trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
8230 commits 95 branches 330 tags 336 MiB
Commit graph

2119 commits

Author SHA1 Message Date
Jens Langhammer 14c159500d core: don't rotate non-api tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-16 19:32:39 +01:00
Jens Langhammer f33190caa5 release: 2021.12.1 2021-12-16 15:48:59 +01:00
Jens Langhammer 741822424a Merge branch 'master' into version-2021.12 2021-12-16 15:48:53 +01:00
Jens Langhammer a105760123 events: improve app lookup for event creation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-15 16:46:02 +01:00
Jens Langhammer 6ff8fdcc49 root: enable threading integration in sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-15 15:49:08 +01:00
Jens Langhammer 50ca3dc772 core: fix error when attempting to provider from cached application 
closes #1940

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-15 15:11:13 +01:00
Jens Langhammer 2a09fc0ae2 release: 2021.12.1-rc5 2021-12-15 10:21:29 +01:00
Jens Langhammer fbb6756488 Merge branch 'master' into version-2021.12 2021-12-15 10:16:05 +01:00
Jens Langhammer 6e83467481 web/flows: fix error when attempting to enroll new webauthn device 
closes #1936

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-15 00:24:46 +01:00
Jens Langhammer 72db17f23b stages/identification: fix miscalculated sleep 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 23:31:08 +01:00
Jens Langhammer e18e681c2b events: dont store full backtrace in systemtask 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 22:55:38 +01:00
Jens Langhammer 10fe67e08d sources/ldap: fix incorrect task names being referenced, use source native slug 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 22:53:14 +01:00
Jens Langhammer 3740e65906 web/admin: add dashboard with user creation/login statistics 
closes #1867

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 22:08:41 +01:00
Jens Langhammer 30386cd899 events: add custom manager with helpers for metrics 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 21:49:33 +01:00
Jens Langhammer 64a10e9a46 events: fix schema for top_per_user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 21:08:15 +01:00
Jens Langhammer 0b00768b84 events: add flow_execution event type 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 16:13:51 +01:00
Jens Langhammer d162c79373 flows: fix wrong exception being caught in flow inspector 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 16:06:00 +01:00
Jens Langhammer 8c16dfc478 stages/invitation: use GroupMemberSerializer serializer to prevent all of the user's groups and their users from being returned 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 15:56:13 +01:00
Jens Langhammer 32ace1bece crypto: add additional validation before importing a certificate 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 14:49:25 +01:00
Jens Langhammer 54f893b84f flows: add additional sentry spans 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 11:59:36 +01:00
Jens Langhammer 5854833240 stages/authenticator_webauthn: fix migrations for different choices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 11:06:46 +01:00
Jens Langhammer 4b2437a6f1 stages/authenticator_webauthn: use correct choices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 10:51:34 +01:00
Jens Langhammer 59a51c859a stages/authenticator_webauthn: add migration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 10:09:35 +01:00
Jens Langhammer 4e6714fffe stages/authenticator_webauthn: make user_verification configurable 
closes #1921

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 09:58:20 +01:00
Jens Langhammer 0131b1f6cc sources/oauth: fix wrong redirect URL being generated 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 09:34:47 +01:00
Jens Langhammer 2993f506a7 sources/oauth: implement apple native sign-in using the apple JS SDK 
closes #1881

