6e46124c94
web/admin/user: fix user source connection lookups
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 21:40:08 +01:00
533a719914
sources/oauth: migrate to webcomponents
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 20:35:00 +01:00
a085632b8e
stages/authenticator_*: migrate remaining stages to webcomponents
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 20:13:31 +01:00
1ef5a8e6c5
stages/password: migrate settings to webcomponents
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 19:48:24 +01:00
ab5d6dbea1
sources/authenticator_webauthn: rewrite to webcomponent
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 18:00:37 +01:00
ffd8c59c8e
api: use common skeleton in swagger template
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 17:46:41 +01:00
83c3a116f3
core: add Serializer for UserSettings, used by stages and sources
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 17:46:31 +01:00
f695a3f40a
stages/authenticator_*: fix missing fields
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 17:19:39 +01:00
f41f2bfdab
sources/saml: use STAGE_CONFIGURATION for default-source-pre-authentication flow
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 17:12:41 +01:00
17f7a97ef3
sources/oauth2: add API For UserSourceConnection
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 14:46:08 +01:00
3698c6431c
flow: pass Query on FlowExecutorSolve to prevent redirect issues
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 14:12:49 +01:00
4d88af4601
flows: fix RedirectChallenge wrapper being confused by querystrings
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 12:47:12 +01:00
dce869b566
flows: fix post-email continuation not working
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 12:46:54 +01:00
5a5539da97
sources/saml: fix failing unittests
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 09:55:43 +01:00
4612cea970
sources/saml: replace server-side pre-auth views for pre_auth flow
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 09:22:15 +01:00
da4fa96499
sources/oauth: simplify enrollment handler
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 09:22:15 +01:00
4137266041
flows: revert to sever-side redirects for security, pass querystring from client during flow plan
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-24 09:22:15 +01:00
62d0e020db
stages/email: add wrapper view to accept queryargs and redirects to flow if
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-23 19:42:58 +01:00
3f6174e8cc
ci: fix missing isort
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-23 18:28:23 +01:00
1fd949d4ec
flows: remove FlowExecutorShellView
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-23 18:09:13 +01:00
de6fa63d21
web: detect deep links in flow interface and redirect locally
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-23 18:04:21 +01:00
cfe7bc8155
flows: migrate access denied message to webcompoennts
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-23 17:55:13 +01:00
c6c4636b9b
policies: show messages of root result
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-23 17:14:54 +01:00
bd74e07ce1
flows: move <ak-message-container> outside of flow executor
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-23 16:18:00 +01:00
33787d0685
web: remove pf-c-card-aggregate
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-23 16:05:37 +01:00
56344cadeb
web: add confirmation form for simple write-requests
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-23 15:07:45 +01:00
0671d712fa
policies: remove deprecated group_membership policy
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-23 14:43:24 +01:00
6961089425
flows: add API to clear cache
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-23 10:37:41 +01:00
3157bf63a6
root: upgrade to pylint 2.7
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-22 20:03:33 +01:00
e202fd988b
root: update to isort 5
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-22 19:53:10 +01:00
4f8b882554
web: copy static assets only once
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-22 14:54:12 +01:00
fe7f23238c
Static SPA ( #648 )
...
