trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
This repository has been archived on 2024-05-31. You can view files and clone it, but cannot push or open issues or pull requests.
authentik/website/docs/releases/2022/v2022.4.md

2.9 KiB
Raw Blame History

title slug
Release 2022.4 /releases/2022.4

Breaking changes

  • Removal of HTTP Basic authentication for API requests

    For legacy reasons, authentik used to support HTTP-Basic authenticated requests, using the token as a password. This has been removed.

  • Removal of deprecated context in Expression policies used in prompt stages

    Before this version, you could use both context['*field_name*'] and context['prompt_data']['*field_name*']. The former one has been removed as it could overwrite other data in the context if the field name is the same as another context value.

  • Added name field for invitations

    Invitations now require a name, used to better identify their purpose.

New features

  • Application Grouping

    Applications can now be grouped together to better organise connected applications in the user dashboard.

  • JWT authentication for client_credentials grants

    Providers can now be configured to accept JWTs signed by configured certificates, which makes it a lot easier to services access to authentik, when an existing machine/service identity is provided (for example, this can be used to let Kubernetes Pods authenticate themselves to authentik via their service account)

Minor changes/fixes

  • core: add method to set key of token
  • core: add num_pk to group for applications that need a numerical group id
  • internal: disable HTML encoding in go-generated log messages
  • lifecycle: fix password and hostname in redis URI not properly quoted
  • outposts: check if docker ports should be mapped before comparing ports
  • policies: add policy log messages to test endpoints
  • providers/oauth2: map internal groups to GitHub teams in GHE OAuth emulation (#2497)
  • providers/oauth2: pass scope and other parameters to access policy request context
  • stages/email: allow overriding of destination email in plan context
  • stages/invitation: add invitation name
  • stages/prompt: filter rest_framework.fields.empty when field is not required
  • stages/prompt: fix non-required fields not allowing blank values
  • stages/prompt: set field default based on placeholder
  • tenants: add tenant-level attributes, applied to users based on request
  • web: live-convert to slug in fields where only slugs are allowed
  • web: migrate dropdowns to wizards (#2633)
  • web/admin: allow editing of invitations
  • web/admin: fix missing protocols on generated nginx config
  • web/admin: trigger update when provider wizard finishes
  • web/user: add column layouts

Upgrading

This release does not introduce any new requirements.

docker-compose

Download the docker-compose file for 2022.4 from here. Afterwards, simply run docker-compose up -d.

Kubernetes

Update your values to use the new images:

image:
    repository: ghcr.io/goauthentik/server
    tag: 2022.4.1