trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
7324 commits 95 branches 330 tags 336 MiB
Commit graph

1856 commits

Author SHA1 Message Date
Rizwan Ahmed e4a5e86c93 sources/oauth: Fixed the incorrect padding issue in apple.py (#1773) 
* Fixed the incorrect padding issue in apple.py

Fixed the incorrect padding issue in apple.py by adding proper padding to the raw_payload.

* Fixed the incorrect encoding of client_secret in apple.py

In the get_client_secret() method, the "sub" in the payload must be only the client ID. So I have changed self.source.consumer_key to parts[0]

* Added the decode method for the id_token

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-12 12:10:29 +01:00
Jens Langhammer 1cfe81887b stages/authenticator_validate: improve logging 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-11 23:33:41 +01:00
Jens Langhammer 53905d1a89 stages/authenticator_validate: enable all device classes by default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-11 22:49:30 +01:00
Jens Langhammer 6db1c914ee stages/authenticator_duo: fix devices created with name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-11 22:16:47 +01:00
Jens Langhammer c98bdbacc5 providers/proxy: return list of configured scope names so outpost requests custom scopes 
closes #1762

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 23:06:21 +01:00
Jens Langhammer 1e8d45dc15 web: write interfaces to different folders and remove custom chunk names 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 17:54:50 +01:00
Jens Langhammer d5d8641b37 stages/*: disable trim_whitespace on important fields 
closes #1765

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 16:48:19 +01:00
Jens Langhammer cc0832f487 core: force lowercase emails for gravatar usage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 12:40:20 +01:00
Jens Langhammer e73606b54d root: catch error in analytics on startup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-10 11:28:08 +01:00
Jens Langhammer 5d479a6c8f root: set utm_source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 23:23:47 +01:00
Jens Langhammer 4a773b2b4f sources/ldap: set connect/receive timeout (default to 15s) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 22:27:58 +01:00
Jens Langhammer 8003d67844 sources/ldap: fix typo 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 22:24:33 +01:00
Jens Langhammer 51783c1cbb sorces/ldap: fix user/group sync overwriting attributes instead of merging them 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-09 21:16:59 +01:00
Jens Langhammer ab2b13938e release: 2021.10.3 2021-11-08 20:52:11 +01:00
Jens Langhammer 9ca15983a2 root: keep last 30 backups 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 17:46:25 +01:00
Jens Langhammer 99ef94b7aa stages/prompt: only set placeholder when in context 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 15:10:32 +01:00
Jens Langhammer c3faa61ed9 stages/prompt: set field placeholder based on plan context 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 14:47:50 +01:00
Jens Langhammer da74304221 stages/prompt: add text_read_only field 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-08 14:45:56 +01:00
Jens Langhammer 79db0ce4c1 stages/prompt: use initial instead of default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 22:20:08 +01:00
Jens Langhammer 5e23b11764 stages/prompt: default prompts to the current value of the context 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:59:50 +01:00
Jens Langhammer c4e029ffe2 recovery: add create_admin_group management command 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:53:21 +01:00
Jens Langhammer 61b5b36192 core: add command to output full config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:45:52 +01:00
Jens Langhammer c6cc1b1728 root: fix defaults for EMAIL_USE_TLS 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-07 21:37:14 +01:00
Jens Langhammer 90151a13ae stages/identification: only allow limited challenges for login sources 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 14:53:38 +01:00
Jens Langhammer f958aa6930 stages/identification: use random sleep 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 14:50:35 +01:00
Jens Langhammer 924a13e832 core: fix auth_method for tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 13:04:41 +01:00
Jens Langhammer ae83c35dfd events: ignore creation/deletion of AuthenticatedSession objects 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 13:04:34 +01:00
Jens Langhammer 6424bf98da admin: improve check to remove version notifications 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-06 12:15:05 +01:00
Jens Langhammer 2cef220a3e providers/ldap: add/squash migrations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 10:41:50 +01:00
Jens L 5a8c66d325
providers/ldap: memory Query (#1681) 
* outposts/ldap: modularise ldap outpost, to allow different searchers and binders

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/ldap: add basic in-memory searcher

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/ldap: add search mode field

