trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
6141 commits 95 branches 330 tags 336 MiB
Commit graph

1508 commits

Author SHA1 Message Date
Jens Langhammer 02b5742228 stages/authenticator_duo: add default setup flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-28 16:47:39 +02:00
Jens Langhammer 523621daa2 core: make application's check_access API return a PolicyResult and accept for_user as superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-26 11:47:23 +02:00
Jens Langhammer c4453f38a2 stages/identification: make shown sources configurable 
closes #918

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 16:37:53 +02:00
Jens Langhammer 6f3eb4c068 flows: allow blank on WithUserInfo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 12:53:48 +02:00
Jens Langhammer 58a4b20297 outposts: handle disconnects without outpost better 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 12:06:55 +02:00
Jens Langhammer 6d3e067a2b stages/user_write: handle integrity error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 11:46:15 +02:00
Jens Langhammer 6db2bf2a21 api: fix error when authorization header has no spaces 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 11:40:49 +02:00
Jens Langhammer 6893948fa0 tests/e2e: fix invalid flows 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 11:18:47 +02:00
Jens Langhammer 6317a8c5d0 Merge branch 'master' into duo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	Pipfile.lock
 2021-05-25 09:58:38 +02:00
Jens Langhammer 8ecac59eca stages/prompt: annotate PromptChallengeResponse's additionalProperties 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 22:55:24 +02:00
Jens Langhammer 8183a51b72 stages/authenticator_duo: add missing duo device 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 22:16:29 +02:00
Jens Langhammer 127ebed5c6 flows: fix mismatched names 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 21:09:18 +02:00
Jens Langhammer 716923e17a web/flows: update types 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 20:59:44 +02:00
Jens Langhammer c6bb6709fd flows: add default challenge response 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 20:27:50 +02:00
Jens Langhammer fb4e0723ee stages: fix stage unittests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 17:12:48 +02:00
Jens Langhammer 763c3fcfe0 outposts/ldap: fix client usage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 15:58:59 +02:00
Jens Langhammer 1b346866da Merge branch 'master' into duo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	Pipfile.lock
 2021-05-24 14:54:24 +02:00
Jens Langhammer 6f6ae7831e flows: make use of oneOf OpenAPI to annotate all challenge types 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 14:11:23 +02:00
Jens Langhammer 3b41c662ed stages/authenticator_validate: add Duo support 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 22:31:12 +02:00
Jens Langhammer 65522186f1 stages/authenticator_duo: improve setup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 21:44:52 +02:00
Jens Langhammer 9f5a3c396d stages/authenticator_duo: initial duo stage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 21:10:39 +02:00
Jens L 53e2b2c784
Prometheus metrics (#914) 
* admin: add worker metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* admin: add version metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add gauge for system tasks

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: add gauge for last hello and connection status

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: re-add prometheus metrics to database

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: allow access to metrics without credentials when debug is on

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: add UpdatingGauge to auto-set value on load

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add metrics for cache and building

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* policies: add metrics for policy engine

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add histogram for task durations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: revert to gauge because values are updated on export view

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add gauge to count all models

