trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
9708 commits 95 branches 330 tags 336 MiB
Commit graph

2481 commits

Author SHA1 Message Date
Jens Langhammer 649835cc61 events: fix MonitoredTasks' save_on_success not behaving as expected 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-23 19:13:41 +02:00
Jens Langhammer 917c4ae835 ci: fix typos 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-23 18:49:23 +02:00
Jens Langhammer ca2fce8be2 blueprints: always set metadata when attempting to apply 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-23 18:48:01 +02:00
Jens Langhammer 15c34c6f1f release: 2022.8.2 2022-08-19 15:59:53 +01:00
Jens Langhammer 0ab8f4eed7 blueprints: add required password stage backends 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-19 15:59:41 +01:00
Jens Langhammer 810c04bacf blueprints: don't suggest models not inheriting serializermodel in schema 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-19 11:26:15 +01:00
Jens Langhammer 0cc83c23c4 providers/proxy: fix duplicate proxy set default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-18 21:13:45 +01:00
Jens Langhammer fdb8fb4b4c providers/oauth2: fix oauth2 requests being logged as unauthenticated 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-18 20:26:12 +02:00
Jens Langhammer 9d58407e25 blueprints: remove _state from exporter blueprints 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-18 19:25:02 +02:00
Jens Langhammer f4441c9fcf providers/proxy: trigger proxy set_defaults task on startup 
closes #3445

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-18 17:42:27 +02:00
Jens Langhammer 0e9762072a blueprints: keep more modular state 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-18 17:42:27 +02:00
Jens Langhammer 0cfffa28ad blueprints: fix exporter not ignoring non-SerializerModel objects 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-18 17:42:27 +02:00
Jens Langhammer 1ad4c8fc29 outposts: fix log level 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-18 17:42:27 +02:00
Jens Langhammer fb5eb7b868 sources/oauth: fix missing doseq param for updating URL query string 
closes #3374

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-18 14:34:20 +02:00
Jens Langhammer 198c940a80 core: fix pre-hydrated config not being escaped properly 
closes #3442

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-18 13:53:22 +02:00
Jens L 1adc6948b4
blueprints: allow for adding remote blueprints (#3435) 
* allow blueprints to be fetched from HTTP URLs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove os.path

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add validation for blueprint path

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-17 23:00:47 +02:00
Jens L e87236b285
blueprints: add generic export next to flow exporter (#3439) 2022-08-17 17:57:59 +01:00
Jens Langhammer 846b63a17b *: remove some very verbose logging messages 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-17 13:36:56 +02:00
Jens Langhammer 1281e842d1 events: fix false-y values being stripped 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-16 22:29:36 +02:00
Jens Langhammer f7601d9571 events: correctly handle lists for cleaning/sanitization 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-16 21:47:30 +02:00
Jens Langhammer 4d9c9160e7 events: fix sanitize_dict not working on list items 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-16 21:37:24 +02:00
Jens Langhammer ad1f913e54 blueprints: add wrapper to get blueprints as dict 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-16 21:37:05 +02:00
Jens Langhammer 3da0233c40 Revert "blueprints: fix issue in prod setups with encoding dataclasses via celery" 
This reverts commit ff788edd9b.
 2022-08-16 21:21:47 +02:00
Jens Langhammer ff788edd9b blueprints: fix issue in prod setups with encoding dataclasses via celery 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-16 20:59:36 +02:00
Jens Langhammer aea0958f3f blueprints: add default status 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-16 17:51:22 +02:00
Jens Langhammer 435d126a1c release: 2022.8.1 2022-08-16 16:23:36 +02:00
Jens Langhammer e8b30b75d2 root: override blueprints_dir for testing 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-16 15:50:58 +02:00
Jens Langhammer e9c1276634 blueprints: use relative path in @apply_blueprint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-16 14:20:45 +02:00
Jens Langhammer 6000a33a8e *: fix type annotations for serializer model 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-16 13:23:22 +02:00
Jens Langhammer 4c9878313c sources/oauth: correctly concatenate URLs to allow custom parameters to be included 
closes #3374