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: add search mode field

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 10:37:30 +01:00
dependabot[bot] 8de13d3f67 build(deps): bump goauthentik.io/api from 0.2021102.2 to 0.2021102.4 (#1738) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 09:33:26 +01:00
Jens Langhammer 7798292aa8 sources/plex: use exception_to_string in tasks 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 01:16:36 +01:00
Jens Langhammer 3005ca17bd web/admin: show warning on provider when not used with outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 01:15:33 +01:00
Jens Langhammer 909461e533 providers/*: include list of outposts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 01:06:04 +01:00
Jens Langhammer a40c3aeb68 core: make group membership lookup respect parent groups (upwards) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 00:53:56 +01:00
Jens Langhammer 4a89be3048 core: include parent group name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-05 00:11:17 +01:00
Jens Langhammer 023b97aa69 sources/ldap: remove deprecated default 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 22:13:47 +01:00
Jens Langhammer 738e4d5c74 web/admin: only show flows with an invitation stage configured instead of all enrollment flows 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1720
 2021-11-04 20:54:55 +01:00
Jens Langhammer 5bc1301043 stages/authenticator_*: add default name for authenticators 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 15:34:51 +01:00
Jens Langhammer 8d766efecb root: don't set signal on start when running in ci or dev 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 14:32:21 +01:00
Jens Langhammer b362d2af03 lib: fix linting issue 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 13:43:09 +01:00
Jens Langhammer bcd42fce13 root: further improve detection of environment we're running in 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 13:35:22 +01:00
Jens Langhammer 6deddd038f internal: start embedded outpost directly after backend is healthy instead of waiting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 13:18:04 +01:00
Jens Langhammer 3b47cb64da root: improve compose detection, add anonymous stats 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 13:16:21 +01:00
Jens Langhammer cf5e70c759 lifecycle: revert to non-h11 worker 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 13:16:10 +01:00
Jens Langhammer 5374352411 sources/plex: allow users to connect their plex account without login flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 21:09:02 +01:00
Jens Langhammer 08eff4cc5d sources/plex: fix missing ordering 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 20:21:33 +01:00
Jens Langhammer 8f6d700aa8 sources/oauth: set prompt=none for Discord provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 15:48:59 +01:00
Jens Langhammer 58c221e867 release: 2021.10.2 2021-11-03 10:07:28 +01:00
Jens Langhammer 5dc0f3b91b website: remove static service account, use helm chart instead 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 00:14:01 +01:00
Jens Langhammer f51515f3de stages/invitation: don't throw 404 error in stage 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 00:07:13 +01:00
Jens Langhammer f978575293 stages/invitation: remove invitation from plan context after deletion 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-02 23:50:12 +01:00
Jens Langhammer 0d02dbf55c api: replace django sentry proxy with go proxy to prevent login issues 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-02 14:44:37 +01:00
Jens Langhammer af83308fd4 stages/prompt: fix type in Prompt not having enum set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-01 20:44:48 +01:00
Jens Langhammer 6036d88392 providers/proxy: allow configuring of additional scope mappings for proxy 
closes #1255

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-31 22:25:51 +01:00
Jens Langhammer bfc8a56a0b *: fix tests for new field show_source_labels 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-31 18:18:21 +01:00
Jens Langhammer 5646141fe2 stages/identification: add show_source_labels option, to show labels for sources 
closes #1679

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-31 17:57:48 +01:00
Jens Langhammer 335d6edd11 providers/saml: fix error on missing AssertionConsumerServiceURL, fall back to default ACS 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-31 17:21:15 +01:00
Jens Langhammer 5d9bed130a root: fix Detection of S3 settings for backups 
closes #1698

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-31 16:54:10 +01:00
Jens Langhammer 2788329880 release: 2021.10.1 2021-10-31 10:56:21 +01:00
Jens Langhammer f5dc81907a core: add created field to source connection 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-30 15:02:41 +02:00
Jens Langhammer d70c8fbcc3 core: add API for all user-source connections 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-30 14:36:54 +02:00
Jens Langhammer 12b26e49ec flows: optimise stage user_settings API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-30 14:16:28 +02:00
Jens Langhammer e771e1857f core: add API to list all authenticator devices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-29 09:08:48 +02:00
Jens Langhammer 72a93c0959 root: pin node images to v16 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-28 10:29:48 +02:00
Jens Langhammer 381010600f release: 2021.10.1-rc3 2021-10-27 18:57:07 +02:00
Jens Langhammer 1b21b50b77 providers/oauth2: fallback to uid if UPN was selected but isn't available 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-27 16:11:35 +02:00
Jens Langhammer fa6324ab1d sources/ldap: prevent key users from being set as this is an M2M relation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-27 15:43:56 +02:00
Jens Langhammer 9e0daf2bcf sources/ldap: skip values which are of type bytes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-27 15:43:38 +02:00
Jens Langhammer 0273ae16df events: fix error when notification transport doesn't exist anymore 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-27 15:38:41 +02:00
Jens Langhammer f2f12ef0ba api: fix error when connection to websocket via secret_key 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-27 15:21:52 +02:00
Jens Langhammer 61d3df5f02 outposts: fix docker controller not using object_naming_template 
closes #1682