* core: initial migration to /if
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: move jsi18n to api
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* tests: fix static URLs in tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: add new html files to rollup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: fix rollup config and nginx config
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: add Impersonation support to user API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: add banner for impersonation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* tests: fix test_user function for new User API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* flows: add background to API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: set background from flow API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: make root view login_required for redirect
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* flows: redirect to root-redirect instead of if-admin direct
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* api: add header to prevent Authorization Basic prompt in browser
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: redirect to root when user/me request fails
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-22 13:44:17 +01:00
25c82d80f5
flows: use full ShadowDom for flowContainer
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-21 17:51:23 +01:00
7e47906475
api: add Footer links to config API
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-21 17:35:00 +01:00
24ac6d2c25
stages/authenticator_webauthn: prefer Biometrics over security key
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-21 16:52:14 +01:00
bb9fbb55b6
core: use a single column for flow executor flow
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-21 14:53:02 +01:00
c834f0a372
stages/authenticator_webauthn: explicitly allow cross-platform devices for iOS/safari
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-21 00:10:07 +01:00
43f19f78bb
providers/oauth2: fix error when redirecting from an authorization error
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-20 22:06:45 +01:00
3d45956f15
web: fix display of scopes
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-20 19:05:10 +01:00
fb20ae7e1a
web: sort users by last_login
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-20 18:39:12 +01:00
4c49209f71
core: add user metrics API
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-20 17:30:01 +01:00
45a397bd77
web: fix card titles
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-20 15:38:09 +01:00
fe054136b1
website: add comparison based on vector.dev's site
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 22:09:54 +01:00
d82dfc65b7
api: replace rest_framework browser with rapi-doc
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 20:35:12 +01:00
080282a0bc
events: add better filters to event API
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 18:11:38 +01:00
8242c139c2
events: use ExpiringModel with delta of 1 year for events
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 17:10:59 +01:00
5b4c5d0f31
stages/consent: add API to get user's given consent
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 16:07:33 +01:00
9ad10863de
providers/oauth2: add API for auth codes and refresh tokens
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 15:59:38 +01:00
14f2522c3e
events: improve logging for geoip
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 15:16:43 +01:00
01fc63fc98
web: set document title on navigation
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 14:48:02 +01:00
a57d524273
flows: add API for flow export
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 14:36:00 +01:00
93bd95436f
admin: remove user enable/disable views
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 13:09:00 +01:00
db9aa5d9dc
admin: remove delete views
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 12:40:28 +01:00
dae60b5a08
*: replace ReadOnlyModelViewSet with List/Retrieve/Delete viewsets
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 12:11:07 +01:00
ac78e3e2ec
root: further cleanup in asgi logger
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 01:27:52 +01:00
77a484e698
stages/*: fix warning for user settings API
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 01:11:13 +01:00
f1f706dd0d
web: migrate user settings to SPA
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 01:03:07 +01:00
a6123cfbe4
flows: add API for user's stage settings
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 00:33:12 +01:00
07142cab8b
core: add API for user source settings
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-18 00:32:40 +01:00
ef58020fd4
web: move MessageContainer to document
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-17 22:23:24 +01:00
a8d411a77b
outposts: fix integration test failing occasionally
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-17 22:02:13 +01:00
5f6f5dbfc4
web: revert to use full pf in skeleton to improve FMP
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-17 21:20:47 +01:00
14d990df7f
web: replace pf-icon-arrow
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-17 19:51:52 +01:00
5b0d875a42
admin: re-add property-mapping test template
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-17 19:28:45 +01:00
c70f6e3122
events: fix Schema for query params for top_per_user
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-17 18:33:12 +01:00
56260cd23f
root: fix concurrency logging issues
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-17 18:20:00 +01:00
4b33971155
release: 2021.3.4
2021-03-16 19:17:50 +01:00
e45bc3834a
web: use ShadowDom for all elements, embed smaller CSS in skeleton
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-16 17:24:02 +01:00
07ca82e599
admin: include git build hash in gh-* tags and show build hash in admin overview
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-16 14:42:01 +01:00
9d339d8b11
policies: fix error when clearing policy cache when no policies are cached
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-13 21:10:13 +01:00
4e86aa3f59
sources/oauth: fix error on user enrollment when no enrollment flow is defined
...
fixes #636
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-13 21:08:31 +01:00
e67f235a9f
website: add docs for compose configuration options
2021-03-12 16:43:31 +01:00
d99451b45c
outposts: improve logs for outpost connection
2021-03-11 17:50:57 +01:00
f8dc32b387
events: don't fail on boot when geoip can't be opened
2021-03-11 16:38:14 +01:00
e0298141cf
web: backport fix: add missing background filter
...
# Conflicts:
# authentik/core/templates/login/base_full.html
2021-03-10 23:23:25 +01:00
d5de12b69e
release: 2021.3.3
2021-03-09 18:03:53 +01:00
34a3d81eff
stages/authenticator_*: add API for authenticator devices
2021-03-09 10:38:07 +01:00
d150851ff5
root: fix date settings
2021-03-08 15:24:11 +01:00
ff276fcc58
web: fix layout for search
2021-03-08 12:55:13 +01:00
2852fa3c5e
web: use generated API Client ( #616 )
...
