trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
11341 commits 95 branches 330 tags 336 MiB
Commit graph

2022 commits

Author SHA1 Message Date
Jens L 9559bc2e1e
providers/scim: add option to filter out service accounts, parent group (#4862) 
* add option to filter out service accounts, parent group

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update docs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rename to filter group

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rework sync card to show scim sync status

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-07 15:39:48 +01:00
Jens L d834ec4db9
web/elements: fix center text not scrolling with container (#4853) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-06 23:21:16 +01:00
Jens L 28ddeb124f
providers: SCIM (#4835) 
* basic user sync

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add group sync and some refactor

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start API

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* allow null authorization flow

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add UI

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make task monitored

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add missing dependency

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make authorization_flow required for most providers via API

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* more UI

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make task result better readable, exclude anonymous user

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add task UI

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add scheduled task for all sync

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make scim errors more readable

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add mappings, migrate to mappings

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add mapping UI and more

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add scim docs to web

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start implementing membership

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate signals to tasks

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate fully to tasks

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* strip none keys, fix lint errors

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix things

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start adding tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix saml

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add scim schemas and validate against it

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* improve error handling

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add group put support, add group tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* send correct application/scim+json headers

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* stop sync if no mappings are confiugred

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add test for task sync

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add membership tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use decorator for tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make tests better

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-06 19:39:08 +01:00
Jens L 2eb7c16a9a
web/admin: set valid correctly when opened and radio is already selected (#4821) 
closes #4813

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-01 16:14:32 +01:00
Jens L 87fa50c492
web/admin: workaround for tenant certificate selection being cut off (#4820) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>

#4814
 2023-03-01 15:41:28 +01:00
Jens L 118765ab30
web: fetch custom.css via fetch and add stylesheet (#4804) 
* web: fetch custom.css via fetch and add stylesheet

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* don't hardcode path

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-27 19:54:19 +01:00
Jens L 39d0893303
flows: change default flow stage binding settings (#4784) 
* flows: change default flow stage binding settings

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fallback to correct value

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-27 15:21:26 +01:00
Jens L 612d1c76d4
web/admin: fix chart display with no sources (#4782) 2023-02-24 22:54:11 +01:00
Jens L b7e4ad7234
web/user: fix source connections not being filtered (#4778) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-24 10:22:02 +00:00
Jens L 80f4fccd35
providers/oauth2: OpenID conformance (#4758) 
* don't open inspector by default when debug is enabled

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* encode error in fragment when using hybrid grant_type

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* require nonce for all response_types that get an id_token from the authorization endpoint

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* don't set empty family_name

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* only set at_hash when response has token

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* cleaner way to get login time

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove authentication requirement from authentication flow

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use wrapper

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix auth_time not being handled correctly

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* minor cleanup

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add test files

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove USER_LOGIN_AUTHENTICATED

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rework prompt=login handling

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* also set last login uid for max_age check to prevent double login when max_age and prompt=login is set

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-23 15:26:41 +01:00
Jens L 122055b38b
stages/user_login: terminate others (#4754) 
* rework session list

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use sender filtering for signals when possible

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add terminate_other_sessions

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-22 14:09:28 +01:00
sdimovv c4e24c04f6
core: Improve service account creation (#4751) 
* Added ability to select service account token expiration on creation

* Added call to user.set_unusable_password on service account creation

* Added forgotten call to save()

* Added and improved existsing tests

* Added accidentally deleted help text

* Fix lint
 2023-02-22 13:19:01 +01:00
dependabot[bot] 47e663f48c
web: bump mermaid from 9.4.0 to 10.0.0 in /web (#4752) 
* web: bump mermaid from 9.4.0 to 10.0.0 in /web

Bumps [mermaid](https://github.com/mermaid-js/mermaid) from 9.4.0 to 10.0.0.
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Changelog](https://github.com/mermaid-js/mermaid/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/mermaid-js/mermaid/compare/v9.4.0...v10.0.0)

---
updated-dependencies:
- dependency-name: mermaid
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* update diagram element for mermaid v10

