trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

only allow SCIM basic auth for testing and debug

Browse source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
This commit is contained in:
Jens Langhammer 2022-06-06 23:20:13 +02:00 committed by Jens Langhammer
parent d99a81d32f
commit 619f356ecc
No known key found for this signature in database
2 changed files with 7 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
authentik/sources/scim/migrations/0001_initial.py
View file

@ -1,4 +1,4 @@
# Generated by Django 4.0.5 on 2022-06-06 21:03
# Generated by Django 4.0.5 on 2022-06-06 21:37
import django.db.models.deletion
from django.db import migrations, models
@ -38,7 +38,8 @@ class Migration(migrations.Migration):
),
],
options={
"abstract": False,
"verbose_name": "SCIM Source",
"verbose_name_plural": "SCIM Sources",
},
bases=("authentik_core.source",),
),

5
authentik/sources/scim/views/v2/auth.py
View file

@ -2,6 +2,7 @@
from base64 import b64decode
from typing import Any, Optional, Union
from django.conf import settings
from rest_framework.authentication import BaseAuthentication, get_authorization_header
from rest_framework.request import Request
@ -11,8 +12,10 @@ from authentik.core.models import Token, TokenIntents, User
class SCIMTokenAuth(BaseAuthentication):
"""SCIM Token auth"""
def legacy(self, key: str, source_slug: str) -> Optional[Token]:
def legacy(self, key: str, source_slug: str) -> Optional[Token]: # pragma: no cover
"""Legacy HTTP-Basic auth for testing"""
if not settings.TEST or not settings.DEBUG:
return None
_username, _, password = b64decode(key.encode()).decode().partition(":")
token = self.check_token(password, source_slug)
if token: