Merge branch 'main' into web/sidebar-with-live-content

* main: (23 commits) web: bump API Client version (#7513) web: bump the sentry group in /web with 2 updates (#7500) core: bump pytest-django from 4.6.0 to 4.7.0 (#7497) core: bump black from 23.10.1 to 23.11.0 (#7498) core: bump ruff from 0.1.4 to 0.1.5 (#7499) core: bump golang.org/x/oauth2 from 0.13.0 to 0.14.0 (#7501) web: bump the wdio group in /tests/wdio with 3 updates (#7502) release: 2023.10.3 ci: fix permissions for release pipeline to publish binaries (#7512) website/docs: update release notes for 2023.10.3 core: fix worker beat toggle inverted (#7508) website/docs: update release notes for 2023.10.3 website/docs: fix anchor link (#7492) consistent variable name add more tooltips and add device authn/authz fix wrong color events: fix gdpr compliance always running website/docs: Fix a small grammar issue (#7490) core: bump golang from 1.21.3-bookworm to 1.21.4-bookworm web: bump pyright from 1.1.334 to 1.1.335 in /web ...
2023-11-09 13:17:58 -08:00 · 2023-11-09 13:17:58 -08:00 · 2545815f08
parent 19e8b675ae ba8fd9fcb2
commit 2545815f08
31 changed files with 295 additions and 214 deletions
--- a/.bumpversion.cfg
+++ b/.bumpversion.cfg
@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 2023.10.2
+current_version = 2023.10.3
 tag = True
 commit = True
 parse = (?P<major>\d+)\.(?P<minor>\d+)\.(?P<patch>\d+)
--- a/.github/workflows/ci-main.yml
+++ b/.github/workflows/ci-main.yml
@ -187,6 +187,7 @@ jobs:
    needs: ci-core-mark
    runs-on: ubuntu-latest
    permissions:
+      # Needed to upload contianer images to ghcr.io
      packages: write
    timeout-minutes: 120
    steps:
@ -239,6 +240,7 @@ jobs:
    needs: ci-core-mark
    runs-on: ubuntu-latest
    permissions:
+      # Needed to upload contianer images to ghcr.io
      packages: write
    timeout-minutes: 120
    steps:
--- a/.github/workflows/ci-outpost.yml
+++ b/.github/workflows/ci-outpost.yml
@ -67,6 +67,7 @@ jobs:
          - radius
    runs-on: ubuntu-latest
    permissions:
+      # Needed to upload contianer images to ghcr.io
      packages: write
    steps:
      - uses: actions/checkout@v4
--- a/.github/workflows/release-next-branch.yml
+++ b/.github/workflows/release-next-branch.yml
@ -6,6 +6,7 @@ on:
  workflow_dispatch:

 permissions:
+  # Needed to be able to push to the next branch
  contents: write

 jobs:
--- a/.github/workflows/release-publish.yml
+++ b/.github/workflows/release-publish.yml
@ -8,6 +8,7 @@ jobs:
  build-server:
    runs-on: ubuntu-latest
    permissions:
+      # Needed to upload contianer images to ghcr.io
      packages: write
    steps:
      - uses: actions/checkout@v4
@ -55,6 +56,7 @@ jobs:
  build-outpost:
    runs-on: ubuntu-latest
    permissions:
+      # Needed to upload contianer images to ghcr.io
      packages: write
    strategy:
      fail-fast: false
@ -110,6 +112,9 @@ jobs:
  build-outpost-binary:
    timeout-minutes: 120
    runs-on: ubuntu-latest
+    permissions:
+      # Needed to upload binaries to the release
+      contents: write
    strategy:
      fail-fast: false
      matrix:
--- a/.github/workflows/repo-stale.yml
+++ b/.github/workflows/repo-stale.yml
@ -6,8 +6,8 @@ on:
  workflow_dispatch:

 permissions:
+  # Needed to update issues and PRs
  issues: write
-  pull-requests: write

 jobs:
  stale:
--- a/2
+++ b/2
@ -35,7 +35,7 @@ COPY ./gen-ts-api /work/web/node_modules/@goauthentik/api
 RUN npm run build

 # Stage 3: Build go proxy
-FROM --platform=${BUILDPLATFORM} docker.io/golang:1.21.3-bookworm AS go-builder
+FROM --platform=${BUILDPLATFORM} docker.io/golang:1.21.4-bookworm AS go-builder

 ARG TARGETOS
 ARG TARGETARCH
--- a/authentik/init.py
+++ b/authentik/init.py
@ -2,7 +2,7 @@
 from os import environ
 from typing import Optional

-__version__ = "2023.10.2"
+__version__ = "2023.10.3"
 ENV_GIT_HASH_KEY = "GIT_BUILD_HASH"


--- a/authentik/core/management/commands/worker.py
+++ b/authentik/core/management/commands/worker.py
@ -17,9 +17,15 @@ class Command(BaseCommand):
    """Run worker"""

    def add_arguments(self, parser):
-        parser.add_argument("-b", "--beat", action="store_true")
+        parser.add_argument(
+            "-b",
+            "--beat",
+            action="store_false",
+            help="When set, this worker will _not_ run Beat (scheduled) tasks",
+        )

    def handle(self, **options):
+        LOGGER.debug("Celery options", **options)
        close_old_connections()
        if CONFIG.get_bool("remote_debug"):
            import debugpy
--- a/authentik/events/signals.py
+++ b/authentik/events/signals.py
@ -13,6 +13,7 @@ from authentik.events.tasks import event_notification_handler, gdpr_cleanup
 from authentik.flows.models import Stage
 from authentik.flows.planner import PLAN_CONTEXT_SOURCE, FlowPlan
 from authentik.flows.views.executor import SESSION_KEY_PLAN
+from authentik.lib.config import CONFIG
 from authentik.stages.invitation.models import Invitation
 from authentik.stages.invitation.signals import invitation_used
 from authentik.stages.password.stage import PLAN_CONTEXT_METHOD, PLAN_CONTEXT_METHOD_ARGS
@ -92,4 +93,5 @@ def event_post_save_notification(sender, instance: Event, **_):
@receiver(pre_delete, sender=User)
 def event_user_pre_delete_cleanup(sender, instance: User, **_):
    """If gdpr_compliance is enabled, remove all the user's events"""
+    if CONFIG.get_bool("gdpr_compliance", True):
        gdpr_cleanup.delay(instance.pk)
--- a/docker-compose.yml
+++ b/docker-compose.yml
@ -32,7 +32,7 @@ services:
    volumes:
      - redis:/data
  server:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.2}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.3}
    restart: unless-stopped
    command: server
    environment:
@ -53,7 +53,7 @@ services:
      - postgresql
      - redis
  worker:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.2}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.3}
    restart: unless-stopped
    command: worker
    environment:
--- a/go.mod
+++ b/go.mod
@ -29,7 +29,7 @@ require (
 	github.com/stretchr/testify v1.8.4
 	goauthentik.io/api/v3 v3.2023102.1
 	golang.org/x/exp v0.0.0-20230210204819-062eb4c674ab
-	golang.org/x/oauth2 v0.13.0
+	golang.org/x/oauth2 v0.14.0
 	golang.org/x/sync v0.5.0
 	gopkg.in/yaml.v2 v2.4.0
 	layeh.com/radius v0.0.0-20210819152912-ad72663a72ab
@ -72,10 +72,10 @@ require (
 	go.mongodb.org/mongo-driver v1.11.3 // indirect
 	go.opentelemetry.io/otel v1.14.0 // indirect
 	go.opentelemetry.io/otel/trace v1.14.0 // indirect
-	golang.org/x/crypto v0.14.0 // indirect
-	golang.org/x/net v0.17.0 // indirect
-	golang.org/x/sys v0.13.0 // indirect
-	golang.org/x/text v0.13.0 // indirect
+	golang.org/x/crypto v0.15.0 // indirect
+	golang.org/x/net v0.18.0 // indirect
+	golang.org/x/sys v0.14.0 // indirect
+	golang.org/x/text v0.14.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
 	google.golang.org/protobuf v1.31.0 // indirect
 	gopkg.in/square/go-jose.v2 v2.5.1 // indirect
--- a/go.sum
+++ b/go.sum
@ -372,8 +372,8 @@ golang.org/x/crypto v0.0.0-20200709230013-948cd5f35899/go.mod h1:LzIPMQfyMNhhGPh
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.13.0/go.mod h1:y6Z2r+Rw4iayiXXAIxJIDAJ1zMW4yaTpebo8fPOliYc=
-golang.org/x/crypto v0.14.0 h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=
-golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=
+golang.org/x/crypto v0.15.0 h1:frVn1TEaCEaZcn3Tmd7Y2b5KKPaZ+I32Q2OA3kYp5TA=
+golang.org/x/crypto v0.15.0/go.mod h1:4ChreQoLWfG3xLDer1WdlH5NdlQ3+mwnQq1YTKY+72g=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@ -440,16 +440,16 @@ golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qx
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
-golang.org/x/net v0.17.0 h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=
-golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
+golang.org/x/net v0.18.0 h1:mIYleuAkSbHh0tCv7RvjL3F6ZVbLjq4+R7zbOn3Kokg=
+golang.org/x/net v0.18.0/go.mod h1:/czyP5RqHAH4odGYxBJ1qz0+CE5WZ+2j1YgoEo8F2jQ=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20191202225959-858c2ad4c8b6/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20210218202405-ba52d332ba99/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A=
-golang.org/x/oauth2 v0.13.0 h1:jDDenyj+WgFtmV3zYVoi8aE2BwtXFLWOA67ZfNWftiY=
-golang.org/x/oauth2 v0.13.0/go.mod h1:/JMhi4ZRXAf4HG9LiNmxvk+45+96RUlVThiH8FzNBn0=
+golang.org/x/oauth2 v0.14.0 h1:P0Vrf/2538nmC0H+pEQ3MNFRRnVR7RlqyVw+bvm26z0=
+golang.org/x/oauth2 v0.14.0/go.mod h1:lAtNWgaWfL4cm7j2OV8TxGi9Qb7ECORx8DktCY74OwM=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@ -504,8 +504,8 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.13.0 h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=
-golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.14.0 h1:Vz7Qs629MkJkGyHxUlRHizWJRG2j8fbQKjELVSNhy7Q=
+golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
@ -521,8 +521,9 @@ golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
-golang.org/x/text v0.13.0 h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=
 golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
+golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
+golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
--- a/internal/constants/constants.go
+++ b/internal/constants/constants.go
@ -29,4 +29,4 @@ func UserAgent() string {
 	return fmt.Sprintf("authentik@%s", FullVersion())
 }

