trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
5426 commits 95 branches 330 tags 336 MiB
Commit graph

1269 commits

Author SHA1 Message Date
Jens Langhammer e3578eb7ae Merge branch 'master' into tenant 2021-05-29 19:17:23 +02:00
Jens Langhammer 5990b8d4de outposts: fix docker container not being stopped correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 19:16:39 +02:00
Jens Langhammer 3b31b7ce83 core: add http host in log messages 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 19:07:54 +02:00
Jens Langhammer 4d9b362dbf tenants: add migration to add default tenant 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 19:06:35 +02:00
Jens Langhammer 477ff85109 flows: migrate flow_unenrollment to tenant 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 18:44:02 +02:00
Jens Langhammer fae8b80ceb core: fix usage of config on templates 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 18:31:05 +02:00
Jens Langhammer df92f01719 flows: remove default-recovery 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 18:30:55 +02:00
Jens Langhammer 9dd6b7d436 flows: remove default-enrollment 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 18:14:37 +02:00
Jens Langhammer 14f85ec980 tenants: migrate context_processor to tenants 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 18:01:48 +02:00
Jens Langhammer ff611f21cd tenants: initial implementation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 17:47:25 +02:00
Jens Langhammer a1b6e09e8a outposts: set restart-policy on docker container 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-28 17:18:11 +02:00
Jens Langhammer 02b5742228 stages/authenticator_duo: add default setup flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-28 16:47:39 +02:00
Jens Langhammer 523621daa2 core: make application's check_access API return a PolicyResult and accept for_user as superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-26 11:47:23 +02:00
Jens Langhammer c4453f38a2 stages/identification: make shown sources configurable 
closes #918

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 16:37:53 +02:00
Jens Langhammer 6f3eb4c068 flows: allow blank on WithUserInfo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 12:53:48 +02:00
Jens Langhammer 58a4b20297 outposts: handle disconnects without outpost better 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 12:06:55 +02:00
Jens Langhammer 6d3e067a2b stages/user_write: handle integrity error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 11:46:15 +02:00
Jens Langhammer 6db2bf2a21 api: fix error when authorization header has no spaces 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 11:40:49 +02:00
Jens Langhammer 6893948fa0 tests/e2e: fix invalid flows 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 11:18:47 +02:00
Jens Langhammer 6317a8c5d0 Merge branch 'master' into duo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	Pipfile.lock
 2021-05-25 09:58:38 +02:00
Jens Langhammer 8ecac59eca stages/prompt: annotate PromptChallengeResponse's additionalProperties 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 22:55:24 +02:00
Jens Langhammer 8183a51b72 stages/authenticator_duo: add missing duo device 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 22:16:29 +02:00
Jens Langhammer 127ebed5c6 flows: fix mismatched names 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 21:09:18 +02:00
Jens Langhammer 716923e17a web/flows: update types 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 20:59:44 +02:00
Jens Langhammer c6bb6709fd flows: add default challenge response 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 20:27:50 +02:00
Jens Langhammer fb4e0723ee stages: fix stage unittests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 17:12:48 +02:00
Jens Langhammer 763c3fcfe0 outposts/ldap: fix client usage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 15:58:59 +02:00
Jens Langhammer 1b346866da Merge branch 'master' into duo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	Pipfile.lock
 2021-05-24 14:54:24 +02:00
Jens Langhammer 6f6ae7831e flows: make use of oneOf OpenAPI to annotate all challenge types 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 14:11:23 +02:00
Jens Langhammer 3b41c662ed stages/authenticator_validate: add Duo support 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 22:31:12 +02:00
Jens Langhammer 65522186f1 stages/authenticator_duo: improve setup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 21:44:52 +02:00
Jens Langhammer 9f5a3c396d stages/authenticator_duo: initial duo stage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 21:10:39 +02:00
Jens L 53e2b2c784
Prometheus metrics (#914) 
* admin: add worker metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* admin: add version metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add gauge for system tasks

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: add gauge for last hello and connection status

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: re-add prometheus metrics to database