* api: fix types for config API
* api: remove broken swagger UI
* admin: re-fix system task enum
* events: make event optional
* events: fix Schema for notification transport test
* flows: use APIView for Flow Executor
* core: fix schema for Metrics APIs
* web: rewrite to use generated API client
* web: generate API Client in CI
* admin: use x_cord and y_cord to prevent yaml issues
* events: fix linting errors
* web: don't lint generated code
* core: fix fields not being required in TypeSerializer
* flows: fix missing permission_classes
* web: cleanup
* web: fix rendering of graph on Overview page
* web: cleanup imports
* core: fix missing background image filter
* flows: fix flows not advancing properly
* stages/*: fix warnings during get_challenge
* web: send Flow response as JSON instead of FormData
* web: fix styles for horizontal tabs
* web: add base chart class and custom chart for application view
* root: generate ts client for e2e tests
* web: don't attempt to connect to websocket in selenium tests
* web: fix UserTokenList not being included in the build
* web: fix styling for static token list
* web: fix CSRF Token missing
* stages/authenticator_static: fix error when disable static tokens
* core: fix display issue when updating user info
* web: fix Flow executor not showing spinner when redirecting
2021-03-08 11:14:00 +01:00
3f0e4bb654
stages/authenticator_static: fix error when disable static tokens
2021-03-08 10:26:03 +01:00
cbc86d674d
web: fix Colours for user settings in dark mode
2021-03-06 23:00:29 +01:00
c6de4e47d7
providers/oauth2: allow protected_resource_view when method is OPTIONS
2021-03-05 16:57:37 +01:00
de4b3d6290
providers/oauth2: always set CORS headers on provider info view
2021-03-05 14:27:16 +01:00
0fe009d37c
stages/authenticator_webauthn: add missing migration
2021-03-05 14:14:37 +01:00
d53c82eee2
core: fix link on login template
2021-03-04 09:39:13 +01:00
e1e0b0cf7d
release: 2021.3.2
2021-03-04 09:33:25 +01:00
32655567da
sources/ldap: fix sync for Users without pwdLastSet
2021-03-03 22:54:05 +01:00
ff5f5f65e8
web: fix date display issue
2021-03-03 21:53:30 +01:00
32e5ebb8a3
release: 2021.3.1
2021-03-03 20:53:43 +01:00
dd31191845
Merge branch 'master' into version-2021.3
2021-03-03 20:48:02 +01:00
3319547a0e
outposts: improve error handling for kubernetes outpost
2021-03-03 20:27:38 +01:00
1a00730cdd
core: cleanup output for backup task
2021-03-03 20:11:55 +01:00
466723573c
api: fix types for config API
2021-03-03 20:05:43 +01:00
ea784d47f4
admin: fix mismatched Swagger schema
2021-03-03 17:44:47 +01:00
77d5ba2862
events: fix typo in events API
2021-03-03 16:54:59 +01:00
f4580a1097
api: remove legacy messages API as its WS only
2021-03-03 15:02:20 +01:00
c002c4b610
api: make pagination required
2021-03-03 10:37:03 +01:00
28cd08bbba
core: make user settings use vertical tabs
2021-03-03 10:05:12 +01:00
3cb0575a1e
root: fix swagger pagination not matching API
2021-03-03 09:28:22 +01:00
e2a771bdaa
docs: update screenshot in captcha stage
2021-03-02 22:25:00 +01:00
23de9df2a5
stages/authenticator_validate: cleanup
2021-03-02 22:20:54 +01:00
d420719649
release: 2021.3.1-rc2
2021-03-02 21:41:30 +01:00
0018fbacd3
Merge branch 'master' into version-2021.3
...