-const VERSION = "2023.10.2"
+const VERSION = "2023.10.3"
--- a/ldap.Dockerfile
+++ b/ldap.Dockerfile
@ -1,5 +1,5 @@
 # Stage 1: Build
-FROM --platform=${BUILDPLATFORM} docker.io/golang:1.21.3-bookworm AS builder
+FROM --platform=${BUILDPLATFORM} docker.io/golang:1.21.4-bookworm AS builder

 ARG TARGETOS
 ARG TARGETARCH
--- a/poetry.lock
+++ b/poetry.lock
@ -433,29 +433,29 @@ files = [

 [[package]]
 name = "black"
-version = "23.10.1"
+version = "23.11.0"
 description = "The uncompromising code formatter."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "black-23.10.1-cp310-cp310-macosx_10_16_arm64.whl", hash = "sha256:ec3f8e6234c4e46ff9e16d9ae96f4ef69fa328bb4ad08198c8cee45bb1f08c69"},
-    {file = "black-23.10.1-cp310-cp310-macosx_10_16_x86_64.whl", hash = "sha256:1b917a2aa020ca600483a7b340c165970b26e9029067f019e3755b56e8dd5916"},
-    {file = "black-23.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:9c74de4c77b849e6359c6f01987e94873c707098322b91490d24296f66d067dc"},
-    {file = "black-23.10.1-cp310-cp310-win_amd64.whl", hash = "sha256:7b4d10b0f016616a0d93d24a448100adf1699712fb7a4efd0e2c32bbb219b173"},
-    {file = "black-23.10.1-cp311-cp311-macosx_10_16_arm64.whl", hash = "sha256:b15b75fc53a2fbcac8a87d3e20f69874d161beef13954747e053bca7a1ce53a0"},
-    {file = "black-23.10.1-cp311-cp311-macosx_10_16_x86_64.whl", hash = "sha256:e293e4c2f4a992b980032bbd62df07c1bcff82d6964d6c9496f2cd726e246ace"},
-    {file = "black-23.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:7d56124b7a61d092cb52cce34182a5280e160e6aff3137172a68c2c2c4b76bcb"},
-    {file = "black-23.10.1-cp311-cp311-win_amd64.whl", hash = "sha256:3f157a8945a7b2d424da3335f7ace89c14a3b0625e6593d21139c2d8214d55ce"},
-    {file = "black-23.10.1-cp38-cp38-macosx_10_16_arm64.whl", hash = "sha256:cfcce6f0a384d0da692119f2d72d79ed07c7159879d0bb1bb32d2e443382bf3a"},
-    {file = "black-23.10.1-cp38-cp38-macosx_10_16_x86_64.whl", hash = "sha256:33d40f5b06be80c1bbce17b173cda17994fbad096ce60eb22054da021bf933d1"},
-    {file = "black-23.10.1-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:840015166dbdfbc47992871325799fd2dc0dcf9395e401ada6d88fe11498abad"},
-    {file = "black-23.10.1-cp38-cp38-win_amd64.whl", hash = "sha256:037e9b4664cafda5f025a1728c50a9e9aedb99a759c89f760bd83730e76ba884"},
-    {file = "black-23.10.1-cp39-cp39-macosx_10_16_arm64.whl", hash = "sha256:7cb5936e686e782fddb1c73f8aa6f459e1ad38a6a7b0e54b403f1f05a1507ee9"},
-    {file = "black-23.10.1-cp39-cp39-macosx_10_16_x86_64.whl", hash = "sha256:7670242e90dc129c539e9ca17665e39a146a761e681805c54fbd86015c7c84f7"},
-    {file = "black-23.10.1-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:5ed45ac9a613fb52dad3b61c8dea2ec9510bf3108d4db88422bacc7d1ba1243d"},
-    {file = "black-23.10.1-cp39-cp39-win_amd64.whl", hash = "sha256:6d23d7822140e3fef190734216cefb262521789367fbdc0b3f22af6744058982"},
-    {file = "black-23.10.1-py3-none-any.whl", hash = "sha256:d431e6739f727bb2e0495df64a6c7a5310758e87505f5f8cde9ff6c0f2d7e4fe"},
-    {file = "black-23.10.1.tar.gz", hash = "sha256:1f8ce316753428ff68749c65a5f7844631aa18c8679dfd3ca9dc1a289979c258"},
+    {file = "black-23.11.0-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:dbea0bb8575c6b6303cc65017b46351dc5953eea5c0a59d7b7e3a2d2f433a911"},
+    {file = "black-23.11.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:412f56bab20ac85927f3a959230331de5614aecda1ede14b373083f62ec24e6f"},
+    {file = "black-23.11.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:d136ef5b418c81660ad847efe0e55c58c8208b77a57a28a503a5f345ccf01394"},
+    {file = "black-23.11.0-cp310-cp310-win_amd64.whl", hash = "sha256:6c1cac07e64433f646a9a838cdc00c9768b3c362805afc3fce341af0e6a9ae9f"},
+    {file = "black-23.11.0-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:cf57719e581cfd48c4efe28543fea3d139c6b6f1238b3f0102a9c73992cbb479"},
+    {file = "black-23.11.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:698c1e0d5c43354ec5d6f4d914d0d553a9ada56c85415700b81dc90125aac244"},
+    {file = "black-23.11.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:760415ccc20f9e8747084169110ef75d545f3b0932ee21368f63ac0fee86b221"},
+    {file = "black-23.11.0-cp311-cp311-win_amd64.whl", hash = "sha256:58e5f4d08a205b11800332920e285bd25e1a75c54953e05502052738fe16b3b5"},
+    {file = "black-23.11.0-cp38-cp38-macosx_10_9_x86_64.whl", hash = "sha256:45aa1d4675964946e53ab81aeec7a37613c1cb71647b5394779e6efb79d6d187"},
+    {file = "black-23.11.0-cp38-cp38-macosx_11_0_arm64.whl", hash = "sha256:4c44b7211a3a0570cc097e81135faa5f261264f4dfaa22bd5ee2875a4e773bd6"},
+    {file = "black-23.11.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:2a9acad1451632021ee0d146c8765782a0c3846e0e0ea46659d7c4f89d9b212b"},
+    {file = "black-23.11.0-cp38-cp38-win_amd64.whl", hash = "sha256:fc7f6a44d52747e65a02558e1d807c82df1d66ffa80a601862040a43ec2e3142"},
+    {file = "black-23.11.0-cp39-cp39-macosx_10_9_x86_64.whl", hash = "sha256:7f622b6822f02bfaf2a5cd31fdb7cd86fcf33dab6ced5185c35f5db98260b055"},
+    {file = "black-23.11.0-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:250d7e60f323fcfc8ea6c800d5eba12f7967400eb6c2d21ae85ad31c204fb1f4"},
+    {file = "black-23.11.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:5133f5507007ba08d8b7b263c7aa0f931af5ba88a29beacc4b2dc23fcefe9c06"},
+    {file = "black-23.11.0-cp39-cp39-win_amd64.whl", hash = "sha256:421f3e44aa67138ab1b9bfbc22ee3780b22fa5b291e4db8ab7eee95200726b07"},
+    {file = "black-23.11.0-py3-none-any.whl", hash = "sha256:54caaa703227c6e0c87b76326d0862184729a69b73d3b7305b6288e1d830067e"},
+    {file = "black-23.11.0.tar.gz", hash = "sha256:4c68855825ff432d197229846f971bc4d6666ce90492e5b02013bcaca4d9ab05"},
 ]