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-08 21:17:32 +02:00
Jens Langhammer 54c16129ea stages/authenticator_duo: revamp duo enroll status API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#3288
 2022-08-08 20:38:06 +02:00
Jens Langhammer 872c18dddc blueprints: don't use example label, add more tags and tests for tags 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-07 19:27:03 +02:00
Jens Langhammer 2fa6cf855d stages/consent: simplify logic, correctly update existing consent 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-07 14:38:40 +02:00
Jens Langhammer 3b86144ae5 stages/*: use stage-bound logger when possible 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-07 13:41:53 +02:00
Jens Langhammer f01f10c5e5 providers/oauth2: don't separate scopes by comma-space 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-07 13:15:12 +02:00
Jens Langhammer e1249d3760 providers/oauth2: fix scopes without descriptions not being saved in consent 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-07 13:02:47 +02:00
Jens Langhammer dcbf106daa blueprints: add !Context to lookup things from instance context 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-06 20:54:00 +02:00
Jens L 89fef0ae72
blueprints: docs (#3376) 
* further blueprint cleanup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* more

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* make group users and parent optional

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix api client usage

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-06 00:52:12 +02:00
Jens Langhammer 85640d402f internal: fix race conditions when accessing settings before bootstrap 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-06 00:24:55 +02:00
Jens L ec42d378ab
blueprints/cleanup (#3369) 2022-08-05 08:39:00 +02:00
Jens L 2ce8e18bab
internal: centralise config for listeners to use same config system everywhere (#3367) 
* centralise config for listeners to use same config system everywhere

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#3360

* add docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-03 21:33:27 +02:00
dependabot[bot] 9a9c826c0b
core: bump django from 4.0.6 to 4.1 (#3368) 
* core: bump django from 4.0.6 to 4.1

Bumps [django](https://github.com/django/django) from 4.0.6 to 4.1.
- [Release notes](https://github.com/django/django/releases)
- [Commits](https://github.com/django/django/compare/4.0.6...4.1)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-03 15:33:58 +02:00
Jens L d1004e3798
blueprints: webui (#3356) 2022-08-03 00:05:49 +02:00
Jens Langhammer 2bd29e2fdd *: improve error handling for startup tasks 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-01 23:31:47 +02:00
Jens Langhammer 3cd0a782af blueprints: correctly load on fresh install 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-01 23:25:33 +02:00
Jens L a023eee9bf
blueprints: migrate from managed (#3338) 
* test all bundled blueprints

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix empty title

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix default blueprints

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add script to generate dev config

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* migrate managed to blueprints

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add more to blueprint instance

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* migrated away from ObjectManager

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix lint errors

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* migrate things

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* migrate tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix some tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix a bit more

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix more tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* whops

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix missing name

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *sigh*

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix more tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add tasks

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* scheduled

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* run discovery on start

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* oops this test should stay

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-01 23:05:58 +02:00
Jens Langhammer 7a05c6faef stages/consent: fix error when requests with identical empty permissions 
closes #3280

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-08-01 20:58:49 +02:00
Jens L 553989d17f
flows/stages/consent: fix for post requests (#3339) 
add unique token to consent stage to ensure it is shown

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-31 23:47:40 +02:00
Jens L 89c84f10d0
blueprints: v1 (#1573) 
* managed: move flowexporter to managed

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: implement SerializerModel in all models

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* managed: add initial api

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* managed: start blueprint

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* managed: spec

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* version blueprint

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* yep

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove v2, improve v1

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* start custom tag, more rebrand

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add default flows

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* move blueprints out of website

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* try new things

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add !lookup, fix web

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update and cleanup default

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix tags in lists

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* don't save field if its set to default value