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: allow access to metrics without credentials when debug is on

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: add UpdatingGauge to auto-set value on load

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add metrics for cache and building

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* policies: add metrics for policy engine

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add histogram for task durations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: revert to gauge because values are updated on export view

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add gauge to count all models

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add metrics for events

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 20:29:34 +02:00
Jens Langhammer a5cd9fa141 outposts: improve logging for docker controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 19:27:24 +02:00
Jens Langhammer 0768b201a7 Merge branch 'version-2021.5' 2021-05-22 20:47:48 +02:00
Jens Langhammer 2d5c45543b release: 2021.5.4 2021-05-22 20:15:23 +02:00
Jens Langhammer 9b57f0b81d Merge branch 'version-2021.5' into next 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	web/src/locales/en.po
#	web/src/locales/pseudo-LOCALE.po
 2021-05-22 20:01:16 +02:00
Jens Langhammer 2c816e6162 providers/proxy: don't use https to communicate with outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-22 18:56:38 +02:00
Jens Langhammer bb89b9b572 Merge branch 'version-2021.5' into next 2021-05-21 23:50:43 +02:00
Jens Langhammer 6600da7d98 providers/oauth2: add missing kid header to JWT Tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 23:40:00 +02:00
Jens Langhammer 1a0f72d0a8 Merge branch 'version-2021.5' into next 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	authentik/stages/authenticator_static/api.py
#	swagger.yaml
 2021-05-21 21:33:18 +02:00
Jens Langhammer a265dd54cc stages/authenticator_*: fix Permission Error when disabling Authenticator as non-superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 21:25:03 +02:00
Jens Langhammer a603f42cc0 api: add OwnerFilter 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 20:46:59 +02:00
Jens Langhammer d9a788aac8 api: rename auth to authentication, add authorization for rest_framework permission class 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 20:14:03 +02:00
Jens Langhammer 7c6185b581 api: fix URL names for admin Authenticator Views 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 19:53:40 +02:00
Jens Langhammer 41a1305555 policies: improve debug logging 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 19:10:47 +02:00
Jens Langhammer 75f252b530 flows: rename oob to oobe 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 19:10:42 +02:00
Jens Langhammer c526e5fb9a policies: improve debug logging 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 19:10:15 +02:00
Jens Langhammer b826eb264e flows: rename oob to oobe 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 12:06:39 +02:00
Jens Langhammer 7666c246c3 Merge branch 'version-2021.5' 2021-05-20 20:46:18 +02:00
Jens Langhammer bf4cbb25fe release: 2021.5.3 2021-05-20 20:17:39 +02:00
Jens Langhammer a925418f60 lib: don't send ImproperlyConfigured to sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 19:18:35 +02:00
Jens Langhammer 71d112bdcf sources/plex: remove default for plex_token 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 19:13:54 +02:00
Jens Langhammer d2c06c40ea sources/plex: remove default for plex_token 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 19:09:51 +02:00
Jens Langhammer 590c7f4c9d outposts: fix error on outpost disconnect 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 18:07:27 +02:00
Jens Langhammer 9a48c2fd9a outposts: fix error on outpost disconnect 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 18:07:07 +02:00
Jens Langhammer be5a6c0310 api: add set_*_url method for Application and Flow to set icon/background to URL 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 17:18:40 +02:00
Jens Langhammer 92106ca4bf api: add capabilities to API, add can_save_media 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 17:00:47 +02:00
Jens Langhammer 56f1204c9b outposts: fix update signal not being sent to correct instances 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 15:23:38 +02:00
Jens Langhammer f6f93640c5 outposts: fix update signal not being sent to correct instances 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 15:23:18 +02:00
Jens Langhammer 92f2a82c03 providers/oauth2: fix double login required when prompt=login 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 01:10:08 +02:00
Jens Langhammer dcf074650e providers/proxy: fix redirect_uris not always being set on save 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 01:10:04 +02:00
Jens Langhammer acf1ad91d9 providers/oauth2: fix double login required when prompt=login 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-19 23:34:27 +02:00
Jens Langhammer a74419214c providers/proxy: fix redirect_uris not always being set on save 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-19 23:10:00 +02:00
Jens Langhammer bc6aef7af2 lib: improve sentry integration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-18 11:29:36 +02:00
Jens Langhammer 788ea46d8c flows: fix formatting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-18 09:23:22 +02:00
Jens Langhammer 06dee5d5d8 flows: fix lint error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-17 23:38:31 +02:00
Jens Langhammer 3cf0f07baf *: fix API Schema for file uploads 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-17 23:12:52 +02:00
