #2290 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-10 00:46:42 +01:00
Jens Langhammer	0dfecc6ae2	stages/authenticator_*: fix device.confirmed being set incorrectly closes #2330 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-10 00:19:49 +01:00
Jens Langhammer	de17207c68	lib: fix default geoip path Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2453	2022-03-09 21:57:29 +01:00
Jens L	920d1f1b0e	providers/oauth2: initial client_credentials grant support (#2437 ) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-05 23:24:55 +01:00
Jens Langhammer	b1fd801ceb	tenants: fix syntax error in expression for locale	2022-03-03 11:50:46 +00:00
Jens Langhammer	1e1d9f1bdd	core/api: allow filtering users by uid, add uid to search closes #2428 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-03 10:19:56 +01:00
Jens L	4f4f954693	core: customisable user settings (#2397 ) * tenants: add user_settings flow, add basic flow and basic new executor Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/user: use flow PromptStage instead of custom stage Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/flows: add tenant to StageHost interface Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/user: fix form missing component Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/user: re-add success message Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/user: improve support for multiple error messages Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * stages/prompt: allow expressions in prompt placeholders Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * stages/prompt: add tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * flows: always set pending user Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * flows: never cache stage configuration flow plans Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * stages/user_write: fix error when pending user is anonymous user Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/admin: add checkbox for prompt placeholder expression Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * website/docs: add prompt expression docs Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * stages/prompt: add ak-locale field type Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * tenants: fix default policy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/user: add function to do global refresh Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/flows: fix rendering of ak-locale Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * tenants: fix default policy, add error handling to placeholder, fix locale attribute Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * add tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-03 00:13:06 +01:00
Jens Langhammer	c57fbcfd89	sources/oauth: log body when get_profile fails Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-03-02 20:37:42 +01:00
Jens Langhammer	08acc7ba41	providers/oauth2: fix invalid launch URL being generated	2022-03-01 15:29:21 +00:00
Jens Langhammer	7bdd32506e	web: cleanup default footer links	2022-03-01 15:27:21 +00:00
dependabot[bot]	f98a9bed9f	build(deps-dev): bump bandit from 1.7.2 to 1.7.3 (#2403 ) * build(deps-dev): bump bandit from 1.7.2 to 1.7.3 Bumps [bandit](https://github.com/PyCQA/bandit) from 1.7.2 to 1.7.3. - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](https://github.com/PyCQA/bandit/compare/1.7.2...1.7.3) --- updated-dependencies: - dependency-name: bandit dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * sigh Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-28 10:13:51 +01:00
Dorian Zedler	e9064509fe	sources/oauth: Add Mailcow oauth source (#2380 ) * Feat: Add Mailcow oauth source * Feat: Add mailcow icon * Run make * Feat: Add tests * Fix: Remainder from discord test * Docs: Add mailcow oauth source docs * Docs: add mailcow source to menu * Fix: Mailcow provider type in test * Fix: Formatting * Fix: Doc file name	2022-02-27 15:06:02 +01:00
Jens Langhammer	7e5d8624c8	web: fix locale change not updating all elements closes #2365 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-26 16:29:12 +01:00
Jens Langhammer	2f8dbe9b97	core: handle all exceptions for applications listing closes #2382 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-26 16:08:38 +01:00
Jens L	677bcaadd7	core: add initial app launch url (#2367 ) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-23 22:48:55 +01:00
Jens Langhammer	80f218a6bf	core: also handle TypeError for invalid app URL formatting Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-17 18:23:11 +01:00
Jens Langhammer	4a1acd377b	release: 2022.2.1	2022-02-16 10:51:55 +01:00
Jens Langhammer	72259f6479	events: fix lint Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-14 23:15:45 +01:00
Jens Langhammer	0973c74b9d	providers/oauth2: fix redirect_uri being lowercased on successful validation Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-14 23:04:00 +01:00
Jens Langhammer	c7ed4f7ac1	events: check mtime on geoip database Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-14 22:42:46 +01:00
Jens Langhammer	3d577cf15e	*: add placeholder custom.css to easily allow user customisation Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-14 20:05:00 +01:00
Jens Langhammer	c040b13b29	providers/proxy: remove leading slash to allow subdirectories in proxy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2305	2022-02-14 12:51:04 +01:00
Jens L	df362dd9ea	core: handle error when formatting launch URL fails closes #2304	2022-02-14 12:02:51 +01:00
Jens Langhammer	3af0de6a00	Revert "root: disable sentry's auto_session_tracking" This reverts commit `4f24d61290`.	2022-02-14 09:55:35 +01:00
Jens Langhammer	4f24d61290	root: disable sentry's auto_session_tracking Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-14 09:44:12 +01:00
Jens Langhammer	3b6497cd51	outposts: ensure keypair is set for SSH connections Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-13 15:39:37 +01:00
Jens Langhammer	bb4be944dc	sources/ldap: use merger that only appends unique items to list closes #2211 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-13 14:20:13 +01:00
Jens Langhammer	21efee8f44	admin: add additional logging when restarting a task Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-12 18:40:21 +01:00
Jens Langhammer	f61549a60f	providers/proxy: enable TLS in ingress via traefik annotation Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1997	2022-02-12 18:35:24 +01:00
Jens Langhammer	0da043a9fe	outposts: make local discovery configurable Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-12 17:27:41 +01:00
Jens Langhammer	f336f204cb	stages/authenticator_validate: fix handling when single configuration stage is selected Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-12 17:27:33 +01:00
Jens Langhammer	b5d43b15f8	providers/oauth2: add support for explicit response_mode closes #1953 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-12 16:56:47 +01:00
Jens Langhammer	2ccab75021	stages/authenticator_validate: add ability to select multiple configuration stages which the user can choose closes #1843 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-12 16:55:50 +01:00
Jens Langhammer	8bc3db7c90	release: 2022.1.5	2022-02-09 22:42:34 +01:00
Jens Langhammer	e741caa6b3	core: allow formatting strings to be used for applications' launch URLs Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-08 23:46:23 +01:00
Jens L	4343246a41	*: rename akprox to outpost.goauthentik.io (#2266 ) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-08 20:25:38 +01:00
Jens Langhammer	c63e1c9b87	outposts: fix compare_ports to support both service and container ports Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-08 17:40:49 +01:00
Jens Langhammer	f44cf06d22	outposts: fix service reconciler re-creating services closes #2095 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-08 17:23:00 +01:00
Jens Langhammer	15e2032493	stages/authenticator_validate: handle non-existent device_challenges Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-07 20:31:49 +01:00
Jens Langhammer	c87f6cd9d9	outposts: remove node_port on V1ServicePort checks to prevent service creation loops Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2095	2022-02-07 20:26:14 +01:00
Jens Langhammer	b0936ea8f3	sources/ldap: log entire exception Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-07 19:37:39 +01:00
Jens L	d5e04a2301	: remove deprecated backup (#2129 ) : remove backup Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> fix lint Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * website/docs: add docs Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * : final cleanup Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> ci: use correct pyproject when migrating from stable Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * website/docs: fix broken docs Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-05 18:54:15 +01:00
Jens Langhammer	4e4e2b36b6	sources/saml: fix server error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-05 15:41:26 +01:00
Jens Langhammer	eaba8006e6	sources/saml: fix incorrect ProtocolBinding being sent closes #2213 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-03 18:20:06 +01:00
Jens Langhammer	39ff202f8c	outposts: fix channel not always having a logger attribute Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-03 17:58:54 +01:00
Jens Langhammer	49dfb4756e	release: 2022.1.4	2022-02-01 20:12:55 +01:00
Jens Langhammer	88603fa4f7	providers/proxy: set traefik labels using object_naming_template instead of UUID	2022-02-01 17:13:27 +00:00
Jens Langhammer	0232c4e162	lifecycle: send analytics in gunicorn config to decrease outgoing requests when workers get restarted Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-02-01 15:01:43 +01:00
Jens Langhammer	e93be0de9a	sources/ldap: add list_flatten function to property mappings, enable on managed LDAP mappings closes #2199 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-31 23:07:32 +01:00
Jens Langhammer	a5adc4f8ed	core: fix view_token permission not being assigned on token creation for non-admin user Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-31 20:00:30 +01:00
Jens Langhammer	ceaf832e63	root: remove boto integration in sentry to ease backup removal	2022-01-31 13:47:18 +00:00
Jens Langhammer	c55f503b9b	release: 2022.1.3	2022-01-26 22:15:28 +01:00
Jens Langhammer	c2586557d8	root: fix redis passwords not being encoded correctly closes #2130 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-26 20:45:45 +01:00
Jens Langhammer	0d47654651	root: add max-requests for gunicorn and max tasks for celery Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-26 10:04:58 +01:00
Jens Langhammer	2f4c92deb9	Merge branch 'version-2022.1'	2022-01-24 21:42:12 +01:00
Jens Langhammer	c7ba183dc0	providers/proxy: fix traefik label closes #2128 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-24 17:45:09 +01:00
Jens Langhammer	3d724db0e3	release: 2022.1.2	2022-01-24 11:28:00 +01:00
Jens Langhammer	2997542114	lib: disable backup by default, add note to configuration	2022-01-24 10:00:15 +00:00
Jens Langhammer	42f5cf8c93	outposts: allow custom label for docker containers closes #2128 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-23 21:55:58 +01:00
Jens Langhammer	82cc1d536a	providers/proxy: add PathPrefix to auto-traefik labels Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2128	2022-01-23 21:55:46 +01:00
Jens Langhammer	6a411d7960	policies/hibp: ensure password is encodable closes AUTHENTIK-1SA Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-23 21:23:24 +01:00
Jens Langhammer	f4a6c70e98	release: 2022.1.1	2022-01-22 18:28:40 +01:00
Jens Langhammer	dd8b579dd6	lib: ignore paramiko logger Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-21 10:46:33 +01:00
Jens Langhammer	994c5882ab	root: fix error if secret_key is purely numerical closes #2099 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-18 09:17:33 +01:00
Jens Langhammer	0db0a12ef3	root: rename csrf header Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-16 16:17:44 +01:00
Jens Langhammer	eaeab27004	lib: add support for custom env Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-16 14:56:02 +01:00
Jens Langhammer	111fbf119b	*: refactor prometheus gauges to directly updating metrics view Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-16 13:57:07 +01:00
Jens Langhammer	92cc0c9c64	root: decrease to 10 backup history Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-14 19:59:50 +01:00
