trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
7991 commits 95 branches 330 tags 336 MiB
Commit graph

2081 commits

Author SHA1 Message Date
Jens Langhammer 90c31c2214 flows: add test helpers to simplify and improve checking of stages, remove force_str 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-01-01 20:25:32 +01:00
Jens Langhammer 50e3d317b2 flows: use WithUserInfoChallenge for AccessDeniedChallenge 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#2039
 2022-01-01 19:45:34 +01:00
Jens Langhammer 3eed7bb010 lib: dont send any sentry events when testing 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-01-01 18:56:14 +01:00
Jens Langhammer 9154b9b85d web/user: rework user source connection UI 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-30 21:59:41 +01:00
Jens Langhammer fc19372709 flows: fix migration removing flow titles 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-30 21:00:00 +01:00
Jens Langhammer d03b0b8152 outposts: include outposts build hash in state 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-30 15:16:34 +01:00
Jens Langhammer c249b55ff5 *: use py3.10 syntax for unions, remove old Type[] import when possible 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-30 14:59:01 +01:00
Jens Langhammer fc7a452b0c flows: update default flow titles 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-27 22:04:35 +01:00
Jens Langhammer 46f12e62e8 flows: don't create EventAction.FLOW_EXECUTION 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-27 15:07:33 +01:00
Jens Langhammer 53b10e64f8 outposts: fix error when client hasn't be initialised 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-26 14:26:48 +01:00
Jens Langhammer abe38bb16a outposts: fix __exit__ being called without params 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-25 17:52:20 +01:00
Jens Langhammer b19da6d774 crypto: return private key's type (required for some oauth2 providers) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-25 16:51:28 +01:00
Jens Langhammer 7c55616e29 outposts: fix creation of from_env docker client 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-25 16:48:23 +01:00
Jens Langhammer 6510b97c1e outposts: add remote docker integration via SSH 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-25 16:31:34 +01:00
Jens Langhammer 22d1dd801c root: also use analytics uuid for sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-24 15:13:27 +01:00
Jens Langhammer e7e0e6d213 lib: strip values for timedelta from string 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-23 18:49:35 +01:00
Jens Langhammer ca0250e19f core: add meta theme-color 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-23 18:49:24 +01:00
Jens Langhammer 5c5634830f stages/identification: add field for passwordless flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-23 18:27:00 +01:00
Jens Langhammer 9c42b75567 release: 2021.12.4 2021-12-23 10:32:48 +01:00
Jens Langhammer 457e17fec3 website/docs: add small let's encrypt docs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-23 00:59:06 +01:00
Jens Langhammer 846006f2e3 events: create test notification with event with data 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 23:32:29 +01:00
Jens Langhammer f557b2129f *: fix random typos 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 23:13:18 +01:00
Jens Langhammer 6dc2003e34 providers/oauth2: fix tests validating JWT incorrectly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 23:00:57 +01:00
Jens Langhammer 0149c89003 providers/oauth2: fix invalid assignments in JWKS view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 22:41:28 +01:00
Jens Langhammer f458cae954 providers/proxy: add error handing when field is already gone 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 22:31:53 +01:00
Jens Langhammer f01d117ce6 providers/proxy: fix imports in migrations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 22:25:02 +01:00
Jens Langhammer 2bde43e5dc crypto: use older syntax for type union 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 22:22:45 +01:00
Jens Langhammer 2f3026084e providers/oauth2: remove jwt_alg field and set algorithm based on selected keypair, select HS256 when no keypair is selected 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 22:09:49 +01:00
Jens Langhammer c1f0833c09 crypto: improve support for non-rsa private keys (discovery) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 21:46:22 +01:00
Jens Langhammer 8e83209631 stages/authenticator_validate: fix lint error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 18:14:35 +01:00
Jens Langhammer 2e48e0cc2f stages/authenticator_validate: fix prompt not triggering when using in non-authentication context 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 18:03:02 +01:00
Jens Langhammer e72f0ab160 stages/authenticator_validation: refuse passwordless flow if flow is not for authentication 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 18:02:43 +01:00
Jens Langhammer 5b3a9e29fb stages/authenticator_validate: add passwordless login 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 17:34:46 +01:00
Jens Langhammer 34b11524f1 tenants: add web certificate field, make authentik's core certificate configurable based on keypair 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-22 11:43:45 +01:00
Jens Langhammer 16b6c17305 Revert "policies: don't always clear application cache on post_save" 
This reverts commit 5ef385f0bb.

