trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
7452 commits 95 branches 330 tags 336 MiB
Commit graph

1905 commits

Author SHA1 Message Date
Jens Langhammer 2c0d8d8943 core: add meta_model_name to MetaNameSerializer to easily show relevant events 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-26 10:27:08 +01:00
Jens Langhammer 0a0eee138a stages/authenticator_validate: catch error when attempting to configure user without flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-25 23:44:48 +01:00
Jens Langhammer de8cf65503 stages/email: prevent error with duplicate token 
closes #1827

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-25 23:17:37 +01:00
Jens Langhammer 121b36f35f lib: log error for file:// in config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-25 19:21:40 +01:00
Jens Langhammer 363aed2a47 root: url quote redis passwords for connection string 
closes https://github.com/goauthentik/helm/issues/39

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-25 18:05:36 +01:00
Jens L e1ef196283 core: remove dump_config, handle directly in config loader without booting django, don't check database 2021-11-25 13:38:31 +01:00
Jens Langhammer 0b8cfd437b *: fix typo'd signing pair name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-24 09:55:10 +01:00
Jens Langhammer 75724b6f8d root: make testing output more consistent 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 23:46:27 +01:00
Jens Langhammer 5b9e6bed6c lib: fix custom URL schemes being overwritten 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 23:23:09 +01:00
Jens Langhammer 0e3602d7eb lib: improve probability of symbols in generated key 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 23:01:30 +01:00
Jens Langhammer 2b94e9a687 tests/e2e: bump retries 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 22:54:08 +01:00
Jens Langhammer 6ed7d842e4 *: allow URLs without domain and custom schemas 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 22:51:04 +01:00
Jens Langhammer 8794c840cf web: only show applications with http link 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 22:40:31 +01:00
Jens Langhammer 9c9c00755a core: fix test user not having password set properly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 22:30:09 +01:00
Jens Langhammer b2d2e7cbc8 tests/e2e: remove logger 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 21:19:33 +01:00
Jens Langhammer 91fd792f88 tests/e2e: use generated uid 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 19:19:13 +01:00
Jens Langhammer 9835785864 core: make test user's password optional 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 19:06:44 +01:00
Jens Langhammer d785998c5a Revert "root: disable random tests for now" 
This reverts commit 8ba9553220.
 2021-11-23 18:46:51 +01:00
Jens Langhammer 8ba9553220 root: disable random tests for now 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 17:57:56 +01:00
Jens Langhammer 6eb132c48b tests/e2e: fix ldap provider tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 17:28:35 +01:00
Jens Langhammer 355b832cc3 tests/e2e: fix email backend 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 13:22:28 +01:00
Jens Langhammer e32d4f0095 tests/e2e: don't run e2e tests randomly for now 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 00:32:24 +01:00
Jens Langhammer d3397c349f stages/email: minify email css template 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-23 00:10:43 +01:00
Jens L 9bb0d04aeb
root: Random tests (#1825) 
* root: add pytest-randomly to randomise tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: generate flows for testing instead of relying on existing ones

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: generate users for testing instead of relying on existing ones

