trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
11240 commits 95 branches 330 tags 336 MiB
Commit graph

2011 commits

Author SHA1 Message Date
Jens Langhammer 92090ced9f
web/elements: fix pf-c-switch not rendering correctly in pure tables 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 15:47:11 +01:00
Jens Langhammer ce47d4cf39
web/admin: link group of notification rule 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 15:46:37 +01:00
Jens L c61529e4d4
sources/ldap: add e2e LDAP source tests (#4462) 
* start adding more LDAP source tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* improve healthcheck

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* try local webdriver

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add full samba tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix locale types

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 15:03:56 +01:00
Jens Langhammer e78bc1b32f
web/admin: improve display of system task exception 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 12:13:11 +01:00
Jens Langhammer 89c4a7b4a4
web/admin: improve display of rule severity 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 12:09:53 +01:00
Jens Langhammer d9cc45f9ce
web/elements: fix SearchSelect not working on safari 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 00:08:23 +01:00
Jens Langhammer 515a402db7
web/flows: fix flow executor background overlay in safari 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-18 20:43:19 +01:00
Jens Langhammer 49b6c71079
release: 2023.1.0 2023-01-18 15:49:45 +01:00
Jens L 23c69c456a
providers/proxy: add setting to intercept authorization header (#4457) 
* add setting to intercept authorization header

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rename to intercept_header_auth

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-17 18:56:48 +01:00
Jens Langhammer 8deced771d
web/admin: fix broken outpost form 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-14 15:45:35 +01:00
Jens Langhammer 1bd6107ec7
web: fix scrollbar corner color in dark mode 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-13 17:24:38 +01:00
Jens L cd12e177ea
providers/proxy: add initial header token auth (#4421) 
* initial implementation

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* check for openid/profile claims

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* include jwks sources in proxy provider

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add web ui for jwks

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* only show sources with JWKS data configured

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix introspection tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start basic

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add basic auth

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add docs, update admonitions

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add client_id to api, add tab for auth

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update locale

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-13 16:22:03 +01:00
Jens L 36822c128c
admin: include task duration in API (#4428) 
include task duration in API

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-13 13:21:49 +01:00
Jens Langhammer df42480284
web/elements: use correct Action Label for user related events 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 23:57:05 +01:00
Jens Langhammer 81e9f2d608
web/admin: fix overflow in aggregate cards 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 14:12:02 +01:00
Jens L ddbd8153e2
web: migrate checkbox to switch (#4409) 
* start migrating to switch

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* general cleanup

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove broken Create provider

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate all

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate table selectors, fix dark theme

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 13:37:49 +01:00
Jens L 67a6fa6399
events: rework metrics (#4407) 
* rework metrics

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* change graphs to be over last week

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix  Apps with most usage card

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 12:21:07 +01:00
Jens Langhammer a35b8f5862
web/admin: better show dev build 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 11:16:53 +01:00
Jens Langhammer d6f5b8e421
web/elements: fix pagination page button colours in dark mode 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 00:38:23 +01:00
Jens L b424c5dd27
web/admin: rework admin dashboard, add more links, remove user and group graphs (#4399) 2023-01-10 23:47:55 +01:00
Jens L 1ed24a5eef
blueprints: internal storage (#4397) 
* rework oci client

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add blueprint content

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add UI

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make path optional

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add validation

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-10 22:00:34 +01:00
Jens Langhammer f2961cb536
web/admin: link impersonation user for events 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-10 16:20:43 +01:00
Jens Langhammer 4d66e42708
web: add core-js polyfill for safari 
sigh

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-10 11:59:25 +01:00
Jens Langhammer d1aa1f46da
web/admin: show GeoIP information inline in events 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-09 16:01:00 +01:00
Jens Langhammer 643b36b732
web/admin: fix certificate filtering for LDAP verification certificate 
closes #4376

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-06 16:43:50 +01:00
Jens Langhammer 001869641d
web: ensure img tags have alt attributes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-06 12:44:51 +01:00
Jens L a960ce9454
stages/user_write: add more user creation options (#4367) 
* add more user creation options

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update blueprints and docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-05 15:46:20 +01:00
Jens L e6b5810e03
polices/hibp: remove deprecated (#4363) 
* remove hibp

