Jens Langhammer
|
7b39718bd1
|
tenants: fix fallback for unittests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 22:40:01 +02:00 |
|
Jens Langhammer
|
e9621bae06
|
tests: show logs for containers on failed e2e tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 22:17:18 +02:00 |
|
Jens Langhammer
|
0eaabbc0f3
|
admin: fix upgrading deletion of tasks when listing
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 17:42:13 +02:00 |
|
Jens Langhammer
|
5e3628bea6
|
core: add fallback URLs for websocket to cleanup test logs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 17:26:18 +02:00 |
|
Jens Langhammer
|
290ebef8e3
|
core: instead of migrating sessions, clear cache on initial upgrade
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 17:20:25 +02:00 |
|
Jens Langhammer
|
46ab1d20df
|
stages/email: fix token being created without identifier
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 14:54:07 +02:00 |
|
Jens Langhammer
|
48e68d6852
|
core: fix token identifier not being set to unique
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 11:45:48 +02:00 |
|
Jens Langhammer
|
ed3859800c
|
core: improve API validation for Application's set_icon_url (fix JSON Syntax Error)
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 00:39:56 +02:00 |
|
Jens Langhammer
|
06b7f62a40
|
core: make app's meta_launch_url textfield
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-03 00:21:20 +02:00 |
|
Jens Langhammer
|
d32e40b1f8
|
tenants: fix unittests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 22:38:30 +02:00 |
|
Jens Langhammer
|
cec47c3cfc
|
providers/oauth2: show id_token issues for refresh token
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 22:05:04 +02:00 |
|
Jens Langhammer
|
3ea2b16a12
|
tenants: add separate field for favicon url
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 21:31:04 +02:00 |
|
Jens Langhammer
|
974ddc07f7
|
web: improve loading of custom favicon
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 21:19:39 +02:00 |
|
Jens Langhammer
|
2f64b76eba
|
flows: fix invalid background URL when using manually set static or http
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 21:09:54 +02:00 |
|
Jens Langhammer
|
b50ac96605
|
providers/oauth2: remove size limit on Access code nonce
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 20:20:07 +02:00 |
|
Jens Langhammer
|
6d0e0cbe5a
|
outposts: improve validation of providers (must match outpost type)
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 16:04:41 +02:00 |
|
Jens Langhammer
|
4f04ab7a5f
|
sources/oauth: fix azure AD get_profile_info not working
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 11:34:59 +02:00 |
|
Jens Langhammer
|
35bcd5d174
|
sources/oauth: improve debug logging
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 11:34:18 +02:00 |
|
Jens Langhammer
|
644ff4a90c
|
outposts: fix error when validating kubeconfig
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-06-02 10:25:59 +02:00 |
|
Alex
|
ef8b26db13
|
Fix typo in migrations for authenticator_webauthn (#950)
|
2021-06-01 00:24:20 +02:00 |
|
Jens Langhammer
|
e24a9e3119
|
policies: fix missing negate flag of policy bindings
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-31 11:50:29 +02:00 |
|
Jens Langhammer
|
80adafdb48
|
admin: fix attribute error when loading old taskinfo
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 16:22:13 +02:00 |
|
Jens Langhammer
|
72f5a4c460
|
outposts: fix possible recursion error in docker controller
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 16:22:02 +02:00 |
|
Jens L
|
fb6242d2d3
|
Merge pull request #941 from goauthentik/authenticated-sessions
Session management
|
2021-05-30 15:12:49 +02:00 |
|
Jens Langhammer
|
b9773d39c0
|
core: add tests for authenticated sessions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 14:43:00 +02:00 |
|
Jens Langhammer
|
0e8d9aa45d
|
api: add System info API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 14:01:20 +02:00 |
|
Jens Langhammer
|
fc45d35699
|
core: add migration for sessions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 13:08:29 +02:00 |
|
Jens Langhammer
|
7e8044619c
|
lib: return default IP if none could be extracted
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 12:49:44 +02:00 |
|
Jens Langhammer
|
66a04aeec5
|
api: add can_geo_ip capability
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 01:02:03 +02:00 |
|
Jens Langhammer
|
73338bdf32
|
core: add geo_ip to authenticated sessions if enabled
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 01:01:20 +02:00 |
|
Jens Langhammer
|
059da74d1c
|
core: add current attribute to authenticated_session API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 00:31:41 +02:00 |
|
Jens Langhammer
|
45b8b1e198
|
core: delete AuthenticatedSession on logout
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 00:27:33 +02:00 |
|
Jens Langhammer
|
133fc38c05
|
core: initial authenticated sessions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-30 00:15:16 +02:00 |
|
Jens Langhammer
|
f51ab7a878
|
policies/reputation: fix tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 23:46:13 +02:00 |
|
Jens Langhammer
|
31ad09c391
|
stages/identification: add signal which is sent upon identification failure
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 22:58:32 +02:00 |
|
Jens Langhammer
|
05b3c4ddb3
|
policies/reputation: save username instead of user object
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 22:49:58 +02:00 |
|
Jens Langhammer
|
a4c28a28b4
|
website/docs: improve docs for expressions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 21:47:35 +02:00 |
|
Jens Langhammer
|
a1203cf4b2
|
flows: fix ToDefaultFlow not using tenants
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 20:32:42 +02:00 |
|
Jens Langhammer
|
8427fb87f6
|
tenants: add tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 19:47:55 +02:00 |
|
Jens Langhammer
|
e3578eb7ae
|
Merge branch 'master' into tenant
|
2021-05-29 19:17:23 +02:00 |
|
Jens Langhammer
|
5990b8d4de
|
outposts: fix docker container not being stopped correctly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 19:16:39 +02:00 |
|
Jens Langhammer
|
3b31b7ce83
|
core: add http host in log messages
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 19:07:54 +02:00 |
|
Jens Langhammer
|
4d9b362dbf
|
tenants: add migration to add default tenant
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 19:06:35 +02:00 |
|
Jens Langhammer
|
477ff85109
|
flows: migrate flow_unenrollment to tenant
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 18:44:02 +02:00 |
|
Jens Langhammer
|
fae8b80ceb
|
core: fix usage of config on templates
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 18:31:05 +02:00 |
|
Jens Langhammer
|
df92f01719
|
flows: remove default-recovery
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 18:30:55 +02:00 |
|
Jens Langhammer
|
9dd6b7d436
|
flows: remove default-enrollment
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 18:14:37 +02:00 |
|
Jens Langhammer
|
14f85ec980
|
tenants: migrate context_processor to tenants
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 18:01:48 +02:00 |
|
Jens Langhammer
|
ff611f21cd
|
tenants: initial implementation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-29 17:47:25 +02:00 |
|
Jens Langhammer
|
a1b6e09e8a
|
outposts: set restart-policy on docker container
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-28 17:18:11 +02:00 |
|
Jens Langhammer
|
02b5742228
|
stages/authenticator_duo: add default setup flow
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-28 16:47:39 +02:00 |
|
Jens Langhammer
|
523621daa2
|