 [package.dependencies]
@ -2978,13 +2978,13 @@ testing = ["argcomplete", "attrs (>=19.2.0)", "hypothesis (>=3.56)", "mock", "no

 [[package]]
 name = "pytest-django"
-version = "4.6.0"
+version = "4.7.0"
 description = "A Django plugin for pytest."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "pytest-django-4.6.0.tar.gz", hash = "sha256:ebc12a64f822a1284a281caf434d693f96bff69a9b09c677f538ecaa2f470b37"},
-    {file = "pytest_django-4.6.0-py3-none-any.whl", hash = "sha256:7e90a183dec8c715714864e5dc8da99bb219502d437a9769a3c9e524af57e43a"},
+    {file = "pytest-django-4.7.0.tar.gz", hash = "sha256:92d6fd46b1d79b54fb6b060bbb39428073396cec717d5f2e122a990d4b6aa5e8"},
+    {file = "pytest_django-4.7.0-py3-none-any.whl", hash = "sha256:4e1c79d5261ade2dd58d91208017cd8f62cb4710b56e012ecd361d15d5d662a2"},
 ]

 [package.dependencies]
@ -3374,28 +3374,28 @@ pyasn1 = ">=0.1.3"

 [[package]]
 name = "ruff"
-version = "0.1.4"
+version = "0.1.5"
 description = "An extremely fast Python linter and code formatter, written in Rust."
 optional = false
 python-versions = ">=3.7"
 files = [
-    {file = "ruff-0.1.4-py3-none-macosx_10_7_x86_64.whl", hash = "sha256:864958706b669cce31d629902175138ad8a069d99ca53514611521f532d91495"},
-    {file = "ruff-0.1.4-py3-none-macosx_10_9_x86_64.macosx_11_0_arm64.macosx_10_9_universal2.whl", hash = "sha256:9fdd61883bb34317c788af87f4cd75dfee3a73f5ded714b77ba928e418d6e39e"},
-    {file = "ruff-0.1.4-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:b4eaca8c9cc39aa7f0f0d7b8fe24ecb51232d1bb620fc4441a61161be4a17539"},
-    {file = "ruff-0.1.4-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:a9a1301dc43cbf633fb603242bccd0aaa34834750a14a4c1817e2e5c8d60de17"},
-    {file = "ruff-0.1.4-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:78e8db8ab6f100f02e28b3d713270c857d370b8d61871d5c7d1702ae411df683"},
-    {file = "ruff-0.1.4-py3-none-manylinux_2_17_ppc64.manylinux2014_ppc64.whl", hash = "sha256:80fea754eaae06335784b8ea053d6eb8e9aac75359ebddd6fee0858e87c8d510"},
-    {file = "ruff-0.1.4-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:6bc02a480d4bfffd163a723698da15d1a9aec2fced4c06f2a753f87f4ce6969c"},
-    {file = "ruff-0.1.4-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:9862811b403063765b03e716dac0fda8fdbe78b675cd947ed5873506448acea4"},
-    {file = "ruff-0.1.4-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:58826efb8b3efbb59bb306f4b19640b7e366967a31c049d49311d9eb3a4c60cb"},
-    {file = "ruff-0.1.4-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:fdfd453fc91d9d86d6aaa33b1bafa69d114cf7421057868f0b79104079d3e66e"},
-    {file = "ruff-0.1.4-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:e8791482d508bd0b36c76481ad3117987301b86072158bdb69d796503e1c84a8"},
-    {file = "ruff-0.1.4-py3-none-musllinux_1_2_i686.whl", hash = "sha256:01206e361021426e3c1b7fba06ddcb20dbc5037d64f6841e5f2b21084dc51800"},
-    {file = "ruff-0.1.4-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:645591a613a42cb7e5c2b667cbefd3877b21e0252b59272ba7212c3d35a5819f"},
-    {file = "ruff-0.1.4-py3-none-win32.whl", hash = "sha256:99908ca2b3b85bffe7e1414275d004917d1e0dfc99d497ccd2ecd19ad115fd0d"},
-    {file = "ruff-0.1.4-py3-none-win_amd64.whl", hash = "sha256:1dfd6bf8f6ad0a4ac99333f437e0ec168989adc5d837ecd38ddb2cc4a2e3db8a"},
-    {file = "ruff-0.1.4-py3-none-win_arm64.whl", hash = "sha256:d98ae9ebf56444e18a3e3652b3383204748f73e247dea6caaf8b52d37e6b32da"},
-    {file = "ruff-0.1.4.tar.gz", hash = "sha256:21520ecca4cc555162068d87c747b8f95e1e95f8ecfcbbe59e8dd00710586315"},
+    {file = "ruff-0.1.5-py3-none-macosx_10_7_x86_64.whl", hash = "sha256:32d47fc69261c21a4c48916f16ca272bf2f273eb635d91c65d5cd548bf1f3d96"},
+    {file = "ruff-0.1.5-py3-none-macosx_10_9_x86_64.macosx_11_0_arm64.macosx_10_9_universal2.whl", hash = "sha256:171276c1df6c07fa0597fb946139ced1c2978f4f0b8254f201281729981f3c17"},
+    {file = "ruff-0.1.5-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:17ef33cd0bb7316ca65649fc748acc1406dfa4da96a3d0cde6d52f2e866c7b39"},
+    {file = "ruff-0.1.5-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:b2c205827b3f8c13b4a432e9585750b93fd907986fe1aec62b2a02cf4401eee6"},
+    {file = "ruff-0.1.5-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:bb408e3a2ad8f6881d0f2e7ad70cddb3ed9f200eb3517a91a245bbe27101d379"},
+    {file = "ruff-0.1.5-py3-none-manylinux_2_17_ppc64.manylinux2014_ppc64.whl", hash = "sha256:f20dc5e5905ddb407060ca27267c7174f532375c08076d1a953cf7bb016f5a24"},
+    {file = "ruff-0.1.5-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:aafb9d2b671ed934998e881e2c0f5845a4295e84e719359c71c39a5363cccc91"},
+    {file = "ruff-0.1.5-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:a4894dddb476597a0ba4473d72a23151b8b3b0b5f958f2cf4d3f1c572cdb7af7"},
+    {file = "ruff-0.1.5-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:a00a7ec893f665ed60008c70fe9eeb58d210e6b4d83ec6654a9904871f982a2a"},
+    {file = "ruff-0.1.5-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:a8c11206b47f283cbda399a654fd0178d7a389e631f19f51da15cbe631480c5b"},
+    {file = "ruff-0.1.5-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:fa29e67b3284b9a79b1a85ee66e293a94ac6b7bb068b307a8a373c3d343aa8ec"},
+    {file = "ruff-0.1.5-py3-none-musllinux_1_2_i686.whl", hash = "sha256:9b97fd6da44d6cceb188147b68db69a5741fbc736465b5cea3928fdac0bc1aeb"},
+    {file = "ruff-0.1.5-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:721f4b9d3b4161df8dc9f09aa8562e39d14e55a4dbaa451a8e55bdc9590e20f4"},
+    {file = "ruff-0.1.5-py3-none-win32.whl", hash = "sha256:f80c73bba6bc69e4fdc73b3991db0b546ce641bdcd5b07210b8ad6f64c79f1ab"},
+    {file = "ruff-0.1.5-py3-none-win_amd64.whl", hash = "sha256:c21fe20ee7d76206d290a76271c1af7a5096bc4c73ab9383ed2ad35f852a0087"},
+    {file = "ruff-0.1.5-py3-none-win_arm64.whl", hash = "sha256:82bfcb9927e88c1ed50f49ac6c9728dab3ea451212693fe40d08d314663e412f"},
+    {file = "ruff-0.1.5.tar.gz", hash = "sha256:5cbec0ef2ae1748fb194f420fb03fb2c25c3258c86129af7172ff8f198f125ab"},
 ]

