trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
6226 commits 95 branches 330 tags 336 MiB
Commit graph

355 commits

Author SHA1 Message Date
Jens Langhammer 9c9bcb7a01 Merge branch 'version-2021.7' 2021-08-01 19:23:22 +02:00
Jens Langhammer add7a80fdc release: 2021.7.2 2021-08-01 19:11:50 +02:00
Jens Langhammer 75fec19079 website/docs: add note for nginx header size 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-01 18:22:50 +02:00
Jens Langhammer b7bfb93928 website/docs: update 2021.7.2 changelog again 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-01 15:24:59 +02:00
Jens Langhammer a64dbc94c1 website/docs: update 2021.7.2 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-01 13:24:04 +02:00
Jens Langhammer 9665e33156 website/docs: add note for invitation via prompt 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-01 13:07:50 +02:00
Jens Langhammer f5dc8c045e website/docs: prepare 2021.7.2 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-01 12:37:56 +02:00
Jens Langhammer 1e1f17aceb website/docs: add example Email template 
closes #1204

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-01 12:32:13 +02:00
Jens Langhammer c9fe28dad7 website/docs: add usage for invitation stage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-31 14:14:10 +02:00
Jens Langhammer 55a5300bd2 website/docs: add notice for psql password length 
closes #1184

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-30 09:52:18 +02:00
Jens Langhammer e6b515e3f7 release: 2021.7.1 2021-07-27 10:35:45 +02:00
Jens Langhammer 3041a30193 release: 2021.7.1-rc2 2021-07-24 18:32:05 +02:00
Jens Langhammer a745022f06 website/docs: prepare 2021.7.1-rc2 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-23 21:30:15 +02:00
Jens Langhammer f6e1bfdfc8 outpost: fix 100% CPU Usage when not connected to websocket 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-23 18:57:26 +02:00
Jens Langhammer d16c24fd53 website/docs: clear up outpost uuids 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-23 16:07:47 +02:00
Jens Langhammer 285a9b8b1d website/docs: remove duplicate proxy docs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-22 10:48:10 +02:00
Jens Langhammer 39ad9d7c9d release: 2021.7.1-rc1 2021-07-21 10:44:40 +02:00
Jens Langhammer 20d09c14b2 website/docs: add 2021.7 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-21 09:41:49 +02:00
Toboshii Nakama efa09d5e1d
providers/ldap: fix: Return user DN with virtual group (#1142) 
* fix: incorrect ldap virtual group member DN

Signed-off-by: Toboshii Nakama <toboshii@gmail.com>

* fix: imports

Signed-off-by: Toboshii Nakama <toboshii@gmail.com>
 2021-07-14 10:59:40 +00:00
Lukas Söder 7f39399c32
providers/ldap: Added auto-generated uidNumber and guidNumber generated attributes for use with SSSD and similar software. (#1138) 
* Added auto-generated uidNumber and guidNumber generated attributes for
use with SSSD and similar software.

The starting number for uid/gid can be configured iva environtment
variables and is by default 2000 which should work fine for most instances unless there are more than
999 local accounts on the server/computer.

The uidNumber is just the users Pk + the starting number.
The guidNumber is calculated by the last couple of bytes in the uuid of
the group + the starting number, this should have a low enough chance
for collisions that it's going to be fine for most use cases.

I have not added any interface stuff for configuring the environment variables as I couldn't really find my way around all the places I'd have to edit to add it and the default values should in my opinion be fine for 99% use cases.

* Add a 'fake' primary group for each user

* First attempt att adding config to interface

* Updated API to support new fields

* Refactor code, update documentation and remove obsolete comment

Simplify `GetRIDForGroup`, was a bit overcomplicated before.

Add an additional class/struct `LDAPGroup` which is the new argument
for `pi.GroupEntry` and util functions to create `LDAPGroup` from api.Group and api.User

Add proper support in the interface for changing gidNumber and uidNumber starting points

* make lint-fix for the migration files
 2021-07-14 09:17:01 +02:00
Jens Langhammer 84e9748340 policies/reputation: handle cache error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-13 18:47:32 +02:00
Jens L 7dfc621ae4
LDAP Provider: TLS support (#1137) 2021-07-13 18:24:18 +02:00
Jens Langhammer 5e03b27348 website/docs: add note about logging out 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1113
 2021-07-06 14:26:11 +02:00
Jens Langhammer adc4cd9c0d release: 2021.6.4 2021-07-05 16:59:29 +02:00
Jens Langhammer df92111296 outposts: update outpost permissions on m2m change 
closes #1105

