trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
9618 commits 95 branches 330 tags 336 MiB
Commit graph

199 commits

Author SHA1 Message Date
Jens Langhammer 74e578c2bf events: add tenant to event 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-14 18:43:29 +02:00
Jens Langhammer 82b2c7e3f0 web: add capabilities to sentry event 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-13 14:08:39 +02:00
Jens L dad24c03ff
outposts: set cookies for a domain to authenticate an entire domain (#971) 
* outposts: initial cookie domain implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add cookie domain setting

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: replace forward_auth_mode with general mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: rebuild proxy provider form

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: re-add forward_auth_mode for backwards compat

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix data.mode not being set

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: always set log level to debug when testing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: use new mode attribute

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: only ingress /akprox on forward_domain

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: fix lint error

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix error on ProxyProviderForm when not using proxy mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix default for outpost form's type missing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add additional desc for proxy modes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: fix service account permissions not always being updated

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost/proxy: fix redirecting to incorrect host for domain mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: improve error handling for network errors

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: fix image naming not matching main imaeg

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/proxy: fix redirects for domain mode and traefik

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix colour for paragraphs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: fix consent stage not showing permissions correctly

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: add domain-level docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: fix broken links

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/proxy: remove dead code

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: fix missing id for #header-text

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 23:10:17 +02:00
Jens Langhammer fb8d67a9d9 core: add configure_url to UserSettings for both stages and sources 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 19:21:27 +02:00
Jens Langhammer 029d58191e sources/saml: include metadata download link in API response 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 17:22:03 +02:00
Jens Langhammer 75404f1345 web/admin: pass full configure flow URL instead of just boolean 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 17:14:54 +02:00
Jens Langhammer ba1b23c879 flows: move flow relevant info into ContextualFlowInfo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 16:53:28 +02:00
Jens Langhammer 88cc38394e root: improve sentry tags to simplify queries 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-06 14:51:43 +02:00
Jens Langhammer 24da24b5d5 stages/identification: allow setting of a password stage to check password and identity in a single step 
closes #970

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 16:05:03 +02:00
Jens Langhammer 4d773274d4 web: fix missing default favicon and not updating correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 21:47:56 +02:00
Jens Langhammer 3ea2b16a12 tenants: add separate field for favicon url 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 21:31:04 +02:00
Jens Langhammer 974ddc07f7 web: improve loading of custom favicon 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 21:19:39 +02:00
Jens Langhammer b339452843 web: set favicon based on current tenants branding logo 
closes #956