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: use generated certificate

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: keep containers

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: use websockets test case

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-22 22:56:02 +01:00
Jens Langhammer 61621e7d60 lifecycle: improve backup restore by dropping database before 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-20 00:32:24 +01:00
Jens Langhammer 431ba6b4ef lib: add cli option for lib.config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-19 23:52:10 +01:00
Jens Langhammer bb6eed0db1 root: properly catch 404 errors for websocket connections 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-19 23:19:07 +01:00
Jens Langhammer e831e4fb94 root: add lifespan shim to prevent errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-16 13:25:03 +01:00
Jens Langhammer b0fac9c9f1 providers/saml: fix SessionNotOnOrAfter not being included 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-16 12:36:40 +01:00
Jens Langhammer f4db09cd59 events: add gdpr_compliance option 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1551
 2021-11-16 11:29:13 +01:00
Jens Langhammer 638e8d741f *: fix multiple tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-16 10:38:21 +01:00
Jens Langhammer 425b87a6d0 outposts: add ack and disconnect tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-16 09:34:37 +01:00
Jens Langhammer d12e24017e outposts: add websocket tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 23:58:19 +01:00
Jens Langhammer 078633c2af lib: drop all sentry exceptions when debug enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 22:18:56 +01:00
Jens Langhammer 4b8b800648 stages/*: add more tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 20:58:34 +01:00
Jens Langhammer 6f9ed001a1 crypto: add more tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 20:38:03 +01:00
Jens Langhammer e4095dfffe admin: add more tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 20:10:09 +01:00
Jens Langhammer d5341c2284 managed: add tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 19:53:08 +01:00
Jens Langhammer 867fb0dac0 root: fix settings for managed not loaded 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 19:49:03 +01:00
Jens Langhammer 2666aa2c73 root: add errorhandling in log middleware 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 17:11:44 +01:00
Jens Langhammer f0e9bafa35 outposts: add tests for management commands 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 16:44:42 +01:00
Jens Langhammer 0d739f5c1a recovery: add additional tests for commands 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 16:41:37 +01:00
Jens Langhammer e08077c73a root: replace asgi-based logger with middleware 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 16:32:56 +01:00
Jens Langhammer c43049a981 website/docs: remove deprecated docker_image_base 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 15:58:17 +01:00
dependabot[bot] f7044e41c6
build(deps-dev): bump bandit from 1.7.0 to 1.7.1 (#1793) 
* build(deps-dev): bump bandit from 1.7.0 to 1.7.1

Bumps [bandit](https://github.com/PyCQA/bandit) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](https://github.com/PyCQA/bandit/compare/1.7.0...1.7.1)

---
updated-dependencies:
- dependency-name: bandit
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* *: fix bandit false positives

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-15 09:16:16 +01:00
Jens Langhammer 59343ff441 stages/email: fix missing component in response when retrying email send 
closes #1791

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-14 17:52:31 +01:00
Jens Langhammer cab564152d lib: load json strings in config env variables 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-14 12:44:22 +01:00
Jens Langhammer 88516ba2ca core: make defaults for _change_email and _change_username configurable 
closes #1789

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-13 22:33:03 +01:00
Jens Langhammer 2a3b049b01 release: 2021.10.4 2021-11-12 12:31:24 +01:00
Rizwan Ahmed e4a5e86c93 sources/oauth: Fixed the incorrect padding issue in apple.py (#1773) 
* Fixed the incorrect padding issue in apple.py

Fixed the incorrect padding issue in apple.py by adding proper padding to the raw_payload.

* Fixed the incorrect encoding of client_secret in apple.py

In the get_client_secret() method, the "sub" in the payload must be only the client ID. So I have changed self.source.consumer_key to parts[0]

* Added the decode method for the id_token

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-12 12:10:29 +01:00
Jens Langhammer 1cfe81887b stages/authenticator_validate: improve logging 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-11 23:33:41 +01:00
Jens Langhammer 53905d1a89 stages/authenticator_validate: enable all device classes by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-11 22:49:30 +01:00
Jens Langhammer 6db1c914ee stages/authenticator_duo: fix devices created with name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-11 22:16:47 +01:00
Jens Langhammer c98bdbacc5 providers/proxy: return list of configured scope names so outpost requests custom scopes 
closes #1762

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 23:06:21 +01:00
Jens Langhammer 1e8d45dc15 web: write interfaces to different folders and remove custom chunk names 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 17:54:50 +01:00
Jens Langhammer d5d8641b37 stages/*: disable trim_whitespace on important fields 
closes #1765