 [[package]]
--- a/proxy.Dockerfile
+++ b/proxy.Dockerfile
@ -15,7 +15,7 @@ COPY web .
 RUN npm run build-proxy

 # Stage 2: Build
-FROM --platform=${BUILDPLATFORM} docker.io/golang:1.21.3-bookworm AS builder
+FROM --platform=${BUILDPLATFORM} docker.io/golang:1.21.4-bookworm AS builder

 ARG TARGETOS
 ARG TARGETARCH
--- a/pyproject.toml
+++ b/pyproject.toml
@ -113,7 +113,7 @@ filterwarnings = [

 [tool.poetry]
 name = "authentik"
-version = "2023.10.2"
+version = "2023.10.3"
 description = ""
 authors = ["authentik Team <hello@goauthentik.io>"]

--- a/radius.Dockerfile
+++ b/radius.Dockerfile
@ -1,5 +1,5 @@
 # Stage 1: Build
-FROM --platform=${BUILDPLATFORM} docker.io/golang:1.21.3-bookworm AS builder
+FROM --platform=${BUILDPLATFORM} docker.io/golang:1.21.4-bookworm AS builder

 ARG TARGETOS
 ARG TARGETARCH
--- a/schema.yml
+++ b/schema.yml
@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
  title: authentik
-  version: 2023.10.2
+  version: 2023.10.3
  description: Making authentication simple.
  contact:
    email: hello@goauthentik.io
--- a/tests/wdio/package-lock.json
+++ b/tests/wdio/package-lock.json
@ -9,9 +9,9 @@
                "@trivago/prettier-plugin-sort-imports": "^4.2.1",
                "@typescript-eslint/eslint-plugin": "^6.10.0",
                "@typescript-eslint/parser": "^6.10.0",
-                "@wdio/cli": "^8.21.0",
-                "@wdio/local-runner": "^8.21.0",
-                "@wdio/mocha-framework": "^8.21.0",
+                "@wdio/cli": "^8.22.1",
+                "@wdio/local-runner": "^8.22.1",
+                "@wdio/mocha-framework": "^8.22.0",
                "@wdio/spec-reporter": "^8.21.0",
                "eslint": "^8.53.0",
                "eslint-config-google": "^0.14.0",
@ -1135,18 +1135,18 @@
            "dev": true
        },
        "node_modules/@wdio/cli": {
-            "version": "8.21.0",
-            "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-8.21.0.tgz",
-            "integrity": "sha512-d5TGKmAPvJUhVIUkhLsjBKPKH4fS3pftzxroTQX9+w8m5obJTx82erjii7SzLbgQQjuSiL/aaxvp4V+eQNaP+A==",
+            "version": "8.22.1",
+            "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-8.22.1.tgz",
+            "integrity": "sha512-OgqsSFtMyfyOC9qMwS9YKjlLN/TwybQHnMIm9G3EZIGYKnAffzC6xXhgjyTqeHIyGieotH52mR0kHE0XIubw+A==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.1.1",
-                "@wdio/config": "8.21.0",
-                "@wdio/globals": "8.21.0",
+                "@wdio/config": "8.22.1",
+                "@wdio/globals": "8.22.1",
                "@wdio/logger": "8.16.17",
-                "@wdio/protocols": "8.20.4",
+                "@wdio/protocols": "8.22.0",
                "@wdio/types": "8.21.0",
-                "@wdio/utils": "8.21.0",
+                "@wdio/utils": "8.22.0",
                "async-exit-hook": "^2.0.1",
                "chalk": "^5.2.0",
                "chokidar": "^3.5.3",
@ -1160,9 +1160,9 @@
                "lodash.flattendeep": "^4.4.0",
                "lodash.pickby": "^4.6.0",
                "lodash.union": "^4.6.0",
-                "read-pkg-up": "10.1.0",
+                "read-pkg-up": "^10.0.0",
                "recursive-readdir": "^2.2.3",
-                "webdriverio": "8.21.0",
+                "webdriverio": "8.22.1",
                "yargs": "^17.7.2"
            },
            "bin": {
@ -1185,47 +1185,46 @@
            }
        },
        "node_modules/@wdio/config": {
-            "version": "8.21.0",
-            "resolved": "https://registry.npmjs.org/@wdio/config/-/config-8.21.0.tgz",
-            "integrity": "sha512-ilq880hg+q/MpDqn03bwZruFG0+C5t21XjGbDxdGmpf2aJMFVZdWk6tjlbnwjJ7nDTufIYidp/LWyG7Ro/W7FA==",
+            "version": "8.22.1",
+            "resolved": "https://registry.npmjs.org/@wdio/config/-/config-8.22.1.tgz",
+            "integrity": "sha512-ttxvtKFaOB5BJ6eDl1Lcq8STLN3V+yOEEkVXIrNqOdFOrAaljqzX20vaEmNtj9pQIoTZs2WoX8K2cmXdyxw+DA==",
            "dev": true,
            "dependencies": {
                "@wdio/logger": "8.16.17",
                "@wdio/types": "8.21.0",
-                "@wdio/utils": "8.21.0",
+                "@wdio/utils": "8.22.0",
                "decamelize": "^6.0.0",
                "deepmerge-ts": "^5.0.0",
                "glob": "^10.2.2",
-                "import-meta-resolve": "^3.0.0",
-                "read-pkg-up": "^10.0.0"
+                "import-meta-resolve": "^3.0.0"
            },
            "engines": {
                "node": "^16.13 || >=18"
            }
        },
        "node_modules/@wdio/globals": {
-            "version": "8.21.0",
-            "resolved": "https://registry.npmjs.org/@wdio/globals/-/globals-8.21.0.tgz",
-            "integrity": "sha512-0kj1CbcPf+rnoynYsv1j+tUdobVSr/n3AV3a34qteBNoBbYqGHkr3Jo1/6ZnwSZJOgt9eoo8gRtogPS8KwYjBg==",
+            "version": "8.22.1",
+            "resolved": "https://registry.npmjs.org/@wdio/globals/-/globals-8.22.1.tgz",
+            "integrity": "sha512-Wf9D9ejiwArsAr80y7UZB0AsGLNgCWUoIbulK4vbzUU50RAymxbXeJEQgfwQ231+eHv8wIViQ45N0FoRJsHVcA==",
            "dev": true,
            "engines": {
                "node": "^16.13 || >=18"
            },
            "optionalDependencies": {
                "expect-webdriverio": "^4.2.5",
-                "webdriverio": "8.21.0"
+                "webdriverio": "8.22.1"
            }
        },
        "node_modules/@wdio/local-runner": {
-            "version": "8.21.0",
-            "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-8.21.0.tgz",
-            "integrity": "sha512-bwNj64l7qwXHYYne/YFGCWAq95k0IzndNpzvIAq3UMKY1NDn0zGGZ/ticYYV2Vd85q6Dif6KT77Zl8Kbkv6qbA==",
+            "version": "8.22.1",
+            "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-8.22.1.tgz",
+            "integrity": "sha512-bEWkU/6GKS9NIgTO4OyxOlWjr4lL22P0wg8ShmDX4qY2nStu5B/2tpl3sqLcmtFiCpsjdINIYRla4lz9xOUy1Q==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.1.0",
                "@wdio/logger": "8.16.17",
                "@wdio/repl": "8.10.1",
-                "@wdio/runner": "8.21.0",
+                "@wdio/runner": "8.22.1",
                "@wdio/types": "8.21.0",
                "async-exit-hook": "^2.0.1",
                "split2": "^4.1.0",
@ -1263,16 +1262,16 @@
            }
        },
        "node_modules/@wdio/mocha-framework": {
-            "version": "8.21.0",
-            "resolved": "https://registry.npmjs.org/@wdio/mocha-framework/-/mocha-framework-8.21.0.tgz",
-            "integrity": "sha512-oYRmL4bGMR8cVBMkOgS5qeBAiSWJOZ/nN53vFBQ9JQo+F1Ez+ZIgZ847wfk+XZ7UP1kTKNUHVPup5bTqR+UmkA==",
+            "version": "8.22.0",
+            "resolved": "https://registry.npmjs.org/@wdio/mocha-framework/-/mocha-framework-8.22.0.tgz",
+            "integrity": "sha512-kkgoNNXHiR/D48dB+dEQ0nmP5u1NFiUllOLK91z5x5+mwzCh17GpyakhUXLIyVdciiU7T1grJQC5pxqdvPLBkQ==",
            "dev": true,
            "dependencies": {
