trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
9014 commits 95 branches 330 tags 336 MiB
Commit graph

163 commits

Author SHA1 Message Date
Jens Langhammer e42386b150 api: update API browser to match admin UI and auto-switch theme 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-05-25 20:09:29 +02:00
Jens L 80c1dbdfbb
ensure all viewsets have filter and search and add tests (#2946) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-05-24 22:01:18 +02:00
Jens Langhammer eb4dce91c3 events: add user filter to notifications 
as superuser all notifications are returned regardless of permission so we need to filter

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-05-14 22:31:13 +02:00
Jens Langhammer d4fd6153c8 api: fix OwnerFilter filtering out objects for superusers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-05-14 21:36:00 +02:00
Jens Langhammer 778065f468 core: add flag to globally disable impersonation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-04-17 16:52:55 +02:00
Jens Langhammer 996bd05ba6 api: fix API header auth not passing to next auth method 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-03-31 00:06:01 +02:00
Jens Langhammer a1a64e25ee api: remove legacy http basic auth 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-03-30 23:39:08 +02:00
Jens L d5e04a2301
*: remove deprecated backup (#2129) 
* *: remove backup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix lint

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: add docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: final cleanup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* ci: use correct pyproject when migrating from stable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: fix broken docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-02-05 18:54:15 +01:00
Jens Langhammer 0db0a12ef3 root: rename csrf header 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-01-16 16:17:44 +01:00
Jens Langhammer 6b6702521f api: don't return error reporting enabled when debug is enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-01-07 21:53:22 +01:00
Jens Langhammer 0027dbc0e5 root: remove old api path 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-01-06 22:21:21 +01:00
Jens Langhammer 6e53f1689d policies/reputation: rework reputation to use a single entry, include geo_ip data 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-01-05 21:02:33 +01:00
Jens Langhammer c249b55ff5 *: use py3.10 syntax for unions, remove old Type[] import when possible 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-30 14:59:01 +01:00
github-actions[bot] 7d2f622f4b web: Update Web API Client version (#1857) 
Signed-off-by: GitHub <noreply@github.com>

Co-authored-by: BeryJu <BeryJu@users.noreply.github.com>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-29 14:17:12 +01:00
Jens Langhammer e3a5ef1907 root: make sentry sample rate configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-29 13:52:34 +01:00
Jens Langhammer 638e8d741f *: fix multiple tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-16 10:38:21 +01:00
Jens Langhammer c6cc1b1728 root: fix defaults for EMAIL_USE_TLS 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:37:14 +01:00
Jens Langhammer 0d02dbf55c api: replace django sentry proxy with go proxy to prevent login issues 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-02 14:44:37 +01:00
Jens Langhammer d70c8fbcc3 core: add API for all user-source connections 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-30 14:36:54 +02:00
Jens Langhammer e771e1857f core: add API to list all authenticator devices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-29 09:08:48 +02:00
Jens Langhammer f2f12ef0ba api: fix error when connection to websocket via secret_key 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-27 15:21:52 +02:00
Jens Langhammer 3647633232 core: cleanup embedded outpost logging, log user for http requests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-20 22:12:49 +02:00
Jens L aef9d27706
stages/authenticator_sms: Add SMS Authenticator Stage (#1577) 
* stages/authenticator_sms: initial implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add initial stage UI

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/elements: clear invalid state when old input was invalid but new input is correct

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_sms: add more logic

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: add basic SMS settings

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_sms: initial working version

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_sms: add tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: optimise totp password manager entry on authenticator_validation stage

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/elements: add grouping support for table

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: allow sms class in authenticator stage

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add grouping to more pages

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_validate: add SMS support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: add throttling for flow executor based on session key and pending user

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix style issues

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* ci: add workflow to compile backend translations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-11 17:51:49 +02:00
Jens L f9ad102915
flows: inspector (#1469) 
* flows: add initial inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: change naming a bit

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flow: add inspector frame

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: don't use shadydom when inspecting