Jens Langhammer f016095891 Merge branch 'master' into openapi-v3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	Pipfile.lock
 2021-05-17 20:37:18 +02:00
Jens Langhammer 5a465fbc36 release: 2021.5.2 2021-05-17 19:54:10 +02:00
Jens Langhammer 7f4bd27b85 Merge branch 'master' into openapi-v3 2021-05-16 23:51:45 +02:00
Jens Langhammer b66626f9c4 ci: generate secert_key for CI runs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 23:46:23 +02:00
Jens Langhammer f9ce41229d api: fix unittests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 22:36:26 +02:00
Jens Langhammer ae6a406b1d Merge branch 'master' into openapi-v3 2021-05-16 22:29:39 +02:00
Jens Langhammer 45c1a603e7 root: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 22:29:28 +02:00
Jens Langhammer 330219e76f Merge branch 'master' into openapi-v3 2021-05-16 22:26:07 +02:00
Jens Langhammer 583271d5ed root: only load debug secret key when debug is enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 22:25:55 +02:00
Jens Langhammer 0db17b9729 root: remove yasg 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 22:18:04 +02:00
Jens Langhammer 9f9ee66cc4 api: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 21:57:04 +02:00
Jens Langhammer ab2bd622a8 Merge branch 'master' into openapi-v3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	outpost/pkg/ak/api.go
#	outpost/pkg/ak/global.go
#	outpost/pkg/ldap/instance_bind.go
 2021-05-16 21:36:24 +02:00
Tom Pansino 8d2a3b67b9
lib: Fix config loading of secrets from files (#887) 2021-05-16 21:10:31 +02:00
Jens Langhammer 8b6292b3de api: don't overwrite 400 and 403 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 20:54:58 +02:00
Jens Langhammer cbed5a6522 api: fix missing error definitions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 19:53:04 +02:00
Jens Langhammer 589f806b7c flows: fix schema for flow executor 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 19:13:31 +02:00
Jens Langhammer 07dc648470 web: fix mixed Static/TOTP pages 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:59:33 +02:00
Jens Langhammer 41f6d3b6e7 stages/authenticator_static: add serializer for tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:55:47 +02:00
Jens Langhammer d0f1daf025 admin: make tasks's retry api not ask for a body 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:43:47 +02:00
Jens Langhammer d38fd603dd web: fix more special API Calls 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:41:02 +02:00
Jens Langhammer ba5374f6e1 web: mass update API calls 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:24:15 +02:00
Jens Langhammer 7152d7ee01 outposts: fix schema for outposts health 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:10:11 +02:00
Jens Langhammer ab07113530 admin: migrate WorkerViewSet to APIView 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:06:46 +02:00
Jens Langhammer a7d7b46747 admin: migrate version view to APIView 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:00:02 +02:00
Jens Langhammer 9a44088d2b admin: migrate metrics viewset to APIView 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:49:37 +02:00
Jens Langhammer b351ae12c5 api: make config viewset single view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:44:19 +02:00
Jens Langhammer 759bf59780 core: make filefields readonly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:34:55 +02:00
Jens Langhammer 10cb60f48e api: fix pagination not being required in schema 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:32:13 +02:00
Jens Langhammer ef9f08553c *: linting pass, rename from swagger to schema 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 15:22:57 +02:00
Jens Langhammer 4fb71a6bdd api: fix pagination schema 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 15:08:51 +02:00
Jens Langhammer cac1f242dc *: replace swagger with openapi 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 14:23:05 +02:00
Jens Langhammer 0bac738090 *: fix static response descriptions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 14:07:29 +02:00
Jens Langhammer 1324d03815 *: initial migration to openapi v3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 23:57:28 +02:00
Jens Langhammer c55f2ad10a root: set additional sentry tags 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 19:53:43 +02:00
Jens Langhammer a30b32fbbf outposts: fix missing default for OutpostState.for_channel 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 17:46:53 +02:00
Jens Langhammer 1745306cc6 outposts: fix error when controller loads from cache but cache has expired 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 17:45:33 +02:00
Jens Langhammer 8925787a13 flows: fix error when using cancel flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 17:42:37 +02:00
Jens Langhammer 968b7ec17a lib: fix parsing of remote IP header when behind multiple reverse proxies 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 15:08:53 +02:00
Jens Langhammer 6600d5bf69 providers/oauth2: use user.uid 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 14:08:49 +02:00
Jens Langhammer a4278833d8 providers/proxy: fix ingress not being created with full https 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 13:45:41 +02:00
Jens Langhammer 942905b9b1 providers/proxy: fix formatting issue 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-14 16:24:35 +02:00
Jens Langhammer 8d7bb7da17 providers/proxy: connect ingress to https instead of http 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#882
 2021-05-14 11:42:03 +02:00
Jens Langhammer 9939db13c3 outposts: fix reload notification not working due to wrong ID being saved 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-14 11:13:04 +02:00
Jens Langhammer 465750276c core: fix application's slug field not being set to unique 
closes #881

