stages/consent: default to expiring consent instead of always_require

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
This commit is contained in:
Jens Langhammer 2022-09-10 13:25:28 +02:00
parent 9770ba07c2
commit 5026cebf02
3 changed files with 30 additions and 3 deletions

View File

@ -0,0 +1,25 @@
# Generated by Django 4.1.1 on 2022-09-10 11:23
from django.db import migrations, models
class Migration(migrations.Migration):
dependencies = [
("authentik_stages_consent", "0004_alter_userconsent_unique_together_and_more"),
]
operations = [
migrations.AlterField(
model_name="consentstage",
name="mode",
field=models.TextField(
choices=[
("always_require", "Always Require"),
("permanent", "Permanent"),
("expiring", "Expiring"),
],
default="expiring",
),
),
]

View File

@ -22,7 +22,7 @@ class ConsentMode(models.TextChoices):
class ConsentStage(Stage):
"""Prompt the user for confirmation."""
mode = models.TextField(choices=ConsentMode.choices, default=ConsentMode.ALWAYS_REQUIRE)
mode = models.TextField(choices=ConsentMode.choices, default=ConsentMode.EXPIRING)
consent_expire_in = models.TextField(
validators=[timedelta_string_validator],
default="weeks=4",

View File

@ -10,9 +10,11 @@ entries:
slug: default-provider-authorization-explicit-consent
model: authentik_flows.flow
id: flow
- identifiers:
- id: default-provider-authorization-consent
attrs:
mode: expiring
identifiers:
name: default-provider-authorization-consent
id: default-provider-authorization-consent
model: authentik_stages_consent.consentstage
- identifiers:
order: 0