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* more flow cleanup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* format web

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix missing serializer for sms

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* ignore _set fields

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove custom file extension

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* migrate default flow to tenant

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* include blueprints

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-31 17:11:44 +02:00
Jens L 882250a85e
flows: migrate flows to be yaml (#3335) 
* flows: migrate flows to be yaml

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* migrate flows to yaml

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-30 23:55:58 +02:00
Jens Langhammer fcf4657833 providers/proxy: add is_superuser to ak_proxy object, only show full error when superuser 
closes #3314

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-30 20:29:23 +02:00
Jens L 393d7ec486
providers/proxy: no exposed urls (#3151) 
* test any callback

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* dont detect callback in per-server handler

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* use full redirect uri with both path and query param

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* correctly route to embedded outpost for callback signature

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix allowed redirects

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-30 17:51:01 +02:00
l-with b7b5168910
sources/oauth: use mailcow full_name as username for mailcow source (#3299) 
use mailcow full_name as username
 2022-07-29 20:34:17 +00:00
Jens Langhammer 1dcec17a58 sources/oauth: only send header authentication for OIDC source 
closes #3327

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-29 18:20:44 +02:00
Jens Langhammer d6b1a22563 core: fix import order 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-29 00:18:42 +02:00
Jens Langhammer cada292e00 core: pre-hydrate config into templates to directly load correct assets 
closes #3228

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-29 00:04:44 +02:00
Jens Langhammer 83eba36f8d core: add API Endpoint to get all MFA devices, add web ui to delete MFA devices of any user 
closes #3237

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-28 23:50:25 +02:00
Jens Langhammer b82a142745 stages/authenticator_sms: use twilio SDK, improve docs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#3237
 2022-07-28 22:17:59 +02:00
Jens Langhammer 2a42c203b2 stages/authenticator_totp: remove single device per user limit 
closes #3281

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-28 21:39:46 +02:00
Jens Langhammer ade2d4879c stages/authenticator_duo: fix imported Duo Device not having a name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-28 21:20:32 +02:00
Jens Langhammer e14798dcdc core: import all models into shell 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-28 21:19:04 +02:00
Jens Langhammer 0248755cda stages/authentiactor_validate: improve error handling for duo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-28 21:11:58 +02:00
Jens Langhammer 1f90359310 root: fix broken traceback logging 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-28 20:56:39 +02:00
Jens Langhammer 008fc19f0d root: fix log fields being overwritten in celery task logs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-28 20:48:05 +02:00
Jens Langhammer 277df4f04f stages/prompt: fix tests for file field 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-27 09:48:11 +02:00
Jens Langhammer de26c65fa0 core: add attributes. avatar method to allow custom uploaded avatars 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#2631
 2022-07-26 21:42:41 +02:00
dependabot[bot] bd8794f646
core: bump structlog from 21.5.0 to 22.1.0 (#3294) 
* core: bump structlog from 21.5.0 to 22.1.0

Bumps [structlog](https://github.com/hynek/structlog) from 21.5.0 to 22.1.0.
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hynek/structlog/compare/21.5.0...22.1.0)

---
updated-dependencies:
- dependency-name: structlog
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* migrate threaedlocal to contextvars

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-23 22:40:56 +02:00
Jens Langhammer 1880f98fa1 sources/oauth: fix typo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-20 19:10:26 +02:00
Jens Langhammer dae6493a3e release: 2022.7.3 2022-07-20 09:37:43 +02:00
Jens Langhammer f909b86338 stages/consent: fix permimssions for consent API (allow owner to delete) 2022-07-19 16:41:34 +00:00
Jens Langhammer 327df6529b sources/oauth: use oidc preferred_username if set, otherwise nickname 2022-07-19 16:41:10 +00:00
Jens Langhammer 658dc63c4c lifecycle: revert waiting for lock, launch managed reconcile on app import 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-19 12:06:57 +02:00
Jens Langhammer 549f6f2077 providers/oauth2: correctly log authenticated user for OAuth views using protected_resource_view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-18 22:20:09 +02:00
Jens L e9d9d658c4
lifecycle: make worker wait for migrations to be done (#3254) 
* lifecycle: make worker wait for migrations to be done