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* don't save event matcher apps in migrations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup migrations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update docs, update some phrasing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-05 13:19:26 +01:00
Jens Langhammer 78b711ec9d
Merge branch 'version-2022.12' 2023-01-05 10:41:54 +01:00
Jens Langhammer ac07833688
release: 2022.12.2 2023-01-05 10:01:30 +01:00
Jens Langhammer be473470a4
web/admin: fix lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:40:18 +01:00
Jens Langhammer 445cd5b2c4
web: fix radio label code in dark mode 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:40:15 +01:00
Jens Langhammer 805a4b766a
web/admin: migrate webauthn forms to radio 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:40:12 +01:00
Jens Langhammer f15946e216
web/admin: fix lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:39:44 +01:00
Jens Langhammer b54415dcde
web: fix radio label code in dark mode 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:38:34 +01:00
Jens Langhammer 471293ba25
web/admin: migrate webauthn forms to radio 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:38:23 +01:00
Jens L dc1359a763
providers/saml: initial SLO implementation (#2346) 
* providers/saml: initial SLO implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/saml: add logout request tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/saml: add tests for POST SLO

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* matrix e2e tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix import

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* set e2e matrix name

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix imports

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* separate oidc and oauth tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add basic saml slo e2e tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add better metadata download url

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* kinda prepare release notes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* sort releases into folders

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add slo urls to website

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix linking

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add api tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 19:45:31 +01:00
Jens Langhammer 119a268eb7
web: add custom scrollbar 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 11:53:01 +01:00
Jens Langhammer e887a315be
providers/oauth2: correctly advertise supported response_modes_supported 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 10:21:34 +01:00
Jens Langhammer f54e82781a
web/elements: fix dropdown menu closing before selecting item sometimes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-03 10:11:23 +01:00
Jens L ffed653cae
web/admin: migrate api calls to async (#4335) 
migrate api calls to async

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-02 16:13:07 +01:00
Jens L ba5cd6e719
web/admin: add Radio control, search-select fixes (#4333) 
* move search select to forms folder

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add radio, migrate smaller lists

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* move dropdown when scrolling, hide when container out of frame

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-02 14:51:44 +01:00
Jens Langhammer 9564894eda
web/elements: trigger search select data update on connected callback 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-02 10:26:52 +01:00
Jens Langhammer 475853fb14
web: update tsconfig strictness 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 23:44:15 +01:00
Jens Langhammer 964fdf171b
web: add check compile test to prevent compile errors/warnings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 23:32:05 +01:00
Jens Langhammer aef9a22331
web/admin: fix error in outpost form dropdown 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 22:27:23 +01:00
Jens Langhammer 3980eea7c6
web/flows: rework error display, always use ak-stage-flow-error instead of shell 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 21:43:44 +01:00
Jens Langhammer d6d72489a7
web/flows: add close button to flow inspector 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 21:26:21 +01:00
Jens Langhammer 9fdfb8c99b
stages/dummy: add toggle to throw error for debugging 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 21:25:53 +01:00
Jens Langhammer b9bb27008e
web/elements: fix selection of blank elements in search-select, fix issue when re-opening dropdown 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 20:10:16 +01:00
Jens Langhammer 82184b2882
web/flows: fix alternate captchas not loading 
closes #4321

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 18:49:41 +01:00
Jens Langhammer 9ea0441559
web/elements: correctly display selected empty option when blankable is enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 18:19:32 +01:00
Jens Langhammer a03a64b35c
web/admin: fix error when creating SAML Provider from metadata 
closes #4315