# Conflicts:
# web/src/constants.ts
2021-03-02 21:39:30 +01:00
8c41d2f4cb
stages/authenticator_webauthn: add views to update and delete devices
2021-03-02 21:26:31 +01:00
dc4a7c35da
core: fix errors on user token views
2021-03-02 21:16:03 +01:00
e8c9b70ae8
sources/ldap: check pwdLastSet when syncing Users
2021-03-02 21:05:02 +01:00
74d240dfd4
admin: use spinner-button for modal forms
2021-03-02 20:37:23 +01:00
373793ce9a
policies: show more information when provider fails to resolve application
2021-03-02 16:58:55 +01:00
792fa45dca
providers/oauth2: add logout URL to Setup URLs API
2021-03-02 15:11:18 +01:00
743aaea15e
policies: improve logging
2021-03-02 15:04:31 +01:00
38d9533afd
root: update screenshots
2021-03-02 12:15:32 +01:00
7538af5e09
docs: fix download links for compose
2021-03-02 10:07:46 +01:00
2e659c1ab0
release: 2021.3.1-rc1
2021-03-02 09:41:09 +01:00
7fb95dfabf
stages/password: improve logging
2021-03-02 09:40:32 +01:00
83cc5d24f2
stages/password: improve logging
2021-03-02 09:30:29 +01:00
3045cf1aef
web: make user password-reset button use action button
2021-03-01 20:41:54 +01:00
c65b2944b3
stages/reputation: add API for user and IP Score
2021-03-01 20:22:37 +01:00
2ae5a81c15
stages/deny: add deny stage
2021-03-01 20:16:54 +01:00
ed8b78600e
stages/authenticator_validate: add configuration stage to configure Authenticator
2021-03-01 19:23:59 +01:00
644a03e40e
lib: don't order_by on widget because PolicyBindingModel, order in form
2021-03-01 19:23:09 +01:00
88ce93ab04
policies: fix tests creating policies with empty names
2021-03-01 19:22:35 +01:00
03d38557e5
stages/*: simplify __str__ of classes
2021-03-01 18:30:47 +01:00
37b59bb5b9
lib: sort GroupedModelChoiceField by name
...
closes #602
2021-03-01 18:30:27 +01:00
ce7aae16c9
stages/password: fix ?next param for password change
2021-03-01 17:17:44 +01:00
fd9ba97479
core: remove source's ui_additional_info
2021-03-01 16:57:51 +01:00
ca4ead8fd8
events: fix event creation with anonymous user
2021-03-01 12:04:27 +01:00
a81f981471
lib: fix being unable to set authentik. options
2021-03-01 11:11:00 +01:00
d6fd2b0afa
sources/saml: add Metadata API
2021-03-01 10:50:45 +01:00
1149a8d9a4
flows: fix tests for diagram
2021-02-28 11:01:34 +01:00
9b3e94c7c8
flows: fix flow diagram showing policy after stage and not before
2021-02-28 10:28:37 +01:00
7f65ae3f92
Merge branch 'master' into stage-challenge
...
# Conflicts:
# web/package-lock.json
2021-02-28 00:47:18 +01:00
0958740b51
providers/saml: fix Autosubmit Challenge
2021-02-28 00:09:08 +01:00
05a5b5b675
stages/prompt: fix fields not being sorted correctly
2021-02-27 21:03:57 +01:00
ffcf064f83
Merge branch 'version-2021.2'
...
# Conflicts:
# authentik/policies/group_membership/forms.py
# web/package.json
# web/src/constants.ts
# web/src/elements/buttons/TokenCopyButton.ts
2021-02-27 18:29:30 +01:00
5725e54334
release: 2021.2.6-stable
2021-02-27 18:16:46 +01:00
c20856ca17
web: fix colourstyles not being included in common_styles
...
# Conflicts:
# authentik/events/geo.py
# web/src/elements/buttons/TokenCopyButton.ts
2021-02-27 18:16:32 +01:00
402afa1e85
Merge branch 'master' into stage-challenge
...
# Conflicts:
# web/src/elements/buttons/SpinnerButton.ts
2021-02-27 18:10:08 +01:00
5b4e75000b
web: fix colourstyles not being included in common_styles
2021-02-27 17:38:21 +01:00
fe290aa214
sources/ldap: fix password setter on users which are not LDAP
2021-02-27 17:04:16 +01:00
a2e69bd250
sources/ldap: fix API error when source has not synced yet
2021-02-27 17:04:16 +01:00
d2a35eb8de
admin: fix missing success_url for clean views
2021-02-27 17:04:16 +01:00
3437d8b4b0
flows: handle error when app cannot be found during import
2021-02-27 17:04:16 +01:00
b862bf4284
providers/oauth2: fix error when no login event could be found
2021-02-27 17:04:16 +01:00
de22a367b1
events: fix error when event can't be loaded into rule task
2021-02-27 17:04:15 +01:00
17ab895652
flows: fix glob pattern for doc flows
2021-02-27 17:04:06 +01:00
a4d5815e1b
policies: sort groups in groupmembership policy and binding
...