Jens Langhammer	18ff803370	outposts: trigger service update on k8s when selector doesnt match Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-14 11:42:57 +01:00
Jens Langhammer	6338785ce1	outposts: change label app.kubernetes.io/name to include outpost type Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-14 10:34:54 +01:00
Jens Langhammer	973e151dff	outposts: add Additional version labels to managed k8s deployments Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-13 17:48:01 +01:00
Jens Langhammer	fae6d83f27	*: simplify extracting current version info Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-13 17:47:31 +01:00
Jens Langhammer	ed84fe0b8d	root: set samesite for csrf cookie Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-12 23:14:14 +01:00
Jens Langhammer	7db7b7cc4d	stages/authenticator_validate: fix lint Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-12 23:00:28 +01:00
Jens Langhammer	e758db5727	stages/authenticator_webauthn: make more WebAuthn options configurable Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-12 22:57:49 +01:00
Jens Langhammer	4d7d700afa	providers/oauth2: change default redirect uri behaviour; set first used url when blank and use star for wildcard Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-12 22:44:57 +01:00
Jens Langhammer	f9a5add01d	root: include build in analytics Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-12 22:18:52 +01:00
Jens Langhammer	2986b56389	root: fix backups running every minute instead of once Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-12 22:09:44 +01:00
Jens Langhammer	11e25617bd	crypto: fully parse certificate on validation in serializer to prevent invalid certificates from being saved closes #2082 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-10 20:36:50 +01:00
Jens Langhammer	19d5902a92	flows: handle error if flow title contains invalid format string Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-10 19:49:27 +01:00
Jens Langhammer	71dffb21a9	outposts: improve error handling for outpost service connection state Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-10 19:44:13 +01:00
Jens Langhammer	2543224c7c	core: dont return 404 when trying to view key of expired token Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-10 17:53:09 +01:00
Jens Langhammer	6b6702521f	api: don't return error reporting enabled when debug is enabled Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-07 21:53:22 +01:00
Jens Langhammer	c07b8d95d0	outposts/proxy: remove deprecated headers Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-07 17:01:23 +01:00
Jens Langhammer	0027dbc0e5	root: remove old api path Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-06 22:21:21 +01:00
Jens Langhammer	c15e4b24a1	release: 2021.12.5	2022-01-06 21:29:12 +01:00
Jens Langhammer	03503363e5	core: fix UserSelfSerializer's save() overwriting other user attributes closes #2070 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-06 18:23:06 +01:00
Jens Langhammer	22d6621b02	root run backup every 24 hours Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-06 15:29:11 +01:00
Jens Langhammer	91dd33cee6	policies/reputation: trigger save on update Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-05 22:06:20 +01:00
Jens Langhammer	5a2c367e89	policies/reputation: fix test Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-05 21:44:15 +01:00
Jens Langhammer	6e53f1689d	policies/reputation: rework reputation to use a single entry, include geo_ip data Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-05 21:02:33 +01:00
Jens Langhammer	7b1373e8d6	core: fix lint error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-04 23:17:37 +01:00
Jens Langhammer	e70b486f20	outposts: handle error in certificate cleanup Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-04 22:53:37 +01:00
Jens Langhammer	5769ff45b5	core: add goauthentik.io/user/can-change-name closes #2054 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-04 19:03:12 +01:00
Jens Langhammer	9d6f79558f	tenants: forbid creation of multiple default tenants closes #2059 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-04 19:01:20 +01:00
Jens Langhammer	935a8f4d58	core: add tests for non-applicable flows with flow manager Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-03 22:14:52 +01:00
Jens Langhammer	7d3d17acb9	core: add error handling in source flow manager when flow isn't applicable Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-03 21:57:55 +01:00
Jens Langhammer	ebd476be14	sources/oauth: fix sources not allowing blank values Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2047	2022-01-03 21:36:14 +01:00
Jens Langhammer	31ba543c62	*: don't use exception keyword with structlog Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-03 21:33:52 +01:00
Jens Langhammer	a101d48b5a	core: passthrough connection and additional data to FlowManager Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2047	2022-01-03 21:31:26 +01:00
Jens Langhammer	8f44c792ac	sources/oauth: fix github provider not including correct base scopes Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2047	2022-01-03 21:04:18 +01:00
Jens Langhammer	212220554f	sources/oauth: add additional scopes field to get additional data from provider Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2047	2022-01-03 16:43:52 +01:00
Jens Langhammer	3e22740eac	core: add API endpoint to directly set user's password closes #2040 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-03 13:31:58 +01:00
Jens Langhammer	d18a691f63	core: prevent LDAP password being set for internal hash upgrades Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-03 13:23:42 +01:00
Jens Langhammer	90c31c2214	flows: add test helpers to simplify and improve checking of stages, remove force_str Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-01 20:25:32 +01:00
Jens Langhammer	50e3d317b2	flows: use WithUserInfoChallenge for AccessDeniedChallenge Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #2039	2022-01-01 19:45:34 +01:00
Jens Langhammer	3eed7bb010	lib: dont send any sentry events when testing Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2022-01-01 18:56:14 +01:00
Jens Langhammer	9154b9b85d	web/user: rework user source connection UI Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-30 21:59:41 +01:00
Jens Langhammer	fc19372709	flows: fix migration removing flow titles Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-30 21:00:00 +01:00
Jens Langhammer	d03b0b8152	outposts: include outposts build hash in state Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-30 15:16:34 +01:00
Jens Langhammer	c249b55ff5	*: use py3.10 syntax for unions, remove old Type[] import when possible Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-30 14:59:01 +01:00
Jens Langhammer	fc7a452b0c	flows: update default flow titles Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-27 22:04:35 +01:00
Jens Langhammer	46f12e62e8	flows: don't create EventAction.FLOW_EXECUTION Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-27 15:07:33 +01:00
Jens Langhammer	53b10e64f8	outposts: fix error when client hasn't be initialised Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-26 14:26:48 +01:00
Jens Langhammer	abe38bb16a	outposts: fix __exit__ being called without params Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-25 17:52:20 +01:00
Jens Langhammer	b19da6d774	crypto: return private key's type (required for some oauth2 providers) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-25 16:51:28 +01:00
Jens Langhammer	7c55616e29	outposts: fix creation of from_env docker client Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-25 16:48:23 +01:00
Jens Langhammer	6510b97c1e	outposts: add remote docker integration via SSH Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-25 16:31:34 +01:00
Jens Langhammer	22d1dd801c	root: also use analytics uuid for sentry Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-24 15:13:27 +01:00
Jens Langhammer	e7e0e6d213	lib: strip values for timedelta from string Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-23 18:49:35 +01:00
Jens Langhammer	ca0250e19f	core: add meta theme-color Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-23 18:49:24 +01:00
Jens Langhammer	5c5634830f	stages/identification: add field for passwordless flow Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-23 18:27:00 +01:00
Jens Langhammer	9c42b75567	release: 2021.12.4	2021-12-23 10:32:48 +01:00
Jens Langhammer	457e17fec3	website/docs: add small let's encrypt docs Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-23 00:59:06 +01:00
Jens Langhammer	846006f2e3	events: create test notification with event with data Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 23:32:29 +01:00
Jens Langhammer	f557b2129f	*: fix random typos Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 23:13:18 +01:00
Jens Langhammer	6dc2003e34	providers/oauth2: fix tests validating JWT incorrectly Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 23:00:57 +01:00
Jens Langhammer	0149c89003	providers/oauth2: fix invalid assignments in JWKS view Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 22:41:28 +01:00
Jens Langhammer	f458cae954	providers/proxy: add error handing when field is already gone Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 22:31:53 +01:00
Jens Langhammer	f01d117ce6	providers/proxy: fix imports in migrations Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 22:25:02 +01:00
Jens Langhammer	2bde43e5dc	crypto: use older syntax for type union Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 22:22:45 +01:00
Jens Langhammer	2f3026084e	providers/oauth2: remove jwt_alg field and set algorithm based on selected keypair, select HS256 when no keypair is selected Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 22:09:49 +01:00
Jens Langhammer	c1f0833c09	crypto: improve support for non-rsa private keys (discovery) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 21:46:22 +01:00
Jens Langhammer	8e83209631	stages/authenticator_validate: fix lint error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 18:14:35 +01:00
Jens Langhammer	2e48e0cc2f	stages/authenticator_validate: fix prompt not triggering when using in non-authentication context Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 18:03:02 +01:00
Jens Langhammer	e72f0ab160	stages/authenticator_validation: refuse passwordless flow if flow is not for authentication Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 18:02:43 +01:00
Jens Langhammer	5b3a9e29fb	stages/authenticator_validate: add passwordless login Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 17:34:46 +01:00
Jens Langhammer	34b11524f1	tenants: add web certificate field, make authentik's core certificate configurable based on keypair Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-22 11:43:45 +01:00
Jens Langhammer	16b6c17305	Revert "policies: don't always clear application cache on post_save" This reverts commit `5ef385f0bb`. Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> # Conflicts: # authentik/policies/signals.py	2021-12-22 00:23:19 +01:00
Jens Langhammer	cf4b4030aa	release: 2021.12.3	2021-12-21 20:52:08 +01:00
Jens Langhammer	7fb939f97b	core: fix error when getting launch URL for application with non-existent Provider Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-21 19:40:29 +01:00
Jens Langhammer	c78236a2a2	root: don't set secure cross opener policy closes #1977 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-21 19:16:22 +01:00
Jens Langhammer	ca314c262c	*: revert to using GHCR directly Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-21 13:54:49 +01:00
Jens Langhammer	8a60a7e26f	providers/proxy: revert to static list of forwarded headers wildcard is not usable for this since the regular expression doesn't support negative lookahead, meaning we would always forward all headers, including Connection and others closes #1969 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-21 12:04:54 +01:00
Jens Langhammer	92b4244e81	providers/proxy: update traefik regex Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1969	2021-12-20 22:43:58 +01:00
Jens Langhammer	dfbf7027bc	providers/proxy: add traefik.ingress.kubernetes.io/router.tls annotation for ingress Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-20 22:24:42 +01:00
Jens Langhammer	4658018a90	Revert "outposts: rename outpost" This reverts commit `a5c30fd9c7`.	2021-12-20 21:37:31 +01:00
Jens Langhammer	577b7ee515	providers/proxy: include auth headers Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-20 21:37:22 +01:00
Jens Langhammer	3da526f20e	root: allow trace log level to work for core/embedded Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-20 21:11:47 +01:00