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add metrics for events

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 20:29:34 +02:00
Jens Langhammer a5cd9fa141 outposts: improve logging for docker controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 19:27:24 +02:00
Jens Langhammer 0768b201a7 Merge branch 'version-2021.5' 2021-05-22 20:47:48 +02:00
Jens Langhammer 2d5c45543b release: 2021.5.4 2021-05-22 20:15:23 +02:00
Jens Langhammer 9b57f0b81d Merge branch 'version-2021.5' into next 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	web/src/locales/en.po
#	web/src/locales/pseudo-LOCALE.po
 2021-05-22 20:01:16 +02:00
Jens Langhammer 2c816e6162 providers/proxy: don't use https to communicate with outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-22 18:56:38 +02:00
Jens Langhammer bb89b9b572 Merge branch 'version-2021.5' into next 2021-05-21 23:50:43 +02:00
Jens Langhammer 6600da7d98 providers/oauth2: add missing kid header to JWT Tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 23:40:00 +02:00
Jens Langhammer 1a0f72d0a8 Merge branch 'version-2021.5' into next 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	authentik/stages/authenticator_static/api.py
#	swagger.yaml
 2021-05-21 21:33:18 +02:00
Jens Langhammer a265dd54cc stages/authenticator_*: fix Permission Error when disabling Authenticator as non-superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 21:25:03 +02:00
Jens Langhammer a603f42cc0 api: add OwnerFilter 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 20:46:59 +02:00
Jens Langhammer d9a788aac8 api: rename auth to authentication, add authorization for rest_framework permission class 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 20:14:03 +02:00
Jens Langhammer 7c6185b581 api: fix URL names for admin Authenticator Views 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 19:53:40 +02:00
Jens Langhammer 41a1305555 policies: improve debug logging 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 19:10:47 +02:00
Jens Langhammer 75f252b530 flows: rename oob to oobe 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 19:10:42 +02:00
Jens Langhammer c526e5fb9a policies: improve debug logging 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 19:10:15 +02:00
Jens Langhammer b826eb264e flows: rename oob to oobe 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 12:06:39 +02:00
Jens Langhammer 7666c246c3 Merge branch 'version-2021.5' 2021-05-20 20:46:18 +02:00
Jens Langhammer bf4cbb25fe release: 2021.5.3 2021-05-20 20:17:39 +02:00
Jens Langhammer a925418f60 lib: don't send ImproperlyConfigured to sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 19:18:35 +02:00
Jens Langhammer 71d112bdcf sources/plex: remove default for plex_token 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 19:13:54 +02:00
Jens Langhammer d2c06c40ea sources/plex: remove default for plex_token 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 19:09:51 +02:00
Jens Langhammer 590c7f4c9d outposts: fix error on outpost disconnect 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 18:07:27 +02:00
Jens Langhammer 9a48c2fd9a outposts: fix error on outpost disconnect 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 18:07:07 +02:00
Jens Langhammer be5a6c0310 api: add set_*_url method for Application and Flow to set icon/background to URL 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 17:18:40 +02:00
Jens Langhammer 92106ca4bf api: add capabilities to API, add can_save_media 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 17:00:47 +02:00
Jens Langhammer 56f1204c9b outposts: fix update signal not being sent to correct instances 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 15:23:38 +02:00
Jens Langhammer f6f93640c5 outposts: fix update signal not being sent to correct instances 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 15:23:18 +02:00
Jens Langhammer 92f2a82c03 providers/oauth2: fix double login required when prompt=login 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 01:10:08 +02:00
Jens Langhammer dcf074650e providers/proxy: fix redirect_uris not always being set on save 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 01:10:04 +02:00
Jens Langhammer acf1ad91d9 providers/oauth2: fix double login required when prompt=login 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-19 23:34:27 +02:00
Jens Langhammer a74419214c providers/proxy: fix redirect_uris not always being set on save 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-19 23:10:00 +02:00
Jens Langhammer bc6aef7af2 lib: improve sentry integration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-18 11:29:36 +02:00
Jens Langhammer 788ea46d8c flows: fix formatting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-18 09:23:22 +02:00
Jens Langhammer 06dee5d5d8 flows: fix lint error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-17 23:38:31 +02:00
Jens Langhammer 3cf0f07baf *: fix API Schema for file uploads 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-17 23:12:52 +02:00
Jens Langhammer f016095891 Merge branch 'master' into openapi-v3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	Pipfile.lock
 2021-05-17 20:37:18 +02:00
Jens Langhammer 5a465fbc36 release: 2021.5.2 2021-05-17 19:54:10 +02:00
Jens Langhammer 7f4bd27b85 Merge branch 'master' into openapi-v3 2021-05-16 23:51:45 +02:00
Jens Langhammer b66626f9c4 ci: generate secert_key for CI runs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 23:46:23 +02:00
Jens Langhammer f9ce41229d api: fix unittests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 22:36:26 +02:00
Jens Langhammer ae6a406b1d Merge branch 'master' into openapi-v3 2021-05-16 22:29:39 +02:00
Jens Langhammer 45c1a603e7 root: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 22:29:28 +02:00
Jens Langhammer 330219e76f Merge branch 'master' into openapi-v3 2021-05-16 22:26:07 +02:00
Jens Langhammer 583271d5ed root: only load debug secret key when debug is enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 22:25:55 +02:00
Jens Langhammer 0db17b9729 root: remove yasg 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 22:18:04 +02:00
Jens Langhammer 9f9ee66cc4 api: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 21:57:04 +02:00
Jens Langhammer ab2bd622a8 Merge branch 'master' into openapi-v3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	outpost/pkg/ak/api.go
#	outpost/pkg/ak/global.go
#	outpost/pkg/ldap/instance_bind.go
 2021-05-16 21:36:24 +02:00
Tom Pansino 8d2a3b67b9
lib: Fix config loading of secrets from files (#887) 2021-05-16 21:10:31 +02:00
Jens Langhammer 8b6292b3de api: don't overwrite 400 and 403 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 20:54:58 +02:00
Jens Langhammer cbed5a6522 api: fix missing error definitions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 19:53:04 +02:00
Jens Langhammer 589f806b7c flows: fix schema for flow executor 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 19:13:31 +02:00
Jens Langhammer 07dc648470 web: fix mixed Static/TOTP pages 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:59:33 +02:00
Jens Langhammer 41f6d3b6e7 stages/authenticator_static: add serializer for tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:55:47 +02:00
Jens Langhammer d0f1daf025 admin: make tasks's retry api not ask for a body 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:43:47 +02:00
Jens Langhammer d38fd603dd web: fix more special API Calls 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:41:02 +02:00
Jens Langhammer ba5374f6e1 web: mass update API calls 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:24:15 +02:00
Jens Langhammer 7152d7ee01 outposts: fix schema for outposts health 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:10:11 +02:00
Jens Langhammer ab07113530 admin: migrate WorkerViewSet to APIView 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:06:46 +02:00
Jens Langhammer a7d7b46747 admin: migrate version view to APIView 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:00:02 +02:00
Jens Langhammer 9a44088d2b admin: migrate metrics viewset to APIView 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:49:37 +02:00
Jens Langhammer b351ae12c5 api: make config viewset single view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:44:19 +02:00
Jens Langhammer 759bf59780 core: make filefields readonly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:34:55 +02:00
Jens Langhammer 10cb60f48e api: fix pagination not being required in schema 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:32:13 +02:00
Jens Langhammer ef9f08553c *: linting pass, rename from swagger to schema 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 15:22:57 +02:00
Jens Langhammer 4fb71a6bdd api: fix pagination schema 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 15:08:51 +02:00
Jens Langhammer cac1f242dc *: replace swagger with openapi 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 14:23:05 +02:00
Jens Langhammer 0bac738090 *: fix static response descriptions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 14:07:29 +02:00
Jens Langhammer 1324d03815 *: initial migration to openapi v3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 23:57:28 +02:00
Jens Langhammer c55f2ad10a root: set additional sentry tags 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 19:53:43 +02:00
Jens Langhammer a30b32fbbf outposts: fix missing default for OutpostState.for_channel 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 17:46:53 +02:00
Jens Langhammer 1745306cc6 outposts: fix error when controller loads from cache but cache has expired 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 17:45:33 +02:00
Jens Langhammer 8925787a13 flows: fix error when using cancel flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 17:42:37 +02:00
Jens Langhammer 968b7ec17a lib: fix parsing of remote IP header when behind multiple reverse proxies 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 15:08:53 +02:00
Jens Langhammer 6600d5bf69 providers/oauth2: use user.uid 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 14:08:49 +02:00
Jens Langhammer a4278833d8 providers/proxy: fix ingress not being created with full https 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 13:45:41 +02:00
Jens Langhammer 942905b9b1 providers/proxy: fix formatting issue 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-14 16:24:35 +02:00
Jens Langhammer 8d7bb7da17 providers/proxy: connect ingress to https instead of http 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#882
 2021-05-14 11:42:03 +02:00
Jens Langhammer 9939db13c3 outposts: fix reload notification not working due to wrong ID being saved 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-14 11:13:04 +02:00
Jens Langhammer 465750276c core: fix application's slug field not being set to unique 
closes #881

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-14 10:49:42 +02:00
Jens Langhammer 0b7ebf0e07 release: 2021.5.1 2021-05-13 20:50:31 +02:00
Jens Langhammer 709581f5a8 root: use ghcr images by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-13 20:15:29 +02:00
Jens Langhammer 1df8790050 stages/authenticator_static: fix error when listing devices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-13 18:09:55 +02:00
Jens Langhammer 3c23ad340f web/admin: improve diagram api for flows 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-13 18:01:40 +02:00
Jens Langhammer f9f2e00913 core: improve error handling for backups 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-13 17:56:49 +02:00
Jens Langhammer 8f99891a9d release: 2021.5.1-rc10 2021-05-12 21:25:18 +02:00
Jens Langhammer 97a3c2d88b release: 2021.5.1-rc9 2021-05-12 20:50:29 +02:00
Jens Langhammer e91ff4566d Merge branch 'next' into version-2021.5 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	outpost/pkg/version.go
 2021-05-12 20:49:58 +02:00
Jens Langhammer a3fccbdaff outposts: add build_hash for docker image 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 20:36:18 +02:00
Jens Langhammer bdf9f26d07 outposts: compare build hash in outdated check 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 19:05:29 +02:00
Jens Langhammer 9a0aa4c79b outposts/ldap: add infinite loop prevention 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 18:31:44 +02:00
Jens Langhammer 52cf4890cf root: remove servername from backup files 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 17:53:23 +02:00
Jens Langhammer 8e5d03cb86 outposts: remove legacy API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 16:41:54 +02:00
Jens Langhammer 2190fa555b events/api: fix error when updating transports 
closes #866

