trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
7,866 Commits 95 Branches 330 Tags 336 MiB
Commit Graph

50 Commits

Author SHA1 Message Date
Jens Langhammer c741c13132 internal: fix listen attempt on shutdown 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-01-03 12:36:11 +01:00
Jens Langhammer 27e4c7027c web: fix potential panic 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-26 14:24:44 +01:00
Jens Langhammer 87e99625e6 internal: update tenant certificates on outpost refresh 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-23 00:38:49 +01:00
Jens Langhammer 34b11524f1 tenants: add web certificate field, make authentik's core certificate configurable based on keypair 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 11:43:45 +01:00
Jens Langhammer b3ba083ff0 internal: cleanup logging, remove duplicate code 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 10:33:21 +01:00
Jens Langhammer 22a8603892 internal: add custom proxy certificates support to embedded outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 10:16:01 +01:00
Jens Langhammer f8aab40e3e internal: cleanup duplicate and redundant code, properly set sentry SDK scope settings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-16 11:00:19 +01:00
Jens Langhammer d0ceafe79e outposts/proxy: add X-authentik-meta-version 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-01 20:59:45 +01:00
Jens Langhammer f2023a7af2 *: don't use go embed to make using custom files easier 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-01 20:35:28 +01:00
Jens Langhammer d1bd8f333b outposts/proxy: use disableIndex for static files 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-19 10:50:56 +01:00
Jens Langhammer 2ac9f5426d outposts: don't panic when listening for metrics fails 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-19 10:37:13 +01:00
Jens Langhammer 7cf8a31057 internal: fix integrated docs not working 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 16:13:02 +01:00
Jens Langhammer 74382c6287 cmd/server: improve cleanup on shutdown 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 18:03:29 +01:00
Jens Langhammer c87a9f9489 web: remove debug entry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 20:19:37 +01:00
Jens Langhammer 0d02dbf55c api: replace django sentry proxy with go proxy to prevent login issues 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-02 14:44:37 +01:00
Jens Langhammer 57e86582d1 Revert "root: handle liveness probe in router (also keep internal one)" 
This reverts commit dd7cb45733.
 2021-10-12 18:44:08 +02:00
Jens Langhammer dd7cb45733 root: handle liveness probe in router (also keep internal one) 
This reverts commit d39dbc7287.

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-12 18:43:39 +02:00
Jens Langhammer d39dbc7287 root: handle liveness probe in router 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-12 14:54:15 +02:00
Jens L aef9d27706
stages/authenticator_sms: Add SMS Authenticator Stage (#1577) 
* stages/authenticator_sms: initial implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add initial stage UI

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/elements: clear invalid state when old input was invalid but new input is correct

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_sms: add more logic

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: add basic SMS settings

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_sms: initial working version

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_sms: add tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: optimise totp password manager entry on authenticator_validation stage

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/elements: add grouping support for table

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: allow sms class in authenticator stage

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add grouping to more pages

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_validate: add SMS support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: add throttling for flow executor based on session key and pending user

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix style issues

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* ci: add workflow to compile backend translations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-11 17:51:49 +02:00
Jens Langhammer 6c603cdf80 internal: add internal healthchecking to prevent websocket errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 22:21:14 +02:00
Jens Langhammer 8d72b3498d internal: fix typo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-24 10:44:28 +02:00
Jens Langhammer 52bb774f73 internal: add asset paths for user interface 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-23 09:57:24 +02:00
Jens Langhammer f771383c4b cmd: fix outpost metrics not being set in embedded mode 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-16 12:09:12 +02:00
Jens L 7158c9d2ea
core: metrics v2 (#1370) 
* outposts: add ldap metrics, move ping to 9100

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: add flow_executor metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* use port 9300 for metrics, add core metrics port

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/controllers/k8s: add service monitor creation support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-09 15:52:24 +02:00
Jens L 3c1b70c355
outposts/proxyv2 (#1365) 
* outposts/proxyv2: initial commit

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add rs256

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

more stuff

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add forward auth an sign_out

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

match cookie name

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

re-add support for rs256 for backwards compat

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add error handler

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

ensure unique user-agent is used

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

set cookie duration based on id_token expiry

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

build proxy v2

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add ssl

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add basic auth and custom header support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add application cert loading

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

implement whitelist

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add redis

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

migrate embedded outpost to v2

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

remove old proxy

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

providers/proxy: make token expiration configurable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

fix tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: only allow one redirect URI