core: make application's check_access API return a PolicyResult and accept for_user as superuser
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-26 11:47:23 +02:00 |
|
Jens Langhammer
|
c4453f38a2
|
stages/identification: make shown sources configurable
closes #918
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 16:37:53 +02:00 |
|
Jens Langhammer
|
6f3eb4c068
|
flows: allow blank on WithUserInfo
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 12:53:48 +02:00 |
|
Jens Langhammer
|
58a4b20297
|
outposts: handle disconnects without outpost better
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 12:06:55 +02:00 |
|
Jens Langhammer
|
6d3e067a2b
|
stages/user_write: handle integrity error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 11:46:15 +02:00 |
|
Jens Langhammer
|
6db2bf2a21
|
api: fix error when authorization header has no spaces
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 11:40:49 +02:00 |
|
Jens Langhammer
|
6893948fa0
|
tests/e2e: fix invalid flows
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-25 11:18:47 +02:00 |
|
Jens Langhammer
|
6317a8c5d0
|
Merge branch 'master' into duo
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# Pipfile.lock
|
2021-05-25 09:58:38 +02:00 |
|
Jens Langhammer
|
8ecac59eca
|
stages/prompt: annotate PromptChallengeResponse's additionalProperties
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 22:55:24 +02:00 |
|
Jens Langhammer
|
8183a51b72
|
stages/authenticator_duo: add missing duo device
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 22:16:29 +02:00 |
|
Jens Langhammer
|
127ebed5c6
|
flows: fix mismatched names
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 21:09:18 +02:00 |
|
Jens Langhammer
|
716923e17a
|
web/flows: update types
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 20:59:44 +02:00 |
|
Jens Langhammer
|
c6bb6709fd
|
flows: add default challenge response
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 20:27:50 +02:00 |
|
Jens Langhammer
|
fb4e0723ee
|
stages: fix stage unittests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 17:12:48 +02:00 |
|
Jens Langhammer
|
763c3fcfe0
|
outposts/ldap: fix client usage
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 15:58:59 +02:00 |
|
Jens Langhammer
|
1b346866da
|
Merge branch 'master' into duo
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# Pipfile.lock
|
2021-05-24 14:54:24 +02:00 |
|
Jens Langhammer
|
6f6ae7831e
|
flows: make use of oneOf OpenAPI to annotate all challenge types
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-24 14:11:23 +02:00 |
|
Jens Langhammer
|
3b41c662ed
|
stages/authenticator_validate: add Duo support
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-23 22:31:12 +02:00 |
|
Jens Langhammer
|
65522186f1
|
stages/authenticator_duo: improve setup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-23 21:44:52 +02:00 |
|
Jens Langhammer
|
9f5a3c396d
|
stages/authenticator_duo: initial duo stage
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-23 21:10:39 +02:00 |
|
Jens L
|
53e2b2c784
|
Prometheus metrics (#914)
* admin: add worker metrics
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* admin: add version metrics
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* events: add gauge for system tasks
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts: add gauge for last hello and connection status
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* root: re-add prometheus metrics to database
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* root: allow access to metrics without credentials when debug is on
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* root: add UpdatingGauge to auto-set value on load
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* flows: add metrics for cache and building
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* policies: add metrics for policy engine
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* events: add histogram for task durations
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* events: revert to gauge because values are updated on export view
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: add gauge to count all models
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* events: add metrics for events
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-23 20:29:34 +02:00 |
|
Jens Langhammer
|
a5cd9fa141
|
outposts: improve logging for docker controller
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-23 19:27:24 +02:00 |
|
Jens Langhammer
|
0768b201a7
|
Merge branch 'version-2021.5'
|
2021-05-22 20:47:48 +02:00 |
|
Jens Langhammer
|
2d5c45543b
|
release: 2021.5.4
|
2021-05-22 20:15:23 +02:00 |
|
Jens Langhammer
|
9b57f0b81d
|
Merge branch 'version-2021.5' into next
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# web/src/locales/en.po
# web/src/locales/pseudo-LOCALE.po
|
2021-05-22 20:01:16 +02:00 |
|
Jens Langhammer
|
2c816e6162
|
providers/proxy: don't use https to communicate with outpost
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-22 18:56:38 +02:00 |
|
Jens Langhammer
|
bb89b9b572
|
Merge branch 'version-2021.5' into next
|
2021-05-21 23:50:43 +02:00 |
|
Jens Langhammer
|
6600da7d98
|
providers/oauth2: add missing kid header to JWT Tokens
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 23:40:00 +02:00 |
|
Jens Langhammer
|
1a0f72d0a8
|
Merge branch 'version-2021.5' into next
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# authentik/stages/authenticator_static/api.py
# swagger.yaml
|
2021-05-21 21:33:18 +02:00 |
|
Jens Langhammer
|
a265dd54cc
|
stages/authenticator_*: fix Permission Error when disabling Authenticator as non-superuser
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 21:25:03 +02:00 |
|
Jens Langhammer
|
a603f42cc0
|
api: add OwnerFilter
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 20:46:59 +02:00 |
|
Jens Langhammer
|
d9a788aac8
|
api: rename auth to authentication, add authorization for rest_framework permission class
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 20:14:03 +02:00 |
|
Jens Langhammer
|
7c6185b581
|
api: fix URL names for admin Authenticator Views
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 19:53:40 +02:00 |
|
Jens Langhammer
|
41a1305555
|
policies: improve debug logging
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 19:10:47 +02:00 |
|
Jens Langhammer
|
75f252b530
|
flows: rename oob to oobe
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 19:10:42 +02:00 |
|
Jens Langhammer
|
c526e5fb9a
|
policies: improve debug logging
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 19:10:15 +02:00 |
|
Jens Langhammer
|
b826eb264e
|
flows: rename oob to oobe
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-21 12:06:39 +02:00 |
|
Jens Langhammer
|
7666c246c3
|
Merge branch 'version-2021.5'
|
2021-05-20 20:46:18 +02:00 |
|
Jens Langhammer
|
bf4cbb25fe
|
release: 2021.5.3
|
2021-05-20 20:17:39 +02:00 |
|
Jens Langhammer
|
a925418f60
|
lib: don't send ImproperlyConfigured to sentry
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 19:18:35 +02:00 |
|
Jens Langhammer
|
71d112bdcf
|
sources/plex: remove default for plex_token
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 19:13:54 +02:00 |
|
Jens Langhammer
|
d2c06c40ea
|
sources/plex: remove default for plex_token
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 19:09:51 +02:00 |
|
Jens Langhammer
|
590c7f4c9d
|
outposts: fix error on outpost disconnect
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 18:07:27 +02:00 |
|
Jens Langhammer
|
9a48c2fd9a
|
outposts: fix error on outpost disconnect
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 18:07:07 +02:00 |
|
