This repository has been archived on 2024-05-31. You can view files and clone it, but cannot push or open issues or pull requests.

Jens L b0fbd576fc security: cure53 fix (#6039) ... * ATH-01-001: resolve path and check start before loading blueprints This is even less of an issue since 411ef239f6, since with that commit we only allow files that the listing returns Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-010: fix missing user filter for webauthn device This prevents an attack that is only possible when an attacker can intercept HTTP traffic and in the case of HTTPS decrypt it. * ATH-01-008: fix web forms not submitting correctly when pressing enter When submitting some forms with the Enter key instead of clicking "Confirm"/etc, the form would not get submitted correctly This would in the worst case is when setting a user's password, where the new password can end up in the URL, but the password was not actually saved to the user. * ATH-01-004: remove env from admin system endpoint this endpoint already required admin access, but for debugging the env variables are used very little Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-003 / ATH-01-012: disable htmlLabels in mermaid Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-005: use hmac.compare_digest for secret_key authentication Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-009: migrate impersonation to use API Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-010: rework Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-014: save authenticator validation state in flow context Signed-off-by: Jens Langhammer <jens@goauthentik.io> bugfixes Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-012: escape quotation marks Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add website Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update release ntoes Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update with all notes Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix format Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io>		2023-06-22 22:25:04 +02:00
..
management	blueprints: add meta models to schema (#5611)	2023-05-15 14:39:48 +02:00
migrations	core: make groups field for user optional (#5702)	2023-05-21 15:19:05 +02:00
tests	security: cure53 fix (#6039)	2023-06-22 22:25:04 +02:00
v1	blueprints: fix API validation with OCI blueprint path (#5822)	2023-05-31 14:50:39 +02:00
__init__.py	blueprints: webui (#3356)	2022-08-03 00:05:49 +02:00
api.py	blueprints: fix API validation with OCI blueprint path (#5822)	2023-05-31 14:50:39 +02:00
apps.py	*: fix mismatched task names for discovery, make output service connection task monitored (#4956)	2023-03-15 12:12:08 +01:00
models.py	security: cure53 fix (#6039)	2023-06-22 22:25:04 +02:00
settings.py	*: fix mismatched task names for discovery, make output service connection task monitored (#4956)	2023-03-15 12:12:08 +01:00
urls.py	api: modular urls (#5551)	2023-05-09 14:46:47 +02:00