Jens Langhammer	c843f18743	lib: add additional celery logger to sentry ignore Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-20 21:04:45 +01:00
Jens Langhammer	80d0b14bb8	outposts: fix error when getting state for non-existent outpost Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-20 19:44:47 +01:00
Jens Langhammer	a5c30fd9c7	outposts: rename outpost Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-20 19:28:05 +01:00
Jens Langhammer	ef23a0da52	outposts/proxy: fix traefik header regex to only match Remote- and X- headers to prevent websocket errors closes #1969 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-20 13:30:19 +01:00
Jens Langhammer	ba527e7141	root: drop redis cache sentry errors Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-20 13:12:14 +01:00
Jens Langhammer	602573f83f	ci: fix label Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-19 13:44:34 +01:00
Jens Langhammer	8599d9efe0	web/admin: auto set the embedded outpost's authentik_host on first view Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-19 13:27:04 +01:00
Jens Langhammer	8e6fcfe350	root: fix inconsistent URL quoting of redis URLs Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-18 22:24:41 +01:00
Jens Langhammer	e9910732bc	release: 2021.12.2	2021-12-18 21:03:50 +01:00
Jens Langhammer	b6ff04694f	providers/oauth2: don't rely on expiry task for access codes and refresh tokens closes #1911 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-18 17:42:41 +01:00
Jens Langhammer	61097b9400	policies/password: add minimum digits closes #1952 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-18 16:15:56 +01:00
Jens Langhammer	4c5537ddfe	sources/oauth: allow writing to user in SourceConnection Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1888	2021-12-18 15:33:46 +01:00
Jens Langhammer	a95779157d	tests/integration: add rename and full update tests for k8s controller Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-18 15:32:16 +01:00
Jens Langhammer	ac6afb2b82	stages/email: add test for non-existent directory Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-18 15:05:40 +01:00
Jens Langhammer	71a22c2a34	outposts: add unittests for docker controller Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-17 13:42:33 +01:00
NeroPcStation	273f5211a0	providers/saml: Fix typo (#1950 )	2021-12-17 11:00:20 +00:00
Jens Langhammer	2ca115285c	crypto: fix private keys not being imported correctly closes #1945 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-16 21:14:15 +01:00
Jens Langhammer	14c159500d	core: don't rotate non-api tokens Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-16 19:32:39 +01:00
Jens Langhammer	f33190caa5	release: 2021.12.1	2021-12-16 15:48:59 +01:00
Jens Langhammer	741822424a	Merge branch 'master' into version-2021.12	2021-12-16 15:48:53 +01:00
Jens Langhammer	a105760123	events: improve app lookup for event creation Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-15 16:46:02 +01:00
Jens Langhammer	6ff8fdcc49	root: enable threading integration in sentry Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-15 15:49:08 +01:00
Jens Langhammer	50ca3dc772	core: fix error when attempting to provider from cached application closes #1940 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-15 15:11:13 +01:00
Jens Langhammer	2a09fc0ae2	release: 2021.12.1-rc5	2021-12-15 10:21:29 +01:00
Jens Langhammer	fbb6756488	Merge branch 'master' into version-2021.12	2021-12-15 10:16:05 +01:00
Jens Langhammer	6e83467481	web/flows: fix error when attempting to enroll new webauthn device closes #1936 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-15 00:24:46 +01:00
Jens Langhammer	72db17f23b	stages/identification: fix miscalculated sleep Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 23:31:08 +01:00
Jens Langhammer	e18e681c2b	events: dont store full backtrace in systemtask Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 22:55:38 +01:00
Jens Langhammer	10fe67e08d	sources/ldap: fix incorrect task names being referenced, use source native slug Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 22:53:14 +01:00
Jens Langhammer	3740e65906	web/admin: add dashboard with user creation/login statistics closes #1867 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 22:08:41 +01:00
Jens Langhammer	30386cd899	events: add custom manager with helpers for metrics Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 21:49:33 +01:00
Jens Langhammer	64a10e9a46	events: fix schema for top_per_user Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 21:08:15 +01:00
Jens Langhammer	0b00768b84	events: add flow_execution event type Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 16:13:51 +01:00
Jens Langhammer	d162c79373	flows: fix wrong exception being caught in flow inspector Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 16:06:00 +01:00
Jens Langhammer	8c16dfc478	stages/invitation: use GroupMemberSerializer serializer to prevent all of the user's groups and their users from being returned Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 15:56:13 +01:00
Jens Langhammer	32ace1bece	crypto: add additional validation before importing a certificate Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 14:49:25 +01:00
Jens Langhammer	54f893b84f	flows: add additional sentry spans Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 11:59:36 +01:00
Jens Langhammer	5854833240	stages/authenticator_webauthn: fix migrations for different choices Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 11:06:46 +01:00
Jens Langhammer	4b2437a6f1	stages/authenticator_webauthn: use correct choices Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 10:51:34 +01:00
Jens Langhammer	59a51c859a	stages/authenticator_webauthn: add migration Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 10:09:35 +01:00
Jens Langhammer	4e6714fffe	stages/authenticator_webauthn: make user_verification configurable closes #1921 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 09:58:20 +01:00
Jens Langhammer	0131b1f6cc	sources/oauth: fix wrong redirect URL being generated Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 09:34:47 +01:00
Jens Langhammer	2993f506a7	sources/oauth: implement apple native sign-in using the apple JS SDK closes #1881 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-14 00:40:29 +01:00
Jens Langhammer	e4841d54a1	: migrate ui_ properties to functions to allow context being passed Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 23:56:35 +01:00
Jens Langhammer	4f05dcec89	sources/oauth: allow oauth types to override their login button challenge Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 23:45:11 +01:00
Jens Langhammer	ede6bcd31e	*: remove debug statements from tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 23:41:08 +01:00
Jens Langhammer	728c8e994d	sources/oauth: strip parts of custom apple client_id Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 23:26:00 +01:00
Jens Langhammer	fec6de1ba2	providers/oauth2: add additional logging to show with token path is taken Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 22:49:42 +01:00
Jens Langhammer	69678dcfa6	providers/oauth2: use generate_key instead of uuid4 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 22:13:20 +01:00
Jens Langhammer	4911a243ff	sources/oauth: add initial okta type Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1910	2021-12-13 21:48:59 +01:00
Jens Langhammer	4e63f0f215	core: add fallback for missing sentry trace Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 18:06:01 +01:00
Jens Langhammer	29241cc287	core: always inject sentry trace into template Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 17:41:00 +01:00
Jens Langhammer	f2b3a2ec91	providers/saml: optimise excessive queries to user when evaluating attributes Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 16:38:38 +01:00
Jens Langhammer	69780c67a9	lib: set evaluation span's description based on filename Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 16:32:01 +01:00
Jens Langhammer	ac9cf590bc	*: use prefixed span names Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 16:18:42 +01:00
Jens Langhammer	cb6edcb198	core: set tag with request ID Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 16:15:27 +01:00
Jens Langhammer	8eecc28c3c	events: add sentry for geoip Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-13 16:15:20 +01:00
Jens Langhammer	09b02e1aec	release: 2021.12.1-rc4	2021-12-13 12:53:58 +01:00
Jens Langhammer	5914bbf173	Merge branch 'master' into version-2021.12 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> # Conflicts: # Dockerfile	2021-12-13 10:54:21 +01:00
Jens Langhammer	83c12ad483	flows: fix description for spans Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-12 21:51:51 +01:00
Jens Langhammer	4224fd5c6f	lib: correctly report "faked" IPs to sentry Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-12 20:54:29 +01:00
Jens Langhammer	597ce1eb42	Revert "*: use cache.delete_pattern instead of getting keys and deleting them" This reverts commit `ff481ba6e7`. Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> # Conflicts: # authentik/flows/views/executor.py # authentik/policies/signals.py	2021-12-12 20:41:34 +01:00
Jens Langhammer	5ef385f0bb	policies: don't always clear application cache on post_save Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-12 20:39:04 +01:00
Jens Langhammer	cda4be3d47	flows: add additional tags Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-12 20:37:20 +01:00
Jens Langhammer	8cdf22fc94	root: set default redis iter to 1000 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-12 20:24:43 +01:00
Jens Langhammer	6efc7578ef	flows: add additional sentry spans to flow executor Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-12 20:04:21 +01:00
Jens Langhammer	7859145138	outposts: don't try to create docker client for embedded outpost Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-12 17:13:26 +01:00
Jens Langhammer	8a8aafec81	root: enable boto3 sentry integration Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-12 14:38:24 +01:00
Jens Langhammer	534689895c	lib: remove old load_local_files setting Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-11 22:03:06 +01:00
Jens Langhammer	8a0dd6be24	outposts: handle RuntimeError during websocket connect Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-11 22:01:55 +01:00
Jens Langhammer	65d2eed82d	stagse/authenticator_webauthn: remove pydantic import Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-11 20:32:25 +01:00
Jens Langhammer	bafeff7306	outposts: improve logging for outpost controllers Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-11 15:35:20 +01:00
Jens Langhammer	7eda794070	outposts: fix docker controller not stopping containers Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1859	2021-12-11 14:00:15 +01:00
Jens Langhammer	e3129c1067	root: bump celery messages to info Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-11 13:59:56 +01:00
Jens Langhammer	ff481ba6e7	*: use cache.delete_pattern instead of getting keys and deleting them Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-10 21:35:28 +01:00
Jens Langhammer	b761659227	root: use ghcr for containers during testing Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-10 20:57:09 +01:00
Jens Langhammer	2ee48cd039	outposts: set display name for outpost service account Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-09 19:59:38 +01:00
Jens Langhammer	340a9bc8ee	core: fix error when using invalid key-values in attributes query Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-09 19:53:47 +01:00
Jens Langhammer	4ba55aa8e9	flows: fix error when trying to print FlowToken objects Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-09 13:55:43 +01:00
Jens Langhammer	bab6f501ec	flows: fix error in inspector view Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-09 13:52:46 +01:00
Jens Langhammer	ffb0135f06	release: 2021.12.1-rc3	2021-12-09 13:23:41 +01:00
Jens Langhammer	ee0ddc3d17	Merge branch 'master' into version-2021.12	2021-12-09 13:23:28 +01:00
Jens Langhammer	a9bd34f3c5	events: revert to @prefill_task decorator since base class doesn't get executed until task runs Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-09 10:18:00 +01:00
Jens Langhammer	db316b59c5	stages/prompt: use policyenginemode all Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-09 09:39:40 +01:00
Jens Langhammer	6209714f87	policies/expression: add ak_call_policy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-09 09:39:28 +01:00