Jens Langhammer
|
be5a6c0310
|
api: add set_*_url method for Application and Flow to set icon/background to URL
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 17:18:40 +02:00 |
|
Jens Langhammer
|
92106ca4bf
|
api: add capabilities to API, add can_save_media
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 17:00:47 +02:00 |
|
Jens Langhammer
|
56f1204c9b
|
outposts: fix update signal not being sent to correct instances
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 15:23:38 +02:00 |
|
Jens Langhammer
|
f6f93640c5
|
outposts: fix update signal not being sent to correct instances
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 15:23:18 +02:00 |
|
Jens Langhammer
|
92f2a82c03
|
providers/oauth2: fix double login required when prompt=login
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 01:10:08 +02:00 |
|
Jens Langhammer
|
dcf074650e
|
providers/proxy: fix redirect_uris not always being set on save
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-20 01:10:04 +02:00 |
|
Jens Langhammer
|
acf1ad91d9
|
providers/oauth2: fix double login required when prompt=login
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-19 23:34:27 +02:00 |
|
Jens Langhammer
|
a74419214c
|
providers/proxy: fix redirect_uris not always being set on save
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-19 23:10:00 +02:00 |
|
Jens Langhammer
|
bc6aef7af2
|
lib: improve sentry integration
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-18 11:29:36 +02:00 |
|
Jens Langhammer
|
788ea46d8c
|
flows: fix formatting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-18 09:23:22 +02:00 |
|
Jens Langhammer
|
06dee5d5d8
|
flows: fix lint error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-17 23:38:31 +02:00 |
|
Jens Langhammer
|
3cf0f07baf
|
*: fix API Schema for file uploads
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-17 23:12:52 +02:00 |
|
Jens Langhammer
|
f016095891
|
Merge branch 'master' into openapi-v3
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# Pipfile.lock
|
2021-05-17 20:37:18 +02:00 |
|
Jens Langhammer
|
5a465fbc36
|
release: 2021.5.2
|
2021-05-17 19:54:10 +02:00 |
|
Jens Langhammer
|
7f4bd27b85
|
Merge branch 'master' into openapi-v3
|
2021-05-16 23:51:45 +02:00 |
|
Jens Langhammer
|
b66626f9c4
|
ci: generate secert_key for CI runs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 23:46:23 +02:00 |
|
Jens Langhammer
|
f9ce41229d
|
api: fix unittests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 22:36:26 +02:00 |
|
Jens Langhammer
|
ae6a406b1d
|
Merge branch 'master' into openapi-v3
|
2021-05-16 22:29:39 +02:00 |
|
Jens Langhammer
|
45c1a603e7
|
root: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 22:29:28 +02:00 |
|
Jens Langhammer
|
330219e76f
|
Merge branch 'master' into openapi-v3
|
2021-05-16 22:26:07 +02:00 |
|
Jens Langhammer
|
583271d5ed
|
root: only load debug secret key when debug is enabled
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 22:25:55 +02:00 |
|
Jens Langhammer
|
0db17b9729
|
root: remove yasg
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 22:18:04 +02:00 |
|
Jens Langhammer
|
9f9ee66cc4
|
api: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 21:57:04 +02:00 |
|
Jens Langhammer
|
ab2bd622a8
|
Merge branch 'master' into openapi-v3
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# outpost/pkg/ak/api.go
# outpost/pkg/ak/global.go
# outpost/pkg/ldap/instance_bind.go
|
2021-05-16 21:36:24 +02:00 |
|
Tom Pansino
|
8d2a3b67b9
|
lib: Fix config loading of secrets from files (#887)
|
2021-05-16 21:10:31 +02:00 |
|
Jens Langhammer
|
8b6292b3de
|
api: don't overwrite 400 and 403
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 20:54:58 +02:00 |
|
Jens Langhammer
|
cbed5a6522
|
api: fix missing error definitions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 19:53:04 +02:00 |
|
Jens Langhammer
|
589f806b7c
|
flows: fix schema for flow executor
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 19:13:31 +02:00 |
|
Jens Langhammer
|
07dc648470
|
web: fix mixed Static/TOTP pages
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:59:33 +02:00 |
|
Jens Langhammer
|
41f6d3b6e7
|
stages/authenticator_static: add serializer for tokens
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:55:47 +02:00 |
|
Jens Langhammer
|
d0f1daf025
|
admin: make tasks's retry api not ask for a body
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:43:47 +02:00 |
|
Jens Langhammer
|
d38fd603dd
|
web: fix more special API Calls
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:41:02 +02:00 |
|
Jens Langhammer
|
ba5374f6e1
|
web: mass update API calls
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:24:15 +02:00 |
|
Jens Langhammer
|
7152d7ee01
|
outposts: fix schema for outposts health
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:10:11 +02:00 |
|
Jens Langhammer
|
ab07113530
|
admin: migrate WorkerViewSet to APIView
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:06:46 +02:00 |
|
Jens Langhammer
|
a7d7b46747
|
admin: migrate version view to APIView
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 18:00:02 +02:00 |
|
Jens Langhammer
|
9a44088d2b
|
admin: migrate metrics viewset to APIView
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 17:49:37 +02:00 |
|
Jens Langhammer
|
b351ae12c5
|
api: make config viewset single view
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 17:44:19 +02:00 |
|
Jens Langhammer
|
759bf59780
|
core: make filefields readonly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 17:34:55 +02:00 |
|
Jens Langhammer
|
10cb60f48e
|
api: fix pagination not being required in schema
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 17:32:13 +02:00 |
|
Jens Langhammer
|
ef9f08553c
|
*: linting pass, rename from swagger to schema
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 15:22:57 +02:00 |
|
Jens Langhammer
|
4fb71a6bdd
|
api: fix pagination schema
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 15:08:51 +02:00 |
|
Jens Langhammer
|
cac1f242dc
|
*: replace swagger with openapi
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 14:23:05 +02:00 |
|
Jens Langhammer
|
0bac738090
|
*: fix static response descriptions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-16 14:07:29 +02:00 |
|
Jens Langhammer
|
1324d03815
|
*: initial migration to openapi v3
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 23:57:28 +02:00 |
|
Jens Langhammer
|
c55f2ad10a
|
root: set additional sentry tags
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 19:53:43 +02:00 |
|
Jens Langhammer
|
a30b32fbbf
|
outposts: fix missing default for OutpostState.for_channel
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 17:46:53 +02:00 |
|
Jens Langhammer
|
1745306cc6
|
outposts: fix error when controller loads from cache but cache has expired
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 17:45:33 +02:00 |
|
Jens Langhammer
|
8925787a13
|
flows: fix error when using cancel flow
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 17:42:37 +02:00 |
|
Jens Langhammer
|
968b7ec17a
|
lib: fix parsing of remote IP header when behind multiple reverse proxies
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 15:08:53 +02:00 |
|
Jens Langhammer
|
6600d5bf69
|
providers/oauth2: use user.uid
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 14:08:49 +02:00 |
|
Jens Langhammer
|
a4278833d8
|
providers/proxy: fix ingress not being created with full https
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-15 13:45:41 +02:00 |
|
Jens Langhammer
|
942905b9b1
|
providers/proxy: fix formatting issue
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-14 16:24:35 +02:00 |
|
Jens Langhammer
|
8d7bb7da17