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 16:41:30 +02:00
Jens Langhammer 3665e2fefa release: 2021.5.1-rc8 2021-05-12 14:52:34 +02:00
Jens Langhammer 3dbe35cf9e stages/invitation: fix wrong serializer used for user model 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	swagger.yaml
 2021-05-12 14:22:16 +02:00
Jens Langhammer c7f0ea8a4b root: update dbbackup to git version 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 01:20:31 +02:00
Jens Langhammer 0620324702 root: bump version of psf black 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 00:42:46 +02:00
Jens Langhammer 5a0e78c698 outposts: fix issue with duplicate outpost health 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 21:46:30 +02:00
Jens Langhammer 84dfbcaaae providers/api: return redirect_uris for proxy provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 20:02:17 +02:00
Jens Langhammer e649e9fb03 core: don't use self.get_object for application permission check to prevent 404 when view permission is missing 
closes #864

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 17:35:11 +02:00
Jens Langhammer 266ef66a6f Merge branch 'master' into next 2021-05-11 14:57:52 +02:00
Andreas Egli 842fdb0b0c
fixed session durations of more than 1 day (#863) 2021-05-11 14:57:33 +02:00
Jens L 36f7cad23b
Merge pull request #862 from goauthentik/form-refresh-on-save 
Form refresh on save
 2021-05-11 14:23:32 +02:00
Jens Langhammer 24f2932777 crypto: add ?download flag 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#861
 2021-05-11 14:21:35 +02:00
Jens Langhammer 124ce80694 sources/plex: make plex_token readable from API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 13:32:28 +02:00
Jens Langhammer 4e2443d60b flows: make cancel link always logout user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 13:13:05 +02:00
Jens Langhammer 17b65adcc5 lib: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 13:07:47 +02:00
Jens Langhammer 96ea7ae09c root: allow configuration of s3 backup location 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 02:10:00 +02:00
Jens Langhammer 172bfceb31 root: fix db backup failing when password has special chars 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 02:01:22 +02:00
Jens Langhammer 932b19999e providers/proxy: missing @property for noop 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 01:26:01 +02:00
Jens Langhammer 788fd00390 outposts: use noop flag in each reconciler instead of raising Disabled and force use of get_referecen_object 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 00:27:29 +02:00
Jens Langhammer a293a14f2a outposts: re-add _config for backwards compat 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 22:28:46 +02:00
Jens Langhammer 51e3453dca admin: fix linting in api tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 20:14:21 +02:00
Jens Langhammer 6f58fdf158 api: add more tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 19:51:29 +02:00
Jens Langhammer 219b8d1a57 outposts: allow individual components of managed outposts to be disabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 19:27:48 +02:00
Jens Langhammer c7d4e69669 root: make database port configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 19:25:15 +02:00
Jens Langhammer cd629dfbaa outposts: improve API validation for config attribute, ensure all required attributes are set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 19:24:42 +02:00
Jens Langhammer 3d0a853449 Merge branch 'version-2021.5' into next 2021-05-10 18:07:39 +02:00
Jens Langhammer c2f8ff55cf outposts: fix outpost delete hanging thread, run cleanup in async task with info from cache with ability to retry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 17:11:31 +02:00
Jens Langhammer 80fae44f47 release: 2021.5.1-rc7 2021-05-10 12:13:10 +02:00
Jens Langhammer 73eb97ca6e release: 2021.5.1-rc6 2021-05-10 11:44:23 +02:00
Jens Langhammer ebe90d8886 Merge branch 'next' into version-2021.5 2021-05-10 11:43:50 +02:00
Jens Langhammer a1a1b113b1 release: 2021.5.1-rc5 2021-05-10 11:34:00 +02:00
Jens Langhammer 1fb3642701 sources/oauth: fix google tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 00:27:37 +02:00
Jens Langhammer 847d97b813 sources/oauth: fix google tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 00:27:20 +02:00
Jens Langhammer 1f1d322958 *: fix api results when non-superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 00:01:35 +02:00
Jens Langhammer e4841ce1a4 Merge branch 'version-2021.5' into next 2021-05-09 23:41:23 +02:00
Jens Langhammer e33a5528f7 core: catch IntegrityError in flow_manager and deny request 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 23:31:39 +02:00
Jens Langhammer b7d828702d sources/oauth: don't set username on google source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 22:56:44 +02:00
Jens Langhammer f7fd31cc84 release: 2021.5.1-rc4 2021-05-09 21:43:38 +02:00
Jens Langhammer 04aae8f584 sources/oauth: make secret write_only 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 21:40:25 +02:00
Jens Langhammer bbca90c93a Merge branch 'next' into version-2021.5 2021-05-09 20:57:23 +02:00
Jens Langhammer dda1d4e0fb core: add more logs to flow_manager 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 20:27:37 +02:00
Jens Langhammer f072c600cc lifecycle: use URl for redis on startup to prevent errors with no paswords 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 20:13:58 +02:00
Jens Langhammer 92537a6c8d Merge branch 'next' into version-2021.5 2021-05-09 18:46:26 +02:00
Jens Langhammer 72836ecd9d outposts: default to currently running namespace if possible 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 18:44:32 +02:00
Jens Langhammer 251a97c77e Merge branch 'next' into version-2021.5 2021-05-09 18:13:52 +02:00
Jens Langhammer 7f7046f0e4 outposts: lowercase k8s object names 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 18:13:21 +02:00
Jens Langhammer cd3f02fd3b release: 2021.5.1-rc3 2021-05-09 17:25:48 +02:00
Jens Langhammer d3feab9463 release: 2021.5.1-rc2 2021-05-09 16:43:36 +02:00
Jens Langhammer 70c25692eb release: 2021.5.1-rc1 2021-05-09 16:07:50 +02:00
Jens Langhammer a6a8eddf7c providers/proxy: create ingress for forward_auth /akprox path 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 12:40:44 +02:00
Jens Langhammer 8c0a87b710 outposts: improve logging for outpost controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 12:34:44 +02:00
Jens Langhammer 5cad59a9f8 providers/proxy: fix being able to set empty internal_host 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 00:07:34 +02:00
Jens Langhammer 5ac6a6910e outposts: check if traefik CRD exists before attempting to delete 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 21:59:13 +02:00
Jens Langhammer d751a7fc4c lib: add user attribute "goauthentik.io/user/override-ips" to allow overriding of client ips 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 21:42:31 +02:00
Jens Langhammer 1b87375661 lib: add default to config from file:// 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 17:13:13 +02:00
Jens Langhammer 6868b7722c outposts: delete old outpost deployment when name or namespace is changed 
closes #845