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	authentik/policies/signals.py
 2021-12-22 00:23:19 +01:00
Jens Langhammer cf4b4030aa release: 2021.12.3 2021-12-21 20:52:08 +01:00
Jens Langhammer 7fb939f97b core: fix error when getting launch URL for application with non-existent Provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-21 19:40:29 +01:00
Jens Langhammer c78236a2a2 root: don't set secure cross opener policy 
closes #1977

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-21 19:16:22 +01:00
Jens Langhammer ca314c262c *: revert to using GHCR directly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-21 13:54:49 +01:00
Jens Langhammer 8a60a7e26f providers/proxy: revert to static list of forwarded headers 
wildcard is not usable for this since the regular expression doesn't support negative lookahead, meaning we would always forward all headers, including Connection and others

closes #1969

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-21 12:04:54 +01:00
Jens Langhammer 92b4244e81 providers/proxy: update traefik regex 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1969
 2021-12-20 22:43:58 +01:00
Jens Langhammer dfbf7027bc providers/proxy: add traefik.ingress.kubernetes.io/router.tls annotation for ingress 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-20 22:24:42 +01:00
Jens Langhammer 4658018a90 Revert "outposts: rename outpost" 
This reverts commit a5c30fd9c7.
 2021-12-20 21:37:31 +01:00
Jens Langhammer 577b7ee515 providers/proxy: include auth headers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-20 21:37:22 +01:00
Jens Langhammer 3da526f20e root: allow trace log level to work for core/embedded 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-20 21:11:47 +01:00
Jens Langhammer c843f18743 lib: add additional celery logger to sentry ignore 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-20 21:04:45 +01:00
Jens Langhammer 80d0b14bb8 outposts: fix error when getting state for non-existent outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-20 19:44:47 +01:00
Jens Langhammer a5c30fd9c7 outposts: rename outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-20 19:28:05 +01:00
Jens Langhammer ef23a0da52 outposts/proxy: fix traefik header regex to only match Remote- and X- headers to prevent websocket errors 
closes #1969

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-20 13:30:19 +01:00
Jens Langhammer ba527e7141 root: drop redis cache sentry errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-20 13:12:14 +01:00
Jens Langhammer 602573f83f ci: fix label 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-19 13:44:34 +01:00
Jens Langhammer 8599d9efe0 web/admin: auto set the embedded outpost's authentik_host on first view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-19 13:27:04 +01:00
Jens Langhammer 8e6fcfe350 root: fix inconsistent URL quoting of redis URLs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-18 22:24:41 +01:00
Jens Langhammer e9910732bc release: 2021.12.2 2021-12-18 21:03:50 +01:00
Jens Langhammer b6ff04694f providers/oauth2: don't rely on expiry task for access codes and refresh tokens 
closes #1911

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-18 17:42:41 +01:00
Jens Langhammer 61097b9400 policies/password: add minimum digits 
closes #1952

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-18 16:15:56 +01:00
Jens Langhammer 4c5537ddfe sources/oauth: allow writing to user in SourceConnection 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1888
 2021-12-18 15:33:46 +01:00
Jens Langhammer a95779157d tests/integration: add rename and full update tests for k8s controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-18 15:32:16 +01:00
Jens Langhammer ac6afb2b82 stages/email: add test for non-existent directory 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-18 15:05:40 +01:00
Jens Langhammer 71a22c2a34 outposts: add unittests for docker controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-17 13:42:33 +01:00
NeroPcStation 273f5211a0
providers/saml: Fix typo (#1950) 2021-12-17 11:00:20 +00:00
Jens Langhammer 2ca115285c crypto: fix private keys not being imported correctly 
closes #1945

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-16 21:14:15 +01:00
Jens Langhammer 14c159500d core: don't rotate non-api tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-16 19:32:39 +01:00
Jens Langhammer f33190caa5 release: 2021.12.1 2021-12-16 15:48:59 +01:00
Jens Langhammer 741822424a Merge branch 'master' into version-2021.12 2021-12-16 15:48:53 +01:00
Jens Langhammer a105760123 events: improve app lookup for event creation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-15 16:46:02 +01:00
Jens Langhammer 6ff8fdcc49 root: enable threading integration in sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-15 15:49:08 +01:00
Jens Langhammer 50ca3dc772 core: fix error when attempting to provider from cached application 
closes #1940