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 16:48:19 +01:00
Jens Langhammer cc0832f487 core: force lowercase emails for gravatar usage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 12:40:20 +01:00
Jens Langhammer e73606b54d root: catch error in analytics on startup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 11:28:08 +01:00
Jens Langhammer 5d479a6c8f root: set utm_source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 23:23:47 +01:00
Jens Langhammer 4a773b2b4f sources/ldap: set connect/receive timeout (default to 15s) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 22:27:58 +01:00
Jens Langhammer 8003d67844 sources/ldap: fix typo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 22:24:33 +01:00
Jens Langhammer 51783c1cbb sorces/ldap: fix user/group sync overwriting attributes instead of merging them 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 21:16:59 +01:00
Jens Langhammer ab2b13938e release: 2021.10.3 2021-11-08 20:52:11 +01:00
Jens Langhammer 9ca15983a2 root: keep last 30 backups 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 17:46:25 +01:00
Jens Langhammer 99ef94b7aa stages/prompt: only set placeholder when in context 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 15:10:32 +01:00
Jens Langhammer c3faa61ed9 stages/prompt: set field placeholder based on plan context 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 14:47:50 +01:00
Jens Langhammer da74304221 stages/prompt: add text_read_only field 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 14:45:56 +01:00
Jens Langhammer 79db0ce4c1 stages/prompt: use initial instead of default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 22:20:08 +01:00
Jens Langhammer 5e23b11764 stages/prompt: default prompts to the current value of the context 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:59:50 +01:00
Jens Langhammer c4e029ffe2 recovery: add create_admin_group management command 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:53:21 +01:00
Jens Langhammer 61b5b36192 core: add command to output full config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:45:52 +01:00
Jens Langhammer c6cc1b1728 root: fix defaults for EMAIL_USE_TLS 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:37:14 +01:00
Jens Langhammer 90151a13ae stages/identification: only allow limited challenges for login sources 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 14:53:38 +01:00
Jens Langhammer f958aa6930 stages/identification: use random sleep 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 14:50:35 +01:00
Jens Langhammer 924a13e832 core: fix auth_method for tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 13:04:41 +01:00
Jens Langhammer ae83c35dfd events: ignore creation/deletion of AuthenticatedSession objects 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 13:04:34 +01:00
Jens Langhammer 6424bf98da admin: improve check to remove version notifications 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 12:15:05 +01:00
Jens Langhammer 2cef220a3e providers/ldap: add/squash migrations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 10:41:50 +01:00
Jens L 5a8c66d325
providers/ldap: memory Query (#1681) 
* outposts/ldap: modularise ldap outpost, to allow different searchers and binders

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: add basic in-memory searcher

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/ldap: add search mode field

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: add search mode field

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 10:37:30 +01:00
dependabot[bot] 8de13d3f67 build(deps): bump goauthentik.io/api from 0.2021102.2 to 0.2021102.4 (#1738) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 09:33:26 +01:00
Jens Langhammer 7798292aa8 sources/plex: use exception_to_string in tasks 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 01:16:36 +01:00
Jens Langhammer 3005ca17bd web/admin: show warning on provider when not used with outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 01:15:33 +01:00
Jens Langhammer 909461e533 providers/*: include list of outposts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 01:06:04 +01:00
Jens Langhammer a40c3aeb68 core: make group membership lookup respect parent groups (upwards) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 00:53:56 +01:00
Jens Langhammer 4a89be3048 core: include parent group name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 00:11:17 +01:00
Jens Langhammer 023b97aa69 sources/ldap: remove deprecated default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 22:13:47 +01:00
Jens Langhammer 738e4d5c74 web/admin: only show flows with an invitation stage configured instead of all enrollment flows 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1720
 2021-11-04 20:54:55 +01:00
Jens Langhammer 5bc1301043 stages/authenticator_*: add default name for authenticators 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 15:34:51 +01:00
Jens Langhammer 8d766efecb root: don't set signal on start when running in ci or dev 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 14:32:21 +01:00
Jens Langhammer b362d2af03 lib: fix linting issue 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 13:43:09 +01:00
Jens Langhammer bcd42fce13 root: further improve detection of environment we're running in 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 13:35:22 +01:00
Jens Langhammer 6deddd038f internal: start embedded outpost directly after backend is healthy instead of waiting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 13:18:04 +01:00
Jens Langhammer 3b47cb64da root: improve compose detection, add anonymous stats 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 13:16:21 +01:00
Jens Langhammer cf5e70c759 lifecycle: revert to non-h11 worker 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 13:16:10 +01:00
Jens Langhammer 5374352411 sources/plex: allow users to connect their plex account without login flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 21:09:02 +01:00
Jens Langhammer 08eff4cc5d sources/plex: fix missing ordering 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 20:21:33 +01:00
Jens Langhammer 8f6d700aa8 sources/oauth: set prompt=none for Discord provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 15:48:59 +01:00
Jens Langhammer 58c221e867 release: 2021.10.2 2021-11-03 10:07:28 +01:00
Jens Langhammer 5dc0f3b91b website: remove static service account, use helm chart instead 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 00:14:01 +01:00
Jens Langhammer f51515f3de stages/invitation: don't throw 404 error in stage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 00:07:13 +01:00