| 
						
					 | 
					
						
						
							
						
						5b66dbe890
					 | 
					
						
						
							
							flows: provider invalidation (#5048)
						
						
						
						
						
						
						
						* add initial
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add web stage for session end
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* migrate saml and tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* cleanup
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* group flow settings when providers have multiple flows
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* adjust name for default provider invalidation
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* re-make migrations
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add invalidation_flow to saml importer
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* re-do migrations again
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update web stuff to get rid of old libraries
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* make unbind flow for ldap configurable
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* unrelated: fix flow inspector
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* handle invalidation_flow as optional, as it should be
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* also fix ldap outpost
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* don't generate URL in client
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* actually make it work???
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix migration breaking things...?
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* start fixing tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix fallback
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* re-migrate
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix duplicate flow setting
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add migration
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix race condition with brand
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix oauth test
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix SAML tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add to wizard, fix required
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* make required, start release notes
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io> 
						
						
					 | 
					
						2024-10-14 15:35:12 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						8f53d0b9f3
					 | 
					
						
						
							
							providers/ldap: Remove search group (#10639)
						
						
						
						
						
						
						
						* remove search_group
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* make api operations cleaerer
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix migration
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* actually use get
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* use correct api client for ldap
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix migration
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* unrelated: fix migration warning
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* unrelated: fix styling issue in dark mode
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* unrelated-ish fix button order in wizard
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* unrelated: fix missing css import
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* Optimised images with calibre/image-actions
* Update index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>
* Update index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>
* update release notes based on new template
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens L. <jens@beryju.org>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com> 
						
						
					 | 
					
						2024-08-14 16:31:11 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						64ca5d42be
					 | 
					
						
						
							
							outposts/ldap: allow overriding gidNumber for a user (#8003)
						
						
						
						
						
						
						
						Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space> 
						
						
					 | 
					
						2023-12-28 14:21:08 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						01311929d1
					 | 
					
						
						
							
							providers/ldap: improve password totp detection (#6006)
						
						
						
						
						
						
						
						* providers/ldap: improve password totp detection
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add flag for totp mfa support
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* keep support for static tokens
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix migrations
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io> 
						
						
					 | 
					
						2023-06-20 12:09:13 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						54ef88a6fa
					 | 
					
						
						
							
							providers/ldap: rework Schema and DSE (#5838)
						
						
						
						
						
						
						
						* rework Root DSE
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* always parse filter objectClass
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* start adding LDAP Schema
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add more schema
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update schema more
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix cn for schema
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* only include main DN in namingContexts
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* use schema from gh
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add description
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add response filtering
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix response filtering
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* don't return rootDSE entry when searching for singleLevel
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* remove currentTime
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix attribute filtering
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* set SINGLE-VALUE
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix numbers
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io> 
						
						
					 | 
					
						2023-06-08 15:16:40 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						0ce41a1b2d
					 | 
					
						
						
							
							providers/ldap: add StartTLS support (#5861)
						
						
						
						
						
						
						
						* providers/ldap: add StartTLS support
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* add starttls test
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update form and docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* re-add tls server name
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update release notes
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io> 
						
						
					 | 
					
						2023-06-06 21:40:19 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						a9b32e2f97
					 | 
					
						
						
							
							providers/ldap: add unbind flow execution (#4484)
						
						
						
						
						
						
						
						add unbind flow execution
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens Langhammer <jens@goauthentik.io> 
						
						
					 | 
					
						2023-01-23 20:36:30 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						5c91658484
					 | 
					
						
						
							
							internal: fix nil pointer dereference in ldap outpost
						
						
						
						
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 
						
						
					 | 
					
						2022-05-21 15:48:50 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						ab2299ba1e
					 | 
					
						
						
							
							outposts/ldap: cached bind (#2824)
						
						
						
						
						
						
						
						* initial cached ldap bind support
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add web
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add docs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* clean up api generation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* use gh action for golangci-lint
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 
						
						
					 | 
					
						2022-05-08 16:48:53 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						62a939b91d
					 | 
					
						
						
							
							internal: bump api client to v3
						
						
						
						
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 
						
						
					 | 
					
						2022-03-03 10:40:07 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						40404ff41d
					 | 
					
						
						
							
							outposts/ldap: Rework/improve LDAP search logic. (#1687)
						
						
						
						
						
						
						
						* outposts/ldap: Refactor searching so we key primarily off base dn
* docs: Updating guides on sssd and the ldap outpost. 
						
						
					 | 
					
						2021-12-02 15:28:58 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						5a8c66d325
					 | 
					
						
						
							
							providers/ldap: memory Query (#1681)
						
						
						
						
						
						
						
						* outposts/ldap: modularise ldap outpost, to allow different searchers and binders
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts/ldap: add basic in-memory searcher
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/ldap: add search mode field
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outpost: add search mode field
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 
						
						
					 | 
					
						2021-11-05 10:37:30 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 |