|
providers/proxy: connect ingress to https instead of http
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#882
|
2021-05-14 11:42:03 +02:00 |
|
Jens Langhammer
|
9939db13c3
|
outposts: fix reload notification not working due to wrong ID being saved
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-14 11:13:04 +02:00 |
|
Jens Langhammer
|
465750276c
|
core: fix application's slug field not being set to unique
closes #881
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-14 10:49:42 +02:00 |
|
Jens Langhammer
|
0b7ebf0e07
|
release: 2021.5.1
|
2021-05-13 20:50:31 +02:00 |
|
Jens Langhammer
|
709581f5a8
|
root: use ghcr images by default
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-13 20:15:29 +02:00 |
|
Jens Langhammer
|
1df8790050
|
stages/authenticator_static: fix error when listing devices
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-13 18:09:55 +02:00 |
|
Jens Langhammer
|
3c23ad340f
|
web/admin: improve diagram api for flows
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-13 18:01:40 +02:00 |
|
Jens Langhammer
|
f9f2e00913
|
core: improve error handling for backups
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-13 17:56:49 +02:00 |
|
Jens Langhammer
|
8f99891a9d
|
release: 2021.5.1-rc10
|
2021-05-12 21:25:18 +02:00 |
|
Jens Langhammer
|
97a3c2d88b
|
release: 2021.5.1-rc9
|
2021-05-12 20:50:29 +02:00 |
|
Jens Langhammer
|
e91ff4566d
|
Merge branch 'next' into version-2021.5
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# outpost/pkg/version.go
|
2021-05-12 20:49:58 +02:00 |
|
Jens Langhammer
|
a3fccbdaff
|
outposts: add build_hash for docker image
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 20:36:18 +02:00 |
|
Jens Langhammer
|
bdf9f26d07
|
outposts: compare build hash in outdated check
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 19:05:29 +02:00 |
|
Jens Langhammer
|
9a0aa4c79b
|
outposts/ldap: add infinite loop prevention
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 18:31:44 +02:00 |
|
Jens Langhammer
|
52cf4890cf
|
root: remove servername from backup files
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 17:53:23 +02:00 |
|
Jens Langhammer
|
8e5d03cb86
|
outposts: remove legacy API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 16:41:54 +02:00 |
|
Jens Langhammer
|
2190fa555b
|
events/api: fix error when updating transports
closes #866
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 16:41:30 +02:00 |
|
Jens Langhammer
|
3665e2fefa
|
release: 2021.5.1-rc8
|
2021-05-12 14:52:34 +02:00 |
|
Jens Langhammer
|
3dbe35cf9e
|
stages/invitation: fix wrong serializer used for user model
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# swagger.yaml
|
2021-05-12 14:22:16 +02:00 |
|
Jens Langhammer
|
c7f0ea8a4b
|
root: update dbbackup to git version
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 01:20:31 +02:00 |
|
Jens Langhammer
|
0620324702
|
root: bump version of psf black
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-12 00:42:46 +02:00 |
|
Jens Langhammer
|
5a0e78c698
|
outposts: fix issue with duplicate outpost health
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 21:46:30 +02:00 |
|
Jens Langhammer
|
84dfbcaaae
|
providers/api: return redirect_uris for proxy provider
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 20:02:17 +02:00 |
|
Jens Langhammer
|
e649e9fb03
|
core: don't use self.get_object for application permission check to prevent 404 when view permission is missing
closes #864
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 17:35:11 +02:00 |
|
Jens Langhammer
|
266ef66a6f
|
Merge branch 'master' into next
|
2021-05-11 14:57:52 +02:00 |
|
Andreas Egli
|
842fdb0b0c
|
fixed session durations of more than 1 day (#863)
|
2021-05-11 14:57:33 +02:00 |
|
Jens L
|
36f7cad23b
|
Merge pull request #862 from goauthentik/form-refresh-on-save
Form refresh on save
|
2021-05-11 14:23:32 +02:00 |
|
Jens Langhammer
|
24f2932777
|
crypto: add ?download flag
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#861
|
2021-05-11 14:21:35 +02:00 |
|
Jens Langhammer
|
124ce80694
|
sources/plex: make plex_token readable from API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 13:32:28 +02:00 |
|
Jens Langhammer
|
4e2443d60b
|
flows: make cancel link always logout user
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 13:13:05 +02:00 |
|
Jens Langhammer
|
17b65adcc5
|
lib: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 13:07:47 +02:00 |
|
Jens Langhammer
|
96ea7ae09c
|
root: allow configuration of s3 backup location
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 02:10:00 +02:00 |
|
Jens Langhammer
|
172bfceb31
|
root: fix db backup failing when password has special chars
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 02:01:22 +02:00 |
|
Jens Langhammer
|
932b19999e
|
providers/proxy: missing @property for noop
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 01:26:01 +02:00 |
|
Jens Langhammer
|
788fd00390
|
outposts: use noop flag in each reconciler instead of raising Disabled and force use of get_referecen_object
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-11 00:27:29 +02:00 |
|
Jens Langhammer
|
a293a14f2a
|
outposts: re-add _config for backwards compat
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 22:28:46 +02:00 |
|
Jens Langhammer
|
51e3453dca
|
admin: fix linting in api tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 20:14:21 +02:00 |
|
Jens Langhammer
|
6f58fdf158
|
api: add more tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 19:51:29 +02:00 |
|
Jens Langhammer
|
219b8d1a57
|
outposts: allow individual components of managed outposts to be disabled
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 19:27:48 +02:00 |
|
Jens Langhammer
|
c7d4e69669
|
root: make database port configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 19:25:15 +02:00 |
|
Jens Langhammer
|
cd629dfbaa
|
outposts: improve API validation for config attribute, ensure all required attributes are set
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 19:24:42 +02:00 |
|
Jens Langhammer
|
3d0a853449
|
Merge branch 'version-2021.5' into next
|
2021-05-10 18:07:39 +02:00 |
|
Jens Langhammer
|
c2f8ff55cf
|
outposts: fix outpost delete hanging thread, run cleanup in async task with info from cache with ability to retry
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 17:11:31 +02:00 |
|
Jens Langhammer
|
80fae44f47
|
release: 2021.5.1-rc7
|
2021-05-10 12:13:10 +02:00 |
|
Jens Langhammer
|
73eb97ca6e
|
release: 2021.5.1-rc6
|
2021-05-10 11:44:23 +02:00 |
|
Jens Langhammer
|
ebe90d8886
|
Merge branch 'next' into version-2021.5
|
2021-05-10 11:43:50 +02:00 |
|
Jens Langhammer
|
a1a1b113b1
|
release: 2021.5.1-rc5
|
2021-05-10 11:34:00 +02:00 |
|
Jens Langhammer
|
1fb3642701
|
sources/oauth: fix google tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 00:27:37 +02:00 |
|
Jens Langhammer
|
847d97b813
|
sources/oauth: fix google tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 00:27:20 +02:00 |
|
Jens Langhammer
|
1f1d322958
|
*: fix api results when non-superuser
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-10 00:01:35 +02:00 |
|
Jens Langhammer
|
e4841ce1a4
|
Merge branch 'version-2021.5' into next
|
2021-05-09 23:41:23 +02:00 |
|
Jens Langhammer
|
e33a5528f7
|
core: catch IntegrityError in flow_manager and deny request
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 23:31:39 +02:00 |
|
Jens Langhammer
|
b7d828702d
|
sources/oauth: don't set username on google source
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 22:56:44 +02:00 |
|
Jens Langhammer
|
f7fd31cc84
|
release: 2021.5.1-rc4
|
2021-05-09 21:43:38 +02:00 |
|
Jens Langhammer
|
04aae8f584
|