                "@types/mocha": "^10.0.0",
                "@types/node": "^20.1.0",
                "@wdio/logger": "8.16.17",
                "@wdio/types": "8.21.0",
-                "@wdio/utils": "8.21.0",
+                "@wdio/utils": "8.22.0",
                "mocha": "^10.0.0"
            },
            "engines": {
@ -1280,9 +1279,9 @@
            }
        },
        "node_modules/@wdio/protocols": {
-            "version": "8.20.4",
-            "resolved": "https://registry.npmjs.org/@wdio/protocols/-/protocols-8.20.4.tgz",
-            "integrity": "sha512-9PwA2xgjsoB/9Fm8UWRhJlw61O69ckRICuBn0bzoHmMF7uMzYgDvDTekzYKn8JfjzvLm/MnWXL8raCZfQQ0P5g==",
+            "version": "8.22.0",
+            "resolved": "https://registry.npmjs.org/@wdio/protocols/-/protocols-8.22.0.tgz",
+            "integrity": "sha512-2y5lTYAAzQWvExL1FGCe6gujVpOpTxk+czT0Qx0j0iUlfdOwp9gWVLYl8ochTJHzfeM45GHvuZ/ndT52grsTtg==",
            "dev": true
        },
        "node_modules/@wdio/repl": {
@ -1314,22 +1313,22 @@
            }
        },
        "node_modules/@wdio/runner": {
-            "version": "8.21.0",
-            "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-8.21.0.tgz",
-            "integrity": "sha512-0hGx1GMzUQUWRQOwSdXQjWatmKjb04EqlDozxIJsTr06A0XhTXenmfgwz9g4wKt2MWV+/WmFh4QZs0KwcjgYgA==",
+            "version": "8.22.1",
+            "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-8.22.1.tgz",
+            "integrity": "sha512-VHX0l9q6WvDnvf89Q29xAgYBkBUo9ggzrpUA9VGntj+q7ey7Kv7CPBTzv4HVBX9Hp45xwSEl03lqFVcwn5NvTg==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.1.0",
-                "@wdio/config": "8.21.0",
-                "@wdio/globals": "8.21.0",
+                "@wdio/config": "8.22.1",
+                "@wdio/globals": "8.22.1",
                "@wdio/logger": "8.16.17",
                "@wdio/types": "8.21.0",
-                "@wdio/utils": "8.21.0",
+                "@wdio/utils": "8.22.0",
                "deepmerge-ts": "^5.0.0",
                "expect-webdriverio": "^4.2.5",
                "gaze": "^1.1.2",
-                "webdriver": "8.21.0",
-                "webdriverio": "8.21.0"
+                "webdriver": "8.22.1",
+                "webdriverio": "8.22.1"
            },
            "engines": {
                "node": "^16.13 || >=18"
@ -1376,9 +1375,9 @@
            }
        },
        "node_modules/@wdio/utils": {
-            "version": "8.21.0",
-            "resolved": "https://registry.npmjs.org/@wdio/utils/-/utils-8.21.0.tgz",
-            "integrity": "sha512-bEmOL9wRsDXnHxh/FYH/rHv/3pJdNIZ8SL0vbBFl3m3ZvKWBJ0xZgpW6XUYXK5S0xi20Y2T7zf2URifp+AOlPg==",
+            "version": "8.22.0",
+            "resolved": "https://registry.npmjs.org/@wdio/utils/-/utils-8.22.0.tgz",
+            "integrity": "sha512-n09ZLfe6NADQ7XyeO45nPBtNHi8nwu1RpOI18c94SrRS7gmO0CQWpjSilJCoHvu10ekUPJE7Oh/1Nw28w7ceVg==",
            "dev": true,
            "dependencies": {
                "@puppeteer/browsers": "^1.6.0",
@ -8590,18 +8589,18 @@
            }
        },
        "node_modules/webdriver": {
-            "version": "8.21.0",
-            "resolved": "https://registry.npmjs.org/webdriver/-/webdriver-8.21.0.tgz",
-            "integrity": "sha512-jQ3Me9lEAD+rQWg2g+YfTi2rADCfg7sl02jji9eVRJKJ7Vji7ceGJ6xXfj5+gEZZW8EJt7tpXILJi3etMAYwvA==",
+            "version": "8.22.1",
+            "resolved": "https://registry.npmjs.org/webdriver/-/webdriver-8.22.1.tgz",
+            "integrity": "sha512-EQY2YjbOZInuvYAqEEP7w7voWSy9cPMt3UB1o1+obKhrD8dkIDZNkPocpZUI59PokqHTXk4zIclV50k1KpyyiA==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.1.0",
                "@types/ws": "^8.5.3",
-                "@wdio/config": "8.21.0",
+                "@wdio/config": "8.22.1",
                "@wdio/logger": "8.16.17",
-                "@wdio/protocols": "8.20.4",
+                "@wdio/protocols": "8.22.0",
                "@wdio/types": "8.21.0",
-                "@wdio/utils": "8.21.0",
+                "@wdio/utils": "8.22.0",
                "deepmerge-ts": "^5.1.0",
                "got": "^ 12.6.1",
                "ky": "^0.33.0",
@ -8649,18 +8648,18 @@
            }
        },
        "node_modules/webdriverio": {
-            "version": "8.21.0",
-            "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-8.21.0.tgz",
-            "integrity": "sha512-vLpQMOQ9eGyrihkVpuFfd4X83MB8RhfAhhSKnEVAzWn/2CRNlwQSQ4vdNXKhv/kmmBdJOckJThbpV905AQSXFA==",
+            "version": "8.22.1",
+            "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-8.22.1.tgz",
+            "integrity": "sha512-SFqCKM93DPZU5Vn2r9OMi5EFbJHmWnIf8KXZvdzVOkGzQxFDtJ8LDgzwH1/LZxjG9nO+D7y+4wyQl7V24b8L+Q==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.1.0",
-                "@wdio/config": "8.21.0",
+                "@wdio/config": "8.22.1",
                "@wdio/logger": "8.16.17",
-                "@wdio/protocols": "8.20.4",
+                "@wdio/protocols": "8.22.0",
                "@wdio/repl": "8.10.1",
                "@wdio/types": "8.21.0",
-                "@wdio/utils": "8.21.0",
+                "@wdio/utils": "8.22.0",
                "archiver": "^6.0.0",
                "aria-query": "^5.0.0",
                "css-shorthand-properties": "^1.1.1",
@ -8677,7 +8676,7 @@
                "resq": "^1.9.1",
                "rgb2hex": "0.2.5",
                "serialize-error": "^11.0.1",
-                "webdriver": "8.21.0"
+                "webdriver": "8.22.1"
            },
            "engines": {
                "node": "^16.13 || >=18"
--- a/tests/wdio/package.json
+++ b/tests/wdio/package.json
@ -6,9 +6,9 @@
        "@trivago/prettier-plugin-sort-imports": "^4.2.1",
        "@typescript-eslint/eslint-plugin": "^6.10.0",
        "@typescript-eslint/parser": "^6.10.0",
-        "@wdio/cli": "^8.21.0",
-        "@wdio/local-runner": "^8.21.0",
-        "@wdio/mocha-framework": "^8.21.0",
+        "@wdio/cli": "^8.22.1",
+        "@wdio/local-runner": "^8.22.1",
+        "@wdio/mocha-framework": "^8.22.0",
        "@wdio/spec-reporter": "^8.21.0",
        "eslint": "^8.53.0",
        "eslint-config-google": "^0.14.0",
--- a/web/package-lock.json
+++ b/web/package-lock.json
@ -15,17 +15,17 @@
                "@codemirror/lang-xml": "^6.0.2",
                "@codemirror/legacy-modes": "^6.3.3",
                "@codemirror/theme-one-dark": "^6.1.2",
-                "@formatjs/intl-listformat": "^7.5.0",
+                "@formatjs/intl-listformat": "^7.5.1",
                "@fortawesome/fontawesome-free": "^6.4.2",
-                "@goauthentik/api": "^2023.10.2-1698526374",
+                "@goauthentik/api": "^2023.10.3-1699554078",
                "@lit-labs/context": "^0.4.0",
                "@lit-labs/task": "^3.1.0",
                "@lit/localize": "^0.11.4",
                "@open-wc/lit-helpers": "^0.6.0",
                "@patternfly/elements": "^2.4.0",