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 16:11:38 +02:00
Jens Langhammer 7a1935b4e2 outposts: fix error on k8s when name has spaces 
closes #846

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 14:09:21 +02:00
Jens Langhammer 5e7521915a stages/password: fix configure_flow not being set on initial setup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 14:08:43 +02:00
Jens Langhammer 9fc072e4df outposts: fix lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 11:56:44 +02:00
Jens Langhammer 55ea9afeec core: fix dark mode on server-side rendered pages 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 11:53:53 +02:00
Jens Langhammer 9485f0b8cc outpost/ldap: make users and groups OU instead of CN 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 11:46:26 +02:00
Jens Langhammer e6dfa8294e providers/proxy: use name.namespace for middleware service 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 10:07:30 +02:00
Jens Langhammer e5a5a5c603 outposts: fix k8s controller not handing Disabled() in static deployment 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 09:52:43 +02:00
Jens Langhammer ea7f9f291f outposts: create traefikmiddleware if forwardAuth is enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 00:01:35 +02:00
Jens Langhammer 241d790e69 stages/user_write: if any connection is being sent in the plan context, save it to the user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 22:10:20 +02:00
Jens Langhammer 83e08f12ae core: fix arguments not being passed in FlowManager 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 22:07:48 +02:00
Jens Langhammer 6526659b51 sources/plex: allow auth for owner (when identifier of source plex token matches) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 21:50:15 +02:00
Jens Langhammer 6c3b7c8d3e events: handle error when notifications are triggered and no users exist 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 20:13:04 +02:00
Jens Langhammer d51ecc4554 sources/saml: handle internal error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 20:10:56 +02:00
Jens Langhammer ef63e35ad2 outposts: improve messaging from controller on k8s 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 20:07:29 +02:00
Jens Langhammer 4e9176ed2e outposts: support different port on container vs exposed port 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 19:59:49 +02:00
Jens Langhammer d1296e9cc7 outposts: fix deployments referencing the wrong secret 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 19:51:14 +02:00
Jens Langhammer d85e0593f1 core: set attributes on users which are enrolled via source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 19:35:05 +02:00
Jens Langhammer b3a3852a54 core: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 13:58:58 +02:00
Jens Langhammer 49bf82a0a4 core: add user filter by superuser status 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 13:44:42 +02:00
Jens Langhammer 73b87a5e3d events: fix error in API when specifying max_n 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 13:15:54 +02:00
Jens Langhammer ac9cac302c outposts: fix outpost state showing last time without version 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 20:49:13 +02:00
Jens Langhammer 701c140cfd providers/proxy: fix logic error for ingress lookup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 20:28:13 +02:00
Jens Langhammer fa2ff5fc2b sources/plex: save user's plex token, add option to allow friends 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 19:37:59 +02:00
Jens Langhammer d5cab5d580 sources/plex: fix default for client_id 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 19:23:51 +02:00
Jens Langhammer be8b2bf6f6 providers/proxy: don't create ingress for domains which use forwardAuth, don't create ingress at all if all providers are forward auth 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 17:53:12 +02:00
Jens Langhammer b266a2cdfb outposts: make k8s service type configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 15:37:56 +02:00
Jens Langhammer 9a15a66d85 outposts: make k8s object naming configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 15:36:27 +02:00
Jens Langhammer 446f104c90 core: add user UID to API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 11:54:28 +02:00
Jens Langhammer 86c2a5d69d lib: handle errors when reading config from file:// 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 01:03:00 +02:00
Jens Langhammer 1a02049104 core: show users and groups when user has overall user permissions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 01:02:47 +02:00
Jens Langhammer 32934fcd38 outpost/ldap: check access based on Group Membership 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 00:03:19 +02:00
Jens Langhammer d84d7c26ca Merge branch 'master' into outpost-ldap 2021-05-04 23:34:31 +02:00
Jens Langhammer 2f6e6a3123 core: improve messaging when flow manager denied request 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 23:30:21 +02:00
Jens Langhammer ba57bf4fa2 lib: add support for file:// protocol in config file 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 22:53:59 +02:00
Jens Langhammer e674f03064 */api: fix lookups per user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 21:58:20 +02:00
Jens Langhammer 08451c15f4 outposts/ldap: save user DN to determine who can search 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 21:49:15 +02:00
Jens Langhammer 99d161e212 Merge branch 'master' into outpost-ldap 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	authentik/core/api/users.py
#	authentik/policies/event_matcher/migrations/0013_alter_eventmatcherpolicy_app.py
 2021-05-04 21:02:20 +02:00
Jens Langhammer 4acbda2b77 core: improve messaging on flow_manager, authenticate user when they linked their account after not having been authenticateed 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:49:27 +02:00
Jens Langhammer 83cfb5f8c2 stages/email: improve error handling 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:30:23 +02:00
Jens Langhammer 0d370ef0a9 web/admin: filter out service accounts by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:23:13 +02:00
Jens Langhammer 42f9ba8efe gproxy: load default config file for debug and listen statements 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 14:10:34 +02:00
Jens Langhammer 812be495a5 Merge branch 'master' into go-proxy 2021-05-03 22:53:33 +02:00
Jens Langhammer dbc3df1f63 events: handle error when notification rule doesn't exist during task 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 22:52:39 +02:00
Jens Langhammer d330e9ee7f web/flows: fix rendering for plex login 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 22:08:25 +02:00
Jens Langhammer be21a5d172 sources/plex: add general tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 21:55:55 +02:00
Jens Langhammer 6fc38436f4 sources/plex: set better defaults on model 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 21:23:13 +02:00
Jens Langhammer 35faf269db sources: rewrite onboarding 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 20:27:52 +02:00
Jens Langhammer e56c3fc54c Merge branch 'master' into plex-auth 2021-05-03 18:28:53 +02:00
Jens Langhammer 1041718e27 sources/saml: fix redirect url dropping non-standard ports 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 14:51:46 +02:00
Jens Langhammer 2507c0eec9 stages/invitation: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 12:44:19 +02:00
Jens Langhammer 4523550422 stages/invitation: add single_use flag to delete invitation after use 
closes #821

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 09:52:38 +02:00
Jens Langhammer 988cf15b71 root: initial go proxy, update compose and helm 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 09:39:09 +02:00
Jens Langhammer 01d29134b9 sources/plex: add API to redeem token 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-02 16:47:20 +02:00
Jens Langhammer 55250e88e5 sources/*: rewrite UILoginButton to return challenge instead 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-02 16:46:27 +02:00
Jens Langhammer f1b100c8a5 sources/plex: initial plex source implementation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-02 14:43:51 +02:00
Jens Langhammer 19708bc67b core: add additional_data to UILoginButton to pass additional data 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-02 14:43:26 +02:00
Jens Langhammer c529340d6c *: fix title not being set correctly for server-side rendered views 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-02 12:22:50 +02:00
Jens Langhammer c317efa14c Merge branch 'master' into outpost-ldap 2021-05-01 00:26:55 +02:00
Jens Langhammer 379fcf9c1f sources/saml: fix error ValueError while decoding XML 
closes #812

