trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
5917 commits 95 branches 330 tags 336 MiB
Commit graph

305 commits

Author SHA1 Message Date
Jens Langhammer 17326615b7 events: rewrite GeoIP to a wrapper, reload file every 8 hours 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-06 00:42:41 +02:00
Jens Langhammer f5dbdbd48b *: add clear param to file upload API to delete stored file and reset field 
closes #949

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 21:33:03 +02:00
Jens Langhammer 277c2f4aad core: make application.meta_icon nullable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#949
 2021-06-05 21:06:52 +02:00
Jens Langhammer ba3e0a0586 core: fix flow query 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 20:30:56 +02:00
Jens Langhammer 86b450c6d1 flows: add compatibility_mode to toggle ShadyDOM 
closes #894

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 20:04:30 +02:00
Jens Langhammer 5e3628bea6 core: add fallback URLs for websocket to cleanup test logs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-03 17:26:18 +02:00
Jens Langhammer 290ebef8e3 core: instead of migrating sessions, clear cache on initial upgrade 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-03 17:20:25 +02:00
Jens Langhammer 48e68d6852 core: fix token identifier not being set to unique 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-03 11:45:48 +02:00
Jens Langhammer ed3859800c core: improve API validation for Application's set_icon_url (fix JSON Syntax Error) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-03 00:39:56 +02:00
Jens Langhammer 06b7f62a40 core: make app's meta_launch_url textfield 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-03 00:21:20 +02:00
Jens Langhammer 974ddc07f7 web: improve loading of custom favicon 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 21:19:39 +02:00
Jens Langhammer b9773d39c0 core: add tests for authenticated sessions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 14:43:00 +02:00
Jens Langhammer fc45d35699 core: add migration for sessions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 13:08:29 +02:00
Jens Langhammer 73338bdf32 core: add geo_ip to authenticated sessions if enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 01:01:20 +02:00
Jens Langhammer 059da74d1c core: add current attribute to authenticated_session API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 00:31:41 +02:00
Jens Langhammer 45b8b1e198 core: delete AuthenticatedSession on logout 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 00:27:33 +02:00
Jens Langhammer 133fc38c05 core: initial authenticated sessions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 00:15:16 +02:00
Jens Langhammer 3b31b7ce83 core: add http host in log messages 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 19:07:54 +02:00
Jens Langhammer fae8b80ceb core: fix usage of config on templates 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 18:31:05 +02:00
Jens Langhammer df92f01719 flows: remove default-recovery 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 18:30:55 +02:00
Jens Langhammer 14f85ec980 tenants: migrate context_processor to tenants 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 18:01:48 +02:00
Jens Langhammer 523621daa2 core: make application's check_access API return a PolicyResult and accept for_user as superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-26 11:47:23 +02:00
Jens L 53e2b2c784
Prometheus metrics (#914) 
* admin: add worker metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* admin: add version metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add gauge for system tasks

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: add gauge for last hello and connection status

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: re-add prometheus metrics to database

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: allow access to metrics without credentials when debug is on

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: add UpdatingGauge to auto-set value on load

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add metrics for cache and building

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* policies: add metrics for policy engine

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add histogram for task durations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: revert to gauge because values are updated on export view

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add gauge to count all models

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add metrics for events

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 20:29:34 +02:00
Jens Langhammer 1a0f72d0a8 Merge branch 'version-2021.5' into next 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	authentik/stages/authenticator_static/api.py
#	swagger.yaml
 2021-05-21 21:33:18 +02:00
Jens Langhammer a265dd54cc stages/authenticator_*: fix Permission Error when disabling Authenticator as non-superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 21:25:03 +02:00
Jens Langhammer d9a788aac8 api: rename auth to authentication, add authorization for rest_framework permission class 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-21 20:14:03 +02:00
Jens Langhammer be5a6c0310 api: add set_*_url method for Application and Flow to set icon/background to URL 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 17:18:40 +02:00
Jens Langhammer 92f2a82c03 providers/oauth2: fix double login required when prompt=login 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 01:10:08 +02:00
Jens Langhammer acf1ad91d9 providers/oauth2: fix double login required when prompt=login 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-19 23:34:27 +02:00
Jens Langhammer 3cf0f07baf *: fix API Schema for file uploads 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-17 23:12:52 +02:00
Jens Langhammer 759bf59780 core: make filefields readonly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 17:34:55 +02:00
Jens Langhammer 0bac738090 *: fix static response descriptions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 14:07:29 +02:00
Jens Langhammer 1324d03815 *: initial migration to openapi v3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 23:57:28 +02:00
Jens Langhammer 465750276c core: fix application's slug field not being set to unique 
closes #881