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-14 00:40:29 +01:00
Jens Langhammer e4841d54a1 *: migrate ui_* properties to functions to allow context being passed 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 23:56:35 +01:00
Jens Langhammer 4f05dcec89 sources/oauth: allow oauth types to override their login button challenge 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 23:45:11 +01:00
Jens Langhammer ede6bcd31e *: remove debug statements from tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 23:41:08 +01:00
Jens Langhammer 728c8e994d sources/oauth: strip parts of custom apple client_id 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 23:26:00 +01:00
Jens Langhammer fec6de1ba2 providers/oauth2: add additional logging to show with token path is taken 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 22:49:42 +01:00
Jens Langhammer 69678dcfa6 providers/oauth2: use generate_key instead of uuid4 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 22:13:20 +01:00
Jens Langhammer 4911a243ff sources/oauth: add initial okta type 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1910
 2021-12-13 21:48:59 +01:00
Jens Langhammer 4e63f0f215 core: add fallback for missing sentry trace 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 18:06:01 +01:00
Jens Langhammer 29241cc287 core: always inject sentry trace into template 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 17:41:00 +01:00
Jens Langhammer f2b3a2ec91 providers/saml: optimise excessive queries to user when evaluating attributes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 16:38:38 +01:00
Jens Langhammer 69780c67a9 lib: set evaluation span's description based on filename 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 16:32:01 +01:00
Jens Langhammer ac9cf590bc *: use prefixed span names 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 16:18:42 +01:00
Jens Langhammer cb6edcb198 core: set tag with request ID 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 16:15:27 +01:00
Jens Langhammer 8eecc28c3c events: add sentry for geoip 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-13 16:15:20 +01:00
Jens Langhammer 09b02e1aec release: 2021.12.1-rc4 2021-12-13 12:53:58 +01:00
Jens Langhammer 5914bbf173 Merge branch 'master' into version-2021.12 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	Dockerfile
 2021-12-13 10:54:21 +01:00
Jens Langhammer 83c12ad483 flows: fix description for spans 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-12 21:51:51 +01:00
Jens Langhammer 4224fd5c6f lib: correctly report "faked" IPs to sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-12 20:54:29 +01:00
Jens Langhammer 597ce1eb42 Revert "*: use cache.delete_pattern instead of getting keys and deleting them" 
This reverts commit ff481ba6e7.

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	authentik/flows/views/executor.py
#	authentik/policies/signals.py
 2021-12-12 20:41:34 +01:00
Jens Langhammer 5ef385f0bb policies: don't always clear application cache on post_save 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-12 20:39:04 +01:00
Jens Langhammer cda4be3d47 flows: add additional tags 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-12 20:37:20 +01:00
Jens Langhammer 8cdf22fc94 root: set default redis iter to 1000 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-12 20:24:43 +01:00
Jens Langhammer 6efc7578ef flows: add additional sentry spans to flow executor 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-12 20:04:21 +01:00
Jens Langhammer 7859145138 outposts: don't try to create docker client for embedded outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-12 17:13:26 +01:00
Jens Langhammer 8a8aafec81 root: enable boto3 sentry integration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-12 14:38:24 +01:00
Jens Langhammer 534689895c lib: remove old load_local_files setting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-11 22:03:06 +01:00
Jens Langhammer 8a0dd6be24 outposts: handle RuntimeError during websocket connect 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-11 22:01:55 +01:00
Jens Langhammer 65d2eed82d stagse/authenticator_webauthn: remove pydantic import 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-11 20:32:25 +01:00
Jens Langhammer bafeff7306 outposts: improve logging for outpost controllers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-11 15:35:20 +01:00
Jens Langhammer 7eda794070 outposts: fix docker controller not stopping containers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1859
 2021-12-11 14:00:15 +01:00
Jens Langhammer e3129c1067 root: bump celery messages to info 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-11 13:59:56 +01:00
Jens Langhammer ff481ba6e7 *: use cache.delete_pattern instead of getting keys and deleting them 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-10 21:35:28 +01:00
Jens Langhammer b761659227 root: use ghcr for containers during testing 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-10 20:57:09 +01:00
Jens Langhammer 2ee48cd039 outposts: set display name for outpost service account 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-09 19:59:38 +01:00
Jens Langhammer 340a9bc8ee core: fix error when using invalid key-values in attributes query 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-09 19:53:47 +01:00
Jens Langhammer 4ba55aa8e9 flows: fix error when trying to print FlowToken objects 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-09 13:55:43 +01:00
Jens Langhammer bab6f501ec flows: fix error in inspector view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-09 13:52:46 +01:00
Jens Langhammer ffb0135f06 release: 2021.12.1-rc3 2021-12-09 13:23:41 +01:00
Jens Langhammer ee0ddc3d17 Merge branch 'master' into version-2021.12 2021-12-09 13:23:28 +01:00
Jens Langhammer a9bd34f3c5 events: revert to @prefill_task decorator since base class doesn't get executed until task runs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-09 10:18:00 +01:00
Jens Langhammer db316b59c5 stages/prompt: use policyenginemode all 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-09 09:39:40 +01:00
Jens Langhammer 6209714f87 policies/expression: add ak_call_policy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-09 09:39:28 +01:00
Jens Langhammer 1ed2bddba7 root: fix celery task ID not being included in log 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-09 09:36:52 +01:00
Jens Langhammer 26b35c9b7b root: fix name conflict in threadlocal 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-08 21:42:48 +01:00
Jens Langhammer 86a9271f75 root: add request_id to celery tasks, prefixed with "task-" 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-08 21:34:20 +01:00
Jens Langhammer 402ed9bd20 root: allow usage of --randomly-seed for testing 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-08 21:33:41 +01:00
Jens Langhammer 326b574d54 root: update dependencies 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-07 16:25:10 +01:00
Jens Langhammer a91204e5b9 web/user: allow custom font-awesome icons for applications 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1189
 2021-12-06 21:20:15 +01:00
Jens Langhammer 873aa4bb22 providers/saml: remove SESSION_KEY_POST from session after using it 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1873
 2021-12-06 12:47:25 +01:00
Jens Langhammer c1ea78c422 core: fix missing permission check for group creating when creating service account 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-06 12:33:29 +01:00
Jens Langhammer 3c8bbc2621 sources/*: only allow superusers to directly create source connections 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-06 12:22:40 +01:00
Jens Langhammer 4143d3fe28 events: don't set metrics on import 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-06 10:13:48 +01:00
Jens Langhammer e3e9178ccc web/admin: show outpost warning on application page too 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-06 10:10:44 +01:00
Jens Langhammer b694816e7b sources/*: Allow creation of source connections via API 
closes #1888