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-31 12:54:42 +01:00
Jens Langhammer 780b986be8
web/elements: only find pages for directly related slots 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-30 22:35:57 +01:00
Jens Langhammer 2c42c87689
release: 2022.12.1 2022-12-30 13:43:42 +01:00
Jens Langhammer 316c6966b7
web/admin: post-migration cleanup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 23:24:43 +01:00
Jens Langhammer 6a44695c48
web/admin: use flow slug as main name for flow dropdown 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 22:53:15 +01:00
Jens Langhammer c46b2d5573
web/admin: finish migration to search-select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 22:48:28 +01:00
Jens Langhammer 35678c18c5
web/admin: replace more selects with search select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 21:49:36 +01:00
Jens Langhammer 5fba08c911
web/admin: replace more selects with search select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 13:15:09 +01:00
Jens Langhammer 1149a61986
web/admin: replace certificate selection with ak-search-select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 11:56:54 +01:00
Jens Langhammer 7a10872854
web/admin: replace flow selections with ak-search-select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 11:50:18 +01:00
Jens Langhammer 8a1b6693a7
web/elements: make ak-search-select limited in height and scroll 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 11:14:13 +01:00
Jens Langhammer 90c89aec76
web/admin: replace stage selections with ak-search-select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 11:14:13 +01:00
Jens Langhammer b429e24392
web/admin: replace group selections with ak-search-select 
closes #4157

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 11:14:12 +01:00
Jens Langhammer e02b99bfbc
web/admin: replace user selections with ak-search-select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#4157
 2022-12-29 11:00:57 +01:00
Jens Langhammer 6d86067cea
web/elements: add grouping and descriptions to search select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 10:56:12 +01:00
Jens Langhammer 4d527a0ac5
web/user: fix user settings stuck loading 
closes #4297

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 20:48:02 +01:00
Jens Langhammer b1020fde64
web/elements: render ak-seach-select dropdown correctly in modals 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 20:38:57 +01:00
Jens Langhammer e6aa4c9327
web/admin: rework outpost health 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 16:16:18 +01:00
Jens Langhammer 24eb4ed963
release: 2022.12.0 2022-12-28 13:00:49 +01:00
Jens Langhammer 0e6400bfea
web/admin: improve user/group UX for adding/removing users to and from groups 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 12:55:38 +01:00
Jens Langhammer be308b3392
web/admin: lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 12:07:14 +01:00
Jens Langhammer b16d1134ea
core: add endpoints to add/remove users from group atomically 
closes #4252

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 10:50:30 +01:00
Jens Langhammer 78f7eb4345
web/elements: fix wizard form page changing state before being active 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-27 20:21:58 +01:00
Jens Langhammer 4a6f8d2ef2
web/flows: update flow background 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-27 13:47:16 +01:00
Jens Langhammer 3eecc76717
web/admin: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-26 15:35:08 +01:00
Jens Langhammer dbaf03430e
web/admin: show stage binding form when creating stage in bound list 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-25 15:09:22 +01:00
Jens Langhammer bfa0360764
web/admin: show policy binding form when creating policy in bound list 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-25 14:59:45 +01:00
Jens Langhammer 0423023d2e
web/elements: fix table select-all checkbox being checked with no elements 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-25 14:10:02 +01:00
Jens Langhammer 5132f0f876
web/admin: more consistent label usage, use compact labels 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-25 14:06:29 +01:00
Jens Langhammer 08b0075335
web/admin: fix import error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-25 13:18:56 +01:00
Jens Langhammer 700a4cb72c
web/admin: fix application to provider links 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-24 21:55:29 +01:00
Jens Langhammer 283c93c57b
website: copy static files instead of linking them to prevent cache issues 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-23 15:18:21 +01:00
Jens Langhammer 1b86a3d5d6
Merge branch 'version-2022.11' 2022-12-23 14:39:52 +01:00
Jens Langhammer 9dc0bb2a77
release: 2022.11.4 2022-12-23 14:17:48 +01:00
Jens L 2d827eaae1
security: fix CVE 2022 23555 (#4274) 
* add flow to invitation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* show warning on invitation page

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add security advisory

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-23 14:16:30 +01:00
Jens L 47d79ac28c
security: fix CVE 2022 46172 (#4275) 
* fallback to current user in user_write, add flag to disable user creation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update api and web ui

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update default flows

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add cve post to website

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-23 14:16:26 +01:00
Jens L 9f846d94be
security: fix CVE 2022 23555 (#4274) 
* add flow to invitation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* show warning on invitation page

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add security advisory

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-23 14:13:49 +01:00
Jens L 84fbeb5721
security: fix CVE 2022 46172 (#4275) 
* fallback to current user in user_write, add flag to disable user creation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update api and web ui