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add current stage to api

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/*: fix imports

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: deep-copy plan instead of just adding

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: ui

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: restrict inspector to admin

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add buttons to launch flow with inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: don't automatically follow redirects when inspector is open

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: make current_plan optional, only require historry

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: handle error messages in inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: improve UI when flow is done

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add is_completed flag to inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: fix monkeypatches for tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add inspector tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* ci: re-enable cache

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-28 09:36:48 +02:00
Jens Langhammer 79b92e764e *: fix typos in code 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-25 00:01:11 +02:00
Jens Langhammer 74169860cf api: add logging to sentry proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-23 09:57:42 +02:00
Jens Langhammer d900a2b6a9 *: fix lookup_fields 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 19:19:36 +02:00
Jens Langhammer b5c857aff4 api: add explicit lookup_value_regex, disable include_format_suffixes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-20 13:42:56 +02:00
Jens Langhammer f6e0f0282d core: fix tokens not being viewable but superusers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-19 16:11:20 +02:00
Jens Langhammer abd9fab41a api: fix call of sentry proxy task 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 19:39:58 +02:00
Jens Langhammer 7c8bf42ef9 api: send proxied sentry events in background 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 19:12:20 +02:00
Jens Langhammer 274b555912 api: add timeout for sentry proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 18:59:27 +02:00
Jens Langhammer a4b3519428 api: fix possible error in sentry proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-13 16:36:04 +02:00
Jens Langhammer 9a7fa39de4 events: allow setting a mapping for webhook transport to customise request payloads 
closes #1383

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-12 01:05:42 +02:00
Jens Langhammer c779ad2e3b *: use common user agent for all outgoing requests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-11 21:08:26 +02:00
Jens Langhammer 7dfbcdbb81 stages/authenticator_duo: add API to "import" devices from duo 
closes #1371

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-10 11:35:09 +02:00
Jens Langhammer c2b9dc5c75 api: cache schema, fix server urls 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-03 10:23:14 +02:00
Jens Langhammer f0db408699 api: add v3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-02 17:40:02 +02:00
Jens Langhammer cc5cc43baa api: fix sentry endpoint not working due to mime-media 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-02 16:56:53 +02:00
Jens Langhammer 523b96a6d2 api: add basic rate limiting for sentry endpoint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-29 19:33:18 +02:00
Jens L 859cf2bd8f
lib: move id and key generators to lib (#1286) 
* lib: move generators to lib

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: bump default token key size

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: fix split being used for http basic auth instead of partition

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/elements: don't rethrow error in ActionButton

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 20:27:38 +02:00
Jens Langhammer 6433b5982e api: add cache timeouts to config API for outposts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-21 14:14:18 +02:00
Jens Langhammer 84c4547005 sources/plex: add API for user connections 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-17 13:02:40 +02:00
Jens Langhammer 7a836e0d7e api: fix backup capability not being detected correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-09 00:32:29 +02:00
Jens Langhammer 77ed25ae34 root: reformat to 100 line width 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-03 17:45:16 +02:00
Jens L f01bc20d44
Embedded outpost (#1193) 
* api: allow API requests as managed outpost's account when using secret_key

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: load secret key from env

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: make listener IP configurable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost/proxy: run outpost in background and pass requests conditionally

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: unify branding to embedded

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix embedded outpost not being editable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix mismatched host detection

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: fix LDAP test not including user for embedded outpost

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: fix user matching

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: add tests for secret_key auth

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: load environment variables using github.com/Netflix/go-env

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-29 11:30:30 +02:00
Jens Langhammer 212ff11b6d api: fix Capabilities check for s3 backup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-15 09:58:07 +02:00
Jens Langhammer 2036827f04 api: add sentry tunnel 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-13 10:58:14 +02:00
Jens Langhammer 262a8b5ae8 api: use partition instead of split for token 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-28 20:13:08 +02:00
Jens Langhammer fc8004db2b outposts: fix integrity error with tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-13 13:36:54 +02:00