                "@patternfly/patternfly": "^4.224.2",
-                "@sentry/browser": "^7.77.0",
-                "@sentry/tracing": "^7.77.0",
+                "@sentry/browser": "^7.79.0",
+                "@sentry/tracing": "^7.79.0",
                "@webcomponents/webcomponentsjs": "^2.8.0",
                "base64-js": "^1.5.1",
                "chart.js": "^4.4.0",
@ -69,7 +69,7 @@
                "@trivago/prettier-plugin-sort-imports": "^4.2.1",
                "@types/chart.js": "^2.9.40",
                "@types/codemirror": "5.60.13",
-                "@types/grecaptcha": "^3.0.6",
+                "@types/grecaptcha": "^3.0.7",
                "@typescript-eslint/eslint-plugin": "^6.10.0",
                "@typescript-eslint/parser": "^6.10.0",
                "babel-plugin-macros": "^3.1.0",
@ -85,7 +85,7 @@
                "npm-run-all": "^4.1.5",
                "prettier": "^3.0.3",
                "pseudolocale": "^2.0.0",
-                "pyright": "^1.1.334",
+                "pyright": "^1.1.335",
                "react": "^18.2.0",
                "react-dom": "^18.2.0",
                "rollup": "^4.3.0",
@ -2847,28 +2847,28 @@
            "integrity": "sha512-ou3elfqG/hZsbmF4bxeJhPHIf3G2pm0ujc39hYEZrfVqt7Vk/Zji6CXc3W0pmYM8BW1g40U+akTl9DKZhFhInQ=="
        },
        "node_modules/@formatjs/ecma402-abstract": {
-            "version": "1.17.2",
-            "resolved": "https://registry.npmjs.org/@formatjs/ecma402-abstract/-/ecma402-abstract-1.17.2.tgz",
-            "integrity": "sha512-k2mTh0m+IV1HRdU0xXM617tSQTi53tVR2muvYOsBeYcUgEAyxV1FOC7Qj279th3fBVQ+Dj6muvNJZcHSPNdbKg==",
+            "version": "1.17.3",
+            "resolved": "https://registry.npmjs.org/@formatjs/ecma402-abstract/-/ecma402-abstract-1.17.3.tgz",
+            "integrity": "sha512-2Q4hmKQ6CM30mRG/YMdSBW8LXf32BfuOb1FZgG+uVWPC/SQMoiVFz5JaeOukt96v6TZ4ddE+bHCmd611PW38QA==",
            "dependencies": {
-                "@formatjs/intl-localematcher": "0.4.2",
+                "@formatjs/intl-localematcher": "0.5.0",
                "tslib": "^2.4.0"
            }
        },
        "node_modules/@formatjs/intl-listformat": {
-            "version": "7.5.0",
-            "resolved": "https://registry.npmjs.org/@formatjs/intl-listformat/-/intl-listformat-7.5.0.tgz",
-            "integrity": "sha512-n9FsXGl1T2ZbX6wSyrzCDJHrbJR0YJ9ZNsAqUvHXfbY3nsOmGnSTf5+bkuIp1Xiywu7m1X1Pfm/Ngp/yK1H84A==",
+            "version": "7.5.1",
+            "resolved": "https://registry.npmjs.org/@formatjs/intl-listformat/-/intl-listformat-7.5.1.tgz",
+            "integrity": "sha512-J6heE28cikJ2cUZ7Mvmets418lE96k5OcbgDYQkXDFHVbRnUKCHQwRAXKRCPFEGDrEmcvtqUj7NmZEJYbsJdqQ==",
            "dependencies": {
-                "@formatjs/ecma402-abstract": "1.17.2",
-                "@formatjs/intl-localematcher": "0.4.2",
+                "@formatjs/ecma402-abstract": "1.17.3",
+                "@formatjs/intl-localematcher": "0.5.0",
                "tslib": "^2.4.0"
            }
        },
        "node_modules/@formatjs/intl-localematcher": {
-            "version": "0.4.2",
-            "resolved": "https://registry.npmjs.org/@formatjs/intl-localematcher/-/intl-localematcher-0.4.2.tgz",
-            "integrity": "sha512-BGdtJFmaNJy5An/Zan4OId/yR9Ih1OojFjcduX/xOvq798OgWSyDtd6Qd5jqJXwJs1ipe4Fxu9+cshic5Ox2tA==",
+            "version": "0.5.0",
+            "resolved": "https://registry.npmjs.org/@formatjs/intl-localematcher/-/intl-localematcher-0.5.0.tgz",
+            "integrity": "sha512-K1Xpg/8oyfCMxisJQa/fILoeoeyndcM0wcN8QiNG/uM5OAe1BcO1+2yd0gIboDI2tRJEsUi/sSBEYPbgkIdq4A==",
            "dependencies": {
                "tslib": "^2.4.0"
            }
@ -2883,9 +2883,9 @@
            }
        },
        "node_modules/@goauthentik/api": {
-            "version": "2023.10.2-1698526374",
-            "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2023.10.2-1698526374.tgz",
-            "integrity": "sha512-6RNYKfXJxsmiWAB3mztQ0nPJzqYsCEQQ9t4s5oorZJb2hu+9Fwnbjm2IFA3uwdQBjPKTKAZju3JlnrybN4xnKw=="
+            "version": "2023.10.3-1699554078",
+            "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2023.10.3-1699554078.tgz",
+            "integrity": "sha512-tZIKpb+uLAPKH+FQw1sq/TCjB36dpeQa5SrB40gf44K9C//OfGP38LQCi7s8Q3efOAo01Q9SRsL+WmZfgqDZBQ=="
        },
        "node_modules/@hcaptcha/types": {
            "version": "1.0.3",
@ -4695,84 +4695,84 @@
            ]
        },
        "node_modules/@sentry-internal/tracing": {
-            "version": "7.77.0",
-            "resolved": "https://registry.npmjs.org/@sentry-internal/tracing/-/tracing-7.77.0.tgz",
-            "integrity": "sha512-8HRF1rdqWwtINqGEdx8Iqs9UOP/n8E0vXUu3Nmbqj4p5sQPA7vvCfq+4Y4rTqZFc7sNdFpDsRION5iQEh8zfZw==",
+            "version": "7.79.0",
+            "resolved": "https://registry.npmjs.org/@sentry-internal/tracing/-/tracing-7.79.0.tgz",
+            "integrity": "sha512-Mf9Bd0OrZ24h1qZpvmz9IRnfORMGYNYC1xWBBFpIR1AauEDX89x+mJwIOrUc4KKAAAwt73shrJv1QA8QOm4E3g==",
            "dependencies": {
-                "@sentry/core": "7.77.0",
-                "@sentry/types": "7.77.0",
-                "@sentry/utils": "7.77.0"
+                "@sentry/core": "7.79.0",
+                "@sentry/types": "7.79.0",
+                "@sentry/utils": "7.79.0"
            },
            "engines": {
                "node": ">=8"
            }
        },
        "node_modules/@sentry/browser": {
-            "version": "7.77.0",
-            "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-7.77.0.tgz",
-            "integrity": "sha512-nJ2KDZD90H8jcPx9BysQLiQW+w7k7kISCWeRjrEMJzjtge32dmHA8G4stlUTRIQugy5F+73cOayWShceFP7QJQ==",
+            "version": "7.79.0",
+            "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-7.79.0.tgz",
+            "integrity": "sha512-gWbWEElF61uZeTFLIZz3NMyCkAzBDOpMAogEbVu2GX91SHKB7GXlE//INnS/R5wfE5j/CFaZc53mzzoIuMy1sA==",
            "dependencies": {
-                "@sentry-internal/tracing": "7.77.0",
-                "@sentry/core": "7.77.0",
-                "@sentry/replay": "7.77.0",
-                "@sentry/types": "7.77.0",
-                "@sentry/utils": "7.77.0"
+                "@sentry-internal/tracing": "7.79.0",
+                "@sentry/core": "7.79.0",
+                "@sentry/replay": "7.79.0",
+                "@sentry/types": "7.79.0",
+                "@sentry/utils": "7.79.0"
            },
            "engines": {
                "node": ">=8"
            }
        },
        "node_modules/@sentry/core": {
-            "version": "7.77.0",
-            "resolved": "https://registry.npmjs.org/@sentry/core/-/core-7.77.0.tgz",
-            "integrity": "sha512-Tj8oTYFZ/ZD+xW8IGIsU6gcFXD/gfE+FUxUaeSosd9KHwBQNOLhZSsYo/tTVf/rnQI/dQnsd4onPZLiL+27aTg==",
+            "version": "7.79.0",
+            "resolved": "https://registry.npmjs.org/@sentry/core/-/core-7.79.0.tgz",
