5cad59a9f8
providers/proxy: fix being able to set empty internal_host
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-09 00:07:34 +02:00
e6dfa8294e
providers/proxy: use name.namespace for middleware service
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-07 10:07:30 +02:00
ea7f9f291f
outposts: create traefikmiddleware if forwardAuth is enabled
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-07 00:01:35 +02:00
701c140cfd
providers/proxy: fix logic error for ingress lookup
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-05 20:28:13 +02:00
be8b2bf6f6
providers/proxy: don't create ingress for domains which use forwardAuth, don't create ingress at all if all providers are forward auth
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-05 17:53:12 +02:00
9a15a66d85
outposts: make k8s object naming configurable
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-05 15:36:27 +02:00
b55cb2b40c
Merge branch 'master' into outpost-ldap
2021-04-29 20:13:47 +02:00
2a409215d3
outpost: forwardAuth mode ( #790 )
2021-04-29 18:17:10 +02:00
3ce8b836dc
outposts: allow outposts to have non-object specific permissions
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-26 23:28:26 +02:00
f328b21e89
providers/oauth2: Set CORS Headers for token endpoint, check Origin header against redirect URLs
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-18 14:20:50 +02:00
ab4569e5d6
web/admin: fix application form's provider selection not working
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-11 13:49:35 +02:00
cb048764f4
providers/proxy: make outpost API readonly
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-11 13:31:15 +02:00
ed2e9b88e7
Merge branch 'master' into new-forms-part-3
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-01 23:02:22 +02:00
509f21a9b4
providers/oauth2: add validation and tests to API
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-01 20:43:18 +02:00
b4a6f8350b
admin: remove provider views
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-01 19:28:30 +02:00
7d74e1d2c4
*: revert to drf-yasg upstream
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-29 21:04:54 +02:00
7f65ae3f92
Merge branch 'master' into stage-challenge
...
# Conflicts:
# web/package-lock.json
2021-02-28 00:47:18 +01:00
fdde97cbbf
*: replace Dict from typing with normal dict
2021-02-18 13:41:03 +01:00
bf754369d9
providers/proxy: fix certificates without key being selectable
2021-02-09 21:11:44 +01:00
91282c7bd8
web: add page for Proxy Provider
2021-02-06 18:57:25 +01:00
91d6a3c8c7
providers/*: simplify provider API
2021-02-06 17:31:29 +01:00
a6ac82c492
*: rewrite managed objects, use nullable text flag instead of boolean as uid ( #533 )
2021-02-06 15:56:21 +00:00
add20de8de
providers/*: fix api linting issues
2021-02-04 10:27:55 +01:00
c7c387eb38
providers/*: add assigned application name and slug
2021-02-04 10:09:19 +01:00
e25d03d8f4
Managed objects ( #519 )
...
* managed: add base manager and Ops
* core: use ManagedModel for Token and PropertyMapping
* providers/saml: implement managed objects for SAML Provider
* sources/ldap: migrate to managed
* providers/oauth2: migrate to managed
* providers/proxy: migrate to managed
* *: load .managed in apps
* managed: add reconcile task, run on startup
* providers/oauth2: fix import path for managed
* providers/saml: don't set FriendlyName when mapping is none
* *: use ObjectManager in tests to ensure objects exist
* ci: use vmImage ubuntu-latest
* providers/saml: add new mapping for username and user id
* tests: remove docker proxy
* tests/e2e: use updated attribute names
* docs: update SAML docs
* tests/e2e: fix remaining saml cases
* outposts: make tokens as managed
* *: make PropertyMapping SerializerModel
* web: add page for property-mappings
* web: add codemirror to common_styles because codemirror
* docs: fix member-of in nextcloud
* docs: nextcloud add admin
* web: fix refresh reloading data two times
* web: add loading lock to table to prevent double loads
* web: add ability to use null in QueryArgs (value will be skipped)
* web: add hide option to property mappings
* web: fix linting
2021-02-03 21:18:31 +01:00
6ed78830a0
providers/proxy: check ingress annotations we manage
2021-01-02 01:48:39 +01:00
85c2db018e
outposts: ensure field_manager is also used for updates
2021-01-02 00:52:42 +01:00
22ce142cb8
outposts: include protocol in outpost deployment ports
2020-12-28 17:21:02 +01:00
1a292feebb
outposts: always check metadata on reconcile
2020-12-28 17:11:37 +01:00
09f4d812b3
outposts: set field_manager
2020-12-28 17:11:33 +01:00
dc16a8a4c9
providers/proxy: set proxy-size for nginx for larger response
2020-12-28 00:45:58 +01:00
ee2e737782
providers/oauth2: remove response_type field as spec doesn't require validation
2020-12-27 18:12:47 +01:00
79da2bf698
web: Table parity ( #427 )
...
* core: fix application API always being sorted by name
* web: add sorting to tables
* web: add search to TablePage
* core: add search to applications API
* core: add MetaNameSerializer
* *: fix signature for non-modal serializers
* providers/*: implement MetaNameSerializer
* web: implement full app list page, use as default in sidebar
* web: fix linting errors
* admin: remove old application list
* web: fix default sorting for application list
* web: fix spacing for search element in toolbar
2020-12-24 09:56:05 +01:00
3c12c8b3ff
core: make Provider SerializerModel
2020-12-16 21:38:40 +01:00
e9bb583b32
providers/proxy: ensure pb_proxy is deleted and ak_proxy is created
2020-12-14 10:47:49 +01:00
1cfe1aff13
wip: rename to authentik ( #361 )
...
* root: initial rename
* web: rename custom element prefix
* root: rename external functions with pb_ prefix
* root: fix formatting
* root: replace domain with goauthentik.io
* proxy: update path
* root: rename remaining prefixes
* flows: rename file extension
* root: pbadmin -> akadmin
* docs: fix image filenames
* lifecycle: ignore migration files
* ci: copy default config from current source before loading last tagged
* *: new sentry dsn
* tests: fix missing python3.9-dev package
* root: add additional migrations for service accounts created by outposts
* core: mark system-created service accounts with attribute
* policies/expression: fix pb_ replacement not working
* web: fix last linting errors, add lit-analyse
* policies/expressions: fix lint errors
* web: fix sidebar display on screens where not all items fit
* proxy: attempt to fix proxy pipeline
* proxy: use go env GOPATH to get gopath
* lib: fix user_default naming inconsistency
* docs: add upgrade docs
* docs: update screenshots to use authentik
* admin: fix create button on empty-state of outpost
* web: fix modal submit not refreshing SiteShell and Table
* web: fix height of app-card and height of generic icon
* web: fix rendering of subtext
* admin: fix version check error not being caught
* web: fix worker count not being shown
* docs: update screenshots
* root: new icon
* web: fix lint error
* admin: fix linting error
* root: migrate coverage config to pyproject
2020-12-05 22:08:42 +01:00
Jens Langhammer
Jens L