Jens Langhammer	1ed2bddba7	root: fix celery task ID not being included in log Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-09 09:36:52 +01:00
Jens Langhammer	26b35c9b7b	root: fix name conflict in threadlocal Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-08 21:42:48 +01:00
Jens Langhammer	86a9271f75	root: add request_id to celery tasks, prefixed with "task-" Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-08 21:34:20 +01:00
Jens Langhammer	402ed9bd20	root: allow usage of --randomly-seed for testing Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-08 21:33:41 +01:00
Jens Langhammer	326b574d54	root: update dependencies Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-07 16:25:10 +01:00
Jens Langhammer	a91204e5b9	web/user: allow custom font-awesome icons for applications Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1189	2021-12-06 21:20:15 +01:00
Jens Langhammer	873aa4bb22	providers/saml: remove SESSION_KEY_POST from session after using it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1873	2021-12-06 12:47:25 +01:00
Jens Langhammer	c1ea78c422	core: fix missing permission check for group creating when creating service account Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-06 12:33:29 +01:00
Jens Langhammer	3c8bbc2621	sources/*: only allow superusers to directly create source connections Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-06 12:22:40 +01:00
Jens Langhammer	4143d3fe28	events: don't set metrics on import Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-06 10:13:48 +01:00
Jens Langhammer	e3e9178ccc	web/admin: show outpost warning on application page too Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-06 10:10:44 +01:00
Jens Langhammer	b694816e7b	sources/*: Allow creation of source connections via API closes #1888 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-06 10:05:42 +01:00
Jens Langhammer	317e9ec605	core: add FlowToken which saves the pickled flow plan, replace standard token in email stage to allow finishing flows in different sessions closes #1801 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-05 15:20:11 +01:00
Jens Langhammer	ada2a16412	tests/e2e: add post binding test Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-05 11:18:01 +01:00
Jens Langhammer	6a3f7e45cf	providers/saml: add ?force_binding to limit bindings for metadata endpoint Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-05 11:14:42 +01:00
Jens Langhammer	2b78c4ba86	*: use request.query_params instead of accessing the django request Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-05 11:14:20 +01:00
Jens Langhammer	680ef641fb	providers/saml: fix error when propertymapping returns invalid data in list Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-05 10:31:16 +01:00
Jens Langhammer	2b5504ff63	release: 2021.12.1-rc2	2021-12-04 20:06:41 +01:00
Jens Langhammer	639c2f5c2e	Merge branch 'master' into version-2021.12	2021-12-04 19:55:37 +01:00
Jens Langhammer	426cef998f	sources/ldap: make task names more consistent Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-03 18:39:42 +01:00
Jens Langhammer	8ddb62ed0f	sources/plex: fix plex token being included in event log Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-03 18:37:40 +01:00
Jens Langhammer	572f6d4ea0	crypto: add certificate discovery to automatically import certificates from lets encrypt Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1835	2021-12-03 18:27:36 +01:00
Jens Langhammer	f1b9021e3e	sources/ldap: add optional tls verification certificate closes #1875 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-03 10:09:13 +01:00
Jens Langhammer	8ae50814fe	*: add missing migrations Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-03 10:04:54 +01:00
Jens Langhammer	2e2b491ec7	source/ldap: fix hanging unittests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-03 09:41:13 +01:00
Jens Langhammer	ac432e78e2	sources/ldap: don't cache LDAP Connection, use random server Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-02 21:18:20 +01:00
Jens Langhammer	83ac42ac43	stages/prompt: fix error when both default and required are set Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-02 21:11:22 +01:00
Jens Langhammer	4bd1cd127b	providers/saml: fix IndexError in signature check Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-02 20:30:03 +01:00
Jens Langhammer	2eb5a5cc76	sources/ldap: handle typeerror during creation of objects when using wrong kwargs params Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-02 20:24:24 +01:00
Jens Langhammer	75051687e6	sources/ldap: allow multiple server URIs for loadbalancing and failover closes #1874 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-02 20:15:11 +01:00
Jens Langhammer	7e316b5fc2	root: add missing sample_rate default Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-02 19:54:37 +01:00
Jens Langhammer	66c530ea06	outposts: always trigger outpost reconcile on startup Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-02 15:06:14 +01:00
Jens Langhammer	cf78c89830	events: replace @prefill_task with custom base class to prefill Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-02 13:47:35 +01:00
Jens Langhammer	20c738c384	crypto: fix default API not having an ordering Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-02 13:00:41 +01:00
Jens Langhammer	4f54ce6afb	providers/saml: fix error when using post bindings and user freshly logged in Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1873	2021-12-02 13:00:21 +01:00
Jens Langhammer	f0d7edb963	*: fix @prefill_task Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-02 10:05:51 +01:00
Jens Langhammer	b4963bec76	providers/proxy: fix defaults for traefik integration Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-01 21:47:13 +01:00
Jens Langhammer	7aa8e35f87	providers/proxy: use wildcard for traefik headers copy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-01 20:19:35 +01:00
Jens Langhammer	60b95271eb	outposts/proxy: add additional headers Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-12-01 20:19:09 +01:00
Jens Langhammer	e6818c1f6a	release: 2021.12.1-rc1	2021-12-01 13:08:13 +01:00
Jens Langhammer	917eef96fb	lib: add improved log to sentry events being sent Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-29 21:37:29 +01:00
Jens Langhammer	9a393848b2	outpost: configure error reporting based off of main instance config Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-29 14:42:19 +01:00
github-actions[bot]	7d2f622f4b	web: Update Web API Client version (#1857 ) Signed-off-by: GitHub <noreply@github.com> Co-authored-by: BeryJu <BeryJu@users.noreply.github.com> Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-29 14:17:12 +01:00
Jens Langhammer	e3a5ef1907	root: make sentry sample rate configurable Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-29 13:52:34 +01:00
Matthew R. McDougal	e597bb4542	policies/expression: fix ak_user_has_authenticator evaluation when not specifying optional device_type (#1849 ) * Fix ak_user_has_authenticator evaluation when not specifying optional device_type * Simpler patch	2021-11-29 10:35:17 +01:00
Jens Langhammer	5c54de66fc	*: add meta_model_name field to all models with inheritance Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-26 10:32:39 +01:00
Jens Langhammer	2c0d8d8943	core: add meta_model_name to MetaNameSerializer to easily show relevant events Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-26 10:27:08 +01:00
Jens Langhammer	0a0eee138a	stages/authenticator_validate: catch error when attempting to configure user without flow Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-25 23:44:48 +01:00
Jens Langhammer	de8cf65503	stages/email: prevent error with duplicate token closes #1827 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-25 23:17:37 +01:00
Jens Langhammer	121b36f35f	lib: log error for file:// in config Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-25 19:21:40 +01:00
Jens Langhammer	363aed2a47	root: url quote redis passwords for connection string closes https://github.com/goauthentik/helm/issues/39 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-25 18:05:36 +01:00
Jens L	e1ef196283	core: remove dump_config, handle directly in config loader without booting django, don't check database	2021-11-25 13:38:31 +01:00
Jens Langhammer	0b8cfd437b	*: fix typo'd signing pair name Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-24 09:55:10 +01:00
Jens Langhammer	75724b6f8d	root: make testing output more consistent Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 23:46:27 +01:00
Jens Langhammer	5b9e6bed6c	lib: fix custom URL schemes being overwritten Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 23:23:09 +01:00
Jens Langhammer	0e3602d7eb	lib: improve probability of symbols in generated key Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 23:01:30 +01:00
Jens Langhammer	2b94e9a687	tests/e2e: bump retries Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 22:54:08 +01:00
Jens Langhammer	6ed7d842e4	*: allow URLs without domain and custom schemas Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 22:51:04 +01:00
Jens Langhammer	8794c840cf	web: only show applications with http link Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 22:40:31 +01:00
Jens Langhammer	9c9c00755a	core: fix test user not having password set properly Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 22:30:09 +01:00
Jens Langhammer	b2d2e7cbc8	tests/e2e: remove logger Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 21:19:33 +01:00
Jens Langhammer	91fd792f88	tests/e2e: use generated uid Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 19:19:13 +01:00
Jens Langhammer	9835785864	core: make test user's password optional Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 19:06:44 +01:00
Jens Langhammer	d785998c5a	Revert "root: disable random tests for now" This reverts commit `8ba9553220`.	2021-11-23 18:46:51 +01:00
Jens Langhammer	8ba9553220	root: disable random tests for now Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 17:57:56 +01:00
Jens Langhammer	6eb132c48b	tests/e2e: fix ldap provider tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 17:28:35 +01:00
Jens Langhammer	355b832cc3	tests/e2e: fix email backend Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 13:22:28 +01:00
Jens Langhammer	e32d4f0095	tests/e2e: don't run e2e tests randomly for now Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 00:32:24 +01:00
Jens Langhammer	d3397c349f	stages/email: minify email css template Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-23 00:10:43 +01:00
Jens L	9bb0d04aeb	root: Random tests (#1825 ) * root: add pytest-randomly to randomise tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * : generate flows for testing instead of relying on existing ones Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> : generate users for testing instead of relying on existing ones Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> : use generated certificate Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> tests/e2e: keep containers Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * tests/e2e: use websockets test case Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-22 22:56:02 +01:00
Jens Langhammer	61621e7d60	lifecycle: improve backup restore by dropping database before Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-20 00:32:24 +01:00
Jens Langhammer	431ba6b4ef	lib: add cli option for lib.config Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-19 23:52:10 +01:00
Jens Langhammer	bb6eed0db1	root: properly catch 404 errors for websocket connections Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-19 23:19:07 +01:00
Jens Langhammer	e831e4fb94	root: add lifespan shim to prevent errors Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-16 13:25:03 +01:00
Jens Langhammer	b0fac9c9f1	providers/saml: fix SessionNotOnOrAfter not being included Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-16 12:36:40 +01:00
Jens Langhammer	f4db09cd59	events: add gdpr_compliance option Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1551	2021-11-16 11:29:13 +01:00
Jens Langhammer	638e8d741f	*: fix multiple tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-16 10:38:21 +01:00
Jens Langhammer	425b87a6d0	outposts: add ack and disconnect tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-16 09:34:37 +01:00
Jens Langhammer	d12e24017e	outposts: add websocket tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 23:58:19 +01:00
Jens Langhammer	078633c2af	lib: drop all sentry exceptions when debug enabled Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 22:18:56 +01:00