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-22 11:33:08 +01:00
Jens Langhammer 53c03f3635
web/admin: fix mismatched values in charts 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-21 11:59:33 +01:00
Jens Langhammer 6f1721a728
web: refactor rendering of source icons 
closes #4718

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-19 20:17:58 +01:00
Jens Langhammer 99baf1a29e
web/elements: add loading spinner for charts, render middle text with css 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-19 20:10:37 +01:00
Jens Langhammer a68fa06ff9
web/flows: fix fa:// icons in sources not shown correctly 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-19 19:45:57 +01:00
Jens Langhammer d842fc4958
release: 2023.2.2 2023-02-15 19:53:42 +01:00
Jens Langhammer dfb9ae548c
web/admin: fix error when creating new users 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>

#4685
 2023-02-15 15:32:48 +01:00
Jens Langhammer ade397fc24
web/user: revert truncate behaviour for application description 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-15 11:17:45 +01:00
Jens Langhammer 80de3ee853
release: 2023.2.1 2023-02-14 18:52:36 +01:00
Jens Langhammer 4c5b07a091
web/admin: use full page size for modals 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-14 16:16:26 +01:00
Jens Langhammer fbd00bf5f8
web/admin: remove groups and users from users and group form to prevent accidental removal when updating 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-14 16:15:43 +01:00
Jens Langhammer a598276aa0
web/admin: improve action button spinner on ldap source page 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-14 16:07:31 +01:00
Jens Langhammer 81d70e5d41
release: 2023.2.0 2023-02-14 13:15:47 +01:00
Jens Langhammer 3740b45e1a
web/admin: refactor event geo display 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-13 11:14:40 +01:00
Jens Langhammer eb8181daa0
web/admin: fix geo display with no city 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-13 10:39:29 +01:00
Jens Langhammer 6a25cf6c5d
web/flow: fix layout for context in flow inspector 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-13 10:39:14 +01:00
Jens Langhammer be42e5562d
web: improve truncation of strings 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-13 10:38:48 +01:00
Jens L af43330fd6
providers/oauth2: rework OAuth2 Provider (#4652) 
* always treat flow as openid flow

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* improve issuer URL generation

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* more refactoring

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update introspection

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* more refinement

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate more

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix more things, update api

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* regen migrations

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix a bunch of things

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start updating tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix implicit flow, auto set exp

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix timeozone not used correctly

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix revoke

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* more timezone shenanigans

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix userinfo tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update web

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix proxy outpost

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix api tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix missing at_hash for implicit flows

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* re-include at_hash in implicit auth flow

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use folder context for outpost build

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-09 20:19:48 +01:00
Jens Langhammer 6a64d6b536
web/admin: clarify access code expiration 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>

#4191
 2023-02-08 23:26:33 +01:00
Jens Langhammer 243be8f7bb
web/admin: default to disable policy execution logging 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-08 23:26:06 +01:00
Jens Langhammer a7cf454760
web/admin: add notice for user_login stage session cookie behaviour 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-08 14:18:52 +01:00
Jens Langhammer c5a935474b
web/elements: improve consistency in row selection in table 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-08 00:11:12 +01:00
Jens Langhammer 89417ce455
web: fix token delete form not showing token identifiers 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-08 00:00:17 +01:00
Jens Langhammer c6e638ddc2
web/flows: fix flow background overlay on firefox 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-07 23:09:28 +01:00
Jens Langhammer 0bbe74e2bf
web/admin: fix token edit button 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-06 21:13:43 +01:00
Jens Langhammer 1919a9dd77
web/elements: fix click propagation from modal into table 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-06 16:47:46 +01:00
Jens Langhammer b3323c5d00
web/elements: fix table selection handler firing when click isn't for tr 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-06 11:37:47 +01:00
Jens Langhammer fd9ce531c9
web/elements: improve codemirror contrast in dark theme 
closes #4622