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-14 10:49:42 +02:00
Jens Langhammer 0b7ebf0e07 release: 2021.5.1 2021-05-13 20:50:31 +02:00
Jens Langhammer 709581f5a8 root: use ghcr images by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-13 20:15:29 +02:00
Jens Langhammer 1df8790050 stages/authenticator_static: fix error when listing devices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-13 18:09:55 +02:00
Jens Langhammer 3c23ad340f web/admin: improve diagram api for flows 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-13 18:01:40 +02:00
Jens Langhammer f9f2e00913 core: improve error handling for backups 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-13 17:56:49 +02:00
Jens Langhammer 8f99891a9d release: 2021.5.1-rc10 2021-05-12 21:25:18 +02:00
Jens Langhammer 97a3c2d88b release: 2021.5.1-rc9 2021-05-12 20:50:29 +02:00
Jens Langhammer e91ff4566d Merge branch 'next' into version-2021.5 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	outpost/pkg/version.go
 2021-05-12 20:49:58 +02:00
Jens Langhammer a3fccbdaff outposts: add build_hash for docker image 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 20:36:18 +02:00
Jens Langhammer bdf9f26d07 outposts: compare build hash in outdated check 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 19:05:29 +02:00
Jens Langhammer 9a0aa4c79b outposts/ldap: add infinite loop prevention 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 18:31:44 +02:00
Jens Langhammer 52cf4890cf root: remove servername from backup files 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 17:53:23 +02:00
Jens Langhammer 8e5d03cb86 outposts: remove legacy API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 16:41:54 +02:00
Jens Langhammer 2190fa555b events/api: fix error when updating transports 
closes #866

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 16:41:30 +02:00
Jens Langhammer 3665e2fefa release: 2021.5.1-rc8 2021-05-12 14:52:34 +02:00
Jens Langhammer 3dbe35cf9e stages/invitation: fix wrong serializer used for user model 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	swagger.yaml
 2021-05-12 14:22:16 +02:00
Jens Langhammer c7f0ea8a4b root: update dbbackup to git version 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 01:20:31 +02:00
Jens Langhammer 0620324702 root: bump version of psf black 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 00:42:46 +02:00
Jens Langhammer 5a0e78c698 outposts: fix issue with duplicate outpost health 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 21:46:30 +02:00
Jens Langhammer 84dfbcaaae providers/api: return redirect_uris for proxy provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 20:02:17 +02:00
Jens Langhammer e649e9fb03 core: don't use self.get_object for application permission check to prevent 404 when view permission is missing 
closes #864