sources/oauth: make secret write_only
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 21:40:25 +02:00 |
|
Jens Langhammer
|
bbca90c93a
|
Merge branch 'next' into version-2021.5
|
2021-05-09 20:57:23 +02:00 |
|
Jens Langhammer
|
dda1d4e0fb
|
core: add more logs to flow_manager
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 20:27:37 +02:00 |
|
Jens Langhammer
|
f072c600cc
|
lifecycle: use URl for redis on startup to prevent errors with no paswords
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 20:13:58 +02:00 |
|
Jens Langhammer
|
92537a6c8d
|
Merge branch 'next' into version-2021.5
|
2021-05-09 18:46:26 +02:00 |
|
Jens Langhammer
|
72836ecd9d
|
outposts: default to currently running namespace if possible
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 18:44:32 +02:00 |
|
Jens Langhammer
|
251a97c77e
|
Merge branch 'next' into version-2021.5
|
2021-05-09 18:13:52 +02:00 |
|
Jens Langhammer
|
7f7046f0e4
|
outposts: lowercase k8s object names
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 18:13:21 +02:00 |
|
Jens Langhammer
|
cd3f02fd3b
|
release: 2021.5.1-rc3
|
2021-05-09 17:25:48 +02:00 |
|
Jens Langhammer
|
d3feab9463
|
release: 2021.5.1-rc2
|
2021-05-09 16:43:36 +02:00 |
|
Jens Langhammer
|
70c25692eb
|
release: 2021.5.1-rc1
|
2021-05-09 16:07:50 +02:00 |
|
Jens Langhammer
|
a6a8eddf7c
|
providers/proxy: create ingress for forward_auth /akprox path
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 12:40:44 +02:00 |
|
Jens Langhammer
|
8c0a87b710
|
outposts: improve logging for outpost controller
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 12:34:44 +02:00 |
|
Jens Langhammer
|
5cad59a9f8
|
providers/proxy: fix being able to set empty internal_host
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-09 00:07:34 +02:00 |
|
Jens Langhammer
|
5ac6a6910e
|
outposts: check if traefik CRD exists before attempting to delete
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-08 21:59:13 +02:00 |
|
Jens Langhammer
|
d751a7fc4c
|
lib: add user attribute "goauthentik.io/user/override-ips" to allow overriding of client ips
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-08 21:42:31 +02:00 |
|
Jens Langhammer
|
1b87375661
|
lib: add default to config from file://
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-08 17:13:13 +02:00 |
|
Jens Langhammer
|
6868b7722c
|
outposts: delete old outpost deployment when name or namespace is changed
closes #845
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-08 16:11:38 +02:00 |
|
Jens Langhammer
|
7a1935b4e2
|
outposts: fix error on k8s when name has spaces
closes #846
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-08 14:09:21 +02:00 |
|
Jens Langhammer
|
5e7521915a
|
stages/password: fix configure_flow not being set on initial setup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 14:08:43 +02:00 |
|
Jens Langhammer
|
9fc072e4df
|
outposts: fix lint
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 11:56:44 +02:00 |
|
Jens Langhammer
|
55ea9afeec
|
core: fix dark mode on server-side rendered pages
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 11:53:53 +02:00 |
|
Jens Langhammer
|
9485f0b8cc
|
outpost/ldap: make users and groups OU instead of CN
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 11:46:26 +02:00 |
|
Jens Langhammer
|
e6dfa8294e
|
providers/proxy: use name.namespace for middleware service
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 10:07:30 +02:00 |
|
Jens Langhammer
|
e5a5a5c603
|
outposts: fix k8s controller not handing Disabled() in static deployment
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 09:52:43 +02:00 |
|
Jens Langhammer
|
ea7f9f291f
|
outposts: create traefikmiddleware if forwardAuth is enabled
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-07 00:01:35 +02:00 |
|
Jens Langhammer
|
241d790e69
|
stages/user_write: if any connection is being sent in the plan context, save it to the user
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 22:10:20 +02:00 |
|
Jens Langhammer
|
83e08f12ae
|
core: fix arguments not being passed in FlowManager
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 22:07:48 +02:00 |
|
Jens Langhammer
|
6526659b51
|
sources/plex: allow auth for owner (when identifier of source plex token matches)
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 21:50:15 +02:00 |
|
Jens Langhammer
|
6c3b7c8d3e
|
events: handle error when notifications are triggered and no users exist
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 20:13:04 +02:00 |
|
Jens Langhammer
|
d51ecc4554
|
sources/saml: handle internal error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 20:10:56 +02:00 |
|
Jens Langhammer
|
ef63e35ad2
|
outposts: improve messaging from controller on k8s
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 20:07:29 +02:00 |
|
Jens Langhammer
|
4e9176ed2e
|
outposts: support different port on container vs exposed port
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 19:59:49 +02:00 |
|
Jens Langhammer
|
d1296e9cc7
|
outposts: fix deployments referencing the wrong secret
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 19:51:14 +02:00 |
|
Jens Langhammer
|
d85e0593f1
|
core: set attributes on users which are enrolled via source
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 19:35:05 +02:00 |
|
Jens Langhammer
|
b3a3852a54
|
core: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 13:58:58 +02:00 |
|
Jens Langhammer
|
49bf82a0a4
|
core: add user filter by superuser status
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 13:44:42 +02:00 |
|
Jens Langhammer
|
73b87a5e3d
|
events: fix error in API when specifying max_n
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-06 13:15:54 +02:00 |
|
Jens Langhammer
|
ac9cac302c
|
outposts: fix outpost state showing last time without version
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 20:49:13 +02:00 |
|
Jens Langhammer
|
701c140cfd
|
providers/proxy: fix logic error for ingress lookup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 20:28:13 +02:00 |
|
Jens Langhammer
|
fa2ff5fc2b
|
sources/plex: save user's plex token, add option to allow friends
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 19:37:59 +02:00 |
|
Jens Langhammer
|
d5cab5d580
|
sources/plex: fix default for client_id
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 19:23:51 +02:00 |
|
Jens Langhammer
|
be8b2bf6f6
|
providers/proxy: don't create ingress for domains which use forwardAuth, don't create ingress at all if all providers are forward auth
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 17:53:12 +02:00 |
|
Jens Langhammer
|
b266a2cdfb
|
outposts: make k8s service type configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 15:37:56 +02:00 |
|
Jens Langhammer
|
9a15a66d85
|
outposts: make k8s object naming configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 15:36:27 +02:00 |
|
Jens Langhammer
|
446f104c90
|
core: add user UID to API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 11:54:28 +02:00 |
|
Jens Langhammer
|
86c2a5d69d
|
lib: handle errors when reading config from file://
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 01:03:00 +02:00 |
|
Jens Langhammer
|
1a02049104
|
core: show users and groups when user has overall user permissions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 01:02:47 +02:00 |
|
Jens Langhammer
|
32934fcd38
|
outpost/ldap: check access based on Group Membership
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-05 00:03:19 +02:00 |
|
Jens Langhammer
|
d84d7c26ca
|
Merge branch 'master' into outpost-ldap
|
2021-05-04 23:34:31 +02:00 |
|
Jens Langhammer
|
2f6e6a3123
|
core: improve messaging when flow manager denied request
