trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
7015 commits 95 branches 330 tags 336 MiB
Commit graph

701 commits

Author SHA1 Message Date
Jens L 13e2eea72f
web/user: new end-user interface (#1404) 
* web/user: migrate to top navbar

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: prepare config from server

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* re-sort

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove old interface

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update issue template

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* use notification badge

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: re-add go-to-admin button

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: fix remaining redirects directly to admin

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* make settings better

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: ensure sources and stages are sorted

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: add sessions and consent

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/oauth2: add post wrapper to stage

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: add new interface to release notes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-16 22:17:05 +02:00
Jens Langhammer 341c58a722 core: fix token expiry for service accounts being only 30 minutes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-16 09:57:34 +02:00
Jens Langhammer 916530f0d8 providers/oauth2: use access_code_validity for id_tokens generated when using an implicit flow, improve wording in web ui 
closes #1369

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 17:14:53 +02:00
Jens Langhammer ef341dd405 stages/user_write: add option to add newly created users to a group 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-14 21:45:34 +02:00
Jens Langhammer 5f28c7ace7 web: fix lint error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-14 14:44:57 +02:00
Jens Langhammer d96c96006f web/admin: open URLs group when urls are customisable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-14 14:38:52 +02:00
Jens Langhammer 56d40bddd0 web/admin: make token list more consistent 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-14 10:04:15 +02:00
Jens Langhammer 9a7fa39de4 events: allow setting a mapping for webhook transport to customise request payloads 
closes #1383

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-12 01:05:42 +02:00
Jens L 3c1b70c355
outposts/proxyv2 (#1365) 
* outposts/proxyv2: initial commit

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add rs256

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

more stuff

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add forward auth an sign_out

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

match cookie name

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

re-add support for rs256 for backwards compat

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add error handler

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

ensure unique user-agent is used

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

set cookie duration based on id_token expiry

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

build proxy v2

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add ssl

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add basic auth and custom header support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add application cert loading

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

implement whitelist

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add redis

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

migrate embedded outpost to v2

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

remove old proxy

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

providers/proxy: make token expiration configurable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

fix tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: only allow one redirect URI

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix docker build for proxy

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove default port offset

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add AUTHENTIK_HOST_BROWSER

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests: fix e2e/integration tests not using proper tags

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove references of old port

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix user_attributes not being loaded correctly