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-14 10:49:42 +02:00
Jens Langhammer f9f2e00913 core: improve error handling for backups 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-13 17:56:49 +02:00
Jens Langhammer 0620324702 root: bump version of psf black 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 00:42:46 +02:00
Jens Langhammer e649e9fb03 core: don't use self.get_object for application permission check to prevent 404 when view permission is missing 
closes #864

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 17:35:11 +02:00
Jens Langhammer e33a5528f7 core: catch IntegrityError in flow_manager and deny request 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 23:31:39 +02:00
Jens Langhammer dda1d4e0fb core: add more logs to flow_manager 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 20:27:37 +02:00
Jens Langhammer 55ea9afeec core: fix dark mode on server-side rendered pages 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 11:53:53 +02:00
Jens Langhammer 241d790e69 stages/user_write: if any connection is being sent in the plan context, save it to the user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 22:10:20 +02:00
Jens Langhammer 83e08f12ae core: fix arguments not being passed in FlowManager 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 22:07:48 +02:00
Jens Langhammer 6526659b51 sources/plex: allow auth for owner (when identifier of source plex token matches) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 21:50:15 +02:00
Jens Langhammer d85e0593f1 core: set attributes on users which are enrolled via source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 19:35:05 +02:00
Jens Langhammer b3a3852a54 core: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 13:58:58 +02:00
Jens Langhammer 49bf82a0a4 core: add user filter by superuser status 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 13:44:42 +02:00
Jens Langhammer 446f104c90 core: add user UID to API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 11:54:28 +02:00
Jens Langhammer 1a02049104 core: show users and groups when user has overall user permissions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 01:02:47 +02:00
Jens Langhammer d84d7c26ca Merge branch 'master' into outpost-ldap 2021-05-04 23:34:31 +02:00
Jens Langhammer 2f6e6a3123 core: improve messaging when flow manager denied request 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 23:30:21 +02:00
Jens Langhammer 99d161e212 Merge branch 'master' into outpost-ldap 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	authentik/core/api/users.py
#	authentik/policies/event_matcher/migrations/0013_alter_eventmatcherpolicy_app.py
 2021-05-04 21:02:20 +02:00
Jens Langhammer 4acbda2b77 core: improve messaging on flow_manager, authenticate user when they linked their account after not having been authenticateed 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:49:27 +02:00
Jens Langhammer 0d370ef0a9 web/admin: filter out service accounts by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 18:23:13 +02:00
Jens Langhammer 6fc38436f4 sources/plex: set better defaults on model 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 21:23:13 +02:00
Jens Langhammer 35faf269db sources: rewrite onboarding 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 20:27:52 +02:00
Jens Langhammer 55250e88e5 sources/*: rewrite UILoginButton to return challenge instead 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-02 16:46:27 +02:00
Jens Langhammer 19708bc67b core: add additional_data to UILoginButton to pass additional data 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-02 14:43:26 +02:00
Jens Langhammer b55cb2b40c Merge branch 'master' into outpost-ldap 2021-04-29 20:13:47 +02:00
Jens Langhammer bb2c4423b0 core: fix text color of error pages not being white 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-29 15:17:10 +02:00
Jens Langhammer 4d858c64e0 Merge branch 'master' into outpost-ldap 2021-04-27 17:08:26 +02:00
Jens Langhammer 776c3128b8 flows: add tests for stage type, component and ui_user_settings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 16:52:50 +02:00
Jens Langhammer 1d5958a78f providers/ldap: add search_group to limit who can do search requests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 23:25:03 +02:00
Jens Langhammer 2a122845d9 core: add groups to users 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 19:51:24 +02:00
Jens Langhammer fae4d34131 Merge branch 'master' into outpost-ldap 2021-04-26 17:11:50 +02:00
Jens Langhammer 7ff7bfeb58 core: fix incorrect styling for bse_full template 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 16:44:13 +02:00
Jens Langhammer 5fb07acf54 core: add API to check access to single application by slug 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 10:08:35 +02:00
Jens Langhammer 502ac51fa7 web: don't enable ShadyDOM on selenium 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-25 01:29:01 +02:00
Jens Langhammer 4bc6fd28d4 web/flows: include ShadyDOM, always enable ShadyDOM for flow interface 
improve compatibility with password managers and iOS