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 23:30:21 +02:00 |
|
Jens Langhammer
|
ba57bf4fa2
|
lib: add support for file:// protocol in config file
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 22:53:59 +02:00 |
|
Jens Langhammer
|
e674f03064
|
*/api: fix lookups per user
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 21:58:20 +02:00 |
|
Jens Langhammer
|
08451c15f4
|
outposts/ldap: save user DN to determine who can search
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 21:49:15 +02:00 |
|
Jens Langhammer
|
99d161e212
|
Merge branch 'master' into outpost-ldap
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# authentik/core/api/users.py
# authentik/policies/event_matcher/migrations/0013_alter_eventmatcherpolicy_app.py
|
2021-05-04 21:02:20 +02:00 |
|
Jens Langhammer
|
4acbda2b77
|
core: improve messaging on flow_manager, authenticate user when they linked their account after not having been authenticateed
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 18:49:27 +02:00 |
|
Jens Langhammer
|
83cfb5f8c2
|
stages/email: improve error handling
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 18:30:23 +02:00 |
|
Jens Langhammer
|
0d370ef0a9
|
web/admin: filter out service accounts by default
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 18:23:13 +02:00 |
|
Jens Langhammer
|
42f9ba8efe
|
gproxy: load default config file for debug and listen statements
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-04 14:10:34 +02:00 |
|
Jens Langhammer
|
812be495a5
|
Merge branch 'master' into go-proxy
|
2021-05-03 22:53:33 +02:00 |
|
Jens Langhammer
|
dbc3df1f63
|
events: handle error when notification rule doesn't exist during task
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 22:52:39 +02:00 |
|
Jens Langhammer
|
d330e9ee7f
|
web/flows: fix rendering for plex login
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 22:08:25 +02:00 |
|
Jens Langhammer
|
be21a5d172
|
sources/plex: add general tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 21:55:55 +02:00 |
|
Jens Langhammer
|
6fc38436f4
|
sources/plex: set better defaults on model
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 21:23:13 +02:00 |
|
Jens Langhammer
|
35faf269db
|
sources: rewrite onboarding
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 20:27:52 +02:00 |
|
Jens Langhammer
|
e56c3fc54c
|
Merge branch 'master' into plex-auth
|
2021-05-03 18:28:53 +02:00 |
|
Jens Langhammer
|
1041718e27
|
sources/saml: fix redirect url dropping non-standard ports
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 14:51:46 +02:00 |
|
Jens Langhammer
|
2507c0eec9
|
stages/invitation: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 12:44:19 +02:00 |
|
Jens Langhammer
|
4523550422
|
stages/invitation: add single_use flag to delete invitation after use
closes #821
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 09:52:38 +02:00 |
|
Jens Langhammer
|
988cf15b71
|
root: initial go proxy, update compose and helm
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-03 09:39:09 +02:00 |
|
Jens Langhammer
|
01d29134b9
|
sources/plex: add API to redeem token
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-02 16:47:20 +02:00 |
|
Jens Langhammer
|
55250e88e5
|
sources/*: rewrite UILoginButton to return challenge instead
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-02 16:46:27 +02:00 |
|
Jens Langhammer
|
f1b100c8a5
|
sources/plex: initial plex source implementation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-02 14:43:51 +02:00 |
|
Jens Langhammer
|
19708bc67b
|
core: add additional_data to UILoginButton to pass additional data
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-02 14:43:26 +02:00 |
|
Jens Langhammer
|
c529340d6c
|
*: fix title not being set correctly for server-side rendered views
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-02 12:22:50 +02:00 |
|
Jens Langhammer
|
c317efa14c
|
Merge branch 'master' into outpost-ldap
|
2021-05-01 00:26:55 +02:00 |
|
Jens Langhammer
|
379fcf9c1f
|
sources/saml: fix error ValueError while decoding XML
closes #812
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-05-01 00:18:57 +02:00 |
|
Jens Langhammer
|
e10a7b48b7
|
sources/saml: fix Redirect bindings when SSO Url already has query params
related to #812
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 23:44:04 +02:00 |
|
Jens Langhammer
|
3e666de91d
|
outposts: fix formatting of image name
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 16:52:28 +02:00 |
|
Jens Langhammer
|
333758d91f
|
crypto: handle encrypted private keys
closes #811
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 15:25:42 +02:00 |
|
Jens Langhammer
|
eb8f52b870
|
stages/identification: fix tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 10:15:27 +02:00 |
|
Jens Langhammer
|
9ce49c2089
|
stages/identification: fix unused import
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 09:34:33 +02:00 |
|
Jens Langhammer
|
34c45900c2
|
stages/identification: allow selection of no user fields to only allow login via sources
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-30 01:07:37 +02:00 |
|
Jens Langhammer
|
bf7d110af3
|
Merge branch 'version-2021.4'
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# .github/workflows/release.yml
# helm/README.md
# helm/values.yaml
# website/docs/installation/kubernetes.md
|
2021-04-29 23:50:52 +02:00 |
|
Jens Langhammer
|
4e5eeacf0a
|
release: 2021.4.5
|
2021-04-29 23:03:09 +02:00 |
|
Jens Langhammer
|
b55cb2b40c
|
Merge branch 'master' into outpost-ldap
|
2021-04-29 20:13:47 +02:00 |
|
Jens Langhammer
|
25c001f2cd
|
outposts: allow better configuration of outpost image name
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-29 20:07:53 +02:00 |
|
Jens L
|
2a409215d3
|
outpost: forwardAuth mode (#790)
|
2021-04-29 18:17:10 +02:00 |
|
Jens Langhammer
|
d1d28722d2
|
lib: don't send 404 errors to sentry
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-29 15:27:41 +02:00 |
|
Jens Langhammer
|
35f0e6b88d
|
lib: don't send 404 errors to sentry
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-29 15:25:54 +02:00 |
|
Jens Langhammer
|
a6e528d209
|
core: fix text color of error pages not being white
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-29 15:18:28 +02:00 |
|
Jens Langhammer
|
bb2c4423b0
|
core: fix text color of error pages not being white
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-29 15:17:10 +02:00 |
|
Jens Langhammer
|
2c70301f56
|
stages/invitation: accept token from prompt_data
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 22:43:40 +02:00 |
|
Jens Langhammer
|
07b9923bf6
|
stages/invitation: fix token not being loaded correctly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 22:43:40 +02:00 |
|
Jens Langhammer
|
3dcd67c1a3
|
outposts: only kill docker container if its running
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 22:43:32 +02:00 |
|
Jens Langhammer
|
2a9feafb90
|
root: add middleware to properly report websocket connection to sentry
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 22:42:10 +02:00 |
|
Jens Langhammer
|
1af3357826
|
*: make logger not use .error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 22:41:44 +02:00 |
|
Jens Langhammer
|
ed49d7824e
|
stages/email: catch ValueError when global email settings are invalid
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 22:41:38 +02:00 |
|
Jens Langhammer
|
378402fcf0
|
stages/user_login: add tests for explicit session length
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 22:41:21 +02:00 |
|
Jens Langhammer
|
b2b9093c95
|
web: don't enable ShadyDOM on selenium
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 22:40:16 +02:00 |
|