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup dependencies

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-08 18:04:56 +00:00
Jens Langhammer 3cf5794b96 web/admin: increase default expiry for refresh tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-08 00:12:18 +02:00
Jens Langhammer 7a12c0e4d1 web/admin: fix user selection in token form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-04 14:33:40 +02:00
Jens Langhammer 6b6748b1c7 web/admin: show applications instead of providers in outpost form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-03 10:43:21 +02:00
Jens Langhammer d5d1f2a645 web: show version in logs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-02 17:10:43 +02:00
Jens Langhammer 7d26ea1a9c web/admin: fix list of webauthn devices not updating after rename 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-01 19:05:18 +02:00
Jens Langhammer 88f0dfc8cc web/admin: fallback for invitation list on first load 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-01 13:33:05 +02:00
Jens Langhammer f82aada23b web/admin: fix flow executor not opening in new tab 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-01 13:19:09 +02:00
Jens Langhammer 1b8271d767 flows: disable compatibility_mode by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-30 17:18:43 +02:00
Jens Langhammer a016f99450 core: fix user_obj being empty on token API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-30 12:51:17 +02:00
Jens Langhammer 08e8cf850a web/flows: fix FlowExecutor not updating when challenge changes from outside 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-29 13:49:57 +02:00
Jens Langhammer 6237352e25 web/flows: fix checkboxes not being rendered correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-27 23:09:53 +02:00
Jens Langhammer 2ae164df78 *: cleanup api schema warnings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-26 09:36:41 +02:00
Jens Langhammer 78578c6c9d web/admin: allow admins to create tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-25 21:23:32 +02:00
Jens Langhammer 8022d0801d web/elements: add support for datetime-local 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-25 21:14:32 +02:00
Jens Langhammer 16cfa8cae2 web/admin: add ServiceAccount creation form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-24 20:13:08 +02:00
Jens Langhammer cc6d5765f2 web/admin: fix inconsistent ordering for ldap property mappings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-24 13:04:19 +02:00
Jens Langhammer b2f077645a web: fix lint error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 18:38:35 +02:00
Jens Langhammer 5face5410f web/admin: select all password stage backends by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 18:08:29 +02:00
Jens Langhammer a9af40f85c web/admin: improve delete modal for stage bindings and policy bindings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 17:46:51 +02:00
Jens Langhammer 07a4f474f4 website/docs: add docs for auth_method and auth_method_args fields 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 17:23:55 +02:00
Jens Langhammer 00e9b91f56 web/admin: fix missing app passwords backend 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 16:47:38 +02:00
Jens Langhammer c4832206fa web/admin: display token's intents 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 16:33:12 +02:00
Jens Langhammer f217d34a98 web/admin: allow users to create app password tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 16:27:39 +02:00
Jens Langhammer 32d80829e2 web/admin: show system status first 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 15:25:35 +02:00
Jens Langhammer b74681f22c Merge branch 'master' into publish-api-to-npm 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	web/package-lock.json
#	web/src/pages/sources/oauth/OAuthSourceForm.ts
 2021-08-23 09:40:52 +02:00
Jens Langhammer 33d5cd2973 web: add notice for Certificate for LDAP Provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-21 18:48:02 +02:00
Jens Langhammer 3e909ae6bb core: allow filtering users by the groups they are in 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-21 16:27:48 +02:00
Jens Langhammer 673520c9f8 web: fix OAuthSource not setting providerType 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-21 16:08:50 +02:00
Jens Langhammer b4f738492d sources/oauth: improve UI with prefilled urls (when customizable) and hiding provider type 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-21 15:52:41 +02:00
Jens Langhammer 495b068be5 web: add plex connection deletion support 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-17 13:02:40 +02:00
Jens Langhammer 84c4547005 sources/plex: add API for user connections 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-17 13:02:40 +02:00
Jens Langhammer bd9cd086a0 Merge branch 'master' into publish-api-to-npm 2021-08-16 17:29:36 +02:00
Jens Langhammer a6b1ee949d web: fix mis-matched height of application cards 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-16 11:33:12 +02:00
Jens Langhammer 14fb0c3d61 web: cleanup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-15 22:18:03 +02:00
Jens Langhammer 1d4b941a3b web: migrate to @goauthentik/api 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-15 21:32:28 +02:00
Jens Langhammer 0a6efab7cb outposts: fix syntax 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-15 20:59:37 +02:00
George V 700c66f312
web/library: Updated applications card display (#1257) 2021-08-15 20:19:50 +02:00
Jens Langhammer 06badf88b2 web: fix missing import 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-15 18:14:02 +02:00
Jens Langhammer 051016f613 web: fix missing app description 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-15 18:09:48 +02:00
Jens Langhammer d1403f6f7d web: implement bulk-delete form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-12 23:21:29 +02:00
Jens Langhammer 9430a2eea2 web/elements: add bulk delete form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-12 21:42:52 +02:00
Jens Langhammer 2592fc3826 sources/ldap: allow for anonymous binds, fix sync_users_password not working correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-12 19:09:29 +02:00
Jens Langhammer 0f5e0a774a web/admin: fix ScopeMapping requiring description 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-10 23:33:27 +02:00
Jens Langhammer 7db3be604c web/admin: allow modification of users groups from user view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-10 21:27:41 +02:00
Jens Langhammer de9d483b9f admin: add API to show embedded outpost status, add notice when its not configured properly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-10 19:16:11 +02:00
Jens Langhammer 557724768a core: add API to directly send recovery link to user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-10 13:54:59 +02:00
Jens Langhammer 68608087ec web: fix class for propertymapping test button 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-10 12:46:50 +02:00
Jens Langhammer a9ef1a3190 web/admin: link build hash when set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-08 16:57:27 +02:00
Jens Langhammer c5976de500 web/admin: fix UI inconsistency 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-08 15:18:32 +02:00
Jens Langhammer f21bb319d0 web/admin: fix Outpost's detailed health not being shown in columns 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-08 14:04:50 +02:00
Jens Langhammer 260f0b8710 web: fix width for ViewPages 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-08 13:19:13 +02:00
Jens Langhammer 787f5a1e96 website/docs: prepare next release notes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-07 22:38:26 +02:00
Jens Langhammer b36a3100e6 outposts: allow empty provider list for embedded provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-07 22:32:44 +02:00
Jens Langhammer 3eafa4711e web: fix lint errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-07 21:43:04 +02:00
Jens Langhammer 1693118df7 web/admin: cleanup display of outpost health 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-07 21:11:28 +02:00
Jens Langhammer 2d5094fdf7 root: fix formatting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-06 00:11:24 +02:00
Jens Langhammer 9703e32c1b web: migrate gallery to grid 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 23:13:55 +02:00
Jens Langhammer f28bfdaeb9 web: fix minor styling issues 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 22:04:45 +02:00
Jens Langhammer fdd8e66b91 web: add API Drawer 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 22:04:31 +02:00
Jens Langhammer 667ccbe00e web/admin: fix source form's userMatchingMode being swapped 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 18:45:24 +02:00
Jens Langhammer 6fe5175f21 core: add UserSelfSerializer and separate method for users to update themselves with limited fields 
rework user settings page to better use form
closes #1227