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update default flows

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add cve post to website

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-23 14:12:58 +01:00
Jens L c635487210
blueprints: better OCI support in UI (#4263) 
use oci:// prefix to detect oci blueprint, add UI support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-22 18:49:25 +01:00
Jens Langhammer 30f4a09a88
web/elements: fix alignment for checkboxes in table 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-22 17:31:06 +01:00
Jens Langhammer 7143ea08e6
web/admin: improve i18n for documentation link in outpost form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-22 17:30:54 +01:00
Jens Langhammer e4e7a112e3
web: use version family subdomain for in-app doc links 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-22 17:03:08 +01:00
Jens Langhammer 4c133b957c
web/user: fix styling for clear all button in notification drawer 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-22 16:37:49 +01:00
Jens Langhammer 7b01a208a2
web/elements: unselect top checkbox in table when not all elements are selected 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-22 16:02:04 +01:00
Jens Langhammer db0af3763b web/elements: fix alignment with checkbox in table 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-22 15:12:47 +01:00
Jens Langhammer ab9efcea77 web/elements: fix log level for diagram 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-22 15:12:30 +01:00
Jens Langhammer e5cfddfc57 web: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-21 20:25:42 +01:00
Jens Langhammer 1564b898db web/admin: fix alignment in tables with multiple elements in cell 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-21 20:06:36 +01:00
Jens Langhammer 3b61c6f9b9 web/admin: improve UI for removing users from groups and groups from users 
no longer deletes users/groups when they are removed from the opposite

closes #4251 closes #3964

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-21 19:16:00 +01:00
Jens L 609f95ac97
providers: add preview for mappings (#4254) 
* preview

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: show provider page on application page

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* use oauth2 end session url instead of direct interface

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* dont show provider page on application page for now

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add UI for preview

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* translate and release notes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix lint

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* separate saml api files

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add api tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-21 12:13:11 +01:00
Jens Langhammer 980d2a022c web/admin: show bound policies order first to match stages 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-20 14:59:17 +01:00
Jens Langhammer bacf2afed1 internal: remove sentry proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-19 17:52:07 +01:00
Jens Langhammer 67b45fc4e3 web/admin: break all in code blocks in event info 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-19 13:00:55 +01:00
Jens Langhammer c28f3ab225 web/elements: fix flaky formatting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-19 12:58:22 +01:00
Jens Langhammer 9d5b9204fc web/admin: rework markdown, correctly render Admonitions, fix links 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-19 12:48:02 +01:00
Jens Langhammer 39e0ed2962 web/admin: better show metadata download for saml provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-19 10:54:51 +01:00
Jens L ec925491b2
stages/captcha: customisable URLs (#3832) 
* make api and js url customisable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* use recaptcha.net domains

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add form

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* regen locale

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-18 14:18:43 +01:00
Jens Langhammer 8d169a8bd9 Merge branch 'version-2022.11' 2022-12-12 17:05:39 +00:00
Jens Langhammer 4816b90378 root: update locales 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-12 16:23:30 +00:00
Jens Langhammer 45eb8baee8 web/admin: fix action button order for blueprints 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-12 16:22:33 +00:00
Jens Langhammer 44bf9a890e release: 2022.11.3 2022-12-02 23:00:59 +02:00
Jens Langhammer 58cd6007b2 Merge branch 'version-2022.11' 2022-12-02 18:12:38 +02:00
Jens L db95dfe38d
security: fix CVE 2022 46145 (#4140) 
* add flow authentication requirement

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add website for cve

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: handle FlowNonApplicableException without policy result

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add release notes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-02 16:14:25 +01:00
Bastien Rivière 93fee5f0e5
web: fix authentification with Plex on iOS (#4095) 
* web: fix authentification with Plex on iOS

Fixes issue #3822

* fixup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add fallback button

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-01 13:32:00 +01:00
Jens Langhammer 2a4daa5360 release: 2022.11.2 2022-12-01 10:41:29 +02:00
Jens Langhammer e1a6dede54 *: backport CVE-2022-46145 fix 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-01 10:41:26 +02:00
Jens Langhammer 3b8cb9e525 web/flows: fix display for long redirect URLs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-28 10:30:27 +01:00
Jens Langhammer 1c2cdfe06a web/flows: improve error messages for failed duo push 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-24 13:42:13 +01:00
Jens Langhammer 474677017f web/admin: fix empty request being sent due to multiple forms in duo import modal 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-24 12:08:06 +01:00
Jens Langhammer 0813a49ca5 web/admin: clarify phrasing that user ID is required 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-24 11:37:54 +01:00
Jens Langhammer 3a13d19695 release: 2022.11.1 2022-11-22 21:42:10 +01:00
Jens Langhammer 94833dd1e7 web/admin: reset cookie_domain when setting non-domain forward auth 
closes #4063