Jens Langhammer
|
afa2afe1d4
|
web/flows: include ShadyDOM, always enable ShadyDOM for flow interface
improve compatibility with password managers and iOS
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 22:40:16 +02:00 |
|
Jens Langhammer
|
d7631e8af0
|
stages/invitation: accept token from prompt_data
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 22:39:06 +02:00 |
|
Jens Langhammer
|
6e625f7400
|
stages/invitation: fix token not being loaded correctly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 22:13:54 +02:00 |
|
Jens L
|
c4e4e17f93
|
providers/oauth2: add access_code_validity (#795)
closes #794
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 21:03:43 +02:00 |
|
Jens Langhammer
|
9b70aaa717
|
outposts: only kill docker container if its running
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-28 18:32:16 +02:00 |
|
Jens Langhammer
|
4d858c64e0
|
Merge branch 'master' into outpost-ldap
|
2021-04-27 17:08:26 +02:00 |
|
Jens Langhammer
|
6f0792ccfe
|
api: remove legacy basic auth for 2021.3 outposts
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-27 17:06:47 +02:00 |
|
Jens Langhammer
|
04f06e00ff
|
api: add tests for permission_required decorator
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-27 17:04:38 +02:00 |
|
Jens Langhammer
|
776c3128b8
|
flows: add tests for stage type, component and ui_user_settings
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-27 16:52:50 +02:00 |
|
Jens Langhammer
|
e9e0992dce
|
root: add middleware to properly report websocket connection to sentry
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-27 16:21:44 +02:00 |
|
Jens Langhammer
|
ccef7b4233
|
*: make logger not use .error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-27 15:43:26 +02:00 |
|
Jens Langhammer
|
cad6c42fdd
|
lib: add more tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-27 15:43:11 +02:00 |
|
Jens Langhammer
|
d2abe6d455
|
stages/email: catch ValueError when global email settings are invalid
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-27 15:20:09 +02:00 |
|
Jens Langhammer
|
68d120b3b4
|
sources/oauth: add tests for google type
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-27 15:19:54 +02:00 |
|
Jens Langhammer
|
48c0c0baca
|
*/api: simplify lookups for per-user
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-27 14:53:01 +02:00 |
|
Jens Langhammer
|
7b29a1e485
|
stages/user_login: add tests for explicit session length
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-27 14:52:42 +02:00 |
|
Jens Langhammer
|
fe28d216fe
|
providers/oauth2: always test JWT keys in tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-27 14:07:04 +02:00 |
|
Jens Langhammer
|
3ce8b836dc
|
outposts: allow outposts to have non-object specific permissions
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 23:28:26 +02:00 |
|
Jens Langhammer
|
1d5958a78f
|
providers/ldap: add search_group to limit who can do search requests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 23:25:03 +02:00 |
|
Jens Langhammer
|
2a122845d9
|
core: add groups to users
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 19:51:24 +02:00 |
|
Jens Langhammer
|
fae4d34131
|
Merge branch 'master' into outpost-ldap
|
2021-04-26 17:11:50 +02:00 |
|
Jens Langhammer
|
7ff7bfeb58
|
core: fix incorrect styling for bse_full template
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 16:44:13 +02:00 |
|
Jens Langhammer
|
29da7dd8d6
|
providers/ldap: fix lint error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 15:49:19 +02:00 |
|
Jens Langhammer
|
b3c8ffb96c
|
outposts/ldap: use authorization_flow instead of separate field
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 15:09:41 +02:00 |
|
Jens Langhammer
|
b35d9ae8b0
|
outposts: fix type not being configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 14:45:14 +02:00 |
|
Jens Langhammer
|
302b047f1a
|
outposts/ldap: add controllers
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 14:26:31 +02:00 |
|
Jens Langhammer
|
d741ed430a
|
web/admin: add UI for LDAP Provider
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 12:12:02 +02:00 |
|
Jens Langhammer
|
f89479caf3
|
providers/ldap: add LDAP provider
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 11:52:42 +02:00 |
|
Jens Langhammer
|
5fb07acf54
|
core: add API to check access to single application by slug
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 10:08:35 +02:00 |
|
Jens Langhammer
|
99d0d4e8de
|
Merge branch 'master' into outpost-ldap
|
2021-04-26 09:25:26 +02:00 |
|
Jens Langhammer
|
9341787fe7
|
providers/oauth2: replace deprecated jwkest with pyjwt
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-26 00:02:13 +02:00 |
|
Jens Langhammer
|
a525d6c3a9
|
Merge branch 'master' into outpost-ldap
|
2021-04-25 20:46:02 +02:00 |
|
Jens Langhammer
|
502ac51fa7
|
web: don't enable ShadyDOM on selenium
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-25 01:29:01 +02:00 |
|
Jens Langhammer
|
4bc6fd28d4
|
web/flows: include ShadyDOM, always enable ShadyDOM for flow interface
improve compatibility with password managers and iOS
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-24 23:32:46 +02:00 |
|
Jens Langhammer
|
820c9e7d06
|
Merge branch 'master' into outpost-ldap
|
2021-04-24 22:22:01 +02:00 |
|
Jens Langhammer
|
5f58a4566c
|
release: 2021.4.4
|
2021-04-24 21:03:29 +02:00 |
|
Jens Langhammer
|
d616bdd5d6
|
providers/oauth2: add proper support for non-http schemes as redirect URIs
closes #772
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-23 16:34:52 +02:00 |
|
Jens Langhammer
|
3282b34431
|
providers/oauth2: fix TokenView not having CORS headers set even with proper Origin
and added tests. closes #771
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-22 23:48:28 +02:00 |
|
Jens Langhammer
|
392d9bb10b
|
providers/oauth2: fix misleading name of cors_allow_any
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#771
|
2021-04-22 23:29:49 +02:00 |
|
Jens Langhammer
|
799d186510
|
web/flows: fix Sentry not being loaded correctly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-22 20:48:22 +02:00 |
|
Jens Langhammer
|
3983b7fbe4
|
lib: don't send SuspiciousOperation to sentry
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-22 20:17:00 +02:00 |
|
Jens Langhammer
|
d75284a587
|
flows: fix errors which occur during flow execution being sent to sentry malformed
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-22 20:14:37 +02:00 |
|
Jens Langhammer
|
a7598c6ee5
|
*: fix more URLs for github org
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-22 11:06:56 +02:00 |
|
Jens Langhammer
|
499b52df6a
|
root: update urls to github org
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-21 22:46:48 +02:00 |
|
Jens Langhammer
|
b8a566f4a0
|
outposts: move local connection check to task, run every 60 minutes
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-21 11:34:48 +02:00 |
|
Jens Langhammer
|
aa0e8edb8b
|
*: make tasks run every 60 minutes not :00 every hour
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-21 11:26:17 +02:00 |
|
Jens Langhammer
|
57072dd6ce
|
stages/identification: fix query logic for user lookup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-21 10:09:38 +02:00 |
|
Jens Langhammer
|
b40afb9b7d
|
stages/identification: ignore inactive users
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-20 21:45:14 +02:00 |
|
Jens Langhammer
|
1f783dfc01
|
stages/user_login: add default backend
closes #763
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-20 20:53:07 +02:00 |
|
Jens Langhammer
|
76131e40ec
|
tests/e2e: monkey patch OAuth1 test instead of setting URLs manually
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-20 20:03:20 +02:00 |