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-01 00:18:57 +02:00
Jens Langhammer e10a7b48b7 sources/saml: fix Redirect bindings when SSO Url already has query params 
related to #812

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-30 23:44:04 +02:00
Jens Langhammer 3e666de91d outposts: fix formatting of image name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-30 16:52:28 +02:00
Jens Langhammer 333758d91f crypto: handle encrypted private keys 
closes #811

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-30 15:25:42 +02:00
Jens Langhammer eb8f52b870 stages/identification: fix tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-30 10:15:27 +02:00
Jens Langhammer 9ce49c2089 stages/identification: fix unused import 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-30 09:34:33 +02:00
Jens Langhammer 34c45900c2 stages/identification: allow selection of no user fields to only allow login via sources 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-30 01:07:37 +02:00
Jens Langhammer bf7d110af3 Merge branch 'version-2021.4' 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	.github/workflows/release.yml
#	helm/README.md
#	helm/values.yaml
#	website/docs/installation/kubernetes.md
 2021-04-29 23:50:52 +02:00
Jens Langhammer 4e5eeacf0a release: 2021.4.5 2021-04-29 23:03:09 +02:00
Jens Langhammer b55cb2b40c Merge branch 'master' into outpost-ldap 2021-04-29 20:13:47 +02:00
Jens Langhammer 25c001f2cd outposts: allow better configuration of outpost image name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-29 20:07:53 +02:00
Jens L 2a409215d3
outpost: forwardAuth mode (#790) 2021-04-29 18:17:10 +02:00
Jens Langhammer d1d28722d2 lib: don't send 404 errors to sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-29 15:27:41 +02:00
Jens Langhammer 35f0e6b88d lib: don't send 404 errors to sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-29 15:25:54 +02:00
Jens Langhammer a6e528d209 core: fix text color of error pages not being white 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-29 15:18:28 +02:00
Jens Langhammer bb2c4423b0 core: fix text color of error pages not being white 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-29 15:17:10 +02:00
Jens Langhammer 2c70301f56 stages/invitation: accept token from prompt_data 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 22:43:40 +02:00
Jens Langhammer 07b9923bf6 stages/invitation: fix token not being loaded correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 22:43:40 +02:00
Jens Langhammer 3dcd67c1a3 outposts: only kill docker container if its running 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 22:43:32 +02:00
Jens Langhammer 2a9feafb90 root: add middleware to properly report websocket connection to sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 22:42:10 +02:00
Jens Langhammer 1af3357826 *: make logger not use .error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 22:41:44 +02:00
Jens Langhammer ed49d7824e stages/email: catch ValueError when global email settings are invalid 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 22:41:38 +02:00
Jens Langhammer 378402fcf0 stages/user_login: add tests for explicit session length 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 22:41:21 +02:00
Jens Langhammer b2b9093c95 web: don't enable ShadyDOM on selenium 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 22:40:16 +02:00
Jens Langhammer afa2afe1d4 web/flows: include ShadyDOM, always enable ShadyDOM for flow interface 
improve compatibility with password managers and iOS

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 22:40:16 +02:00
Jens Langhammer d7631e8af0 stages/invitation: accept token from prompt_data 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 22:39:06 +02:00
Jens Langhammer 6e625f7400 stages/invitation: fix token not being loaded correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 22:13:54 +02:00
Jens L c4e4e17f93
providers/oauth2: add access_code_validity (#795) 
closes #794

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 21:03:43 +02:00
Jens Langhammer 9b70aaa717 outposts: only kill docker container if its running 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 18:32:16 +02:00
Jens Langhammer 4d858c64e0 Merge branch 'master' into outpost-ldap 2021-04-27 17:08:26 +02:00
Jens Langhammer 6f0792ccfe api: remove legacy basic auth for 2021.3 outposts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 17:06:47 +02:00
Jens Langhammer 04f06e00ff api: add tests for permission_required decorator 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 17:04:38 +02:00
Jens Langhammer 776c3128b8 flows: add tests for stage type, component and ui_user_settings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 16:52:50 +02:00
Jens Langhammer e9e0992dce root: add middleware to properly report websocket connection to sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 16:21:44 +02:00
Jens Langhammer ccef7b4233 *: make logger not use .error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 15:43:26 +02:00
Jens Langhammer cad6c42fdd lib: add more tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 15:43:11 +02:00
Jens Langhammer d2abe6d455 stages/email: catch ValueError when global email settings are invalid 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 15:20:09 +02:00
Jens Langhammer 68d120b3b4 sources/oauth: add tests for google type 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 15:19:54 +02:00
Jens Langhammer 48c0c0baca */api: simplify lookups for per-user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 14:53:01 +02:00
Jens Langhammer 7b29a1e485 stages/user_login: add tests for explicit session length 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 14:52:42 +02:00
Jens Langhammer fe28d216fe providers/oauth2: always test JWT keys in tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 14:07:04 +02:00
Jens Langhammer 3ce8b836dc outposts: allow outposts to have non-object specific permissions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 23:28:26 +02:00
Jens Langhammer 1d5958a78f providers/ldap: add search_group to limit who can do search requests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 23:25:03 +02:00
Jens Langhammer 2a122845d9 core: add groups to users 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 19:51:24 +02:00
Jens Langhammer fae4d34131 Merge branch 'master' into outpost-ldap 2021-04-26 17:11:50 +02:00
Jens Langhammer 7ff7bfeb58 core: fix incorrect styling for bse_full template 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 16:44:13 +02:00
Jens Langhammer 29da7dd8d6 providers/ldap: fix lint error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 15:49:19 +02:00
Jens Langhammer b3c8ffb96c outposts/ldap: use authorization_flow instead of separate field 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 15:09:41 +02:00
Jens Langhammer b35d9ae8b0 outposts: fix type not being configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 14:45:14 +02:00
Jens Langhammer 302b047f1a outposts/ldap: add controllers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 14:26:31 +02:00
Jens Langhammer d741ed430a web/admin: add UI for LDAP Provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 12:12:02 +02:00
Jens Langhammer f89479caf3 providers/ldap: add LDAP provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 11:52:42 +02:00
Jens Langhammer 5fb07acf54 core: add API to check access to single application by slug 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 10:08:35 +02:00
Jens Langhammer 99d0d4e8de Merge branch 'master' into outpost-ldap 2021-04-26 09:25:26 +02:00
Jens Langhammer 9341787fe7 providers/oauth2: replace deprecated jwkest with pyjwt 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 00:02:13 +02:00
Jens Langhammer a525d6c3a9 Merge branch 'master' into outpost-ldap 2021-04-25 20:46:02 +02:00
Jens Langhammer 502ac51fa7 web: don't enable ShadyDOM on selenium 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-25 01:29:01 +02:00
Jens Langhammer 4bc6fd28d4 web/flows: include ShadyDOM, always enable ShadyDOM for flow interface 
improve compatibility with password managers and iOS