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 17:35:11 +02:00
Jens Langhammer 266ef66a6f Merge branch 'master' into next 2021-05-11 14:57:52 +02:00
Andreas Egli 842fdb0b0c
fixed session durations of more than 1 day (#863) 2021-05-11 14:57:33 +02:00
Jens L 36f7cad23b
Merge pull request #862 from goauthentik/form-refresh-on-save 
Form refresh on save
 2021-05-11 14:23:32 +02:00
Jens Langhammer 24f2932777 crypto: add ?download flag 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#861
 2021-05-11 14:21:35 +02:00
Jens Langhammer 124ce80694 sources/plex: make plex_token readable from API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 13:32:28 +02:00
Jens Langhammer 4e2443d60b flows: make cancel link always logout user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 13:13:05 +02:00
Jens Langhammer 17b65adcc5 lib: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 13:07:47 +02:00
Jens Langhammer 96ea7ae09c root: allow configuration of s3 backup location 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 02:10:00 +02:00
Jens Langhammer 172bfceb31 root: fix db backup failing when password has special chars 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 02:01:22 +02:00
Jens Langhammer 932b19999e providers/proxy: missing @property for noop 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 01:26:01 +02:00
Jens Langhammer 788fd00390 outposts: use noop flag in each reconciler instead of raising Disabled and force use of get_referecen_object 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 00:27:29 +02:00
Jens Langhammer a293a14f2a outposts: re-add _config for backwards compat 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 22:28:46 +02:00
Jens Langhammer 51e3453dca admin: fix linting in api tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 20:14:21 +02:00
Jens Langhammer 6f58fdf158 api: add more tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 19:51:29 +02:00
Jens Langhammer 219b8d1a57 outposts: allow individual components of managed outposts to be disabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 19:27:48 +02:00
Jens Langhammer c7d4e69669 root: make database port configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 19:25:15 +02:00
Jens Langhammer cd629dfbaa outposts: improve API validation for config attribute, ensure all required attributes are set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 19:24:42 +02:00
Jens Langhammer 3d0a853449 Merge branch 'version-2021.5' into next 2021-05-10 18:07:39 +02:00
Jens Langhammer c2f8ff55cf outposts: fix outpost delete hanging thread, run cleanup in async task with info from cache with ability to retry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 17:11:31 +02:00
Jens Langhammer 80fae44f47 release: 2021.5.1-rc7 2021-05-10 12:13:10 +02:00
Jens Langhammer 73eb97ca6e release: 2021.5.1-rc6 2021-05-10 11:44:23 +02:00
Jens Langhammer ebe90d8886 Merge branch 'next' into version-2021.5 2021-05-10 11:43:50 +02:00
Jens Langhammer a1a1b113b1 release: 2021.5.1-rc5 2021-05-10 11:34:00 +02:00
Jens Langhammer 1fb3642701 sources/oauth: fix google tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 00:27:37 +02:00
Jens Langhammer 847d97b813 sources/oauth: fix google tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 00:27:20 +02:00
Jens Langhammer 1f1d322958 *: fix api results when non-superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 00:01:35 +02:00
Jens Langhammer e4841ce1a4 Merge branch 'version-2021.5' into next 2021-05-09 23:41:23 +02:00
Jens Langhammer e33a5528f7 core: catch IntegrityError in flow_manager and deny request 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 23:31:39 +02:00
Jens Langhammer b7d828702d sources/oauth: don't set username on google source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 22:56:44 +02:00
Jens Langhammer f7fd31cc84 release: 2021.5.1-rc4 2021-05-09 21:43:38 +02:00
Jens Langhammer 04aae8f584 sources/oauth: make secret write_only 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 21:40:25 +02:00
Jens Langhammer bbca90c93a Merge branch 'next' into version-2021.5 2021-05-09 20:57:23 +02:00
Jens Langhammer dda1d4e0fb core: add more logs to flow_manager 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 20:27:37 +02:00
Jens Langhammer f072c600cc lifecycle: use URl for redis on startup to prevent errors with no paswords 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 20:13:58 +02:00
Jens Langhammer 92537a6c8d Merge branch 'next' into version-2021.5 2021-05-09 18:46:26 +02:00
Jens Langhammer 72836ecd9d outposts: default to currently running namespace if possible 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 18:44:32 +02:00
Jens Langhammer 251a97c77e Merge branch 'next' into version-2021.5 2021-05-09 18:13:52 +02:00
Jens Langhammer 7f7046f0e4 outposts: lowercase k8s object names 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 18:13:21 +02:00
Jens Langhammer cd3f02fd3b release: 2021.5.1-rc3 2021-05-09 17:25:48 +02:00
Jens Langhammer d3feab9463 release: 2021.5.1-rc2 2021-05-09 16:43:36 +02:00
Jens Langhammer 70c25692eb release: 2021.5.1-rc1 2021-05-09 16:07:50 +02:00
Jens Langhammer a6a8eddf7c providers/proxy: create ingress for forward_auth /akprox path 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 12:40:44 +02:00
Jens Langhammer 8c0a87b710 outposts: improve logging for outpost controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 12:34:44 +02:00
Jens Langhammer 5cad59a9f8 providers/proxy: fix being able to set empty internal_host 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 00:07:34 +02:00
Jens Langhammer 5ac6a6910e outposts: check if traefik CRD exists before attempting to delete 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 21:59:13 +02:00
Jens Langhammer d751a7fc4c lib: add user attribute "goauthentik.io/user/override-ips" to allow overriding of client ips 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 21:42:31 +02:00
Jens Langhammer 1b87375661 lib: add default to config from file:// 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 17:13:13 +02:00
Jens Langhammer 6868b7722c outposts: delete old outpost deployment when name or namespace is changed 
closes #845