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-06 11:37:47 +01:00
Jens Langhammer 00a16bee76
web/elements: add dropdown css to DOM directly instead of including 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-05 23:32:54 +01:00
Jens Langhammer b9a2323c51
web/elements: fix ak-expand not using correct font 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-05 00:58:30 +01:00
Jens Langhammer de389e2385
web/admin: rework event info page to show all event infos 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-05 00:23:32 +01:00
Jens Langhammer 52a0b19f7e
web/admin: fix dark theme for hover on tables 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-05 00:00:50 +01:00
Jens Langhammer 33f547c870
web/user: refactor loading of data in userinterface 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-04 18:38:40 +01:00
Jens Langhammer c960601a1e
web/admin: add debug page 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-04 17:55:54 +01:00
Jens Langhammer ada44d84f8
web/elements: make table rows clickable to select items 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-02 22:37:59 +01:00
Jens Langhammer 095cb75d6c
web/user: filter tokens by username 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-02 11:09:03 +01:00
Jens Langhammer 6345f99aa0
web/elements: fix clashing page url param 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-30 12:01:40 +01:00
Jens Langhammer 72168fae29
providers/oauth2: add user id as "sub" mode 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-29 16:15:03 +01:00
Jens Langhammer 93e665949f
web/admin: fix certificate filtering for SAML verification certificate 
closes #4537

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-26 15:11:10 +01:00
Jens Langhammer 5144a9af4c
web/elements: persist table page in URL parameters 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-26 10:32:59 +01:00
Jens Langhammer 1b6f920265
web/flows: improve handling of flow info 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-25 15:01:08 +01:00
Jens Langhammer 3bf8c915d5
web/flows: update flow background image 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-25 15:00:56 +01:00
Jens L 53b65a9d1a
stages/prompt: field name (#4497) 
* add prompt field name

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove numerical prefix

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix missing name

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use text field

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add description label

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add migrate blueprint to remove old stages

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add task to remove unretrievable blueprints

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* lint

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix blueprint test paths

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* actually fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests even more

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix fixtures

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-24 12:23:22 +01:00
Jens Langhammer 9397598376
release: 2023.1.2 2023-01-23 14:25:55 +01:00
Jens Langhammer 91ffe4e7f9
stages/user_write: fix migration setting wrong value, fix form 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-23 14:05:41 +01:00
Jens Langhammer 430a207865
release: 2023.1.1 2023-01-23 11:34:58 +01:00
Jens Langhammer 1ce2a1b846
stages/email: update tests 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-23 10:43:49 +01:00
Jens Langhammer 767ffc09d0
web/admin: fix plex source authorization flow not being shown correctly 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-21 14:55:13 +01:00
Jens Langhammer 9e30f01fce
web/admin: don't enable execution logging by default 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 17:57:34 +01:00
Jens Langhammer 92090ced9f
web/elements: fix pf-c-switch not rendering correctly in pure tables 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 15:47:11 +01:00
Jens Langhammer ce47d4cf39
web/admin: link group of notification rule 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 15:46:37 +01:00
Jens L c61529e4d4
sources/ldap: add e2e LDAP source tests (#4462) 
* start adding more LDAP source tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* improve healthcheck

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* try local webdriver

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add full samba tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix locale types

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 15:03:56 +01:00
Jens Langhammer e78bc1b32f
web/admin: improve display of system task exception 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 12:13:11 +01:00
Jens Langhammer 89c4a7b4a4
web/admin: improve display of rule severity 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 12:09:53 +01:00
Jens Langhammer d9cc45f9ce
web/elements: fix SearchSelect not working on safari 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 00:08:23 +01:00
Jens Langhammer 515a402db7
web/flows: fix flow executor background overlay in safari 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-18 20:43:19 +01:00
Jens Langhammer 49b6c71079
release: 2023.1.0 2023-01-18 15:49:45 +01:00
Jens L 23c69c456a
providers/proxy: add setting to intercept authorization header (#4457) 
* add setting to intercept authorization header

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rename to intercept_header_auth

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-17 18:56:48 +01:00
Jens Langhammer 8deced771d
web/admin: fix broken outpost form 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-14 15:45:35 +01:00
Jens Langhammer 1bd6107ec7
web: fix scrollbar corner color in dark mode 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-13 17:24:38 +01:00
Jens L cd12e177ea
providers/proxy: add initial header token auth (#4421) 
* initial implementation

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* check for openid/profile claims