closes #595
# Conflicts:
# authentik/policies/group_membership/forms.py
2021-02-27 17:02:34 +01:00
4cbfaaa72b
sources/ldap: fix password setter on users which are not LDAP
2021-02-27 16:49:59 +01:00
92943f08d9
sources/ldap: fix API error when source has not synced yet
2021-02-27 16:29:36 +01:00
10ef1c7e93
admin: fix missing success_url for clean views
2021-02-27 16:27:42 +01:00
02c762c268
flows: handle error when app cannot be found during import
2021-02-27 16:26:06 +01:00
d2dfc6d63b
Merge branch 'master' into stage-challenge
2021-02-27 16:04:57 +01:00
a18240fcd7
providers/oauth2: fix error when no login event could be found
2021-02-27 16:02:07 +01:00
9af1d6f63b
events: fix error when event can't be loaded into rule task
2021-02-27 15:22:43 +01:00
e94abfc986
flows: fix glob pattern for doc flows
2021-02-27 13:23:16 +01:00
5c652c1f79
policies: sort groups in groupmembership policy and binding
...
closes #595
2021-02-27 13:19:38 +01:00
c62ef4ae81
stages/identification: don't pass entire application
2021-02-26 16:44:45 +01:00
3df81ca6f0
root: don't use failfast
2021-02-26 15:39:50 +01:00
2335ccddaa
root: add fallback URL for websocket
2021-02-26 15:12:58 +01:00
477e30f542
core: fix path for blank avatar when avatars are disabled
2021-02-26 15:07:30 +01:00
7bf3d7e10a
Merge branch 'master' into stage-challenge
...
# Conflicts:
# Pipfile.lock
2021-02-26 12:02:49 +01:00
1bef659b10
stages/captcha: remove dependency on captcha app
2021-02-26 10:13:58 +01:00
fbf2fe2404
stages/authenticator_validate: fix webauthn validation
2021-02-25 21:00:32 +01:00
b968adffc1
stages/authenticator_totp: fix error when disabling device
2021-02-25 21:00:18 +01:00
4e2c686db1
Merge branch 'master' into stage-challenge
...
# Conflicts:
# Pipfile.lock
2021-02-25 20:13:17 +01:00
9e6a7bf16b
stages/captcha: migrated to SPA
2021-02-25 19:58:38 +01:00
890e0e9054
*: remove unused templates and code, move avatar to User model
2021-02-25 19:58:23 +01:00
cf7e7c44ff
stages/password: fix recovery link not being shown in SPA
2021-02-25 15:09:48 +01:00
0f169f176d
stages/authenticator_validate: implement validation, add button to go back to device picker
2021-02-25 12:07:32 +01:00
007676b400
stages/authenticator_validate: fix post from code form
2021-02-24 20:39:39 +01:00
5977c09b05
Merge branch 'version-2021.2'
...
# Conflicts:
# authentik/admin/templates/administration/policy/list.html
# web/src/pages/outposts/OutpostListPage.ts
2021-02-24 10:20:48 +01:00
e81d3dad3e
release: 2021.2.5-stable
2021-02-24 09:54:06 +01:00
5aabaebd96
root: fix request_id not being logged for actual asgi requests
2021-02-24 09:45:52 +01:00
c1caf84d92
events: fix user QuerySet being passed
2021-02-24 09:44:05 +01:00
86c069fe64
admin: fix policy list not having a refresh button
2021-02-24 09:43:57 +01:00
ce0140ef67
events: pass Event's user to Notification policy engine when present
2021-02-24 09:43:50 +01:00
bba43c5109
sources/oauth: fix buttons not being ak-root-link
2021-02-24 09:23:44 +01:00
9049593ff5
sources/oauth: fix buttons not being ak-root-link
2021-02-24 09:23:19 +01:00
3cdb81c5ba