Jens Langhammer	4b8b800648	stages/*: add more tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 20:58:34 +01:00
Jens Langhammer	6f9ed001a1	crypto: add more tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 20:38:03 +01:00
Jens Langhammer	e4095dfffe	admin: add more tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 20:10:09 +01:00
Jens Langhammer	d5341c2284	managed: add tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 19:53:08 +01:00
Jens Langhammer	867fb0dac0	root: fix settings for managed not loaded Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 19:49:03 +01:00
Jens Langhammer	2666aa2c73	root: add errorhandling in log middleware Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 17:11:44 +01:00
Jens Langhammer	f0e9bafa35	outposts: add tests for management commands Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 16:44:42 +01:00
Jens Langhammer	0d739f5c1a	recovery: add additional tests for commands Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 16:41:37 +01:00
Jens Langhammer	e08077c73a	root: replace asgi-based logger with middleware Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 16:32:56 +01:00
Jens Langhammer	c43049a981	website/docs: remove deprecated docker_image_base Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 15:58:17 +01:00
dependabot[bot]	f7044e41c6	build(deps-dev): bump bandit from 1.7.0 to 1.7.1 (#1793 ) * build(deps-dev): bump bandit from 1.7.0 to 1.7.1 Bumps [bandit](https://github.com/PyCQA/bandit) from 1.7.0 to 1.7.1. - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](https://github.com/PyCQA/bandit/compare/1.7.0...1.7.1) --- updated-dependencies: - dependency-name: bandit dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * *: fix bandit false positives Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-15 09:16:16 +01:00
Jens Langhammer	59343ff441	stages/email: fix missing component in response when retrying email send closes #1791 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-14 17:52:31 +01:00
Jens Langhammer	cab564152d	lib: load json strings in config env variables Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-14 12:44:22 +01:00
Jens Langhammer	88516ba2ca	core: make defaults for _change_email and _change_username configurable closes #1789 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-13 22:33:03 +01:00
Jens Langhammer	2a3b049b01	release: 2021.10.4	2021-11-12 12:31:24 +01:00
Rizwan Ahmed	e4a5e86c93	sources/oauth: Fixed the incorrect padding issue in apple.py (#1773 ) * Fixed the incorrect padding issue in apple.py Fixed the incorrect padding issue in apple.py by adding proper padding to the raw_payload. * Fixed the incorrect encoding of client_secret in apple.py In the get_client_secret() method, the "sub" in the payload must be only the client ID. So I have changed self.source.consumer_key to parts[0] * Added the decode method for the id_token Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-12 12:10:29 +01:00
Jens Langhammer	1cfe81887b	stages/authenticator_validate: improve logging Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-11 23:33:41 +01:00
Jens Langhammer	53905d1a89	stages/authenticator_validate: enable all device classes by default Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-11 22:49:30 +01:00
Jens Langhammer	6db1c914ee	stages/authenticator_duo: fix devices created with name Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-11 22:16:47 +01:00
Jens Langhammer	c98bdbacc5	providers/proxy: return list of configured scope names so outpost requests custom scopes closes #1762 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-10 23:06:21 +01:00
Jens Langhammer	1e8d45dc15	web: write interfaces to different folders and remove custom chunk names Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-10 17:54:50 +01:00
Jens Langhammer	d5d8641b37	stages/*: disable trim_whitespace on important fields closes #1765 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-10 16:48:19 +01:00
Jens Langhammer	cc0832f487	core: force lowercase emails for gravatar usage Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-10 12:40:20 +01:00
Jens Langhammer	e73606b54d	root: catch error in analytics on startup Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-10 11:28:08 +01:00
Jens Langhammer	5d479a6c8f	root: set utm_source Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-09 23:23:47 +01:00
Jens Langhammer	4a773b2b4f	sources/ldap: set connect/receive timeout (default to 15s) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-09 22:27:58 +01:00
Jens Langhammer	8003d67844	sources/ldap: fix typo Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-09 22:24:33 +01:00
Jens Langhammer	51783c1cbb	sorces/ldap: fix user/group sync overwriting attributes instead of merging them Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-09 21:16:59 +01:00
Jens Langhammer	ab2b13938e	release: 2021.10.3	2021-11-08 20:52:11 +01:00
Jens Langhammer	9ca15983a2	root: keep last 30 backups Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-08 17:46:25 +01:00
Jens Langhammer	99ef94b7aa	stages/prompt: only set placeholder when in context Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-08 15:10:32 +01:00
Jens Langhammer	c3faa61ed9	stages/prompt: set field placeholder based on plan context Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-08 14:47:50 +01:00
Jens Langhammer	da74304221	stages/prompt: add text_read_only field Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-08 14:45:56 +01:00
Jens Langhammer	79db0ce4c1	stages/prompt: use initial instead of default Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-07 22:20:08 +01:00
Jens Langhammer	5e23b11764	stages/prompt: default prompts to the current value of the context Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-07 21:59:50 +01:00
Jens Langhammer	c4e029ffe2	recovery: add create_admin_group management command Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-07 21:53:21 +01:00
Jens Langhammer	61b5b36192	core: add command to output full config Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-07 21:45:52 +01:00
Jens Langhammer	c6cc1b1728	root: fix defaults for EMAIL_USE_TLS Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-07 21:37:14 +01:00
Jens Langhammer	90151a13ae	stages/identification: only allow limited challenges for login sources Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-06 14:53:38 +01:00
Jens Langhammer	f958aa6930	stages/identification: use random sleep Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-06 14:50:35 +01:00
Jens Langhammer	924a13e832	core: fix auth_method for tokens Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-06 13:04:41 +01:00
Jens Langhammer	ae83c35dfd	events: ignore creation/deletion of AuthenticatedSession objects Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-06 13:04:34 +01:00
Jens Langhammer	6424bf98da	admin: improve check to remove version notifications Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-06 12:15:05 +01:00
Jens Langhammer	2cef220a3e	providers/ldap: add/squash migrations Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-05 10:41:50 +01:00
Jens L	5a8c66d325	providers/ldap: memory Query (#1681 ) * outposts/ldap: modularise ldap outpost, to allow different searchers and binders Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outposts/ldap: add basic in-memory searcher Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * providers/ldap: add search mode field Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: add search mode field Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-05 10:37:30 +01:00
dependabot[bot]	8de13d3f67	build(deps): bump goauthentik.io/api from 0.2021102.2 to 0.2021102.4 (#1738 ) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-05 09:33:26 +01:00
Jens Langhammer	7798292aa8	sources/plex: use exception_to_string in tasks Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-05 01:16:36 +01:00
Jens Langhammer	3005ca17bd	web/admin: show warning on provider when not used with outpost Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-05 01:15:33 +01:00
Jens Langhammer	909461e533	providers/*: include list of outposts Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-05 01:06:04 +01:00
Jens Langhammer	a40c3aeb68	core: make group membership lookup respect parent groups (upwards) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-05 00:53:56 +01:00
Jens Langhammer	4a89be3048	core: include parent group name Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-05 00:11:17 +01:00
Jens Langhammer	023b97aa69	sources/ldap: remove deprecated default Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-04 22:13:47 +01:00
Jens Langhammer	738e4d5c74	web/admin: only show flows with an invitation stage configured instead of all enrollment flows Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1720	2021-11-04 20:54:55 +01:00
Jens Langhammer	5bc1301043	stages/authenticator_*: add default name for authenticators Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-04 15:34:51 +01:00
Jens Langhammer	8d766efecb	root: don't set signal on start when running in ci or dev Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-04 14:32:21 +01:00
Jens Langhammer	b362d2af03	lib: fix linting issue Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-04 13:43:09 +01:00
Jens Langhammer	bcd42fce13	root: further improve detection of environment we're running in Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-04 13:35:22 +01:00
Jens Langhammer	6deddd038f	internal: start embedded outpost directly after backend is healthy instead of waiting Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-04 13:18:04 +01:00
Jens Langhammer	3b47cb64da	root: improve compose detection, add anonymous stats Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-04 13:16:21 +01:00
Jens Langhammer	cf5e70c759	lifecycle: revert to non-h11 worker Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-04 13:16:10 +01:00
Jens Langhammer	5374352411	sources/plex: allow users to connect their plex account without login flow Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-03 21:09:02 +01:00
Jens Langhammer	08eff4cc5d	sources/plex: fix missing ordering Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-03 20:21:33 +01:00
Jens Langhammer	8f6d700aa8	sources/oauth: set prompt=none for Discord provider Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-03 15:48:59 +01:00
Jens Langhammer	58c221e867	release: 2021.10.2	2021-11-03 10:07:28 +01:00
Jens Langhammer	5dc0f3b91b	website: remove static service account, use helm chart instead Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-03 00:14:01 +01:00
Jens Langhammer	f51515f3de	stages/invitation: don't throw 404 error in stage Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-03 00:07:13 +01:00
Jens Langhammer	f978575293	stages/invitation: remove invitation from plan context after deletion Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-02 23:50:12 +01:00
Jens Langhammer	0d02dbf55c	api: replace django sentry proxy with go proxy to prevent login issues Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-02 14:44:37 +01:00
Jens Langhammer	af83308fd4	stages/prompt: fix type in Prompt not having enum set Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-11-01 20:44:48 +01:00
Jens Langhammer	6036d88392	providers/proxy: allow configuring of additional scope mappings for proxy closes #1255 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-31 22:25:51 +01:00
Jens Langhammer	bfc8a56a0b	*: fix tests for new field show_source_labels Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-31 18:18:21 +01:00
Jens Langhammer	5646141fe2	stages/identification: add show_source_labels option, to show labels for sources closes #1679 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-31 17:57:48 +01:00
Jens Langhammer	335d6edd11	providers/saml: fix error on missing AssertionConsumerServiceURL, fall back to default ACS Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-31 17:21:15 +01:00
Jens Langhammer	5d9bed130a	root: fix Detection of S3 settings for backups closes #1698 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-31 16:54:10 +01:00
Jens Langhammer	2788329880	release: 2021.10.1	2021-10-31 10:56:21 +01:00
Jens Langhammer	f5dc81907a	core: add created field to source connection Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-30 15:02:41 +02:00
Jens Langhammer	d70c8fbcc3	core: add API for all user-source connections Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-30 14:36:54 +02:00
Jens Langhammer	12b26e49ec	flows: optimise stage user_settings API Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-30 14:16:28 +02:00