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-04 19:37:12 +02:00
Jens Langhammer 7f32355e3e website/docs: update release notes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-04 13:49:38 +02:00
Jens Langhammer becb9e34b5 outposts: fix docker controller not checking env correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-03 22:17:29 +02:00
Jens Langhammer 3e5dfcbd0f website/docs: add release notes for 2021.6.4 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-03 21:29:52 +02:00
Jens Langhammer ae7a6e2fd6 website/docs: fix gitab saml binding 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-03 19:02:47 +02:00
Jens Langhammer 72846f0ae1 website/docs: update system requirements 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-03 15:11:40 +02:00
Jens Langhammer 9df16a9ae0 website/docs: update gitlab docs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-02 21:17:16 +02:00
Jens Langhammer ade8644da6 outposts/ldap: add support for boolean fields in ldap 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-01 11:51:07 +02:00
Jens Langhammer 775e0ef2fa website/docs: improve docs for restore in k8s 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-30 19:07:11 +02:00
Jens Langhammer 1e6c081e5c website/docs: update forward_auth for nginx config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-29 20:32:49 +02:00
Jens Langhammer 680b182d95 release: 2021.6.3 2021-06-29 16:19:07 +02:00
Jens Langhammer c19da839b1 stages/user_write: add create_users_as_inactive flag 
close #1086

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-28 23:24:54 +02:00
Jens Langhammer 94300492e7 website/docs: update release notes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-28 20:27:22 +02:00
Jens Langhammer fe069c5e55 website/docs: fix use of escaped_request_uri in standalone nginx 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-28 19:51:55 +02:00
Jens Langhammer 0403f6d373 web/admin: add flow export button on flow view page 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-26 22:03:19 +02:00
Toby Higginbotham e3f7185564
website/docs: Added setting for SP name ID format (#1072) 2021-06-23 18:02:49 +02:00
Jens Langhammer 8cb5f8fbee Merge branch 'version-2021.6' 2021-06-22 23:58:54 +02:00
Jens Langhammer 31a58e2c25 release: 2021.6.2 2021-06-22 23:35:10 +02:00
Jens Langhammer fad5b09aee website/docs: add release notes for 2021.6.2 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-22 23:18:05 +02:00
Ernie 2a670afd02
Break down Sources into individual sections in Docs (#1052) 
* Create index.mdx

Add Wekan example

* updated to include wekan entry

* Update and rename website/docs/sources.md to website/docs/sources/index.md

Break Sources into individual pages.

* Update and rename website/docs/sources/index.md to website/docs/sources/ldap/index.md

* Create index.md

* Update index.md

* Update index.md

* Create index.md

* Create index.md

* Create index.md

* Update index.md

* Update index.md

* Update index.md

* Create index.md

* discord images

* spacing

* Added discord

* discord changes

* Added sources breakdown to the sidebar

* Fixed the saml title

* Added github examples

* fixed formatting

* Changed file path, updated sidebar, added google.

* fixed a spelling mistake

* Cleaned up formatting

* Fixed Notes
 2021-06-22 21:46:44 +02:00
Jens Langhammer a81c847392 website/docs: fix call to group_attributes for nextcloud 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-22 13:00:48 +02:00
Jens Langhammer c6ede78fba core: add support for custom urls for avatars 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-22 12:25:24 +02:00
Jens Langhammer de954250e5 root: make general cache timeouts configurable 
closes #974

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-21 10:18:49 +02:00
Jens Langhammer ede072889e core: deepmerge user.group_attributes, use group_attributes for user settings 
closes #1051

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-19 19:52:55 +02:00
Jens Langhammer b88eb430c1 outposts/proxy: fix additionalHeaders not being set 
closes #1050

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-19 15:24:51 +02:00
Jens Langhammer 932cf48d2b website/docs: remove old branding settings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-18 09:10:19 +02:00
Jens Langhammer 35f2c5d96a website/docs: add release notes for 2021.6 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-17 22:52:39 +02:00
Jens Langhammer fe6963c428 release: 2021.6.1 2021-06-17 22:14:52 +02:00
Ernie 8962081d92
website/docs: add wekan (#1032) 
* Create index.mdx

Add Wekan example

* updated to include wekan entry
 2021-06-16 23:08:58 +02:00
Jens Langhammer 426686957d website/docs: remove migrate command 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-16 22:43:43 +02:00
Ernie 28cb803fd9
website/docs: Add a note about Protocol Overwrite (#1031) 
Added a note in the Nextcloud section for Protocol overwrite when behind a reverse proxy
 2021-06-16 19:38:34 +02:00
Jens Langhammer d9287d0c0e Merge branch 'next' 2021-06-15 23:43:44 +02:00
Jens Langhammer 2b150d3077 website/docs: add changelog for release candidates 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-15 22:19:45 +02:00
Jens Langhammer e0f48a30b7 release: 2021.6.1-rc6 2021-06-15 21:18:33 +02:00
Jens Langhammer f10bd432b3 policies/reputation: fix race condition in tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-14 20:40:40 +02:00
Jens Langhammer 4e9be85353 website/docs: add docs for outpost configuration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-14 09:21:35 +02:00
Jens Langhammer 4167276c8f root: fix references to helm chart 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-13 14:30:44 +02:00
Jens Langhammer f10286edf8 Merge branch 'version-2021.6' into next 2021-06-12 20:43:12 +02:00
Jens Langhammer 84c21d16cf website: fix duplicate plugin ID 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-12 20:15:35 +02:00
Jens Langhammer d78fda990a release: 2021.6.1-rc5 2021-06-12 15:19:24 +02:00
Jens Langhammer e25f6aea8c release: 2021.6.1-rc4 2021-06-10 18:59:00 +02:00
Jens Langhammer 2c15ab9995 release: 2021.6.1-rc3 2021-06-10 18:04:59 +02:00
Jens Langhammer 6c985acb36 release: 2021.6.1-rc2 2021-06-10 14:10:47 +02:00
Jens Langhammer 2a881d241d Merge branch 'master' into next 2021-06-09 11:25:07 +02:00
Jens Langhammer e95b9da586 website/docs: fix beta instructions for k8s 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-09 11:07:02 +02:00
Jens Langhammer f4a53c89ef release: 2021.6.1-rc1 2021-06-09 11:01:14 +02:00
Jens L dad24c03ff
outposts: set cookies for a domain to authenticate an entire domain (#971) 
* outposts: initial cookie domain implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add cookie domain setting