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-24 23:32:46 +02:00
Jens Langhammer 820c9e7d06 Merge branch 'master' into outpost-ldap 2021-04-24 22:22:01 +02:00
Jens Langhammer 5f58a4566c release: 2021.4.4 2021-04-24 21:03:29 +02:00
Jens Langhammer d616bdd5d6 providers/oauth2: add proper support for non-http schemes as redirect URIs 
closes #772

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-23 16:34:52 +02:00
Jens Langhammer 3282b34431 providers/oauth2: fix TokenView not having CORS headers set even with proper Origin 
and added tests. closes #771

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-22 23:48:28 +02:00
Jens Langhammer 392d9bb10b providers/oauth2: fix misleading name of cors_allow_any 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#771
 2021-04-22 23:29:49 +02:00
Jens Langhammer 799d186510 web/flows: fix Sentry not being loaded correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-22 20:48:22 +02:00
Jens Langhammer 3983b7fbe4 lib: don't send SuspiciousOperation to sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-22 20:17:00 +02:00
Jens Langhammer d75284a587 flows: fix errors which occur during flow execution being sent to sentry malformed 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-22 20:14:37 +02:00
Jens Langhammer a7598c6ee5 *: fix more URLs for github org 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-22 11:06:56 +02:00
Jens Langhammer 499b52df6a root: update urls to github org 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-21 22:46:48 +02:00
Jens Langhammer b8a566f4a0 outposts: move local connection check to task, run every 60 minutes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-21 11:34:48 +02:00
Jens Langhammer aa0e8edb8b *: make tasks run every 60 minutes not :00 every hour 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-21 11:26:17 +02:00
Jens Langhammer 57072dd6ce stages/identification: fix query logic for user lookup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-21 10:09:38 +02:00
Jens Langhammer b40afb9b7d stages/identification: ignore inactive users 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-20 21:45:14 +02:00
Jens Langhammer 1f783dfc01 stages/user_login: add default backend 
closes #763

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-20 20:53:07 +02:00
Jens Langhammer 76131e40ec tests/e2e: monkey patch OAuth1 test instead of setting URLs manually 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-20 20:03:20 +02:00
Jens Langhammer a8998a6356 sources/oauth: handle error in auzre_ad when ID Can't be extracted 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-20 17:27:52 +02:00
Jens Langhammer dc75d7b7f0 sources/oauth: fix error whilst fetching user profile when source uses fixed URLs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-20 17:25:59 +02:00
Jens Langhammer e20bb7d636 release: 2021.4.3 2021-04-20 09:15:07 +02:00
Jens Langhammer 4f5e1fb86b outposts: initial ldap outpost implementation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-20 00:30:27 +02:00
Jens Langhammer 464a1c0536 api: make 401 messages clearer 
closes #755

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 20:46:57 +02:00
Jens Langhammer b75feab709 outposts: don't run outpost_controller when no service connection is set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 19:23:26 +02:00
Jens Langhammer 10b45a8dea api: fix 401 responses which should be 403s 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 19:03:00 +02:00
Jens Langhammer c43ac1f704 api: mount outposts under outposts/instances to match flows 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 18:51:12 +02:00
Jens Langhammer 14d702450a core: add parameter to output property mapping test formatted 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 18:32:36 +02:00
Jens Langhammer 8a6879afa5 core: add superuser_full_list to applications list, shows all applications when superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 16:07:30 +02:00
Jens Langhammer fdc7f14056 core: fix Tokens being created with incorrect intent by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 15:43:16 +02:00
Jens Langhammer 8be80aaf9d api: fix CSRF error when using POST/PATCH/PUT in API Browser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 15:31:32 +02:00
Jens Langhammer ce082ead5e providers/oauth2: add unittests for authorize and token views 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-18 21:05:49 +02:00
Jens Langhammer f328b21e89 providers/oauth2: Set CORS Headers for token endpoint, check Origin header against redirect URLs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-18 14:20:50 +02:00
Jens Langhammer 52abd959eb sources/oauth: save null instead of empty string for sources without configurable URLs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 21:15:06 +02:00
Jens Langhammer 32c5bf04b8 *: fix linting errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 20:08:49 +02:00
Jens Langhammer 0021a93952 web/admin: fix non-matching provider type being selected when creating an OAuth Source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 19:17:08 +02:00
Jens Langhammer 67240fb9ad *: add model_name to TypeCreate API to pass to forms 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 19:12:00 +02:00
Jens Langhammer d2dd7d1366 sources/oauth: fix redirect loop for source with non-configurable URLs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 19:06:12 +02:00
Jens Langhammer 476e57daa2 Merge branch 'version-2021.4' 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	docker-compose.yml
#	website/docs/installation/kubernetes.md
 2021-04-17 16:01:35 +02:00
Jens Langhammer 60615c9f3e release: 2021.4.2 2021-04-17 15:26:59 +02:00
Jens Langhammer b5b8573d87 core: fix propertymapping API returning invalid value for components 
closes #746

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 12:01:05 +02:00
Jens Langhammer 2e44c1cdfc sources/ldap: improve error handling during sync 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 12:01:05 +02:00
Jens Langhammer 4a444e667a root: base Websocket message storage on Base not fallback 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 12:01:05 +02:00
Jens Langhammer f67b57e369 flows: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 12:01:04 +02:00
Jens Langhammer 262a9fa2a0 flows: annotate flows executor 404 error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 12:01:04 +02:00
Jens Langhammer e8ba159756 root: fix setting of EMAIL_USE_TLS and EMAIL_USE_SSL 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 12:01:04 +02:00
Jens Langhammer 0b03d66a2f outposts: fix errors when creating multiple outposts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 12:01:04 +02:00
Jens Langhammer 71b6839d03 flows: include configure_flow in stages API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 12:01:04 +02:00
Jens Langhammer 2b48ba4103 sources/oauth: fix resolution of sources' provider type 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 12:01:03 +02:00
Jens Langhammer 5e67f68f2b core: improve messaging when creating a recovery link for a user when no recovery flow exists 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 12:01:03 +02:00
Jens Langhammer 1992b89154 sources/oauth: fix error when creating an oauth source which has fixed URLs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 12:01:03 +02:00
Jens Langhammer de74f3ec1f core: fix propertymapping API returning invalid value for components 
closes #746