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 17:42:19 +02:00
Jens Langhammer 90775d5122 web/admin: fix email being required 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 14:50:32 +02:00
Jens Langhammer e52390aa28 web: fix alignment issues in application list page 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 14:14:39 +02:00
Jens Langhammer fea493f3a0 web/admin: fix table width for policies for bound stages 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 13:47:23 +02:00
Jens Langhammer 5803575ee2 web/admin: fix launch button on app list 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 13:47:13 +02:00
Jens Langhammer 1a17ce24f9 web: use single delete button with checkbox and icon-based action buttons 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 12:30:43 +02:00
Jens Langhammer ddd5047cc3 web: better label table actions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 10:40:44 +02:00
Jens Langhammer 919946609d web/elements: add separate flag for chips when checkboxes are enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 10:16:13 +02:00
Jens Langhammer 04486d65dc web: fully re-label service connection to integration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-04 00:18:15 +02:00
Jens Langhammer 9d392931df root: fix lint errors from re-format 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-03 18:09:16 +02:00
Jens Langhammer 2c60ec50be web: re-format with prettier 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-03 17:52:21 +02:00
Jens Langhammer 96d7a5a27f web/admin: fix empty column when no invitation expiry was set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-01 12:44:10 +02:00
Jens Langhammer ac77291b6d web/admin: add re-authenticate button for plex 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1205
 2021-08-01 11:47:39 +02:00
Jens Langhammer 5571aa32b6 web/admin: add UI to copy invitation link 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-01 11:47:22 +02:00
Jens Langhammer f9382b8458 web/admin: fix embedded outpost showing version 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-31 14:59:16 +02:00
Jens Langhammer 8bb57a1283 web/admin: re-name service connection to integration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-31 13:48:26 +02:00
Jens L f01bc20d44
Embedded outpost (#1193) 
* api: allow API requests as managed outpost's account when using secret_key

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: load secret key from env

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: make listener IP configurable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost/proxy: run outpost in background and pass requests conditionally

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: unify branding to embedded

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix embedded outpost not being editable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix mismatched host detection

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: fix LDAP test not including user for embedded outpost

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: fix user matching

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: add tests for secret_key auth

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: load environment variables using github.com/Netflix/go-env

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-29 11:30:30 +02:00
Jens Langhammer 9c0f7e0018 web/admin: fix LDAP Provider bind flow list being empty 
closes #1192

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-28 21:01:10 +02:00
Jens Langhammer 577aa7ba79 web/admin: add status card for https and timedrift 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-26 19:58:26 +02:00
Jens Langhammer 64c8ca9b5d web/admin: default to authentication flow for LDAP provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-26 18:47:59 +02:00
Jens Langhammer 5552e0ffa7 web/admin: add notice for event_retention 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-26 18:47:46 +02:00
Jens Langhammer 0587ab26e8 web/admin: fix ApplicationView's CheckAccess not sending UserID correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-25 21:03:32 +02:00
Jens Langhammer 1972464a20 tenants: make event retention configurable on tenant level 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-24 20:07:12 +02:00
Jens Langhammer 464c27ef17 web: improve UI for event actions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-23 22:27:51 +02:00
Jens Langhammer 7f25b6311d web/admin: fix negative count for policies when more cached than total policies 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-22 00:01:28 +02:00
Jens Langhammer 902378af53 providers/oauth2: fix redirect_uris not having blank set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-21 00:22:09 +02:00
Jens Langhammer 6f98833150 core: allow users to create non-expiring tokens when flag is set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-14 21:15:14 +02:00
Lukas Söder 7f39399c32
providers/ldap: Added auto-generated uidNumber and guidNumber generated attributes for use with SSSD and similar software. (#1138) 
* Added auto-generated uidNumber and guidNumber generated attributes for
use with SSSD and similar software.

The starting number for uid/gid can be configured iva environtment
variables and is by default 2000 which should work fine for most instances unless there are more than
999 local accounts on the server/computer.

The uidNumber is just the users Pk + the starting number.
The guidNumber is calculated by the last couple of bytes in the uuid of
the group + the starting number, this should have a low enough chance
for collisions that it's going to be fine for most use cases.

I have not added any interface stuff for configuring the environment variables as I couldn't really find my way around all the places I'd have to edit to add it and the default values should in my opinion be fine for 99% use cases.

* Add a 'fake' primary group for each user

* First attempt att adding config to interface

* Updated API to support new fields

* Refactor code, update documentation and remove obsolete comment

Simplify `GetRIDForGroup`, was a bit overcomplicated before.

Add an additional class/struct `LDAPGroup` which is the new argument
for `pi.GroupEntry` and util functions to create `LDAPGroup` from api.Group and api.User

Add proper support in the interface for changing gidNumber and uidNumber starting points

* make lint-fix for the migration files
 2021-07-14 09:17:01 +02:00
Jens L 7dfc621ae4
LDAP Provider: TLS support (#1137) 2021-07-13 18:24:18 +02:00
Jens Langhammer 90fe1c2ce8 providers/oauth2: allow blank redirect_uris to allow any redirect_uri 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-08 19:28:35 +02:00
Jens Langhammer abed254ca1 web/admin: make table dispatch refresh event on refresh button instead of just fetching 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-05 09:48:14 +02:00