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix docker build for proxy

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove default port offset

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add AUTHENTIK_HOST_BROWSER

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests: fix e2e/integration tests not using proper tags

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove references of old port

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix user_attributes not being loaded correctly

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup dependencies

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-08 18:04:56 +00:00
Jens Langhammer 75476217a0 internal: fix web requests not having a logger set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-04 13:52:47 +02:00
Jens Langhammer 7771c0b905 internal: fix font loading errors on safari 
closes #1057

for some reason safari appends the relative font path to the document URL not to the stylesheet URL. Since I don't want to build a fully custom patternfly base css file, this mounts the static files where safari expects them

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-04 13:50:29 +02:00
Jens Langhammer 126e43dea4 internal: disable directory listing on static files 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-04 13:40:29 +02:00
Jens Langhammer cc2cd6919f outpost/embedded: only send requests for non-akprox paths when we're doing proxy mode 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-29 21:13:28 +02:00
Jens L f01bc20d44
Embedded outpost (#1193) 
* api: allow API requests as managed outpost's account when using secret_key

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: load secret key from env

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: make listener IP configurable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost/proxy: run outpost in background and pass requests conditionally

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: unify branding to embedded

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix embedded outpost not being editable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix mismatched host detection

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: fix LDAP test not including user for embedded outpost

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: fix user matching

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: add tests for secret_key auth

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: load environment variables using github.com/Netflix/go-env

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-29 11:30:30 +02:00
Jens Langhammer d678d33756 root: add support for PROXY protocol on listeners 
closes #1161

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-20 11:03:09 +02:00
Jens Langhammer 6ddd6bfa72 root: fix linting errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-18 20:54:34 +02:00
Jens Langhammer b3159a74e5 Merge branch 'master' into inbuilt-proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	Dockerfile
#	internal/outpost/ak/api.go
#	internal/outpost/ak/api_uag.go
#	internal/outpost/ak/global.go
#	internal/outpost/ldap/api_tls.go
#	internal/outpost/ldap/instance_bind.go
#	internal/outpost/ldap/utils.go
#	internal/outpost/proxy/api_bundle.go
#	outpost/go.mod
#	outpost/go.sum
#	outpost/pkg/ak/cert.go
 2021-07-17 12:49:38 +02:00
Jens Langhammer bdb84b7a8f root: build bundled docs into helo dir to fix path issue with packaged static files 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-13 19:09:16 +02:00
Jens Langhammer be5c8341d2 root: add bundled docs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-13 11:06:51 +02:00
Jens Langhammer 948db46406 Merge branch 'master' into inbuilt-proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	internal/constants/constants.go
#	outpost/pkg/version.go
 2021-07-05 19:11:26 +02:00
Jens Langhammer 30033d1f90 g: fix static and media caching not working properly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-03 21:43:37 +02:00
Jens Langhammer ff42663d3c root: more code merging 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-29 16:21:00 +02:00
Jens Langhammer 1005f341e4 Merge branch 'master' into inbuilt-proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	internal/constants/constants.go
#	outpost/pkg/version.go
 2021-06-23 20:41:06 +02:00
Jens Langhammer f6026fdb13 root: allow loading local /static files without debug flag 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-21 21:21:35 +02:00
Jens Langhammer e43e42139a web: migrate templates back to django 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 19:38:24 +02:00
Jens Langhammer 166b98fa34 web/admin: fix BoundPoliciesList's edit policy button not working 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 18:00:26 +02:00
Jens Langhammer 9d476a42d1 web: don't set X-Forwarded-Proto when no request TLS Options are set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-22 19:46:40 +02:00
Jens Langhammer a9519a4a68 g: set x-forwarded-proto based on upstream TLS Status 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 09:41:39 +02:00
Jens Langhammer c58fe18b97 web: remove nginx config, add caching headers to g 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 19:11:55 +02:00
Jens Langhammer 4acbda2b77 core: improve messaging on flow_manager, authenticate user when they linked their account after not having been authenticateed 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:49:27 +02:00
Jens Langhammer 0d370ef0a9 web/admin: filter out service accounts by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:23:13 +02:00
Jens Langhammer 5d26fa0403 gproxy: add sentry integration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 14:28:48 +02:00
Jens Langhammer 6725569ba8 gproxy: listen on tls 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 23:19:22 +02:00
Jens Langhammer 988cf15b71 root: initial go proxy, update compose and helm 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 09:39:09 +02:00