c5b099856d
core: only prefetch related objects when required ( #9476 )
...
* core: only prefetch related objects when required
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests to assert query count
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* "optimize" another query away
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* prefetch parent and roles
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* whops that needs to be pre-fetched
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-29 12:59:59 +02:00
e9c84b8bfb
events: ensure all models' __str__ can be called without any further lookups ( #9480 )
...
* events: ensure all models' __str__ can be called without any further lookups
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* allow for additional queries for models using default_token_key
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-27 22:19:33 +02:00
6aab505cd7
flows: fix execute API endpoint ( #9478 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-27 01:56:59 +02:00
a9c597bc08
sources/oauth: fix OAuth Client sending token request incorrectly ( #9474 )
...
closes #9289
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-26 20:35:36 +02:00
8f8c3e4944
release: 2024.4.1
2024-04-26 18:43:33 +02:00
b1e48a6c1a
sources/scim: fix service account user path ( #9463 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-26 17:08:46 +02:00
183d036f3c
core: bump ruff from 0.4.1 to 0.4.2 ( #9448 )
...
* core: bump ruff from 0.4.1 to 0.4.2
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.4.1 to 0.4.2.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/v0.4.1...v0.4.2 )
---
updated-dependencies:
- dependency-name: ruff
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* fix formatting
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2024-04-26 13:24:46 +02:00
2997382df2
core: fix logic for token expiration ( #9426 )
...
* core: fix logic for token expiration
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* bump default token expiration
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix frontend
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-25 15:42:58 +02:00
4cc4a3e4b8
stages/identification: don't check source component ( #9410 )
...
* Do not include the built-in source in this check
Signed-off-by: PythonCoderAS <13932583+PythonCoderAS@users.noreply.github.com >
* Update authentik/stages/identification/stage.py
Signed-off-by: Jens L. <jens@beryju.org >
---------
Signed-off-by: PythonCoderAS <13932583+PythonCoderAS@users.noreply.github.com >
Signed-off-by: Jens L. <jens@beryju.org >
Co-authored-by: Jens L <jens@beryju.org >
2024-04-25 11:55:31 +02:00
80af26ef50
sources/oauth: ensure all UI sources return a valid source ( #9401 )
...
* web/admin: prevent selection of inbuilt source in identification stage
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix apple source
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* also fix plex challenge
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-24 22:55:19 +02:00
6b6d88b81b
release: 2024.4.0-rc1
2024-04-24 19:12:47 +02:00
6f3dc2eafd
sources/ldap: fix default blueprint for mapping user DN to path ( #9355 )
...
* sources/ldap: fix default blueprint for mapping user DN to path
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-19 14:44:48 +02:00
d5c09fae8a
brands: add indexes to brand domain and default ( #9343 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-18 23:10:17 +02:00
0a5b8bea5d
stages/prompt: fix username field throwing error with existing user ( #9342 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-18 20:54:31 +02:00
64d4a19ccf
root: expose session storage configuration ( #9337 )
...
* root: expose session storage configuration
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-18 20:53:27 +02:00
a742331484
root: make redis settings more consistent ( #9335 )
...
* make redis settings more consistent
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add support to go
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* rewrite url
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix redis connect in wait_for_db
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* censor password when logging error
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* reword docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add redis url generation helper
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-18 16:49:41 +02:00
ddc78cc297
stages/authenticator_webauthn: fix attestation value ( #9333 )
...
* fix incorrect attestation conveyance with device restriction
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* save raw aaguid on webauthn device
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-18 14:00:16 +02:00
8c687d81aa
sources/scim: service account should be internal ( #9321 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-18 01:53:26 +02:00
49ac0eb662
sources/scim: cleanup service account when source is deleted ( #9319 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-17 22:57:05 +02:00
58a374d1f1
release: 2024.2.3
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
# Conflicts:
# pyproject.toml
2024-04-17 15:17:14 +02:00
14fab991b4
core: replace authentik_signals_ignored_fields with audit_ignore ( #9291 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-17 00:19:18 +02:00
89c841b530
events: fix incorrect user logged when using API token authentication ( #9302 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-16 23:32:53 +02:00
2f7d9a44ad
core: fix api schema for users and groups ( #9298 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-16 19:42:47 +02:00
cad5ff36bd
providers/oauth2: fix refresh_token grant returning incorrect id_token ( #9275 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-16 13:14:28 +02:00
0452eb3e5f
events: add indexes ( #9272 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-15 21:00:28 +02:00
3c28cf1909
sources: add SCIM source ( #3051 )
...