stages/authenticator_validate: create challenge per device, implement class switcher
2021-02-23 23:43:13 +01:00
e8259791f0
stages/authenticator_webauthn: fix rp_id and origin generation
2021-02-23 23:39:00 +01:00
55af786852
Merge branch 'master' into stage-challenge
2021-02-23 23:17:03 +01:00
7101c7987c
Merge branch 'version-2021.2'
2021-02-23 23:02:05 +01:00
bd48955f39
release: 2021.2.4-stable
2021-02-23 23:00:43 +01:00
53adcd9157
core: fix user-settings not loading sources
2021-02-23 22:55:08 +01:00
c5a2bb8914
admin: fix success_urls
2021-02-23 22:55:01 +01:00
66e5958283
core: fix user-settings not loading sources
2021-02-23 22:53:17 +01:00
9db445c3ee
admin: fix success_urls
2021-02-23 22:53:05 +01:00
8878fac4e7
stages/authenticator_validate: send challenge for each device
2021-02-23 18:25:58 +01:00
3894895d32
stages/authenticator_validate: start rewrite to SPA
2021-02-23 13:50:47 +01:00
451c117ea4
stages/authenticator_webauthn: fix incorrect response being sent
2021-02-22 19:54:05 +01:00
5904070bb2
flows: add ensure_csrf_cookie() to flow shell view
2021-02-22 18:42:15 +01:00
217595bb01
tests: start fixing selenium tests
2021-02-21 23:39:02 +01:00
20e0fe3941
web: move ak-form-element to separate file
2021-02-21 23:09:08 +01:00
fb9880bff4
web: add loading animation to flowexecutor
2021-02-21 22:01:35 +01:00
76c572cf7c
stages/authenticator_webauthn: migrate to SPA
2021-02-21 20:53:23 +01:00
0904fea109
flows: fix migration for e2e tests
2021-02-21 20:47:23 +01:00
6df89e7abf
stages/authenticator_static: migrate to SPA
2021-02-21 19:34:49 +01:00
21afda6dc2
stages/authenticator_totp: migrate to SPA
2021-02-21 19:10:50 +01:00
dc680a3385
flows: set pending_user in ChallengeStageView
2021-02-21 18:58:08 +01:00
88e5b22d16
flows: add get_pending_user() for WithUserInfoChallenge
2021-02-21 18:35:21 +01:00
27cd10e072
stages/prompt: migrate to SPA
2021-02-21 18:27:34 +01:00
d35f524865
core: remove old templates
2021-02-21 14:59:37 +01:00
ca223fa4df
providers/saml: migrate to challenge for submit
2021-02-21 14:36:22 +01:00
14962eb6cc
stages/email: migrate to SPA
2021-02-21 13:42:55 +01:00
b9f409d6d9
stages/consent: migrate to SPA
2021-02-21 13:15:45 +01:00
a8681ac88f
root: fix typo
2021-02-21 00:22:14 +01:00
c1e6786ea1
stages/password: Migrate to SPA
2021-02-21 00:14:42 +01:00
1c8d101fc3
stages/identification: remove templates
2021-02-20 23:47:18 +01:00
7a9140bdcd
core: move UILoginButtonSerializer into core
2021-02-20 23:42:35 +01:00
511f94fc7f
*: cleanup code, return errors in challenge_invalid, fixup rendering
2021-02-20 23:34:10 +01:00
548b1ead2f
flows: challenge error response in challenge format
2021-02-20 20:28:57 +01:00
33f67140f2
stages/identification: move user validation to serializer
2021-02-20 20:16:20 +01:00
e0ae92ccc7
stages/*: update tests for new response
2021-02-20 19:41:48 +01:00
bdb86d7119
*: replace shortcuts.reverse with urls.reverse
2021-02-20 19:13:50 +01:00
a1a3d316e3
stages/identification: implement challenge
2021-02-20 18:28:11 +01:00
0e975757b8
core: remove UILoginButton's icon_path
2021-02-20 18:26:43 +01:00
391ee10cb8
Merge branch 'master' into stage-challenge
...