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-24 23:32:46 +02:00
Jens Langhammer 464a1c0536 api: make 401 messages clearer 
closes #755

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 20:46:57 +02:00
Jens Langhammer 14d702450a core: add parameter to output property mapping test formatted 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 18:32:36 +02:00
Jens Langhammer 8a6879afa5 core: add superuser_full_list to applications list, shows all applications when superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 16:07:30 +02:00
Jens Langhammer fdc7f14056 core: fix Tokens being created with incorrect intent by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 15:43:16 +02:00
Jens Langhammer 32c5bf04b8 *: fix linting errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 20:08:49 +02:00
Jens Langhammer 0021a93952 web/admin: fix non-matching provider type being selected when creating an OAuth Source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 19:17:08 +02:00
Jens Langhammer 67240fb9ad *: add model_name to TypeCreate API to pass to forms 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 19:12:00 +02:00
Jens Langhammer de74f3ec1f core: fix propertymapping API returning invalid value for components 
closes #746

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 11:50:28 +02:00
Jens Langhammer c5e2635903 core: improve messaging when creating a recovery link for a user when no recovery flow exists 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 10:09:46 +02:00
Jens Langhammer cd1b0c67ea web: fix text colour on initial load when not in dark mode 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-12 12:25:44 +02:00
Jens Langhammer fae92f6bc8 *: fix JSONField overwriting required 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 23:20:45 +02:00
Jens Langhammer 4f27a97e10 *: add validator to ensure JSON Fields only receive dicts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 23:05:19 +02:00
Jens Langhammer a0daaabfde web: replace full pf with components for loading animation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 22:02:48 +02:00
Jens Langhammer ea7ecb50c0 web: disable loading of roboto fonts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 21:52:01 +02:00
Jens Langhammer 8df29235bb core: add provider_obj field to applications API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 13:31:31 +02:00
Jens Langhammer d76db3caba *: add missing error codes as swagger annotations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 23:55:43 +02:00
Jens Langhammer 32d88c3a49 core: consider never consider expiring models with self.expiring set to false expired 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 23:42:42 +02:00
Jens Langhammer 34b8a97ae9 web/admin: add custom rendering for inbuilt sources 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-09 16:30:53 +02:00
Jens Langhammer 5dd29d45d8 core: make Source model managed, add inbuilt source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-09 16:20:59 +02:00
Jens Langhammer 7d0e7bcf75 core: return none when application has no launch URL and none could be guessed 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-08 22:59:11 +02:00
Jens Langhammer 4054e6da8c helm: don't automount Service token when integration is not enabled, improve k8s detection 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-07 16:16:17 +02:00
Jens Langhammer 35232afa7e core: skip backup when running in k8s and s3 backup not configured 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-07 15:34:28 +02:00
dependabot[bot] 17de0ff24e
build(deps): bump django from 3.1.7 to 3.2 (#707) 
* build(deps): bump django from 3.1.7 to 3.2

Bumps [django](https://github.com/django/django) from 3.1.7 to 3.2.
- [Release notes](https://github.com/django/django/releases)
- [Commits](https://github.com/django/django/compare/3.1.7...3.2)

Signed-off-by: dependabot[bot] <support@github.com>

* root: set DEFAULT_AUTO_FIELD and remove full app config paths

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: check parent class for component and serializer on abstract classes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-07 10:54:38 +02:00
Jens L a2a35e49a9
improved out-of-box experience (#704) 2021-04-06 20:25:22 +02:00
Jens Langhammer 16d989dbfa core: fix schema for Challenge's type enum 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-04 16:15:58 +02:00
Jens Langhammer 9517c890b5 if/*: show loading animation before full JS is loaded 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-04 16:10:08 +02:00
Jens Langhammer a7f751f3b3 web/admin: fix expression info not being localised 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 20:53:52 +02:00
Jens Langhammer e246071aac core: fix user metrics not accepting detail 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 20:33:59 +02:00
Jens Langhammer fc1caf1469 api: remove js i18n catalog 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 19:07:54 +02:00
Jens Langhammer 650b084c72 web: migrate to babel 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 18:20:17 +02:00
Jens Langhammer eeb9449c11 lib: remove templatetags 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 12:37:32 +02:00
Jens Langhammer c17eb00e3b providers/oauth2: fix component for Scope 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 12:08:21 +02:00