+            "integrity": "sha512-9vG7SfOcJNJNiqlqg4MuHDUCaSf2ZXpv3eZYRPbBkgPGr8X1ekrSABpOK+6kBNvbtKxfWVTWbLpAA6xU+cwnVw==",
            "dependencies": {
-                "@sentry/types": "7.77.0",
-                "@sentry/utils": "7.77.0"
+                "@sentry/types": "7.79.0",
+                "@sentry/utils": "7.79.0"
            },
            "engines": {
                "node": ">=8"
            }
        },
        "node_modules/@sentry/replay": {
-            "version": "7.77.0",
-            "resolved": "https://registry.npmjs.org/@sentry/replay/-/replay-7.77.0.tgz",
-            "integrity": "sha512-M9Ik2J5ekl+C1Och3wzLRZVaRGK33BlnBwfwf3qKjgLDwfKW+1YkwDfTHbc2b74RowkJbOVNcp4m8ptlehlSaQ==",
+            "version": "7.79.0",
+            "resolved": "https://registry.npmjs.org/@sentry/replay/-/replay-7.79.0.tgz",
+            "integrity": "sha512-vF79NxWGYfoD0hnIkdgUQqedoMcRHHp5UAfZlxhpQzJf4TnbOjollp63AvOrfd38osSG2d3E5kTUU9xs/zKhBQ==",
            "dependencies": {
-                "@sentry-internal/tracing": "7.77.0",
-                "@sentry/core": "7.77.0",
-                "@sentry/types": "7.77.0",
-                "@sentry/utils": "7.77.0"
+                "@sentry-internal/tracing": "7.79.0",
+                "@sentry/core": "7.79.0",
+                "@sentry/types": "7.79.0",
+                "@sentry/utils": "7.79.0"
            },
            "engines": {
                "node": ">=12"
            }
        },
        "node_modules/@sentry/tracing": {
-            "version": "7.77.0",
-            "resolved": "https://registry.npmjs.org/@sentry/tracing/-/tracing-7.77.0.tgz",
-            "integrity": "sha512-zr6eSCW3NJ124uj4Fy/6hh77cziy43dpYE1WpgvO/yhl1+kdrY2XVJ0bXGqwHU0KBm/eSgHD7yecUxmZUXiabA==",
+            "version": "7.79.0",
+            "resolved": "https://registry.npmjs.org/@sentry/tracing/-/tracing-7.79.0.tgz",
+            "integrity": "sha512-Y1awpIcMKCsTpC3wS+SaEJTcOMd6OugZZXCV2r9ozBIRKE7wG//ntDX3ApcRf4kbDzQMJY2Ylu0QKDIyNEAr0g==",
            "dependencies": {
-                "@sentry-internal/tracing": "7.77.0"
+                "@sentry-internal/tracing": "7.79.0"
            },
            "engines": {
                "node": ">=8"
            }
        },
        "node_modules/@sentry/types": {
-            "version": "7.77.0",
-            "resolved": "https://registry.npmjs.org/@sentry/types/-/types-7.77.0.tgz",
-            "integrity": "sha512-nfb00XRJVi0QpDHg+JkqrmEBHsqBnxJu191Ded+Cs1OJ5oPXEW6F59LVcBScGvMqe+WEk1a73eH8XezwfgrTsA==",
+            "version": "7.79.0",
+            "resolved": "https://registry.npmjs.org/@sentry/types/-/types-7.79.0.tgz",
+            "integrity": "sha512-3tV32+v/DF8w7kD0p3kLWtgVTVdFL39oGY02+vz//rjWg/vzeqSE95mCYKm5pUfd6cPETX/8dunCiuTBQIkTHQ==",
            "engines": {
                "node": ">=8"
            }
        },
        "node_modules/@sentry/utils": {
-            "version": "7.77.0",
-            "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-7.77.0.tgz",
-            "integrity": "sha512-NmM2kDOqVchrey3N5WSzdQoCsyDkQkiRxExPaNI2oKQ/jMWHs9yt0tSy7otPBcXs0AP59ihl75Bvm1tDRcsp5g==",
+            "version": "7.79.0",
+            "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-7.79.0.tgz",
+            "integrity": "sha512-tUTlb6PvfZawqBmBK9CPXflqrZDXHKWoX3fve2zLK6W0FSpIMOO4TH8PBqkHBFs0ZgF/bnv/bsM4z7uEAlAtzg==",
            "dependencies": {
-                "@sentry/types": "7.77.0"
+                "@sentry/types": "7.79.0"
            },
            "engines": {
                "node": ">=8"
@ -10217,9 +10217,9 @@
            }
        },
        "node_modules/@types/grecaptcha": {
-            "version": "3.0.6",
-            "resolved": "https://registry.npmjs.org/@types/grecaptcha/-/grecaptcha-3.0.6.tgz",
-            "integrity": "sha512-4BR/3v+pbiRt3cwRwibFnV4+LmuvRUjVVqgeCul9ODAyQhlPKE4tIIRJwZUeWWpmX8e9vo/xXuQTQl8FJPP7KA==",
+            "version": "3.0.7",
+            "resolved": "https://registry.npmjs.org/@types/grecaptcha/-/grecaptcha-3.0.7.tgz",
+            "integrity": "sha512-ah5GDQfsiK3dnkaCbYcDFZXkZCG3o90VRu9hzXHnSe4kACrRB1KUI/ZyWHvYmqm1W5Tl8B5YxxT98uGTlkbf2Q==",
            "dev": true
        },
        "node_modules/@types/http-errors": {
@ -18415,9 +18415,9 @@
            }
        },
        "node_modules/pyright": {
-            "version": "1.1.334",
-            "resolved": "https://registry.npmjs.org/pyright/-/pyright-1.1.334.tgz",
-            "integrity": "sha512-EJoW78gXPeAWd0e86P8kSIbY1pO3JJxNYu2BRlv/ZflcMvCY+zpyamuQC5EcXxXtr1WzBdcQwfo/NIBqtQPEow==",
+            "version": "1.1.335",
+            "resolved": "https://registry.npmjs.org/pyright/-/pyright-1.1.335.tgz",
+            "integrity": "sha512-4iI9JPJP1YRAv4q99l0arfv3uAqQBkuqUOrmQLq7Iv6rt9HmU00R1908DqwaiePRT6HgyXCMbMmVTcs2UyKnAA==",
            "dev": true,
            "bin": {
                "pyright": "index.js",
--- a/web/package.json
+++ b/web/package.json
@ -36,17 +36,17 @@
        "@codemirror/lang-xml": "^6.0.2",
        "@codemirror/legacy-modes": "^6.3.3",
        "@codemirror/theme-one-dark": "^6.1.2",
-        "@formatjs/intl-listformat": "^7.5.0",
+        "@formatjs/intl-listformat": "^7.5.1",
        "@fortawesome/fontawesome-free": "^6.4.2",
-        "@goauthentik/api": "^2023.10.2-1698526374",
+        "@goauthentik/api": "^2023.10.3-1699554078",
        "@lit-labs/context": "^0.4.0",
        "@lit-labs/task": "^3.1.0",
        "@lit/localize": "^0.11.4",
        "@open-wc/lit-helpers": "^0.6.0",
        "@patternfly/elements": "^2.4.0",
        "@patternfly/patternfly": "^4.224.2",
-        "@sentry/browser": "^7.77.0",
-        "@sentry/tracing": "^7.77.0",
+        "@sentry/browser": "^7.79.0",
+        "@sentry/tracing": "^7.79.0",
        "@webcomponents/webcomponentsjs": "^2.8.0",
        "base64-js": "^1.5.1",
        "chart.js": "^4.4.0",
@ -90,7 +90,7 @@
        "@trivago/prettier-plugin-sort-imports": "^4.2.1",
        "@types/chart.js": "^2.9.40",
        "@types/codemirror": "5.60.13",
-        "@types/grecaptcha": "^3.0.6",
+        "@types/grecaptcha": "^3.0.7",
        "@typescript-eslint/eslint-plugin": "^6.10.0",
        "@typescript-eslint/parser": "^6.10.0",
        "babel-plugin-macros": "^3.1.0",
@ -106,7 +106,7 @@
        "npm-run-all": "^4.1.5",
        "prettier": "^3.0.3",
        "pseudolocale": "^2.0.0",
-        "pyright": "^1.1.334",
+        "pyright": "^1.1.335",
        "react": "^18.2.0",
        "react-dom": "^18.2.0",
        "rollup": "^4.3.0",
--- a/web/src/common/constants.ts
+++ b/web/src/common/constants.ts
@ -3,7 +3,7 @@ export const SUCCESS_CLASS = "pf-m-success";
 export const ERROR_CLASS = "pf-m-danger";
 export const PROGRESS_CLASS = "pf-m-in-progress";
 export const CURRENT_CLASS = "pf-m-current";
-export const VERSION = "2023.10.2";
+export const VERSION = "2023.10.3";
 export const TITLE_DEFAULT = "authentik";
 export const ROUTE_SEPARATOR = ";";