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-06 10:05:42 +01:00
Jens Langhammer 317e9ec605 core: add FlowToken which saves the pickled flow plan, replace standard token in email stage to allow finishing flows in different sessions 
closes #1801

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-05 15:20:11 +01:00
Jens Langhammer ada2a16412 tests/e2e: add post binding test 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-05 11:18:01 +01:00
Jens Langhammer 6a3f7e45cf providers/saml: add ?force_binding to limit bindings for metadata endpoint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-05 11:14:42 +01:00
Jens Langhammer 2b78c4ba86 *: use request.query_params instead of accessing the django request 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-05 11:14:20 +01:00
Jens Langhammer 680ef641fb providers/saml: fix error when propertymapping returns invalid data in list 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-05 10:31:16 +01:00
Jens Langhammer 2b5504ff63 release: 2021.12.1-rc2 2021-12-04 20:06:41 +01:00
Jens Langhammer 639c2f5c2e Merge branch 'master' into version-2021.12 2021-12-04 19:55:37 +01:00
Jens Langhammer 426cef998f sources/ldap: make task names more consistent 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-03 18:39:42 +01:00
Jens Langhammer 8ddb62ed0f sources/plex: fix plex token being included in event log 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-03 18:37:40 +01:00
Jens Langhammer 572f6d4ea0 crypto: add certificate discovery to automatically import certificates from lets encrypt 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1835
 2021-12-03 18:27:36 +01:00
Jens Langhammer f1b9021e3e sources/ldap: add optional tls verification certificate 
closes #1875

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-03 10:09:13 +01:00
Jens Langhammer 8ae50814fe *: add missing migrations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-03 10:04:54 +01:00
Jens Langhammer 2e2b491ec7 source/ldap: fix hanging unittests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-03 09:41:13 +01:00
Jens Langhammer ac432e78e2 sources/ldap: don't cache LDAP Connection, use random server 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-02 21:18:20 +01:00
Jens Langhammer 83ac42ac43 stages/prompt: fix error when both default and required are set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-02 21:11:22 +01:00
Jens Langhammer 4bd1cd127b providers/saml: fix IndexError in signature check 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-02 20:30:03 +01:00
Jens Langhammer 2eb5a5cc76 sources/ldap: handle typeerror during creation of objects when using wrong kwargs params 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-02 20:24:24 +01:00
Jens Langhammer 75051687e6 sources/ldap: allow multiple server URIs for loadbalancing and failover 
closes #1874