|
Jens Langhammer
|
a8998a6356
|
sources/oauth: handle error in auzre_ad when ID Can't be extracted
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-20 17:27:52 +02:00 |
|
Jens Langhammer
|
dc75d7b7f0
|
sources/oauth: fix error whilst fetching user profile when source uses fixed URLs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-20 17:25:59 +02:00 |
|
Jens Langhammer
|
e20bb7d636
|
release: 2021.4.3
|
2021-04-20 09:15:07 +02:00 |
|
Jens Langhammer
|
4f5e1fb86b
|
outposts: initial ldap outpost implementation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-20 00:30:27 +02:00 |
|
Jens Langhammer
|
464a1c0536
|
api: make 401 messages clearer
closes #755
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-19 20:46:57 +02:00 |
|
Jens Langhammer
|
b75feab709
|
outposts: don't run outpost_controller when no service connection is set
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-19 19:23:26 +02:00 |
|
Jens Langhammer
|
10b45a8dea
|
api: fix 401 responses which should be 403s
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-19 19:03:00 +02:00 |
|
Jens Langhammer
|
c43ac1f704
|
api: mount outposts under outposts/instances to match flows
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-19 18:51:12 +02:00 |
|
Jens Langhammer
|
14d702450a
|
core: add parameter to output property mapping test formatted
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-19 18:32:36 +02:00 |
|
Jens Langhammer
|
8a6879afa5
|
core: add superuser_full_list to applications list, shows all applications when superuser
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-19 16:07:30 +02:00 |
|
Jens Langhammer
|
fdc7f14056
|
core: fix Tokens being created with incorrect intent by default
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-19 15:43:16 +02:00 |
|
Jens Langhammer
|
8be80aaf9d
|
api: fix CSRF error when using POST/PATCH/PUT in API Browser
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-19 15:31:32 +02:00 |
|
Jens Langhammer
|
ce082ead5e
|
providers/oauth2: add unittests for authorize and token views
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-18 21:05:49 +02:00 |
|
Jens Langhammer
|
f328b21e89
|
providers/oauth2: Set CORS Headers for token endpoint, check Origin header against redirect URLs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-18 14:20:50 +02:00 |
|
Jens Langhammer
|
52abd959eb
|
sources/oauth: save null instead of empty string for sources without configurable URLs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 21:15:06 +02:00 |
|
Jens Langhammer
|
32c5bf04b8
|
*: fix linting errors
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 20:08:49 +02:00 |
|
Jens Langhammer
|
0021a93952
|
web/admin: fix non-matching provider type being selected when creating an OAuth Source
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 19:17:08 +02:00 |
|
Jens Langhammer
|
67240fb9ad
|
*: add model_name to TypeCreate API to pass to forms
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 19:12:00 +02:00 |
|
Jens Langhammer
|
d2dd7d1366
|
sources/oauth: fix redirect loop for source with non-configurable URLs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 19:06:12 +02:00 |
|
Jens Langhammer
|
476e57daa2
|
Merge branch 'version-2021.4'
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# docker-compose.yml
# website/docs/installation/kubernetes.md
|
2021-04-17 16:01:35 +02:00 |
|
Jens Langhammer
|
60615c9f3e
|
release: 2021.4.2
|
2021-04-17 15:26:59 +02:00 |
|
Jens Langhammer
|
b5b8573d87
|
core: fix propertymapping API returning invalid value for components
closes #746
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 12:01:05 +02:00 |
|
Jens Langhammer
|
2e44c1cdfc
|
sources/ldap: improve error handling during sync
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 12:01:05 +02:00 |
|
Jens Langhammer
|
4a444e667a
|
root: base Websocket message storage on Base not fallback
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 12:01:05 +02:00 |
|
Jens Langhammer
|
f67b57e369
|
flows: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 12:01:04 +02:00 |
|
Jens Langhammer
|
262a9fa2a0
|
flows: annotate flows executor 404 error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 12:01:04 +02:00 |
|
Jens Langhammer
|
e8ba159756
|
root: fix setting of EMAIL_USE_TLS and EMAIL_USE_SSL
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 12:01:04 +02:00 |
|
Jens Langhammer
|
0b03d66a2f
|
outposts: fix errors when creating multiple outposts
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 12:01:04 +02:00 |
|
Jens Langhammer
|
71b6839d03
|
flows: include configure_flow in stages API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 12:01:04 +02:00 |
|
Jens Langhammer
|
2b48ba4103
|
sources/oauth: fix resolution of sources' provider type
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 12:01:03 +02:00 |
|
Jens Langhammer
|
5e67f68f2b
|
core: improve messaging when creating a recovery link for a user when no recovery flow exists
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 12:01:03 +02:00 |
|
Jens Langhammer
|
1992b89154
|
sources/oauth: fix error when creating an oauth source which has fixed URLs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 12:01:03 +02:00 |
|
Jens Langhammer
|
de74f3ec1f
|
core: fix propertymapping API returning invalid value for components
closes #746
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 11:50:28 +02:00 |
|
Jens Langhammer
|
ce98255607
|
sources/ldap: improve error handling during sync
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-17 11:29:51 +02:00 |
|
Jens Langhammer
|
5df9ad63cf
|
root: base Websocket message storage on Base not fallback
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-16 23:46:03 +02:00 |
|
Jens Langhammer
|
e4400476a2
|
flows: fix linting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-16 23:15:06 +02:00 |
|
Jens Langhammer
|
b136d3bc69
|
flows: annotate flows executor 404 error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-16 22:56:44 +02:00 |
|
Jens Langhammer
|
c34fcc73dc
|
root: fix setting of EMAIL_USE_TLS and EMAIL_USE_SSL
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-16 22:44:42 +02:00 |
|
Jens Langhammer
|
11b09c4ebd
|
outposts: fix errors when creating multiple outposts
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-16 22:43:35 +02:00 |
|
Jens Langhammer
|
33a8cea007
|
flows: include configure_flow in stages API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-16 17:19:48 +02:00 |
|
Jens Langhammer
|
1770e42cbf
|
sources/oauth: add login with plex support
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-16 17:05:35 +02:00 |
|
Jens Langhammer
|
582d2eb5eb
|
sources/oauth: fix resolution of sources' provider type
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-16 11:29:23 +02:00 |
|
Jens Langhammer
|
c5e2635903
|
core: improve messaging when creating a recovery link for a user when no recovery flow exists
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-16 10:09:46 +02:00 |
|
Jens Langhammer
|
cfe0a7a694
|
sources/oauth: fix error when creating an oauth source which has fixed URLs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-16 09:49:25 +02:00 |
|
Jens Langhammer
|
bd8447d5a7
|
release: 2021.4.1
|
2021-04-14 09:46:16 +02:00 |
|
Jens Langhammer
|
4f9f936a7f
|
Merge branch 'master' into version-2021.4
|
2021-04-13 23:16:35 +02:00 |
|
Jens Langhammer
|
85c9fbe763
|
api: fix linting error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-13 21:49:47 +02:00 |
|
Jens Langhammer
|
3d9874be69
|
api: fix error when authorization is empty
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2021-04-13 21:41:26 +02:00 |
|