--- a/website/docs/core/architecture.md
+++ b/website/docs/core/architecture.md
@ -25,7 +25,7 @@ The core sub-component handles most of authentik's logic, such as API requests,

 #### Embedded outpost

-Similar to [other outposts](../outposts/index.mdx), this outposts allows using [Proxy providers](../providers/proxy/index.md) without deploying a separate outpost.
+Similar to [other outposts](../outposts/index.mdx), this outpost allows using [Proxy providers](../providers/proxy/index.md) without deploying a separate outpost.

 #### Persistence

--- a/website/docs/enterprise/manage-enterprise.md
+++ b/website/docs/enterprise/manage-enterprise.md
@ -44,7 +44,7 @@ In the Customer portal you can remove members and invite new members to the orga
 ### Buy a license

 :::info
-[Learn more](#about-users) about **internal** and **external** users, and how we forecast the number of users.
+[Learn more](#about-users-and-licenses) about **internal** and **external** users, and how we forecast the number of users.
 :::

 1. To get a license key, log in to your authentik account with your admin credentials, and then click **Admin interface** in the upper right.
--- a/website/docs/releases/2023/v2023.10.md
+++ b/website/docs/releases/2023/v2023.10.md
@ -137,6 +137,20 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2023.10
 -   web/admin: fix @change handler for ak-radio elements (#7348)
 -   web/admin: fix role form reacting to enter (#7330)

+## Fixed in 2023.10.3
+
+-   ci: explicitly give write permissions to packages (cherry-pick #7428) (#7430)
+-   providers/oauth2: set auth_via for token and other endpoints (cherry-pick #7417) (#7427)
+-   providers/proxy: fix closed redis client (cherry-pick #7385) (#7429)
+-   root: Improve multi arch Docker image build speed (cherry-pick #7355) (#7426)
+-   sources/oauth: fix patreon (cherry-pick #7454) (#7456)
+-   stages/email: fix duplicate querystring encoding (cherry-pick #7386) (#7425)
+-   web/admin: fix html error on oauth2 provider page (cherry-pick #7384) (#7424)
+-   web/flows: attempt to fix bitwareden android compatibility (cherry-pick #7455) (#7457)
+-   events: fix gdpr compliance always running (cherry-pick #7491) (#7505)
+-   Web: bugfix: broken backchannel selector (cherry-pick #7480) (#7507)
+-   core: fix worker beat toggle inverted (cherry-pick #7508) (#7509)
+
 ## API Changes

 #### What's New
--- a/website/package-lock.json
+++ b/website/package-lock.json
@ -33,7 +33,7 @@
                "@docusaurus/module-type-aliases": "3.0.0",
                "@docusaurus/tsconfig": "3.0.0",
                "@docusaurus/types": "3.0.0",
-                "@types/react": "^18.2.29",
+                "@types/react": "^18.2.37",
                "prettier": "3.0.3",
                "typescript": "~5.2.2"
            }
@ -4127,9 +4127,9 @@
            "integrity": "sha512-+0autS93xyXizIYiyL02FCY8N+KkKPhILhcUSA276HxzreZ16kl+cmwvV2qAM/PuCCwPXzOXOWhiPcw20uSFcA=="
        },
        "node_modules/@types/react": {
-            "version": "18.2.36",
-            "resolved": "https://registry.npmjs.org/@types/react/-/react-18.2.36.tgz",
-            "integrity": "sha512-o9XFsHYLLZ4+sb9CWUYwHqFVoG61SesydF353vFMMsQziiyRu8np4n2OYMUSDZ8XuImxDr9c5tR7gidlH29Vnw==",
+            "version": "18.2.37",
+            "resolved": "https://registry.npmjs.org/@types/react/-/react-18.2.37.tgz",
+            "integrity": "sha512-RGAYMi2bhRgEXT3f4B92WTohopH6bIXw05FuGlmJEnv/omEn190+QYEIYxIAuIBdKgboYYdVved2p1AxZVQnaw==",
            "dependencies": {
                "@types/prop-types": "*",
                "@types/scheduler": "*",
--- a/website/package.json
+++ b/website/package.json
@ -52,7 +52,7 @@
        "@docusaurus/module-type-aliases": "3.0.0",
        "@docusaurus/tsconfig": "3.0.0",
        "@docusaurus/types": "3.0.0",
-        "@types/react": "^18.2.29",
+        "@types/react": "^18.2.37",
        "prettier": "3.0.3",
        "typescript": "~5.2.2"
    }
--- a/website/src/components/Comparison/index.tsx
+++ b/website/src/components/Comparison/index.tsx
@ -9,9 +9,9 @@ export default function Comparison() {
    const tooltipPlanned = "Planned as a future feature";
    const tooltipRequiresLicense =
        "Requires additional licenses/not included in base tier";
-    const toolRequiresProductAADS =
+    const tooltipRequiresProductAADS =
        "Requires additional product: Azure AD Domain Services";
-    const toolRequiresProductWAP =
+    const tooltipRequiresProductWAP =
        "Requires additional product: Web Application Proxy";
    return (
        <>
@ -137,7 +137,7 @@ export default function Comparison() {
                                    <AlertTriangle
                                        className="tooltip"
                                        data-tooltip-content={
-                                            toolRequiresProductAADS
+                                            tooltipRequiresProductAADS
                                        }
                                    ></AlertTriangle>
                                </td>
@ -433,10 +433,10 @@ export default function Comparison() {
                                <td className="result failed">
                                    <X></X>
                                </td>
-                                <td className="result failed">
+                                <td className="result passed">
                                    <Check></Check>
                                </td>
-                                <td className="result failed">
+                                <td className="result passed">
                                    <Check></Check>
                                </td>
                                <td className="result passed">
@ -483,7 +483,9 @@ export default function Comparison() {
                                </td>
                            </tr>
                            <tr>
-                                <td className="row-label">Open-source</td>
+                                <td className="row-label">
+                                    Open-source/Source available
+                                </td>
                                <td className="result passed authentik">
                                    <Check></Check>
                                </td>
@ -507,7 +509,14 @@ export default function Comparison() {
                                </td>
                            </tr>
                            <tr>
-                                <td className="row-label">Application Proxy</td>
+                                <td
+                                    className="row-label tooltip"
+                                    data-tooltip-content={
+                                        "Reverse proxy to enable an SSO experience for applications that don't support it natively."
+                                    }
+                                >
+                                    Application Proxy
+                                </td>
                                <td className="result passed authentik">
                                    <Check></Check>
                                </td>
@ -523,7 +532,7 @@ export default function Comparison() {
                                    <AlertTriangle
                                        className="tooltip"
                                        data-tooltip-content={
-                                            toolRequiresProductWAP
+                                            tooltipRequiresProductWAP
                                        }
                                    ></AlertTriangle>
                                </td>
@ -540,6 +549,47 @@ export default function Comparison() {
                                    <Check></Check>
                                </td>
                            </tr>
+                            <tr>
+                                <td
+                                    className="row-label tooltip"
+                                    data-tooltip-content={
+                                        "Reverse proxy to enable an SSO experience for applications that don't support it natively."
+                                    }
+                                >
+                                    Device authentication/authorization
+                                </td>
+                                <td className="result failed authentik">
+                                    <X></X>
+                                </td>
+                                <td className="result failed">
+                                    <X></X>
+                                </td>
+                                <td className="result failed">
+                                    <X></X>
+                                </td>
+                                <td className="result warning">
+                                    <AlertTriangle
+                                        className="tooltip"
+                                        data-tooltip-content={
+                                            tooltipRequiresLicense
+                                        }
+                                    ></AlertTriangle>
+                                </td>
+                                <td className="result warning">
+                                    <AlertTriangle
+                                        className="tooltip"
+                                        data-tooltip-content={
+                                            tooltipAvailableThirdParty
+                                        }
+                                    ></AlertTriangle>
+                                </td>
+                                <td className="result failed">
+                                    <X></X>
+                                </td>
+                                <td className="result failed">
+                                    <X></X>
+                                </td>
+                            </tr>
                        </tbody>
                    </table>
                    <Tooltip anchorSelect=".tooltip" place="top" />