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-02 20:15:11 +01:00
Jens Langhammer 7e316b5fc2 root: add missing sample_rate default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-02 19:54:37 +01:00
Jens Langhammer 66c530ea06 outposts: always trigger outpost reconcile on startup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-02 15:06:14 +01:00
Jens Langhammer cf78c89830 events: replace @prefill_task with custom base class to prefill 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-02 13:47:35 +01:00
Jens Langhammer 20c738c384 crypto: fix default API not having an ordering 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-02 13:00:41 +01:00
Jens Langhammer 4f54ce6afb providers/saml: fix error when using post bindings and user freshly logged in 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1873
 2021-12-02 13:00:21 +01:00
Jens Langhammer f0d7edb963 *: fix @prefill_task 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-02 10:05:51 +01:00
Jens Langhammer b4963bec76 providers/proxy: fix defaults for traefik integration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-01 21:47:13 +01:00
Jens Langhammer 7aa8e35f87 providers/proxy: use wildcard for traefik headers copy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-01 20:19:35 +01:00
Jens Langhammer 60b95271eb outposts/proxy: add additional headers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-01 20:19:09 +01:00
Jens Langhammer e6818c1f6a release: 2021.12.1-rc1 2021-12-01 13:08:13 +01:00
Jens Langhammer 917eef96fb lib: add improved log to sentry events being sent 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-29 21:37:29 +01:00
Jens Langhammer 9a393848b2 outpost: configure error reporting based off of main instance config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-29 14:42:19 +01:00
github-actions[bot] 7d2f622f4b web: Update Web API Client version (#1857) 
Signed-off-by: GitHub <noreply@github.com>

Co-authored-by: BeryJu <BeryJu@users.noreply.github.com>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-29 14:17:12 +01:00
Jens Langhammer e3a5ef1907 root: make sentry sample rate configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-29 13:52:34 +01:00
Matthew R. McDougal e597bb4542
policies/expression: fix ak_user_has_authenticator evaluation when not specifying optional device_type (#1849) 
* Fix ak_user_has_authenticator evaluation when not specifying optional device_type

* Simpler patch
 2021-11-29 10:35:17 +01:00
Jens Langhammer 5c54de66fc *: add meta_model_name field to all models with inheritance 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-26 10:32:39 +01:00
Jens Langhammer 2c0d8d8943 core: add meta_model_name to MetaNameSerializer to easily show relevant events 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-26 10:27:08 +01:00
Jens Langhammer 0a0eee138a stages/authenticator_validate: catch error when attempting to configure user without flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-25 23:44:48 +01:00
Jens Langhammer de8cf65503 stages/email: prevent error with duplicate token 
closes #1827

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-25 23:17:37 +01:00
Jens Langhammer 121b36f35f lib: log error for file:// in config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-25 19:21:40 +01:00
Jens Langhammer 363aed2a47 root: url quote redis passwords for connection string 
closes https://github.com/goauthentik/helm/issues/39

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-25 18:05:36 +01:00
Jens L e1ef196283 core: remove dump_config, handle directly in config loader without booting django, don't check database 2021-11-25 13:38:31 +01:00
Jens Langhammer 0b8cfd437b *: fix typo'd signing pair name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-24 09:55:10 +01:00
Jens Langhammer 75724b6f8d root: make testing output more consistent 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 23:46:27 +01:00
Jens Langhammer 5b9e6bed6c lib: fix custom URL schemes being overwritten 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 23:23:09 +01:00
Jens Langhammer 0e3602d7eb lib: improve probability of symbols in generated key 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 23:01:30 +01:00
Jens Langhammer 2b94e9a687 tests/e2e: bump retries 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 22:54:08 +01:00
Jens Langhammer 6ed7d842e4 *: allow URLs without domain and custom schemas 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 22:51:04 +01:00
Jens Langhammer 8794c840cf web: only show applications with http link 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 22:40:31 +01:00
Jens Langhammer 9c9c00755a core: fix test user not having password set properly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 22:30:09 +01:00
Jens Langhammer b2d2e7cbc8 tests/e2e: remove logger 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 21:19:33 +01:00
Jens Langhammer 91fd792f88 tests/e2e: use generated uid 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 19:19:13 +01:00
Jens Langhammer 9835785864 core: make test user's password optional 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 19:06:44 +01:00
Jens Langhammer d785998c5a Revert "root: disable random tests for now" 
This reverts commit 8ba9553220.
 2021-11-23 18:46:51 +01:00
Jens Langhammer 8ba9553220 root: disable random tests for now 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 17:57:56 +01:00
Jens Langhammer 6eb132c48b tests/e2e: fix ldap provider tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 17:28:35 +01:00
Jens Langhammer 355b832cc3 tests/e2e: fix email backend 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 13:22:28 +01:00
Jens Langhammer e32d4f0095 tests/e2e: don't run e2e tests randomly for now 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 00:32:24 +01:00
Jens Langhammer d3397c349f stages/email: minify email css template 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 00:10:43 +01:00
Jens L 9bb0d04aeb
root: Random tests (#1825) 
* root: add pytest-randomly to randomise tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: generate flows for testing instead of relying on existing ones