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* include jwks sources in proxy provider

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add web ui for jwks

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* only show sources with JWKS data configured

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix introspection tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start basic

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add basic auth

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add docs, update admonitions

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add client_id to api, add tab for auth

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update locale

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-13 16:22:03 +01:00
Jens L 36822c128c
admin: include task duration in API (#4428) 
include task duration in API

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-13 13:21:49 +01:00
Jens Langhammer df42480284
web/elements: use correct Action Label for user related events 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 23:57:05 +01:00
Jens Langhammer 81e9f2d608
web/admin: fix overflow in aggregate cards 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 14:12:02 +01:00
Jens L ddbd8153e2
web: migrate checkbox to switch (#4409) 
* start migrating to switch

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* general cleanup

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove broken Create provider

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate all

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate table selectors, fix dark theme

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 13:37:49 +01:00
Jens L 67a6fa6399
events: rework metrics (#4407) 
* rework metrics

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* change graphs to be over last week

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix  Apps with most usage card

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 12:21:07 +01:00
Jens Langhammer a35b8f5862
web/admin: better show dev build 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 11:16:53 +01:00
Jens Langhammer d6f5b8e421
web/elements: fix pagination page button colours in dark mode 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 00:38:23 +01:00
Jens L b424c5dd27
web/admin: rework admin dashboard, add more links, remove user and group graphs (#4399) 2023-01-10 23:47:55 +01:00
Jens L 1ed24a5eef
blueprints: internal storage (#4397) 
* rework oci client

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add blueprint content

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add UI

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make path optional

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add validation

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-10 22:00:34 +01:00
Jens Langhammer f2961cb536
web/admin: link impersonation user for events 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-10 16:20:43 +01:00
Jens Langhammer 4d66e42708
web: add core-js polyfill for safari 
sigh

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-10 11:59:25 +01:00
Jens Langhammer d1aa1f46da
web/admin: show GeoIP information inline in events 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-09 16:01:00 +01:00
Jens Langhammer 643b36b732
web/admin: fix certificate filtering for LDAP verification certificate 
closes #4376

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-06 16:43:50 +01:00
Jens Langhammer 001869641d
web: ensure img tags have alt attributes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-06 12:44:51 +01:00
Jens L a960ce9454
stages/user_write: add more user creation options (#4367) 
* add more user creation options

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update blueprints and docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-05 15:46:20 +01:00
Jens L e6b5810e03
polices/hibp: remove deprecated (#4363) 
* remove hibp

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* don't save event matcher apps in migrations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup migrations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update docs, update some phrasing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-05 13:19:26 +01:00
Jens Langhammer 78b711ec9d
Merge branch 'version-2022.12' 2023-01-05 10:41:54 +01:00
Jens Langhammer ac07833688
release: 2022.12.2 2023-01-05 10:01:30 +01:00
Jens Langhammer be473470a4
web/admin: fix lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:40:18 +01:00
Jens Langhammer 445cd5b2c4
web: fix radio label code in dark mode 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:40:15 +01:00
Jens Langhammer 805a4b766a
web/admin: migrate webauthn forms to radio 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:40:12 +01:00
Jens Langhammer f15946e216
web/admin: fix lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:39:44 +01:00
Jens Langhammer b54415dcde
web: fix radio label code in dark mode 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:38:34 +01:00
Jens Langhammer 471293ba25
web/admin: migrate webauthn forms to radio 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:38:23 +01:00
Jens L dc1359a763
providers/saml: initial SLO implementation (#2346) 
* providers/saml: initial SLO implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/saml: add logout request tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/saml: add tests for POST SLO

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* matrix e2e tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix import

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* set e2e matrix name

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix imports

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* separate oidc and oauth tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add basic saml slo e2e tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add better metadata download url

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* kinda prepare release notes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* sort releases into folders

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add slo urls to website

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix linking

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add api tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 19:45:31 +01:00
Jens Langhammer 119a268eb7
web: add custom scrollbar 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 11:53:01 +01:00
Jens Langhammer e887a315be
providers/oauth2: correctly advertise supported response_modes_supported 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 10:21:34 +01:00