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 11:50:28 +02:00
Jens Langhammer ce98255607 sources/ldap: improve error handling during sync 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 11:29:51 +02:00
Jens Langhammer 5df9ad63cf root: base Websocket message storage on Base not fallback 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 23:46:03 +02:00
Jens Langhammer e4400476a2 flows: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 23:15:06 +02:00
Jens Langhammer b136d3bc69 flows: annotate flows executor 404 error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 22:56:44 +02:00
Jens Langhammer c34fcc73dc root: fix setting of EMAIL_USE_TLS and EMAIL_USE_SSL 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 22:44:42 +02:00
Jens Langhammer 11b09c4ebd outposts: fix errors when creating multiple outposts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 22:43:35 +02:00
Jens Langhammer 33a8cea007 flows: include configure_flow in stages API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 17:19:48 +02:00
Jens Langhammer 1770e42cbf sources/oauth: add login with plex support 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 17:05:35 +02:00
Jens Langhammer 582d2eb5eb sources/oauth: fix resolution of sources' provider type 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 11:29:23 +02:00
Jens Langhammer c5e2635903 core: improve messaging when creating a recovery link for a user when no recovery flow exists 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 10:09:46 +02:00
Jens Langhammer cfe0a7a694 sources/oauth: fix error when creating an oauth source which has fixed URLs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 09:49:25 +02:00
Jens Langhammer bd8447d5a7 release: 2021.4.1 2021-04-14 09:46:16 +02:00
Jens Langhammer 4f9f936a7f Merge branch 'master' into version-2021.4 2021-04-13 23:16:35 +02:00
Jens Langhammer 85c9fbe763 api: fix linting error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-13 21:49:47 +02:00
Jens Langhammer 3d9874be69 api: fix error when authorization is empty 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-13 21:41:26 +02:00
Jens Langhammer 9742d19729 Merge branch 'master' into version-2021.4 2021-04-13 21:07:20 +02:00
Jens Langhammer 5a25e6d697 api: add legacy support for older outposts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-13 21:06:04 +02:00
Jens Langhammer 7a562fe8c0 Merge branch 'master' into version-2021.4 2021-04-13 20:02:25 +02:00
Jens Langhammer 6821679fbc *: add support for bearer authentication on API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-13 20:01:30 +02:00
Jens Langhammer 55bb9b6643 web/admin: show banner when backend and frontend versions mismatch 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-13 16:52:02 +02:00
Jens Langhammer fd0ad20031 release: 2021.4.1-rc2 2021-04-12 20:03:21 +02:00
Jens Langhammer cd1b0c67ea web: fix text colour on initial load when not in dark mode 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-12 12:25:44 +02:00
dependabot[bot] a35f77c612
build(deps-dev): bump pylint-django from 2.4.2 to 2.4.3 (#729) 
* build(deps-dev): bump pylint-django from 2.4.2 to 2.4.3

Bumps [pylint-django](https://github.com/PyCQA/pylint-django) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/PyCQA/pylint-django/releases)
- [Changelog](https://github.com/PyCQA/pylint-django/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/PyCQA/pylint-django/compare/v2.4.2...v2.4.3)

Signed-off-by: dependabot[bot] <support@github.com>

* root: fix pylint warning

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-12 09:33:56 +02:00
Jens Langhammer fae92f6bc8 *: fix JSONField overwriting required 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 23:20:45 +02:00
Jens Langhammer f9bf491240 stages/invitation: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 23:09:09 +02:00
Jens Langhammer 4f27a97e10 *: add validator to ensure JSON Fields only receive dicts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 23:05:19 +02:00
Jens Langhammer a0daaabfde web: replace full pf with components for loading animation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 22:02:48 +02:00
Jens Langhammer ea7ecb50c0 web: disable loading of roboto fonts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 21:52:01 +02:00
Jens Langhammer e7626d0716 Revert "release: 2021.4.1-rc1" 
This reverts commit 2397cb162a.
 2021-04-11 21:04:25 +02:00
Jens Langhammer 2397cb162a release: 2021.4.1-rc1 2021-04-11 16:18:20 +02:00
Jens Langhammer ab4569e5d6 web/admin: fix application form's provider selection not working 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 13:49:35 +02:00
Jens Langhammer 8df29235bb core: add provider_obj field to applications API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 13:31:31 +02:00
Jens Langhammer cb048764f4 providers/proxy: make outpost API readonly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 13:31:15 +02:00
Jens Langhammer d76db3caba *: add missing error codes as swagger annotations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 23:55:43 +02:00
Jens Langhammer 32d88c3a49 core: consider never consider expiring models with self.expiring set to false expired 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 23:42:42 +02:00
Jens Langhammer 19e73630ab lib: discard all log messages from dbbackup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 23:20:20 +02:00
Jens Langhammer 34b8a97ae9 web/admin: add custom rendering for inbuilt sources 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-09 16:30:53 +02:00
Jens Langhammer 5dd29d45d8 core: make Source model managed, add inbuilt source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-09 16:20:59 +02:00
Jens Langhammer 98318953cd sources/ldap: create event when user integrity error occurs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-09 12:17:27 +02:00
Jens Langhammer 232a5a8ad0 root: set default session age to expire on browser close 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-09 11:50:09 +02:00
Jens Langhammer 118f55d95c sources/ldap: fix error during event creation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-09 11:29:32 +02:00
Jens Langhammer d37c33d941 sources/ldap: only save sync state in TaskInfo, return TaskInfo in API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-08 23:33:41 +02:00
Jens Langhammer 7b0005ac42 stages/password: handle authenticate() throwing a ValidationError 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-08 23:13:25 +02:00
Jens Langhammer aefeb5bacf sources/ldap: create Event when changing a user's password fails 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-08 23:13:11 +02:00
Jens Langhammer 7d0e7bcf75 core: return none when application has no launch URL and none could be guessed 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-08 22:59:11 +02:00
Jens Langhammer ca35204e0c flows: ask for email address in oob flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-08 22:50:58 +02:00
Jens Langhammer 37632bd0c7 lib: don't send DockerException to sentry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-08 22:03:10 +02:00
Jens Langhammer 4054e6da8c helm: don't automount Service token when integration is not enabled, improve k8s detection 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-07 16:16:17 +02:00
Jens Langhammer 12b1f53948 root: monitor redis in readiness check, relax monitoring period 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-07 15:51:19 +02:00
Jens Langhammer 35232afa7e core: skip backup when running in k8s and s3 backup not configured 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-07 15:34:28 +02:00
dependabot[bot] 17de0ff24e
build(deps): bump django from 3.1.7 to 3.2 (#707) 
* build(deps): bump django from 3.1.7 to 3.2

Bumps [django](https://github.com/django/django) from 3.1.7 to 3.2.
- [Release notes](https://github.com/django/django/releases)
- [Commits](https://github.com/django/django/compare/3.1.7...3.2)