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 14:38:24 +02:00
Jens Langhammer 8427fb87f6 tenants: add tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 19:47:55 +02:00
Jens Langhammer 477ff85109 flows: migrate flow_unenrollment to tenant 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 18:44:02 +02:00
Jens Langhammer ff611f21cd tenants: initial implementation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 17:47:25 +02:00
Jens Langhammer 6f6ae7831e flows: make use of oneOf OpenAPI to annotate all challenge types 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 14:11:23 +02:00
Jens Langhammer 9e7c9ae649 web: fix API Path 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-17 20:48:58 +02:00
Jens Langhammer 9a44088d2b admin: migrate metrics viewset to APIView 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:49:37 +02:00
Jens Langhammer 99be97206b web: fix enums 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 15:31:13 +02:00
Jens Langhammer c55f2ad10a root: set additional sentry tags 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 19:53:43 +02:00
Jens Langhammer 69af788b0f web: ignore network errors for sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 15:54:57 +02:00
Jens Langhammer 21c7787eed web/flows: fix redirect loop when sentry is enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 17:45:09 +02:00
Jens Langhammer c1ab5c5556 web: fix title not being loaded from config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#770
 2021-04-22 23:50:37 +02:00
Jens Langhammer 71e4936dc3 web/admin: fix error when me() returns 403 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-22 19:52:01 +02:00
Jens Langhammer 9d3b6f7a4d web: only report http errors for 500 and above 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-22 19:51:32 +02:00
Jens Langhammer 5955394c1d web: send response info when response is thrown 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-20 17:32:38 +02:00
Jens Langhammer 6821679fbc *: add support for bearer authentication on API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-13 20:01:30 +02:00
Jens Langhammer 513d3c1c31 web: add support for PII for sentry, add user feedback dialog 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-13 18:35:26 +02:00
Jens Langhammer 8a7c414031 web/*: fix defaults for booleans to use first() 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-04 00:41:13 +02:00
Jens Langhammer 1b63e461cc web/api: log requests to console 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 23:06:57 +02:00
Jens Langhammer aaebd01058 admin: finalise migration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 01:20:20 +02:00
Jens Langhammer 7fad2b6563 sources/oauth: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 15:42:07 +02:00
Jens Langhammer 83fc22005c *: remove swagger parameters from functions that don't accept them 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 13:39:22 +02:00
Jens Langhammer 5eb9b95ab5 providers/saml: migrate import to API, add API tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-01 19:28:12 +02:00
Jens Langhammer 4e3701ca8d web/admin: migrate provider forms 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-01 15:39:59 +02:00
Jens Langhammer 6a69425688 providers/oauth2: migrate scope mapping to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-31 23:07:57 +02:00
Jens Langhammer 656fe00302 outposts: migrate service connections to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-31 22:47:41 +02:00
Jens Langhammer e476186cbc web/admin: migrate policybinding form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-31 19:41:42 +02:00
Jens Langhammer 25e043afea web/admin: migrate FlowStageBinding form to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-31 15:46:48 +02:00
Jens Langhammer f9382ed32e web/admin: fix linting errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-30 23:18:07 +02:00
Jens Langhammer cb0b5f7146 web/admin: migrate prompts to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-30 22:12:06 +02:00
Jens Langhammer 8a3b1ae29d web/admin: migrate invitations to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-30 22:11:30 +02:00
Jens Langhammer 3686cba6b4 root: fix build for static files during e2e 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-30 14:06:11 +02:00
Jens Langhammer 09aa5d6350 web/admin: migrate outposts to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-29 23:12:31 +02:00
Jens Langhammer e96d2fa666 web/admin: migrate flows to web forms 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-29 22:24:46 +02:00
Jens Langhammer 03ff495011 web/admin: migrate application form to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-29 21:39:53 +02:00
Jens Langhammer 7d74e1d2c4 *: revert to drf-yasg upstream 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-29 21:04:54 +02:00
Jens Langhammer 1e58941323 web/admin: migrate Event Transport to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-29 19:06:00 +02:00
Jens Langhammer dfff2a1134 web/admin: migrate crypto/certificatekeypair to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-29 17:35:13 +02:00
Jens Langhammer 526af26536 web/admin: migrate user forms to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-29 16:16:27 +02:00
Jens Langhammer 1b496dd472 web/admin: use new group form for create 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-29 12:02:58 +02:00
Jens Langhammer 95ecad8382 Merge branch 'next' into new-forms 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	web/src/api/legacy.ts
#	web/src/main.ts
#	web/src/pages/users/UserSettingsPage.ts
 2021-03-27 23:21:16 +01:00
Jens Langhammer 035771de81 web: add middleware that shows message for failed API requests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-27 23:18:51 +01:00
Jens Langhammer 1a53bc3de5 web: use FlowURLManager for cancel links 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-27 23:18:11 +01:00
Jens Langhammer 0b3980e564 web: fix URLs for FlowURLManager 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-25 10:07:10 +01:00
Jens Langhammer fe4791c216 web: initial implementation of new forms 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-25 00:05:11 +01:00
Jens Langhammer 1275f22599 web: add API Drawer 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-24 21:16:03 +01:00
Jens Langhammer 533a719914 sources/oauth: migrate to webcomponents 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-24 20:35:00 +01:00
Jens Langhammer ab5d6dbea1 sources/authenticator_webauthn: rewrite to webcomponent 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-24 18:00:37 +01:00
Jens L fe7f23238c
Static SPA (#648) 
* core: initial migration to /if

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: move jsi18n to api

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests: fix static URLs in tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: add new html files to rollup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix rollup config and nginx config

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add Impersonation support to user API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: add banner for impersonation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests: fix test_user function for new User API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add background to API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: set background from flow API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: make root view login_required for redirect

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: redirect to root-redirect instead of if-admin direct

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: add header to prevent Authorization Basic prompt in browser

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: redirect to root when user/me request fails

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-22 13:44:17 +01:00
Jens Langhammer 080282a0bc events: add better filters to event API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-18 18:11:38 +01:00
Jens Langhammer 5f024eb1f7 web: use API as dedicated module 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-16 21:32:39 +01:00
Jens Langhammer 07ca82e599 admin: include git build hash in gh-* tags and show build hash in admin overview 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-16 14:42:01 +01:00
Jens Langhammer ff276fcc58 web: fix layout for search 2021-03-08 12:55:13 +01:00
Jens L 2852fa3c5e
web: use generated API Client (#616) 
* api: fix types for config API