# Conflicts:
# authentik/api/v2/urls.py
2021-02-20 12:51:10 +01:00
dde303f13a
admin: remove dead code
2021-02-20 00:27:22 +01:00
264c678eaa
web: migrate user token list to web
2021-02-20 00:20:01 +01:00
854d94056e
web: migrate remaining list views to web
2021-02-20 00:19:53 +01:00
9d4c22c706
web: show header while loading application info
2021-02-19 23:34:06 +01:00
9b12895fab
admin: remove unneeded code
2021-02-19 19:32:46 +01:00
93478a55d7
web: migrate Stage List to web
2021-02-19 19:29:17 +01:00
a76cbf8b70
flows: separate flows api into smaller files
2021-02-19 19:14:16 +01:00
6597d5bd28
web: migrate Token List to web
2021-02-19 19:09:30 +01:00
fd28f37c0d
web: migrate User list to web
2021-02-19 18:43:57 +01:00
d219f65e7a
web: migrate System Task list to web
2021-02-19 18:12:23 +01:00
865f652476
web: migrate Outpost Service Connection to web
2021-02-19 17:49:34 +01:00
8008918d8b
admin: remove PolicyBinding list
2021-02-19 17:37:19 +01:00
75d0bd01c2
admin: remove StageBinding list
2021-02-19 17:19:48 +01:00
029c6cd182
web: migrate Group list to web
2021-02-19 17:18:09 +01:00
71f771c22c
core: add types API to propertymapping
2021-02-19 17:10:30 +01:00
38bd05867d
web: migrate Policy list to web
2021-02-19 17:05:02 +01:00
79089d8981
policies: add bound count to api
2021-02-19 16:53:30 +01:00
47bde052ca
policies: add types action to policy API, use MetaNameSerializer
2021-02-19 16:34:33 +01:00
bd6a473d4f
flows: add cached as action to flow API
2021-02-19 16:34:12 +01:00
277b4336d3
stages/authenticator_validate: update autocomplete for code input
2021-02-19 16:00:59 +01:00
b229b2f40d
Merge branch 'master' into stage-challenge
...
# Conflicts:
# authentik/stages/authenticator_validate/stage.py
# authentik/stages/identification/stage.py
2021-02-18 14:04:35 +01:00
e4f0613fab
*: replace tuple and set from typing with normal
2021-02-18 13:53:57 +01:00
ecff810021
*: replace List from typing with normal list
2021-02-18 13:45:46 +01:00
fdde97cbbf
*: replace Dict from typing with normal dict
2021-02-18 13:41:03 +01:00
eb01b42425
flows: mount executor under api, implement initial challenge design
2021-02-17 23:52:49 +01:00
8708e487ae
stages: add WebAuthn stage ( #550 )
...
* core: add User.uid for globally unique user ID
* admin: fix ?next for Flow list
* stages: add initial webauthn implementation
* web: add ak-flow-submit event to submit flow stage
* web: show error message for webauthn registration
* admin: fix next param not redirecting correctly
* stages/webauthn: remove form
* stages/webauthn: add API
* web: update flow diagram on ak-refresh
* stages/webauthn: add initial authentication
* stages/webauthn: initial authentication implementation
* web: cleanup webauthn utils
* stages: rename otp_* to authenticator and move webauthn to authenticator
* docs: fix broken links
* stages/authenticator_*: fix template paths
* stages/authenticator_validate: add device classes
* stages/authenticator_webauthn: implement django_otp.devices
* stages/authenticator_*: update default stage names
* web: add button to create stage on flow page
* web: don't minify HTML, remove nbsp
* admin: fix typo in stage list
* stages/*: use common base class for stage serializer
* stages/authenticator_*: create default objects after rename
* tests/e2e: adjust stage order
2021-02-17 20:49:58 +01:00
4cfcc48b23
admin: migrate certificate-keypair list to web
2021-02-16 23:16:52 +01:00
60c244c31d
core: add User.uid for globally unique user ID
2021-02-16 23:04:48 +01:00
69e6221906
web: port flow list
2021-02-16 22:52:54 +01:00
68eefd083e
web: fix linting errors
2021-02-16 22:35:55 +01:00
a647917074
providers/saml: use redirect binding first
2021-02-16 21:35:19 +01:00
099197ba8c
providers/saml: fix AuthnRequestsSigned and WantAssertionsSigned not loaded correctly
2021-02-16 21:30:15 +01:00
baa2ed5ecc
web: fix download button for SAML Metadata download
2021-02-16 21:04:03 +01:00
f8ba623fc1
web: add more related links, add policy/user/group support for bindings