Jens Langhammer	e771e1857f	core: add API to list all authenticator devices Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-29 09:08:48 +02:00
Jens Langhammer	72a93c0959	root: pin node images to v16 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-28 10:29:48 +02:00
Jens Langhammer	381010600f	release: 2021.10.1-rc3	2021-10-27 18:57:07 +02:00
Jens Langhammer	1b21b50b77	providers/oauth2: fallback to uid if UPN was selected but isn't available Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-27 16:11:35 +02:00
Jens Langhammer	fa6324ab1d	sources/ldap: prevent key `users` from being set as this is an M2M relation Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-27 15:43:56 +02:00
Jens Langhammer	9e0daf2bcf	sources/ldap: skip values which are of type bytes Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-27 15:43:38 +02:00
Jens Langhammer	0273ae16df	events: fix error when notification transport doesn't exist anymore Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-27 15:38:41 +02:00
Jens Langhammer	f2f12ef0ba	api: fix error when connection to websocket via secret_key Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-27 15:21:52 +02:00
Jens Langhammer	61d3df5f02	outposts: fix docker controller not using object_naming_template closes #1682 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-27 15:04:59 +02:00
Jens Langhammer	971de4fcb9	core: add USER_ATTRIBUTE_CHANGE_EMAIL Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1590 and #1677	2021-10-27 13:34:11 +02:00
Jens Langhammer	92085f1a3c	core: add toggle to completely disable backup mechanism closes #1671 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-26 17:04:33 +02:00
Jens Langhammer	8eb4d53810	providers/oauth2: fix events being created from /application/o/authorize/ Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-21 22:59:01 +02:00
Jens Langhammer	731f5d0199	release: 2021.10.1-rc2	2021-10-21 16:38:30 +02:00
Jens Langhammer	3647633232	core: cleanup embedded outpost logging, log user for http requests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-20 22:12:49 +02:00
Jens Langhammer	eba91c6b2b	root: add cookie domain setting Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-20 18:26:22 +02:00
Jens Langhammer	ba9f8a5795	lib: add utm_source to default links Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-20 17:31:27 +02:00
Jens Langhammer	02b4173d30	root: add utm_source Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-20 16:34:39 +02:00
Jens Langhammer	61fab497cf	core: add user flag to prevent users from changing their usernames closes #1590 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-20 16:17:19 +02:00
Jens Langhammer	621e7f564a	flows: also clear cache when deleting bindings Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-20 15:25:38 +02:00
Jens Langhammer	2df4322ecf	sources/oauth: add choices to oauth provider_type Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-20 00:11:19 +02:00
Jens Langhammer	03369e2338	sources/ldap: check for existence of vendor fields before falling back Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1521	2021-10-19 15:40:40 +02:00
Jens Langhammer	5da7d9a573	release: 2021.10.1-rc1	2021-10-19 15:34:59 +02:00
Jens Langhammer	89bb27b95c	sources/ldap: fix missing arguments? Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-18 22:04:58 +02:00
Jens Langhammer	2b155964c2	sources/ldap: extract vendor-specific functions #1521 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-18 21:44:10 +02:00
Jens L	922fc9b8d5	sources/oauth: add Sign in with Apple (#1635 ) * sources/oauth: add apple sign in support Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * website/docs: apple sign in docs Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * website/docs: fix missing apple in sidebar Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * sources/oauth: add fallback values for name and slug Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-18 16:35:12 +02:00
Jens Langhammer	2c06eed8e7	events: don't prefill task if they already have a state Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-18 14:48:14 +02:00
Jens Langhammer	a1b3af401d	outposts: improve handling of recreate scenarios Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-18 14:29:37 +02:00
Jens Langhammer	92d38f62b5	outposts: handle k8s 422 response code by recreating objects Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-18 10:23:11 +02:00
Jens Langhammer	98a56c77e3	providers/proxy: update ingress controller to work with k8s 1.22 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-18 10:00:24 +02:00
Jens Langhammer	ce812e14c7	core: improve detection for s3 settings to trigger backup Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-17 15:56:31 +02:00
Jens Langhammer	8d32a53126	outposts: add additional error checking for docker controller Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-17 15:54:57 +02:00
Jens Langhammer	0225bf9c99	stages/authenticator_validate: create a default authenticator validate stage with sensible defaults Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-16 00:28:56 +02:00
dependabot[bot]	8040e2b6e4	build(deps): bump webauthn from 0.4.7 to 1.0.0 (#1625 ) * build(deps): bump webauthn from 0.4.7 to 1.0.0 Bumps [webauthn](https://github.com/duo-labs/py_webauthn) from 0.4.7 to 1.0.0. - [Release notes](https://github.com/duo-labs/py_webauthn/releases) - [Commits](https://github.com/duo-labs/py_webauthn/compare/v0.4.7...v1.0.0) --- updated-dependencies: - dependency-name: webauthn dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * stages/authenticator_webauthn: migrate to new library version Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * stages/authenticator_validate: migrate to new version Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * stages/authenticator_webauthn: add bytes_to_base64url_dict for json encoding Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * actually don't do that Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * fix missing response on web Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * more double json Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * fix Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * more base64 stuff Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * working Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * ci: always sync Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * fix Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-15 23:26:29 +02:00
Jens Langhammer	f62786e58b	policies: add additional filters to create flow charts on frontend Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-15 18:21:44 +02:00
Jens Langhammer	5f9dda2e58	outposts: rename docker_image_base to container_image_base, since its not docker specific Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-14 20:28:30 +02:00
Ilya Kogan	0c55eea678	outposts: Adding more flexibility to outposts in Kubernetes. (#1617 ) * outposts/ldap: Support hard coded `uidNumber` and `gidNumber`. * outposts: more options for image + labels - Set outpost docker image in config. - Set image pull secrets in outpost config. - Add additional labels for easier targeting from custom services. * Fix some linting errors. * outposts: Rename `docker_image` to `container_image	2021-10-14 19:54:56 +02:00
Jens Langhammer	dd9dc7e596	root: fix error with sentry proxy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-14 19:45:01 +02:00
Jens Langhammer	797e31696a	outposts: fix attribute error in docker controller Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-14 13:37:56 +02:00
Jens Langhammer	8eddb4b95b	admin: check for debug in worker count api Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-14 12:32:30 +02:00
Jens Langhammer	4b7399f454	*: add @prefill_task() decorator to "pre-fill" tasks in cache, so they can be executed even before their schedule would do so Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-14 12:21:28 +02:00
Jens Langhammer	9bc9568008	stages/authenticator_sms: make fields non-nullable Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-14 11:42:11 +02:00
Skyler Mäntysaari	634375c43f	stages/authenticator_sms: add generic provider (#1595 ) * stages/sms: New SMS provider, aka wrapper for outside API * web/pages/authenicator_sms: Conditionally show options based on provider. * stages/authenicator_sms: Fixing up the model. * Whoops * stages/authenicator_sms: Adding supported auth types for Generic provider. * web/pages/stages/authenicator_sms: Added auth type for generic provider * web/pages/stages/authenicator_sms: Fixing up my generic provider options. * stages/authenicator/sms: Working version of generic provider. * stages/authenicator/sms: Cleanup and creating an event on error. * web/ages/stages/authenicator_sms: Made a default for Auth Type and cleaned up the non-needed name attribute. * stages/authenicator_validate: Fixing up the migration as it had no SMS. * stages/authenicator_sms: Removd non-needed migration and better error code handling. * stages/authenicator_sms: Removd non-needed migration and better error code handling. * web/pages/stages/authenicator_sms: Provider default is not empty anymore. Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-14 10:24:15 +02:00
Jens Langhammer	98907ec889	root: remove structlog.processors.format_exc_info for new structlog version Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-13 09:42:49 +02:00
Jens Langhammer	3e5b05203b	Revert "root: handle liveness probe in router" This reverts commit `d39dbc7287`. Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-12 18:44:37 +02:00
Jens Langhammer	2b09d97522	core: fix squash migrations error when AK_ADMIN_TOKEN is set Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-12 17:45:10 +02:00
Jens Langhammer	d39dbc7287	root: handle liveness probe in router Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-12 14:54:15 +02:00
Jens Langhammer	cc69311ec0	stages/authenticator_validate: add new class Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-12 13:13:31 +02:00
Jens Langhammer	ddb70a283e	managed: don't run managed reconciler in foreground on startup Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-12 12:10:46 +02:00
Jens Langhammer	ecfc3a6d93	*: migrate everything to goauthentik.io docker proxy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-12 11:04:47 +02:00
Jens L	e4f141c6c0	: Squash Migrations (#1593 ) : first squash pass Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> sources/saml: squash less Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outposts: fix docker controller not correctly checking image Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * tests/e2e: fix old migration reference Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-11 21:39:35 +02:00
Jens L	aef9d27706	stages/authenticator_sms: Add SMS Authenticator Stage (#1577 ) * stages/authenticator_sms: initial implementation Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/admin: add initial stage UI Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/elements: clear invalid state when old input was invalid but new input is correct Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * stages/authenticator_sms: add more logic Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/user: add basic SMS settings Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * stages/authenticator_sms: initial working version Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * stages/authenticator_sms: add tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/flows: optimise totp password manager entry on authenticator_validation stage Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/elements: add grouping support for table Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/admin: allow sms class in authenticator stage Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/admin: add grouping to more pages Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * stages/authenticator_validate: add SMS support Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * api: add throttling for flow executor based on session key and pending user Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web: fix style issues Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * ci: add workflow to compile backend translations Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-11 17:51:49 +02:00
Jens L	7bf587af24	ci: push dev images to ghcr (#1591 ) * ci: push dev images to ghcr Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * : use new ghcr images Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> website/docs: use ghcr proxy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-11 14:08:34 +02:00