* initial
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* rebuild migration
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* include root URL in API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add UI base URL
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* only allow SCIM basic auth for testing and debug
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* start user tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* antlr for scim filter parsing, why
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix url mountpoint
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* ...turns out we don't need antlr
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* start to revive this PR
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Signed-off-by: Jens L. <jens@beryju.org >
* don't put doc structure changes into this
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix web ui
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make mostly work
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add filter support
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add e2e tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix helper
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* re-add codecov oidc
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove unused fields from API
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix group membership
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* unrelated: fix backchannel helper text size
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* test against authentik as SCIM server I guess?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix scim provider task render
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add preview banner
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Revert "re-add codecov oidc"
This reverts commit fdeeb391afba710645e77608e0ab2e97485c48d1.
* add API for connection objects
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix preview banner
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add UI for users and groups
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Signed-off-by: Jens L. <jens@beryju.org >
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
2024-04-15 14:23:43 +02:00
4a9c95b44e
core: delegated group member management ( #9254 )
...
* fix API permissions
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix group member remove notification label
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* consistent naming assign vs grant
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* only set table search query when searching is enabled
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix hidden object permissions
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* replace checkmark/cross with fa icons
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update website
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix tests and fix permission bug
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix migrations
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* reword
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-15 14:14:26 +02:00
85fedec2f6
core: optionally don't return groups' users and users' groups by default ( #9179 )
...
* core: don't return groups' users and users' groups by default
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* explicitly fetch users and groups in LDAP
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add indicies
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-15 13:27:44 +02:00
6ddfe1795c
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs ( #9268 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
2024-04-15 10:25:16 +00:00
af19b1633a
lib: cache gravatar connection status ( #9248 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-15 11:55:54 +02:00
b1c38cbb07
providers/scim: allow custom user and group schemas ( #9255 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-14 22:16:46 +02:00
7ef14eb86d
blueprints: only create default brand if no other default brand exists ( #9222 )
...
* blueprints: only create default brand if no other default brand exists
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix invalid blueprint
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix flaky test, improve pytest output
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-12 14:59:48 +02:00
203dc88bb5
api: fix authentication schema ( #9238 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-12 13:49:11 +02:00
fd44bc2bec
stages/authenticator_validate: add ability to limit webauthn device types ( #9180 )
...
* stages/authenticator_validate: add ability to limit webauthn device types
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* reword
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* require enterprise attestation when a device restriction is configured as we need the aaguid
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* improve error message
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add more tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-11 13:10:05 +02:00
a70363bd95
core: add user settable token durations ( #7410 )
...
* core: add support for user settable token duration
* web: add support for user settable token duration
* website: add documentation for user settable token duration
* core : fix locales
* web: fix tokenIntent when updating
* core: fix linting
* website: Update website/docs/user-group-role/user/user_ref.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Signed-off-by: Jean-Michel DILLY <48059109+jmdilly@users.noreply.github.com >
* make token duration system-wide configurable
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* small fixup
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* migrate token configs to tenants
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* add release notes
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* make website
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* lint-fix
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* fix migrations
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* nosec
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* lint-fix
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* fix migrations for real this time
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* trying with no model using default_token_key
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* lint-fix
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* fix save
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* lint-fix
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* use signal instead of overriding save
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* fix tests
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
---------
Signed-off-by: Jean-Michel DILLY <48059109+jmdilly@users.noreply.github.com >
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2024-04-11 13:05:05 +02:00
d24fe25047
sources/oauth: make URLs not required, only check when no OIDC URLs are defined ( #9182 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-09 20:35:30 +02:00
2ec8a445c3
events: add context manager to ignore/modify audit events being written ( #9181 )
2024-04-09 01:42:36 +02:00
16b8edd082
web: fix application library list display length and capability ( #9094 )
...
* web: fix esbuild issue with style sheets
Getting ESBuild, Lit, and Storybook to all agree on how to read and parse stylesheets is a serious
pain. This fix better identifies the value types (instances) being passed from various sources in
the repo to the three *different* kinds of style processors we're using (the native one, the
polyfill one, and whatever the heck Storybook does internally).
Falling back to using older CSS instantiating techniques one era at a time seems to do the trick.
It's ugly, but in the face of the aggressive styling we use to avoid Flashes of Unstyled Content
(FLoUC), it's the logic with which we're left.
In standard mode, the following warning appears on the console when running a Flow:
```
Autofocus processing was blocked because a document already has a focused element.
```
In compatibility mode, the following **error** appears on the console when running a Flow:
```
crawler-inject.js:1106 Uncaught TypeError: Failed to execute 'observe' on 'MutationObserver': parameter 1 is not of type 'Node'.
at initDomMutationObservers (crawler-inject.js:1106:18)
at crawler-inject.js:1114:24
at Array.forEach (<anonymous>)
at initDomMutationObservers (crawler-inject.js:1114:10)
at crawler-inject.js:1549:1
initDomMutationObservers @ crawler-inject.js:1106
(anonymous) @ crawler-inject.js:1114
initDomMutationObservers @ crawler-inject.js:1114
(anonymous) @ crawler-inject.js:1549
```
Despite this error, nothing seems to be broken and flows work as anticipated.