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: replace forward_auth_mode with general mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: rebuild proxy provider form

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: re-add forward_auth_mode for backwards compat

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix data.mode not being set

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: always set log level to debug when testing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: use new mode attribute

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: only ingress /akprox on forward_domain

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: fix lint error

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix error on ProxyProviderForm when not using proxy mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix default for outpost form's type missing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add additional desc for proxy modes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: fix service account permissions not always being updated

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost/proxy: fix redirecting to incorrect host for domain mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: improve error handling for network errors

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: fix image naming not matching main imaeg

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/proxy: fix redirects for domain mode and traefik

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix colour for paragraphs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: fix consent stage not showing permissions correctly

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: add domain-level docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: fix broken links

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/proxy: remove dead code

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: fix missing id for #header-text

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 23:10:17 +02:00
Jens Langhammer ae8cf00a21 tests/e2e: switch to ghcr images 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 15:32:23 +02:00
Jens Langhammer 4d7dab92bc website/docs: add changelog for 2021.6 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-06 19:43:47 +02:00
Jens Langhammer 9180d448df core: move end-session to core 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-06 13:56:38 +02:00
Toby Higginbotham 7bef6f7153
Zabbix Integration Instructions (#960) 2021-06-02 23:16:52 +02:00
Jens Langhammer ebfa7c8dce website/docs: fix docs for outpost annotations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-31 23:32:17 +02:00
Jens Langhammer cef5c2b084 website/docs: add note for CSRF in hass 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-31 17:08:39 +02:00
Jens Langhammer c89b8a5f7c web/admin: add UI for reputations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 23:01:45 +02:00
Jens Langhammer d52cc30341 website/docs: fix website build 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 22:00:47 +02:00
Jens Langhammer d2e9683411 website/docs: add tenants 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 21:56:09 +02:00
Jens Langhammer a4c28a28b4 website/docs: improve docs for expressions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 21:47:35 +02:00
Jens Langhammer c4453f38a2 stages/identification: make shown sources configurable 
closes #918

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 16:37:53 +02:00
Jens Langhammer ab25610643 website/docs: add duo docs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 22:11:16 +02:00
CuBiC c98e4196bd
website/docs: ingress nginx auth headers (#916) 
Extend example how to pass through auth headers from authentik if using ingress nginx as forward auth.
 2021-05-23 22:49:31 +02:00
Jens Langhammer 0768b201a7 Merge branch 'version-2021.5' 2021-05-22 20:47:48 +02:00
Jens Langhammer 2d5c45543b release: 2021.5.4 2021-05-22 20:15:23 +02:00
Jens Langhammer 934cfa483c website/docs: add release notes for 2021.5.4 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-22 13:11:06 +02:00
Jens Langhammer 7aa903d715 website/docs: update k8s install docs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 19:02:05 +02:00
Jens Langhammer b3390f0ab4 website/docs: update nginx config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 22:06:55 +02:00
Jens Langhammer 7666c246c3 Merge branch 'version-2021.5' 2021-05-20 20:46:18 +02:00
Jens Langhammer bf4cbb25fe release: 2021.5.3 2021-05-20 20:17:39 +02:00
Jens Langhammer 13cc33c39c website/docs: add 2021.5.3 changelog 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 19:14:28 +02:00
Jens Langhammer 5a465fbc36 release: 2021.5.2 2021-05-17 19:54:10 +02:00
Jens Langhammer 23123c43ee website/docs: improve wording on release notes, point to tag for docker-compose download 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 23:08:11 +02:00
Tom Pansino 8ce918d527
website/docs: Always point to master copy of docker-compose.yml in installation instructions (#888) 2021-05-16 23:02:16 +02:00
Jens Langhammer 176360fdd7 website/docs: fix $auth_cookie not being defined in outpost docs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 22:18:31 +02:00
Jens Langhammer 2cde40aeee website/docs: add release notes for 2021.5.2 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 17:49:34 +02:00
Jens Langhammer 36b694fc41 website/docs: add example ldapsearch command 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-14 11:47:38 +02:00
Jens Langhammer 8d7bb7da17 providers/proxy: connect ingress to https instead of http 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#882
 2021-05-14 11:42:03 +02:00
Jens Langhammer 9bdd6f23a4 website/docs: add ldap example, use ghcr 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-14 11:19:09 +02:00