Jens Langhammer	b80ecd4668	stages/prompt: fix wrong field type of field_key Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-10 18:54:56 +02:00
Jens Langhammer	d959b7a930	Merge branch 'version-2021.9'	2021-10-10 14:35:40 +02:00
Jens Langhammer	619203c177	release: 2021.9.8	2021-10-10 13:12:26 +02:00
Jens Langhammer	7d9251ce2f	root: fix linting Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-09 20:56:49 +02:00
Jens Langhammer	846c971674	root: add translation for backend strings Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-09 20:07:28 +02:00
Jens Langhammer	5b7e1f97e0	stages/authenticator_duo: remove signals Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-09 19:29:35 +02:00
Jens Langhammer	dff0613b3d	crypto: add managed field, prepare managed JWT cert Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-09 19:14:39 +02:00
Jens Langhammer	8965451073	core: add default for user's settings attribute Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-09 16:01:22 +02:00
Jens Langhammer	b33ea9cc61	core: add settings serializer to user/me and update_self endpoints, saved in a key in attributes Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-09 15:35:18 +02:00
Jens Langhammer	f32d35b07c	policies/password: add extra sub_text field in tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-07 19:27:24 +02:00
Jens Langhammer	9e936e4436	outposts: fix lint error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-07 19:15:57 +02:00
Jens Langhammer	649abddea7	outposts: fallback to known-good outpost image if configured image cannot be pulled Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-07 19:10:39 +02:00
Jens Langhammer	67b88595ad	stages/prompt: fix sub_text not allowing blank Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-07 19:00:15 +02:00
Jens Langhammer	b4ee693a5c	stages/user_write: allow recursive writing to user.attributes Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-07 18:57:19 +02:00
Jens Langhammer	57e5acaf2f	stages/prompt: add sub_text field to add HTML below prompt fields Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-07 18:34:37 +02:00
Jens Langhammer	050ec99c89	flows: fix inspector history not being cleared when executing from API Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-07 18:29:28 +02:00
dependabot[bot]	cbeee27fc1	build(deps): bump @sentry/tracing from 6.13.2 to 6.13.3 in /web (#1556 ) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-07 09:39:44 +02:00
Jens Langhammer	8c27616d0c	Merge branch 'version-2021.9'	2021-10-06 21:04:16 +02:00
Jens Langhammer	e444d0d640	release: 2021.9.7	2021-10-06 20:57:56 +02:00
Jens Langhammer	d75c63d38b	Merge branch 'version-2021.9' Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> # Conflicts: # web/src/locales/fr_FR.po	2021-10-06 00:04:09 +02:00
Jens Langhammer	2b730dec54	release: 2021.9.6	2021-10-05 22:22:54 +02:00
Jens Langhammer	62bf79ce32	root: add docker-native healthcheck for web and celery Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 20:45:38 +02:00
Jens Langhammer	d29d161ac6	admin: clear update notification when notification's version matches current version Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 20:45:38 +02:00
Jens Langhammer	aee58c8d53	root: add docker-native healthcheck for web and celery Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 20:45:18 +02:00
Jens Langhammer	fa6df84de2	admin: clear update notification when notification's version matches current version Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 20:36:38 +02:00
Jens Langhammer	79eec5a3a0	core: include group uuids in self serializer Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 13:49:14 +02:00
Jens Langhammer	c1f302fb7c	core: only return group names for user_self Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 13:48:53 +02:00
Jens Langhammer	782764ac73	api: ensure viewsets have default ordering Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 13:48:42 +02:00
Jens Langhammer	73d57d6f82	core: make user's name field fully options closes #1537 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 13:48:42 +02:00
Jens Langhammer	d1a1bfbbc5	web/user: don't show managed tokens in user interface Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 13:47:49 +02:00
Jens Langhammer	1ac4dacc3b	outposts: fix error when comparing ports in docker controller when port mapping is disabled Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 13:47:15 +02:00
Jens Langhammer	9e7e22367b	core: include group uuids in self serializer Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 13:10:44 +02:00
Jens Langhammer	f5761dc70d	core: only return group names for user_self Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 12:31:25 +02:00
Jens Langhammer	16380b3f7a	api: ensure viewsets have default ordering Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 11:26:41 +02:00
Jens Langhammer	16f2603130	core: make user's name field fully options closes #1537 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 11:23:27 +02:00
Jens Langhammer	847cfed73f	web/user: don't show managed tokens in user interface Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 11:11:34 +02:00
Jens Langhammer	05b587ae44	outposts: fix error when comparing ports in docker controller when port mapping is disabled Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 10:44:07 +02:00
Jens Langhammer	a515afae0b	recovery: handle error when user doesn't exist Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-05 10:40:59 +02:00
Jens Langhammer	1c340ddbbd	Merge branch 'version-2021.9' Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> # Conflicts: # web/package-lock.json # web/package.json	2021-10-04 22:02:56 +02:00
Jens Langhammer	bcf7e162a4	release: 2021.9.5	2021-10-04 20:08:46 +02:00
Jens Langhammer	cb37e5c10e	stages/email: add activate_user_on_success flag, add for all example flows Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> # Conflicts: # web/src/locales/fr_FR.po	2021-10-04 18:50:19 +02:00
Jens Langhammer	73bb778d62	stages/user_login: add check for user.is_active and tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-04 18:50:00 +02:00
Jens Langhammer	b612a82e16	outposts: don't always build permissions on outpost.user access, only in signals and tasks Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-04 18:49:57 +02:00
Jens Langhammer	09f43ca43b	events: add missing migration Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-04 18:49:50 +02:00
Steven Armstrong	1c91835a26	providers/ldap: use RDN when using posixGroup's memberUid attribute (#1514 ) Use the RDN instead of the FDN when establishing group memberships based on posixGroup's 'memberUid' attribute. fixes #1436 Signed-off-by: Steven Armstrong <steven@armstrong.cc>	2021-10-04 18:49:45 +02:00
Jens Langhammer	3634bf4629	tests/integration: fix tests failing due to incorrect comparison Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-04 18:49:10 +02:00
Jens Langhammer	0692663537	stages/email: add activate_user_on_success flag, add for all example flows Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-04 18:47:51 +02:00
Jens Langhammer	b5649bdcc4	stages/user_login: add check for user.is_active and tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-04 18:37:05 +02:00
Jens Langhammer	fab9a10487	outposts: don't always build permissions on outpost.user access, only in signals and tasks Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-04 18:04:19 +02:00
Jens Langhammer	0f00b27384	events: add missing migration Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-04 17:51:31 +02:00
Steven Armstrong	ab5981836d	providers/ldap: use RDN when using posixGroup's memberUid attribute (#1514 ) Use the RDN instead of the FDN when establishing group memberships based on posixGroup's 'memberUid' attribute. fixes #1436 Signed-off-by: Steven Armstrong <steven@armstrong.cc>	2021-10-04 10:56:06 +02:00
Jens Langhammer	036a4e86e2	tests/integration: fix tests failing due to incorrect comparison Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 22:54:07 +02:00
Jens Langhammer	45f99fbaf0	outposts: fix circular import in kubernetes controller Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 19:25:26 +02:00
Jens Langhammer	83150d9920	outposts: fix circular import in kubernetes controller Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 19:25:18 +02:00
Jens Langhammer	e31a3307b5	providers/proxy: always check ingress secret in kubernetes controller Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 19:14:42 +02:00
Jens Langhammer	d28fcca344	outposts: check ports of deployment in kubernetes outpost controller Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 19:14:42 +02:00
Jens Langhammer	c296e1214c	web: fix package lock Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 19:14:37 +02:00
Jens Langhammer	d30dcda814	providers/proxy: always check ingress secret in kubernetes controller Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 19:14:27 +02:00
Jens Langhammer	c720c9f41b	outposts: check ports of deployment in kubernetes outpost controller Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 19:09:52 +02:00
Jens Langhammer	39d87841d0	outposts/proxy: add new headers with unified naming Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 18:20:44 +02:00
Jens Langhammer	b285814e24	sources/ldap: fix logic error in Active Directory account disabled status Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 18:19:07 +02:00
Jens Langhammer	1c52836060	web: fix package lock Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 01:17:41 +02:00
Jens Langhammer	8dd77793a0	sources/ldap: fix logic error in Active Directory account disabled status Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-03 00:30:35 +02:00
Jens Langhammer	3c1ac4c7ec	outposts/proxy: add new headers with unified naming Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-10-02 22:00:23 +02:00
Jens Langhammer	faca127217	Merge branch 'version-2021.9' Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> # Conflicts: # Pipfile.lock	2021-10-01 12:19:11 +02:00
Jens Langhammer	1a6ea72c09	release: 2021.9.4	2021-10-01 09:51:51 +02:00
Jens Langhammer	c251b87f8c	sources/ldap: add support for Active Directory `userAccountControl` attribute Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-30 19:34:43 +02:00
Jens Langhammer	21a9aa229a	sources/ldap: don't sync ldap source when no property mappings are set Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-30 19:34:43 +02:00
Jens Langhammer	53e15bfbca	sources/ldap: add support for Active Directory `userAccountControl` attribute Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-30 19:13:48 +02:00
Jens Langhammer	8bce16e6b4	sources/ldap: don't sync ldap source when no property mappings are set Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-30 18:49:18 +02:00
Jens Langhammer	10b45d954e	outposts: allow disabling of docker controller port mapping closes #1474 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-30 00:11:50 +02:00
Jens Langhammer	4cb8ae760a	outposts: allow disabling of docker controller port mapping closes #1474 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-29 23:55:22 +02:00
Jens L	f9ad102915	flows: inspector (#1469 ) * flows: add initial inspector Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * flows: change naming a bit Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/flow: add inspector frame Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * core: don't use shadydom when inspecting Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * flows: add current stage to api Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * stages/: fix imports Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> flows: deep-copy plan instead of just adding Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/flows: ui Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * flows: restrict inspector to admin Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/admin: add buttons to launch flow with inspector Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/flows: don't automatically follow redirects when inspector is open Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * flows: make current_plan optional, only require historry Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/flows: handle error messages in inspector Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/flows: improve UI when flow is done Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * flows: add is_completed flag to inspector Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * flows: fix monkeypatches for tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * flows: add inspector tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * ci: re-enable cache Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-28 09:36:48 +02:00