* retry managed reconcile task
 2022-07-15 19:44:45 +02:00
Jens Langhammer 9a9ba2560b core: delete expired models when filtering instead of excluding them 
closes #3233

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-09 13:40:39 +02:00
Jens Langhammer 47434cd62d stages/prompt: try to base64 decode file, fallback to keeping value as-is 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-08 22:45:31 +02:00
Jens Langhammer ff500b44a6 stages/prompt: force required to false when using readonlyfield 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-08 22:38:37 +02:00
Jens Langhammer 8e19fb3a8c release: 2022.7.2 2022-07-06 20:31:48 +02:00
Jens Langhammer d497db3010 flows: fix OOB flow incorrectly setting pending user 
closes #3224

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-06 09:51:20 +02:00
Jens Langhammer 24f95fdeaa tenants: fix tests for current tenant 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-05 23:47:49 +02:00
Jens Langhammer d1c4818724 policies: improve api test coverage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-05 23:20:48 +02:00
Jens L 49cce6a968
stages/prompt: add basic file field (#3156) 
add basic file field

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-05 23:09:41 +02:00
Jens Langhammer 0a73e7ac9f tenants: add default_locale read only field, pre-hydrate in flows and read in autodetect as first choice 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-05 23:04:25 +02:00
Jens Langhammer 3344af72c2 outposts: cleanup user handling 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-05 22:41:19 +02:00
Jens Langhammer f316a3000b release: 2022.7.1 2022-07-04 21:10:20 +02:00
Jens Langhammer 6a497b32f6 core: use Exception for fallback case in flow_manager 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-04 20:05:03 +02:00
Jens Langhammer 4cd629b5fc core: handle FlowNonApplicableException correctly in source flow_manager 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-03 22:03:03 +02:00
Jens Langhammer 14a4047bdd flows: show messages from ak_message when flow is denied 
fallback to same generic message

closes #3197

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-03 21:36:13 +02:00
Jens L 17d33f4b19
flows: denied action (#3194) 2022-07-02 17:37:57 +02:00
Jens L c39a5933e1
core: create FlowToken instead of regular token for generated recovery links (#3193) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#2749
 2022-07-02 14:17:41 +02:00
Jens L 5e3f44dd87
flows: add shortcut to redirect current flow (#3192) 2022-07-01 23:19:41 +02:00
Jens Langhammer 1c64616ebd sources/ldap: add configuration for LDAP Source ciphers 
closes #3110

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-01 19:53:49 +02:00
Jens Langhammer 23273f53cc providers/oauth2: if no scopes are sent in authorize request, select all configured scopes 
closes #3112

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-01 19:45:26 +02:00
Jens Langhammer d11ce0a86e providers/proxy: set default scopes based on managed attribute 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-01 18:26:49 +02:00
Jens Langhammer 766ceda57a core: re-create anonymous user when repairing permissions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-01 17:20:06 +02:00
Jens Langhammer e758c434ea web: ignore module load errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-01 16:49:37 +02:00
Jens Langhammer 90e3ae9457 *: define prometheus metrics in apps to prevent re-import 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-07-01 16:49:24 +02:00
Jens Langhammer 56fd436e5d web: fix redirect when accessing authentik URLs authenticated 
closes #3174

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-06-30 23:04:39 +02:00
Jens Langhammer ea60c389be providers/saml: include SSO Binding URLs in Provider API 
closes #3179

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-06-30 22:18:21 +02:00
Jens Langhammer 983882f5a0 providers/oauth2: ensure refresh tokens are URL safe 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#3185
 2022-06-30 12:43:08 +02:00