Signed-off-by: dependabot[bot] <support@github.com>

* root: set DEFAULT_AUTO_FIELD and remove full app config paths

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: check parent class for component and serializer on abstract classes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-07 10:54:38 +02:00
Jens L a2a35e49a9
improved out-of-box experience (#704) 2021-04-06 20:25:22 +02:00
Jens Langhammer fb409a73a1 web/elements: Fix display in deleteform when object has no name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-06 17:36:42 +02:00
Jens Langhammer a31fc8319d policies: fix policybinding API returning wrong policy objects 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-06 17:24:32 +02:00
Jens Langhammer dcc873b88b admin: add API to get info for a single task 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-05 20:40:22 +02:00
Jens Langhammer f0ef2eea4f admin: sort tasks api 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-05 19:21:19 +02:00
Jens Langhammer 61652406c7 events: add progress bar to event expiry migration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-05 13:33:01 +02:00
Jens Langhammer 16d989dbfa core: fix schema for Challenge's type enum 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-04 16:15:58 +02:00
Jens Langhammer 9517c890b5 if/*: show loading animation before full JS is loaded 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-04 16:10:08 +02:00
Jens Langhammer 8cae1f2ab5 stages/email: add tests for API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-04 14:14:58 +02:00
Jens Langhammer 37a14858ad policies: fix display of policy result source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-04 14:04:41 +02:00
Jens Langhammer b8c41f54c5 stages/email: update default email templates 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-04 13:40:52 +02:00
Jens Langhammer d1cde64214 stages/email: add support for custom template to API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-04 13:19:22 +02:00
Jens Langhammer a2cfe9c2a7 admin: sort apps in meta api 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-04 12:17:35 +02:00
Jens Langhammer a7f751f3b3 web/admin: fix expression info not being localised 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 20:53:52 +02:00
Jens Langhammer e246071aac core: fix user metrics not accepting detail 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 20:33:59 +02:00
Jens Langhammer 55c24de8c7 policies: fix error when viewing/clearing cache 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 19:57:50 +02:00
Jens Langhammer fc1caf1469 api: remove js i18n catalog 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 19:07:54 +02:00
Jens Langhammer 650b084c72 web: migrate to babel 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 18:20:17 +02:00
Jens Langhammer eeb9449c11 lib: remove templatetags 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 12:37:32 +02:00
Jens Langhammer c17eb00e3b providers/oauth2: fix component for Scope 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 12:08:21 +02:00
Jens Langhammer 42cb55d78a *: rename objectType to component to get rid of lookup tables 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 11:32:17 +02:00
Jens Langhammer aaebd01058 admin: finalise migration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 01:20:20 +02:00
Jens Langhammer d7698343ae stages/authenticator_validate: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 01:15:32 +02:00
Jens Langhammer 0b057ccb34 stages/authenticator_webauthn: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 01:06:41 +02:00
Jens Langhammer 995f3a13d1 stages/authenticator_static: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 01:03:43 +02:00
Jens Langhammer ab7f4c5ba2 stages/authenticator_totp: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 01:01:59 +02:00
Jens Langhammer be4288fb46 stages/consent: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 00:55:17 +02:00
Jens Langhammer 75d8641a38 stages/dummy: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 00:49:15 +02:00
Jens Langhammer 1d72019645 stages/deny: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 00:48:15 +02:00
Jens Langhammer c1c47c5f30 stages/email: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 00:46:40 +02:00
Jens Langhammer fc47af12be stages/invitation: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 00:42:41 +02:00
Jens Langhammer a9bee998f2 stages/password: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 00:22:23 +02:00
Jens Langhammer 31226e3c75 stages/prompt: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 00:10:59 +02:00
Jens Langhammer f7aabe8ca9 stages/user_delete: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 00:04:20 +02:00
Jens Langhammer 8ac82b97d3 stages/user_write: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 23:54:00 +02:00
Jens Langhammer 128af67011 stages/user_logout: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 23:52:55 +02:00
Jens Langhammer fb9a4ec461 stages/user_login: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 23:51:39 +02:00
Jens Langhammer 2a261cfaf8 stages/identification: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 23:45:50 +02:00
Jens Langhammer 224ad46a21 stages/captcha: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 23:45:39 +02:00
Jens Langhammer ffe3ec0cb4 root: disable django admin 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 23:21:40 +02:00
Jens Langhammer 448dd7ed54 core: change TypeCreateSerializer to component 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 23:17:30 +02:00
Jens Langhammer 1dc01ef857 *: add API tests for types endpoints 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 23:11:53 +02:00
Jens Langhammer 0f76e80341 admin: remove policies views 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 17:15:48 +02:00
Jens Langhammer 6acfbb7d66 policies/reputation: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 17:09:30 +02:00
Jens Langhammer fcdc064cac policies/password: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 17:09:19 +02:00
Jens Langhammer 0c92f4a74d policies/hibp: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 16:57:55 +02:00
Jens Langhammer ac136ec5f6 policies/expiry: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 16:49:37 +02:00
Jens Langhammer f75f6a8404 policies/expression: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 16:42:30 +02:00
Jens Langhammer 415bb4cc88 policies/event_matcher: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 16:37:51 +02:00
Jens Langhammer 6a3e1da986 policies/dummy: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 16:31:53 +02:00
Jens Langhammer 5a6b6c369e admin: add API to get all installed apps 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 16:13:09 +02:00
Jens Langhammer 66d342880c events: add API to get all event actions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 16:02:58 +02:00
Jens Langhammer 7fad2b6563 sources/oauth: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 15:42:07 +02:00
Jens Langhammer 22f50aae45 managed: fix ManagedSerializer interfering with other serializers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 15:00:15 +02:00
Jens Langhammer 1daba5db87 sources/oauth: revamp types system, move default URLs to type 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 14:59:58 +02:00
Jens Langhammer 83fc22005c *: remove swagger parameters from functions that don't accept them 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 13:39:22 +02:00
Jens Langhammer 7eb7fc2e12 sources/oauth: add API to get provider types 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 13:26:42 +02:00
Jens Langhammer 07702afe68 sources/saml: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 13:12:31 +02:00
Jens Langhammer 70fc4c0d88 sources/ldap: migrate to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 12:12:14 +02:00
Jens Langhammer 742f570c4c managed: add API serializer, add managed field 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 12:03:33 +02:00
Jens Langhammer ed2e9b88e7 Merge branch 'master' into new-forms-part-3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-01 23:02:22 +02:00
Jens Langhammer dd88d9254e Merge branch 'next' 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	web/src/interfaces/AdminInterface.ts
 2021-04-01 20:46:06 +02:00
Jens Langhammer 509f21a9b4 providers/oauth2: add validation and tests to API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-01 20:43:18 +02:00
Jens Langhammer b299451cab providers/saml: fix metadata download not being unauthenticated 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-01 20:16:07 +02:00