Jens Langhammer	941bc61b31	release: 2021.9.3	2021-09-27 17:31:50 +02:00
Jens Langhammer	282b364606	stages/prompt: fix inconsistent policy context for validation policies Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-27 17:05:26 +02:00
pemontto	674bd9e05c	web/admin: Fix typo 'username address' -> 'username' (#1473 )	2021-09-26 12:53:37 +02:00
Jens Langhammer	b248f450dd	outposts: make AUTHENTIK_HOST_BROWSER configurable from central config closes #1471 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-26 12:00:51 +02:00
pemontto	aea1736f70	outposts/proxy: Fix failing traefik healtcheck (#1470 )	2021-09-26 11:33:18 +02:00
Jens Langhammer	4f3583cd7e	providers/proxy: make token_validity float and optional for backwards compat Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-25 15:54:32 +02:00
Jens Langhammer	f7408626a8	providers/proxy: return token_validity as total seconds instead of expression Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-25 15:44:16 +02:00
Jens Langhammer	28eeb4798e	providers/proxy: add token_validity field for outpost configuration Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> #1462	2021-09-25 15:00:06 +02:00
Jens Langhammer	79b92e764e	*: fix typos in code Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-25 00:01:11 +02:00
Jens Langhammer	919336a519	outposts: ensure service is always re-created with mismatching ports Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-24 23:45:15 +02:00
Jens Langhammer	93bdea3769	core: fix api return code for user self-update Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-24 11:51:03 +02:00
Jens Langhammer	64b4e851ce	events: add additional validation for event transport Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-23 16:29:58 +02:00
Jens Langhammer	eddca478dc	release: 2021.9.2	2021-09-23 12:34:02 +02:00
Jens Langhammer	74169860cf	api: add logging to sentry proxy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-23 09:57:42 +02:00
Jens Langhammer	2fe6de0505	release: 2021.9.1	2021-09-22 19:11:20 +02:00
Jens Langhammer	ae07f13a87	outposts: don't map port 9300 on docker, only expose port Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-21 21:40:08 +02:00
Jens Langhammer	e6b275add3	stages/invitation: fix linting Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-20 20:41:05 +02:00
Jens Langhammer	27016a5527	stages/invitation: fix tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-20 20:30:51 +02:00
Jens Langhammer	4c29d517f0	stages/email: use different query arguments for email and invitation tokens Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-20 19:55:53 +02:00
Jens Langhammer	180d27cc37	outposts: don't restart container when health checks are starting Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-20 19:46:05 +02:00
Jens Langhammer	3195640776	stages/email: slugify token identifier Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-20 19:26:25 +02:00
Jens Langhammer	d900a2b6a9	*: fix lookup_fields Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-20 19:19:36 +02:00
Jens Langhammer	95a2fddfa8	policies/expression: add ak_user_has_authenticator Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-20 19:13:41 +02:00
Jens Langhammer	8f7d21b692	stages/email: don't throw 404 when token can't be found Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-20 19:01:25 +02:00
Jens Langhammer	3f84abec2f	core: fix token identifier not being slugified when created with user-controller input closes #1390 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-20 13:43:25 +02:00
Jens Langhammer	b5c857aff4	api: add explicit lookup_value_regex, disable include_format_suffixes Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-20 13:42:56 +02:00
Jens Langhammer	ac52667327	release: 2021.9.1-rc3	2021-09-19 21:52:49 +02:00
Jens Langhammer	f6e0f0282d	core: fix tokens not being viewable but superusers Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-19 16:11:20 +02:00
Jens Langhammer	3f42067a8f	web: improve display of action buttons with non-primary classes Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-19 15:57:12 +02:00
Jens Langhammer	ed6f5b98df	sources/ldap: improve messages of sync tasks in UI Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-19 15:54:22 +02:00
Jens Langhammer	c85484fc00	core: allow admins to create tokens with all parameters, re-add user to token form Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-19 15:25:48 +02:00
Jens Langhammer	8279690a8f	sources/ldap: prevent error when retrying old system task with no arguments Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-17 16:49:26 +02:00
Jens Langhammer	3d8d93ece5	root: log failed celery tasks to event log Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-17 12:42:42 +02:00
Jens Langhammer	06af306e8a	sources/ldap: bump timeout, run each sync component in its own task closes #1411 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-17 12:42:20 +02:00
dependabot[bot]	3e4ce62dfe	build(deps-dev): bump pylint from 2.10.2 to 2.11.1 (#1409 ) * build(deps-dev): bump pylint from 2.10.2 to 2.11.1 Bumps [pylint](https://github.com/PyCQA/pylint) from 2.10.2 to 2.11.1. - [Release notes](https://github.com/PyCQA/pylint/releases) - [Changelog](https://github.com/PyCQA/pylint/blob/main/ChangeLog) - [Commits](https://github.com/PyCQA/pylint/compare/v2.10.2...v2.11.1) --- updated-dependencies: - dependency-name: pylint dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * root: update pylint config Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-17 09:46:39 +02:00
Jens Langhammer	28189bdddf	release: 2021.9.1-rc2	2021-09-16 23:23:36 +02:00
Jens L	13e2eea72f	web/user: new end-user interface (#1404 ) * web/user: migrate to top navbar Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/user: prepare config from server Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * re-sort Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * remove old interface Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * update issue template Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * use notification badge Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/user: re-add go-to-admin button Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * : fix remaining redirects directly to admin Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> make settings better Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * api: ensure sources and stages are sorted Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/user: add sessions and consent Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * providers/oauth2: add post wrapper to stage Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * website/docs: add new interface to release notes Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-16 22:17:05 +02:00
Jens L	9441be1ee2	interface split (#943 )	2021-09-16 17:30:16 +02:00
Jens Langhammer	17503365f7	policies: improve error handling when using bindings without policy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-16 11:04:31 +02:00
Jens Langhammer	ebf9f0ca63	stages/email: don't crash when testing stage does not exist Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-16 11:04:08 +02:00
Jens Langhammer	ae26d2756f	providers/saml: improved error handling Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-16 10:58:51 +02:00
Jens Langhammer	124071f9be	root: remove python requirement from pipfile Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-16 10:37:43 +02:00
Jens Langhammer	341c58a722	core: fix token expiry for service accounts being only 30 minutes Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-16 09:57:34 +02:00
Jens Langhammer	bdd5e16db1	release: 2021.9.1-rc1	2021-09-15 20:20:54 +02:00
Jens Langhammer	d4672bfe79	events: log parsed query string instead of just full path Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-15 20:15:04 +02:00
Jens Langhammer	abd9fab41a	api: fix call of sentry proxy task Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-15 19:39:58 +02:00
Jens Langhammer	7c8bf42ef9	api: send proxied sentry events in background Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-15 19:12:20 +02:00
Jens Langhammer	274b555912	api: add timeout for sentry proxy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-15 18:59:27 +02:00
Jens Langhammer	916530f0d8	providers/oauth2: use access_code_validity for id_tokens generated when using an implicit flow, improve wording in web ui closes #1369 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-15 17:14:53 +02:00
Jens Langhammer	95efd47f65	root: remove asgi error handler Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-15 12:23:14 +02:00
Jens Langhammer	90ecb1af7f	outposts: fix service account's permissions being checked twice Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-15 09:55:27 +02:00
Jens Langhammer	d7fdca1b44	stages/email: fix error when retrying email delivery after stage has been deleted Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-15 09:50:11 +02:00
Denis Teyssier	37346763dc	sources/oauth: Updating token url to new google url (#1397 ) the present url goes to a 404 google openid (https://accounts.google.com/.well-known/openid-configuration) says the new url is `https://oauth2.googleapis.com/token` not using the new url makes authentik fallback on the default auth flow	2021-09-15 09:15:19 +02:00
Jens Langhammer	ef341dd405	stages/user_write: add option to add newly created users to a group Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-14 21:45:34 +02:00
Jens Langhammer	3ddf2d6f85	sources/oauth: fix type lookup for openid not matching Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-14 14:38:35 +02:00
Jens Langhammer	ba6849f29c	*: remove string.format() Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-14 12:06:47 +02:00
Jens Langhammer	942170f902	Revert "sources/oauth: fix access_token being sent as query param and not authorization header" This reverts commit `248f993541`.	2021-09-14 11:59:32 +02:00
Jens Langhammer	248f993541	sources/oauth: fix access_token being sent as query param and not authorization header Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-14 11:07:36 +02:00
Jens Langhammer	3a700a449a	sources/oauth: don't try to load azure AD user ID as UUID Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-14 09:33:44 +02:00
Jens Langhammer	23444f4df0	core: fix lint error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-13 18:19:28 +02:00
Jens Langhammer	71e68b498e	core: optimise groups api by removing member superuser status Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-13 18:06:37 +02:00
Jens Langhammer	fb267ee223	tenants: optimise db queries in middleware Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-13 17:54:37 +02:00
Jens Langhammer	a4b3519428	api: fix possible error in sentry proxy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-13 16:36:04 +02:00
Jens Langhammer	9a7fa39de4	events: allow setting a mapping for webhook transport to customise request payloads closes #1383 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-12 01:05:42 +02:00
Jens Langhammer	c779ad2e3b	*: use common user agent for all outgoing requests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-11 21:08:26 +02:00
Jens Langhammer	7e7ef289ba	admin: migrate to new update check, add option to disable update check Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-11 20:35:23 +02:00
Jens Langhammer	bf771f8b6c	release: 2021.8.5	2021-09-11 19:20:13 +02:00
Jens Langhammer	df4c8003b8	api: fix items of list fields having nullable set Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-10 18:15:59 +02:00
Jens Langhammer	39b365c6ae	sources/oauth: don't cancel flow when redirecting Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-10 16:36:10 +02:00
Jens Langhammer	e229eda96e	outposts/controllers/kubernetes: don't create service monitor for embedded outpost Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-10 15:59:39 +02:00
Jens Langhammer	4448145aa9	providers/proxy: use auth/traefik subpath Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-10 13:53:04 +02:00
Jens Langhammer	7dfbcdbb81	stages/authenticator_duo: add API to "import" devices from duo closes #1371 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-10 11:35:09 +02:00
Jens Langhammer	2862b4ecfb	core: remove ?v from static files Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>	2021-09-09 20:09:12 +02:00

... 11 12 13 14 15 ...

2795 commits