* api: remove broken swagger UI

* admin: re-fix system task enum

* events: make event optional

* events: fix Schema for notification transport test

* flows: use APIView for Flow Executor

* core: fix schema for Metrics APIs

* web: rewrite to use generated API client

* web: generate API Client in CI

* admin: use x_cord and y_cord to prevent yaml issues

* events: fix linting errors

* web: don't lint generated code

* core: fix fields not being required in TypeSerializer

* flows: fix missing permission_classes

* web: cleanup

* web: fix rendering of graph on Overview page

* web: cleanup imports

* core: fix missing background image filter

* flows: fix flows not advancing properly

* stages/*: fix warnings during get_challenge

* web: send Flow response as JSON instead of FormData

* web: fix styles for horizontal tabs

* web: add base chart class and custom chart for application view

* root: generate ts client for e2e tests

* web: don't attempt to connect to websocket in selenium tests

* web: fix UserTokenList not being included in the build

* web: fix styling for static token list

* web: fix CSRF Token missing

* stages/authenticator_static: fix error when disable static tokens

* core: fix display issue when updating user info

* web: fix Flow executor not showing spinner when redirecting
 2021-03-08 11:14:00 +01:00
Jens Langhammer 5218332bce web: improve error handing for fetch in AdminLoginChart 2021-03-03 10:06:54 +01:00
Jens Langhammer 5c0ec7554b web: fix lists not being paginated 2021-03-02 15:12:26 +01:00
Jens Langhammer 792fa45dca providers/oauth2: add logout URL to Setup URLs API 2021-03-02 15:11:18 +01:00
Jens Langhammer 0478ae3da8 web: add missing SAML Source display page 2021-03-01 10:49:00 +01:00
Jens Langhammer 30a1b65e94 web: fix BoundPoliciesList not showing policy correctly 2021-02-28 10:19:19 +01:00
Jens Langhammer a1af93f8be web: disable CaptureConsoleIntegration 2021-02-27 22:09:10 +01:00
Jens Langhammer a33c7d7786 web: fix admin url for Prompt 2021-02-27 21:00:33 +01:00
Jens Langhammer 402afa1e85 Merge branch 'master' into stage-challenge 
# Conflicts:
#	web/src/elements/buttons/SpinnerButton.ts
 2021-02-27 18:10:08 +01:00
Jens Langhammer 1a052913e9 web: add sentry CaptureConsole 2021-02-27 17:18:42 +01:00
Jens Langhammer b9f409d6d9 stages/consent: migrate to SPA 2021-02-21 13:15:45 +01:00
Jens Langhammer 511f94fc7f *: cleanup code, return errors in challenge_invalid, fixup rendering 2021-02-20 23:34:10 +01:00
Jens Langhammer a3c9d5873c web: fix URL for flows cached count 2021-02-20 18:27:03 +01:00
Jens Langhammer 264c678eaa web: migrate user token list to web 2021-02-20 00:20:01 +01:00
Jens Langhammer 854d94056e web: migrate remaining list views to web 2021-02-20 00:19:53 +01:00
Jens Langhammer 93478a55d7 web: migrate Stage List to web 2021-02-19 19:29:17 +01:00
Jens Langhammer 6597d5bd28 web: migrate Token List to web 2021-02-19 19:09:30 +01:00
Jens Langhammer fd28f37c0d web: migrate User list to web 2021-02-19 18:43:57 +01:00
Jens Langhammer d219f65e7a web: migrate System Task list to web 2021-02-19 18:12:23 +01:00
Jens Langhammer 865f652476 web: migrate Outpost Service Connection to web 2021-02-19 17:49:34 +01:00
Jens Langhammer 029c6cd182 web: migrate Group list to web 2021-02-19 17:18:09 +01:00
Jens Langhammer 71f771c22c core: add types API to propertymapping 2021-02-19 17:10:30 +01:00
Jens Langhammer 38bd05867d web: migrate Policy list to web 2021-02-19 17:05:02 +01:00
Jens Langhammer 44e51970e1 web: update for new cached actions 2021-02-19 16:37:50 +01:00
Jens L 8708e487ae
stages: add WebAuthn stage (#550) 
* core: add User.uid for globally unique user ID

* admin: fix ?next for Flow list

* stages: add initial webauthn implementation

* web: add ak-flow-submit event to submit flow stage

* web: show error message for webauthn registration

* admin: fix next param not redirecting correctly

* stages/webauthn: remove form

* stages/webauthn: add API

* web: update flow diagram on ak-refresh

* stages/webauthn: add initial authentication

* stages/webauthn: initial authentication implementation

* web: cleanup webauthn utils

* stages: rename otp_* to authenticator and move webauthn to authenticator

* docs: fix broken links

* stages/authenticator_*: fix template paths

* stages/authenticator_validate: add device classes

* stages/authenticator_webauthn: implement django_otp.devices

* stages/authenticator_*: update default stage names

* web: add button to create stage on flow page

* web: don't minify HTML, remove nbsp

* admin: fix typo in stage list

* stages/*: use common base class for stage serializer

* stages/authenticator_*: create default objects after rename

* tests/e2e: adjust stage order
 2021-02-17 20:49:58 +01:00
Jens Langhammer 4cfcc48b23 admin: migrate certificate-keypair list to web 2021-02-16 23:16:52 +01:00
Jens Langhammer 69e6221906 web: port flow list 2021-02-16 22:52:54 +01:00
Jens Langhammer f8ba623fc1 web: add more related links, add policy/user/group support for bindings 2021-02-16 20:52:59 +01:00
Jens Langhammer a353c6956e web: fix missing source create button 2021-02-10 20:13:12 +01:00
Jens Langhammer 2b7a22a29a core: add providers/types endpoint 2021-02-10 20:11:54 +01:00
Jens Langhammer f8bcdb26b3 web: PBResponse -> AKResponse 2021-02-09 17:04:55 +01:00
Jens Langhammer 45f1d95bf9 sources/oauth: add callback URL to api 2021-02-09 16:58:19 +01:00
Jens Langhammer 5dab198c47 web: add new sources view 2021-02-09 16:24:27 +01:00
Jens Langhammer 101f916247 web: add source list page 2021-02-09 10:22:49 +01:00
Jens Langhammer 78bcb90a1e outposts: ensure Outpost API is backwards compatible 2021-02-08 19:51:46 +01:00