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-27 15:04:59 +02:00
Jens Langhammer 971de4fcb9 core: add USER_ATTRIBUTE_CHANGE_EMAIL 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1590 and #1677
 2021-10-27 13:34:11 +02:00
Jens Langhammer 92085f1a3c core: add toggle to completely disable backup mechanism 
closes #1671

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-26 17:04:33 +02:00
Jens Langhammer 8eb4d53810 providers/oauth2: fix events being created from /application/o/authorize/ 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-21 22:59:01 +02:00
Jens Langhammer 731f5d0199 release: 2021.10.1-rc2 2021-10-21 16:38:30 +02:00
Jens Langhammer 3647633232 core: cleanup embedded outpost logging, log user for http requests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-20 22:12:49 +02:00
Jens Langhammer eba91c6b2b root: add cookie domain setting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-20 18:26:22 +02:00
Jens Langhammer ba9f8a5795 lib: add utm_source to default links 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-20 17:31:27 +02:00
Jens Langhammer 02b4173d30 root: add utm_source 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-20 16:34:39 +02:00
Jens Langhammer 61fab497cf core: add user flag to prevent users from changing their usernames 
closes #1590

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-20 16:17:19 +02:00
Jens Langhammer 621e7f564a flows: also clear cache when deleting bindings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-20 15:25:38 +02:00
Jens Langhammer 2df4322ecf sources/oauth: add choices to oauth provider_type 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-20 00:11:19 +02:00
Jens Langhammer 03369e2338 sources/ldap: check for existence of vendor fields before falling back 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1521
 2021-10-19 15:40:40 +02:00
Jens Langhammer 5da7d9a573 release: 2021.10.1-rc1 2021-10-19 15:34:59 +02:00
Jens Langhammer 89bb27b95c sources/ldap: fix missing arguments? 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-18 22:04:58 +02:00
Jens Langhammer 2b155964c2 sources/ldap: extract vendor-specific functions 
#1521

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-18 21:44:10 +02:00
Jens L 922fc9b8d5
sources/oauth: add Sign in with Apple (#1635) 
* sources/oauth: add apple sign in support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: apple sign in docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: fix missing apple in sidebar

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* sources/oauth: add fallback values for name and slug

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-18 16:35:12 +02:00
Jens Langhammer 2c06eed8e7 events: don't prefill task if they already have a state 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-18 14:48:14 +02:00
Jens Langhammer a1b3af401d outposts: improve handling of recreate scenarios 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-18 14:29:37 +02:00
Jens Langhammer 92d38f62b5 outposts: handle k8s 422 response code by recreating objects 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-18 10:23:11 +02:00
Jens Langhammer 98a56c77e3 providers/proxy: update ingress controller to work with k8s 1.22 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-18 10:00:24 +02:00
Jens Langhammer ce812e14c7 core: improve detection for s3 settings to trigger backup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-17 15:56:31 +02:00
Jens Langhammer 8d32a53126 outposts: add additional error checking for docker controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-17 15:54:57 +02:00
Jens Langhammer 0225bf9c99 stages/authenticator_validate: create a default authenticator validate stage with sensible defaults 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-16 00:28:56 +02:00
dependabot[bot] 8040e2b6e4
build(deps): bump webauthn from 0.4.7 to 1.0.0 (#1625) 
* build(deps): bump webauthn from 0.4.7 to 1.0.0

Bumps [webauthn](https://github.com/duo-labs/py_webauthn) from 0.4.7 to 1.0.0.
- [Release notes](https://github.com/duo-labs/py_webauthn/releases)
- [Commits](https://github.com/duo-labs/py_webauthn/compare/v0.4.7...v1.0.0)

---
updated-dependencies:
- dependency-name: webauthn
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* stages/authenticator_webauthn: migrate to new library version

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_validate: migrate to new version

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_webauthn: add bytes_to_base64url_dict for json encoding

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* actually don't do that

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix missing response on web

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* more double json

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* more base64 stuff

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* working

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* ci: always sync

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-15 23:26:29 +02:00
Jens Langhammer f62786e58b policies: add additional filters to create flow charts on frontend 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-15 18:21:44 +02:00
Jens Langhammer 5f9dda2e58 outposts: rename docker_image_base to container_image_base, since its not docker specific 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-14 20:28:30 +02:00
Ilya Kogan 0c55eea678
outposts: Adding more flexibility to outposts in Kubernetes. (#1617) 
* outposts/ldap: Support hard coded `uidNumber` and `gidNumber`.

* outposts: more options for image + labels

- Set outpost docker image in config.
- Set image pull secrets in outpost config.
- Add additional labels for easier targeting from
  custom services.

* Fix some linting errors.

* outposts: Rename `docker_image` to `container_image
 2021-10-14 19:54:56 +02:00
Jens Langhammer dd9dc7e596 root: fix error with sentry proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-14 19:45:01 +02:00