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-22 20:46:20 +01:00
Jens Langhammer 5b8223808e Merge branch 'version-2022.11' 2022-11-21 22:14:33 +01:00
Jens Langhammer 14f341f504 web/admin: fix error when importing duo devices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-21 21:36:10 +01:00
Jens Langhammer c30aa90888 web: fix lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-21 20:54:02 +01:00
Jens Langhammer 20c1770ec4 release: 2022.11.0 2022-11-21 20:12:02 +01:00
Jens Langhammer a2e512c36c stages/authenticator_validate: add flag to configure user_verification for webauthn devices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-21 17:52:37 +01:00
Jens Langhammer 71d144a67e web/flows: always hide static user info when its not set in the flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-18 21:19:06 +01:00
Jens Langhammer d785edbbe3 web/flows: only show user info when applicable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-18 16:13:21 +01:00
Jens L 9f5fb692ba
sources: add custom icon support (#4022) 
* add source icon

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add to oauth form

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add to other browser sources

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add migration, return icon in UI challenges

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* deduplicate file upload

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-16 14:10:10 +01:00
Jens L 276af8457d
root: make sentry DSN configurable (#4016) 
* make sentry DSN configurable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* make proxy smarter

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix typo in config struct

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-15 16:05:29 +01:00
Jens Langhammer a9111bd3fd web/flows: update flow background 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-15 16:05:07 +01:00
Jens L 88594075b2
policies/password: merge hibp add zxcvbn (#4001) 
* initial zxcvbn

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add api and port tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* more tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add ui

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add api diff

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-14 14:42:43 +01:00
Jens L ffe6f65af5
outposts/kubernetes: ingress class (#4002) 
* add support for ingressClassName

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add option to disable ssl verification for k8s controller

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update website

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-11-14 14:24:11 +01:00
Jens Langhammer 88153cd490 web/admin: fix typo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-31 20:30:11 +01:00
Jens Langhammer f3a72761c0 release: 2022.10.1 2022-10-29 17:24:55 +02:00
Jens Langhammer 3da7fcfc1d web/common: disable API Drawer by default in user interface 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-24 22:08:47 +02:00
Jens Langhammer 89dc46a7ff release: 2022.10.0 2022-10-21 19:42:38 +02:00
Jens Langhammer f1b143606e web/admin: fix scrolling in remaning modals 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-20 10:20:32 +02:00
Jens Langhammer 0b6dd49f36 web/admin: show oauth2 docs on oauth2 provider view page 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-19 10:11:15 +02:00
Jens L b06a3a8f9f
admin: add authorisations metric (#3811) 
add authorizations metric

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-19 00:06:45 +02:00
Jens Langhammer a8bca5edd0 web: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-18 22:29:28 +02:00
Jens L 0efee2a660
flows: improved import (#3807) 
* return logs when importing flow

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* improve error handling, show logs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-18 22:01:42 +02:00
Jens Langhammer 96a30af0eb sources/oauth: allow overriding of all scopes 
closes #3747

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-16 21:21:43 +02:00
Jens Langhammer d6a14019c6 web/admin: rework scrolling in modals, ensure overlay covers everything 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-16 16:02:51 +02:00
Jens Langhammer b515126061 web: use drawSelection to workaround cursor bug when using CodeMirror with ShadowDOM in firefox 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-16 13:55:53 +02:00
Jens L 363872715d
sources/saml: revamp SAML Source (#3785) 
* update saml source to use user connections, add all attributes to flow context

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* check for SAML Status in response, add tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* package apple icon

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add webui for connections

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-14 17:04:47 +02:00
Jens L 79e8b72569
flows: always show flow inspector in debug mode, don't require admin in debug (#3786) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-10-14 15:44:59 +02:00