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 16:11:38 +02:00
Jens Langhammer 7a1935b4e2 outposts: fix error on k8s when name has spaces 
closes #846

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 14:09:21 +02:00
Jens Langhammer 5e7521915a stages/password: fix configure_flow not being set on initial setup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 14:08:43 +02:00
Jens Langhammer 9fc072e4df outposts: fix lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 11:56:44 +02:00
Jens Langhammer 55ea9afeec core: fix dark mode on server-side rendered pages 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 11:53:53 +02:00
Jens Langhammer 9485f0b8cc outpost/ldap: make users and groups OU instead of CN 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 11:46:26 +02:00
Jens Langhammer e6dfa8294e providers/proxy: use name.namespace for middleware service 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 10:07:30 +02:00
Jens Langhammer e5a5a5c603 outposts: fix k8s controller not handing Disabled() in static deployment 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 09:52:43 +02:00
Jens Langhammer ea7f9f291f outposts: create traefikmiddleware if forwardAuth is enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 00:01:35 +02:00
Jens Langhammer 241d790e69 stages/user_write: if any connection is being sent in the plan context, save it to the user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 22:10:20 +02:00
Jens Langhammer 83e08f12ae core: fix arguments not being passed in FlowManager 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 22:07:48 +02:00
Jens Langhammer 6526659b51 sources/plex: allow auth for owner (when identifier of source plex token matches) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 21:50:15 +02:00
Jens Langhammer 6c3b7c8d3e events: handle error when notifications are triggered and no users exist 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 20:13:04 +02:00
Jens Langhammer d51ecc4554 sources/saml: handle internal error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 20:10:56 +02:00
Jens Langhammer ef63e35ad2 outposts: improve messaging from controller on k8s 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 20:07:29 +02:00
Jens Langhammer 4e9176ed2e outposts: support different port on container vs exposed port 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 19:59:49 +02:00
Jens Langhammer d1296e9cc7 outposts: fix deployments referencing the wrong secret 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 19:51:14 +02:00
Jens Langhammer d85e0593f1 core: set attributes on users which are enrolled via source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 19:35:05 +02:00
Jens Langhammer b3a3852a54 core: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 13:58:58 +02:00
Jens Langhammer 49bf82a0a4 core: add user filter by superuser status 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 13:44:42 +02:00