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-15 15:11:13 +01:00
Jens Langhammer 2a09fc0ae2 release: 2021.12.1-rc5 2021-12-15 10:21:29 +01:00
Jens Langhammer fbb6756488 Merge branch 'master' into version-2021.12 2021-12-15 10:16:05 +01:00
Jens Langhammer 6e83467481 web/flows: fix error when attempting to enroll new webauthn device 
closes #1936

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-15 00:24:46 +01:00
Jens Langhammer 72db17f23b stages/identification: fix miscalculated sleep 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 23:31:08 +01:00
Jens Langhammer e18e681c2b events: dont store full backtrace in systemtask 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 22:55:38 +01:00
Jens Langhammer 10fe67e08d sources/ldap: fix incorrect task names being referenced, use source native slug 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 22:53:14 +01:00
Jens Langhammer 3740e65906 web/admin: add dashboard with user creation/login statistics 
closes #1867

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 22:08:41 +01:00
Jens Langhammer 30386cd899 events: add custom manager with helpers for metrics 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 21:49:33 +01:00
Jens Langhammer 64a10e9a46 events: fix schema for top_per_user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 21:08:15 +01:00
Jens Langhammer 0b00768b84 events: add flow_execution event type 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 16:13:51 +01:00
Jens Langhammer d162c79373 flows: fix wrong exception being caught in flow inspector 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 16:06:00 +01:00
Jens Langhammer 8c16dfc478 stages/invitation: use GroupMemberSerializer serializer to prevent all of the user's groups and their users from being returned 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 15:56:13 +01:00
Jens Langhammer 32ace1bece crypto: add additional validation before importing a certificate 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 14:49:25 +01:00
Jens Langhammer 54f893b84f flows: add additional sentry spans 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 11:59:36 +01:00
Jens Langhammer 5854833240 stages/authenticator_webauthn: fix migrations for different choices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 11:06:46 +01:00
Jens Langhammer 4b2437a6f1 stages/authenticator_webauthn: use correct choices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 10:51:34 +01:00
Jens Langhammer 59a51c859a stages/authenticator_webauthn: add migration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 10:09:35 +01:00
Jens Langhammer 4e6714fffe stages/authenticator_webauthn: make user_verification configurable 
closes #1921

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 09:58:20 +01:00
Jens Langhammer 0131b1f6cc sources/oauth: fix wrong redirect URL being generated 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 09:34:47 +01:00
Jens Langhammer 2993f506a7 sources/oauth: implement apple native sign-in using the apple JS SDK 
closes #1881

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 00:40:29 +01:00
Jens Langhammer e4841d54a1 *: migrate ui_* properties to functions to allow context being passed 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 23:56:35 +01:00
Jens Langhammer 4f05dcec89 sources/oauth: allow oauth types to override their login button challenge 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 23:45:11 +01:00
Jens Langhammer ede6bcd31e *: remove debug statements from tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 23:41:08 +01:00
Jens Langhammer 728c8e994d sources/oauth: strip parts of custom apple client_id 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 23:26:00 +01:00
Jens Langhammer fec6de1ba2 providers/oauth2: add additional logging to show with token path is taken 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 22:49:42 +01:00
Jens Langhammer 69678dcfa6 providers/oauth2: use generate_key instead of uuid4 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 22:13:20 +01:00
Jens Langhammer 4911a243ff sources/oauth: add initial okta type 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1910
 2021-12-13 21:48:59 +01:00
Jens Langhammer 4e63f0f215 core: add fallback for missing sentry trace 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 18:06:01 +01:00
Jens Langhammer 29241cc287 core: always inject sentry trace into template 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 17:41:00 +01:00
Jens Langhammer f2b3a2ec91 providers/saml: optimise excessive queries to user when evaluating attributes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 16:38:38 +01:00
Jens Langhammer 69780c67a9 lib: set evaluation span's description based on filename 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 16:32:01 +01:00
Jens Langhammer ac9cf590bc *: use prefixed span names 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 16:18:42 +01:00