* web: fix application display length and capability
The User Application Library only shows the top 100 applications. This patch
strips what is passed out of the API fetch down to the bare minimum: the list of
applications. No pagination, no search strings, none of the items returned by
the API other than the application. It then fetches multiple pages of 100
until the user's Application list is exhausted, presenting the entire list to
the user.
The fetches are done simultaneously; a user with a thousand applications, if one
should exist, would start 9 downloads in parallel. The first fetch analyzes the
page count to determine how many *more* must be started, then starts them. This
should make an interesting stress-test.
Failures at the Django end are not well-handled, but then they have never been
well-handled. At best, the page is blank and the browser console will contain a
cryptic error message. That isn't fixed this time around, but it probably should
be.
This patch will have no effect until the [application pagination
bug](https://github.com/goauthentik/authentik/issues/9093 ) is fixed.
* Prettier has opinions.
* attempt to fix backend pagination
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make page_number optional
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2024-04-08 18:30:40 +02:00
5a5a2a5d69
enterprise: fix audit middleware import ( #9177 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-08 15:24:16 +02:00
9f6dca1170
stages/authenticator_webauthn: add MDS support ( #9114 )
...
* web: align style to show current user for webauthn enroll
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* ask for aaguid
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* initial MDS import
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add API
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add restriction
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix api, add actual restriction
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* default authenticator name based on aaguid
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* connect device with device type
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix typo in webauthn stage name
this typo has been around for 3 years 8708e487ae (diff-bb4aee4a37f4b95c8daa7beb6bf6251d8d2b6deb8c16dce0cd7cb0d6cd71900aR16)jens@goauthentik.io >
* add fido2 dep
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add CI pipeline to automate updating blob
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix tests, include device type
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* exclude icon for now
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add passkeys aaguid
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make special unknown device type work, add docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-08 12:21:26 +02:00
a4a5b97265
root: fix startup ( #9151 )
...
* root: fix startup
* fix flaky tests?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-05 13:26:57 +02:00
e769f7ee02
blueprints: fix schema generation for PrimaryKeyRelated fields with non-int PK ( #9140 )
...
* fix build error with bandit
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* blueprints: fix incorrect schema for primarykeyrelated fields with non-int PK
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* blueprints: fix export containing null ID
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* include authentik version in blueprint schema
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-05 01:01:09 +02:00
bb1f18d973
root: generate python client ( #9107 )
...
* generate api client
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
# Conflicts:
# authentik/lib/expression/evaluator.py
# poetry.lock
* don't attempt to pr upgrade api client
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
# Conflicts:
# poetry.lock
# pyproject.toml
* use new generator
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* t
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* use upstream generator since that one is v2 already 🤦
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add missing help to makefile
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-04 15:39:42 +02:00
70462c4c72
root: fix missing imports after #9081 ( #9106 )
2024-04-02 17:46:38 +02:00
7ea721c487
root: move database calls from ready() to dedicated startup signal ( #9081 )
...
* root: move database calls from ready() to dedicated startup signal
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* optimise gunicorn startup to only do DB code in one worker
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* always use 2 workers in compose
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* send startup signals for test runner
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove k8s import that isn't really needed
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* ci: bump nested actions
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix @reconcile_app not triggering reconcile due to changed functions
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* connect startup with uid
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* adjust some log levels
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove internal healthcheck
we didn't really use it to do anything, and we shouldn't have to since the live/ready probes are handled by django anyways and so the container runtime will restart the server if needed
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add setproctitle for gunicorn and celery process titles
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* configure structlog early to use it
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Revert "configure structlog early to use it"
This reverts commit 16778fdbbca0f5c474d376c2f85c6f8032c06044.
* Revert "adjust some log levels"
This reverts commit a129f7ab6aecf27f1206aea1ad8384ce897b74ad.
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
# Conflicts:
# authentik/root/settings.py
* optimize startup to not spawn a bunch of one-off processes
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* idk why this shows up
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-04-02 14:19:32 +02:00
6302ff23d2
web: fix broken locale compile ( #9095 )
2024-04-02 01:30:19 +02:00
ac1f3332dc
web/admin: allow custom sorting for bound* tables ( #9080 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-03-30 21:35:28 +01:00
7010682122
providers/oauth2: fix interactive device flow ( #9076 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-03-29 15:38:49 +01:00
afdff95453
events: fix log_capture ( #9075 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-03-29 14:44:14 +01:00
b8b6c0cd98
events: rework log messages returned from API and their rendering ( #8770 )
...
* events: initial log rework
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add migration code
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-03-28 17:34:34 +01:00