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: generate users for testing instead of relying on existing ones

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: use generated certificate

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: keep containers

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: use websockets test case

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-22 22:56:02 +01:00
Jens Langhammer 61621e7d60 lifecycle: improve backup restore by dropping database before 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-20 00:32:24 +01:00
Jens Langhammer 431ba6b4ef lib: add cli option for lib.config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-19 23:52:10 +01:00
Jens Langhammer bb6eed0db1 root: properly catch 404 errors for websocket connections 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-19 23:19:07 +01:00
Jens Langhammer e831e4fb94 root: add lifespan shim to prevent errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-16 13:25:03 +01:00
Jens Langhammer b0fac9c9f1 providers/saml: fix SessionNotOnOrAfter not being included 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-16 12:36:40 +01:00
Jens Langhammer f4db09cd59 events: add gdpr_compliance option 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1551
 2021-11-16 11:29:13 +01:00
Jens Langhammer 638e8d741f *: fix multiple tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-16 10:38:21 +01:00
Jens Langhammer 425b87a6d0 outposts: add ack and disconnect tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-16 09:34:37 +01:00
Jens Langhammer d12e24017e outposts: add websocket tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 23:58:19 +01:00
Jens Langhammer 078633c2af lib: drop all sentry exceptions when debug enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 22:18:56 +01:00
Jens Langhammer 4b8b800648 stages/*: add more tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 20:58:34 +01:00
Jens Langhammer 6f9ed001a1 crypto: add more tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 20:38:03 +01:00
Jens Langhammer e4095dfffe admin: add more tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 20:10:09 +01:00
Jens Langhammer d5341c2284 managed: add tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 19:53:08 +01:00
Jens Langhammer 867fb0dac0 root: fix settings for managed not loaded 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 19:49:03 +01:00
Jens Langhammer 2666aa2c73 root: add errorhandling in log middleware 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 17:11:44 +01:00
Jens Langhammer f0e9bafa35 outposts: add tests for management commands 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 16:44:42 +01:00
Jens Langhammer 0d739f5c1a recovery: add additional tests for commands 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 16:41:37 +01:00
Jens Langhammer e08077c73a root: replace asgi-based logger with middleware 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 16:32:56 +01:00
Jens Langhammer c43049a981 website/docs: remove deprecated docker_image_base 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 15:58:17 +01:00
dependabot[bot] f7044e41c6
build(deps-dev): bump bandit from 1.7.0 to 1.7.1 (#1793) 
* build(deps-dev): bump bandit from 1.7.0 to 1.7.1

Bumps [bandit](https://github.com/PyCQA/bandit) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](https://github.com/PyCQA/bandit/compare/1.7.0...1.7.1)

---
updated-dependencies:
- dependency-name: bandit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* *: fix bandit false positives

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 09:16:16 +01:00
Jens Langhammer 59343ff441 stages/email: fix missing component in response when retrying email send 
closes #1791

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-14 17:52:31 +01:00
Jens Langhammer cab564152d lib: load json strings in config env variables 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-14 12:44:22 +01:00
Jens Langhammer 88516ba2ca core: make defaults for _change_email and _change_username configurable 
closes #1789

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-13 22:33:03 +01:00
Jens Langhammer 2a3b049b01 release: 2021.10.4 2021-11-12 12:31:24 +01:00
Rizwan Ahmed e4a5e86c93 sources/oauth: Fixed the incorrect padding issue in apple.py (#1773) 
* Fixed the incorrect padding issue in apple.py

Fixed the incorrect padding issue in apple.py by adding proper padding to the raw_payload.