2021-02-16 20:52:59 +01:00
6bcdf36ca6
admin: add ?provider for ApplicationCreateView
2021-02-16 20:00:52 +01:00
0b75a0028b
providers/saml: fix error when getting metadata of provider with no application
2021-02-16 19:58:04 +01:00
0901d7461e
providers/saml: fix redirect error
2021-02-16 19:28:18 +01:00
61772b75ff
providers/saml: fix managed mappings not being set on import
2021-02-16 19:20:52 +01:00
61604adf9a
root: fix request_id not being logged for actual asgi requests
2021-02-16 19:14:08 +01:00
5ae030997a
providers/saml: fix missing import
2021-02-15 09:25:22 +01:00
35e8a0c374
admin: fix ?next for Flow list
2021-02-14 18:39:36 +01:00
bbd088a957
events: fix geoip case when not configured
2021-02-12 10:43:00 +01:00
5417d0a90c
*: bump pyright version
2021-02-12 10:19:38 +01:00
417b5d61a4
root: add initial geoip implementation
2021-02-12 09:52:14 +01:00
e550216f85
events: fix user QuerySet being passed
2021-02-11 23:36:22 +01:00
1afb4a7a76
policies: add ability to directly assign groups in bindings
2021-02-11 20:36:48 +01:00
391eb9d469
admin: fix policy list not having a refresh button
2021-02-11 20:17:45 +01:00
494f094fa1
events: pass Event's user to Notification policy engine when present
2021-02-11 19:56:39 +01:00
aa0f5df218
policies/*: cleanup api and forms, use correct inheritance
2021-02-11 19:50:02 +01:00
7da90ff7e4
release: 2021.2.3-stable
2021-02-10 20:47:33 +01:00
61b5714652
docs: update release notes
2021-02-10 20:47:06 +01:00
d2df426489
core: fix tokens using wrong lookup
2021-02-10 20:32:54 +01:00
a367d8515f
core: add source endpoint
2021-02-10 20:12:07 +01:00
2b7a22a29a
core: add providers/types endpoint
2021-02-10 20:11:54 +01:00
c621f62d92
release: 2021.2.2-stable
2021-02-10 13:33:23 +01:00
d15e50025c
root: log runtime in milliseconds
2021-02-09 23:33:25 +01:00
0af66a26ab
crypto: move certificate and key data to separate api calls to create events
2021-02-09 21:47:00 +01:00
bf754369d9
providers/proxy: fix certificates without key being selectable
2021-02-09 21:11:44 +01:00
02dc112f8f
outposts: fix ProxyProvider update not triggering outpost update
2021-02-09 20:59:39 +01:00
2d4e7ebab5
admin: remove unnecessary success_urls
2021-02-09 20:58:46 +01:00
a7d0a50859
events: rename context.token to context.secret
2021-02-09 20:10:43 +01:00
71c9108f89
events: rename token_view to secret_view
2021-02-09 18:20:28 +01:00
45f1d95bf9
sources/oauth: add callback URL to api
2021-02-09 16:58:19 +01:00
5dab198c47
web: add new sources view
2021-02-09 16:24:27 +01:00
ad91abe9de
admin: remove old sources view
2021-02-09 16:17:48 +01:00
fa30755241
web: make ActionButton's method configurable
2021-02-09 16:14:51 +01:00
552f8c6a9a
sources/*: switch API to use slug in URL
2021-02-09 16:08:30 +01:00
2acdcf74e1
sources/ldap: add API for sync status
2021-02-09 10:21:59 +01:00
52016e0806
policies: skip cache on debug request
2021-02-08 22:14:23 +01:00
e555bdd42b
lib: fix stacktrace for general expressions
2021-02-08 22:14:13 +01:00
b3bd979ecd
release: 2021.2.1-stable
2021-02-08 21:34:05 +01:00
db113c5e8f
Merge branch 'master' into version-2021.2
2021-02-08 21:33:58 +01:00
78bcb90a1e
outposts: ensure Outpost API is backwards compatible
2021-02-08 19:51:46 +01:00
43bab840ec
web: fix sidebar being active when stage prompts is selected
2021-02-08 19:08:39 +01:00
f020b79384
admin: remove old code
2021-02-08 19:07:25 +01:00
820f658b49
web: add outpost list page
2021-02-08 19:04:19 +01:00
5d460a2537
admin: remove outposts list
2021-02-08 19:02:39 +01:00
efc46f52e6
outposts: move health to API
2021-02-08 19:01:10 +01:00
fe4b2d1a34
providers/oauth2: add authorized scopes to AUTHORIZE_APPLICATION event
2021-02-08 11:51:38 +01:00
f8abe3e210
providers/oauth2: add unofficial groups attribute to default profile claim
2021-02-08 11:50:26 +01:00
3ced67b151
sources/*: simplify source api
2021-02-08 10:25:59 +01:00
cd5631ec76
admin: fix link in source list
2021-02-08 10:25:59 +01:00
1e934aa5d5
release: 2021.2.1-rc2
2021-02-07 19:04:43 +01:00
Jens Langhammer
Jens L