* Fixed the incorrect encoding of client_secret in apple.py

In the get_client_secret() method, the "sub" in the payload must be only the client ID. So I have changed self.source.consumer_key to parts[0]

* Added the decode method for the id_token

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-12 12:10:29 +01:00
Jens Langhammer 1cfe81887b stages/authenticator_validate: improve logging 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-11 23:33:41 +01:00
Jens Langhammer 53905d1a89 stages/authenticator_validate: enable all device classes by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-11 22:49:30 +01:00
Jens Langhammer 6db1c914ee stages/authenticator_duo: fix devices created with name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-11 22:16:47 +01:00
Jens Langhammer c98bdbacc5 providers/proxy: return list of configured scope names so outpost requests custom scopes 
closes #1762

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 23:06:21 +01:00
Jens Langhammer 1e8d45dc15 web: write interfaces to different folders and remove custom chunk names 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 17:54:50 +01:00
Jens Langhammer d5d8641b37 stages/*: disable trim_whitespace on important fields 
closes #1765

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 16:48:19 +01:00
Jens Langhammer cc0832f487 core: force lowercase emails for gravatar usage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 12:40:20 +01:00
Jens Langhammer e73606b54d root: catch error in analytics on startup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 11:28:08 +01:00
Jens Langhammer 5d479a6c8f root: set utm_source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 23:23:47 +01:00
Jens Langhammer 4a773b2b4f sources/ldap: set connect/receive timeout (default to 15s) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 22:27:58 +01:00
Jens Langhammer 8003d67844 sources/ldap: fix typo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 22:24:33 +01:00
Jens Langhammer 51783c1cbb sorces/ldap: fix user/group sync overwriting attributes instead of merging them 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 21:16:59 +01:00
Jens Langhammer ab2b13938e release: 2021.10.3 2021-11-08 20:52:11 +01:00
Jens Langhammer 9ca15983a2 root: keep last 30 backups 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 17:46:25 +01:00
Jens Langhammer 99ef94b7aa stages/prompt: only set placeholder when in context 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 15:10:32 +01:00
Jens Langhammer c3faa61ed9 stages/prompt: set field placeholder based on plan context 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 14:47:50 +01:00
Jens Langhammer da74304221 stages/prompt: add text_read_only field 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 14:45:56 +01:00
Jens Langhammer 79db0ce4c1 stages/prompt: use initial instead of default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 22:20:08 +01:00
Jens Langhammer 5e23b11764 stages/prompt: default prompts to the current value of the context 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:59:50 +01:00
Jens Langhammer c4e029ffe2 recovery: add create_admin_group management command 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:53:21 +01:00
Jens Langhammer 61b5b36192 core: add command to output full config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:45:52 +01:00
Jens Langhammer c6cc1b1728 root: fix defaults for EMAIL_USE_TLS 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:37:14 +01:00
Jens Langhammer 90151a13ae stages/identification: only allow limited challenges for login sources 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 14:53:38 +01:00
Jens Langhammer f958aa6930 stages/identification: use random sleep 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 14:50:35 +01:00
Jens Langhammer 924a13e832 core: fix auth_method for tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 13:04:41 +01:00
Jens Langhammer ae83c35dfd events: ignore creation/deletion of AuthenticatedSession objects 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 13:04:34 +01:00
Jens Langhammer 6424bf98da admin: improve check to remove version notifications 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 12:15:05 +01:00
Jens Langhammer 2cef220a3e providers/ldap: add/squash migrations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 10:41:50 +01:00
Jens L 5a8c66d325
providers/ldap: memory Query (#1681) 
* outposts/ldap: modularise ldap outpost, to allow different searchers and binders

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: add basic in-memory searcher

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/ldap: add search mode field

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: add search mode field

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 10:37:30 +01:00
dependabot[bot] 8de13d3f67 build(deps): bump goauthentik.io/api from 0.2021102.2 to 0.2021102.4 (#1738) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 09:33:26 +01:00
Jens Langhammer 7798292aa8 sources/plex: use exception_to_string in tasks 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 01:16:36 +01:00
Jens Langhammer 3005ca17bd web/admin: show warning on provider when not used with outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 01:15:33 +01:00
Jens Langhammer 909461e533 providers/*: include list of outposts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 01:06:04 +01:00
Jens Langhammer a40c3aeb68 core: make group membership lookup respect parent groups (upwards) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 00:53:56 +01:00
Jens Langhammer 4a89be3048 core: include parent group name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 00:11:17 +01:00
Jens Langhammer 023b97aa69 sources/ldap: remove deprecated default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 22:13:47 +01:00