c68a42f63b 
					 
					
						
						
							
							website/docs: improve docs for OAuth2 device code flow ( #5570 )  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-05-10 20:58:31 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						bb92c4a967 
					 
					
						
						
							
							providers/ldap: remove deprecated fields ( #5154 )  
						
						... 
						
						
						
						* providers/ldap: remove deprecated fields
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update changelog
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-04-21 14:10:24 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						34e9af57fe 
					 
					
						
						
							
							website/integrations: switch default gitlab name identifier ( #5321 )  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io >
#5312  
						
						
					 
					
						2023-04-20 19:47:41 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						1893626e04 
					 
					
						
						
							
							website/docs: clear up radius provider ( #5263 )  
						
						... 
						
						
						
						* website/docs: clear up radius provider
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Update website/docs/providers/radius/index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Signed-off-by: Jens L. <jens@beryju.org >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Signed-off-by: Jens L. <jens@beryju.org >
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com > 
						
						
					 
					
						2023-04-18 10:42:42 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						67644ace87 
					 
					
						
						
							
							website/docs: prepare 2023.4 release notes ( #5223 )  
						
						... 
						
						
						
						* website/docs: prepare 2023.4 release notes
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add prompt preview
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Signed-off-by: Jens L. <jens@beryju.org >
* Update website/docs/releases/2023/v2023.4.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Signed-off-by: Jens L. <jens@beryju.org >
* add new release to sidebar
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Signed-off-by: Jens L. <jens@beryju.org >
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com > 
						
						
					 
					
						2023-04-13 14:11:46 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						3f5effb1bc 
					 
					
						
						
							
							providers/radius: simple radius outpost ( #1796 )  
						
						... 
						
						
						
						* initial implementation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* cleanup
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add migrations
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix web
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* minor fixes
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* use search-select
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update locale
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fixup
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix ip with port being sent to delegated ip
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add radius tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-03-20 16:54:35 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						eaf56f4f3f 
					 
					
						
						
							
							stages/user_login: stay logged in ( #4958 )  
						
						... 
						
						
						
						* add initial remember me offset
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add to go executor
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add ui for user login stage
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-03-15 20:21:05 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						8b7a92068b 
					 
					
						
						
							
							website/docs: forward-auth page, add list of links ( #4937 )  
						
						... 
						
						
						
						* add list of links
* added commas
* fix build
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Tana Berry <tanaberry@Tanas-MacBook-Pro-authentik.local >
Co-authored-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-03-14 07:45:49 -05:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						bf7dc5df78 
					 
					
						
						
							
							website/docs: separate pages for each webserver ( #4911 )  
						
						... 
						
						
						
						* website/docs: separate pages for each webserver
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Signed-off-by: Jens L. <jens@beryju.org >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Signed-off-by: Jens L. <jens@beryju.org >
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com > 
						
						
					 
					
						2023-03-13 17:29:51 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7618c2e45f 
					 
					
						
						
							
							website/docs: improve traefik standalone docs ( #4493 )  
						
						... 
						
						
						
						* Create _traefik_standalone_single_application.md 
Example for Authentik Single Application Proxy with Service example because this was unclear for many users and if you dont create a middleware for every application you get the error "no app for hostname". 
Signed-off-by: support-tt <61587422+support-tt@users.noreply.github.com >
* Update _traefik_standalone_single_application.md
Signed-off-by: support-tt <61587422+support-tt@users.noreply.github.com >
* rename to old file
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: support-tt <61587422+support-tt@users.noreply.github.com >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-03-10 13:45:41 -06:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						6ae2fc9668 
					 
					
						
						
							
							providers/SCIM: customizable externalId, document behavior  ( #4868 )  
						
						... 
						
						
						
						* only set externalId if mapping hasn't set it
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* better document use of SCIM in conjunction with OAuth/SAML
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-03-08 00:15:16 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						9559bc2e1e 
					 
					
						
						
							
							providers/scim: add option to filter out service accounts, parent group ( #4862 )  
						
						... 
						
						
						
						* add option to filter out service accounts, parent group
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* rename to filter group
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* rework sync card to show scim sync status
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-03-07 15:39:48 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f6a8b3d568 
					 
					
						
						
							
							website/docs: Corrected typo and added Note about port number if using Istio/Kubern… ( #4851 )  
						
						... 
						
						
						
						* Corrected typo and added Note about port number if using Istio/Kubernetes
@BeryJu I was reading [this article](https://prevue.ch/news/2022-10-11-istio-authentik/ ) about a fellow setting up authentik, using Istio and Kubernetes. I wanted to somehow add a heads up about the port number, but I am not confident that I got it right. Is it only if there are custom decisions being made that the port number has to be for the cluster? 
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
* Update website/docs/providers/proxy/forward_auth.mdx
Signed-off-by: Jens L. <jens@beryju.org >
* fix lint error
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
Signed-off-by: Jens L. <jens@beryju.org >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L <jens.langhammer@beryju.org >
Co-authored-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-03-06 19:28:40 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						28ddeb124f 
					 
					
						
						
							
							providers: SCIM ( #4835 )  
						
						... 
						
						
						
						* basic user sync
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add group sync and some refactor
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* start API
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* allow null authorization flow
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add UI
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make task monitored
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add missing dependency
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make authorization_flow required for most providers via API
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* more UI
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make task result better readable, exclude anonymous user
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add task UI
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add scheduled task for all sync
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make scim errors more readable
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add mappings, migrate to mappings
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add mapping UI and more
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add scim docs to web
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* start implementing membership
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* migrate signals to tasks
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* migrate fully to tasks
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* strip none keys, fix lint errors
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix things
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* start adding tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix saml
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add scim schemas and validate against it
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* improve error handling
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add group put support, add group tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* send correct application/scim+json headers
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* stop sync if no mappings are confiugred
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add test for task sync
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add membership tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* use decorator for tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make tests better
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-03-06 19:39:08 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						cd99b6e48f 
					 
					
						
						
							
							providers/ldap: making ldap compatible with synology ( #4694 )  
						
						... 
						
						
						
						* internal/outpost/ldap: making ldap compatible with synology
* fix duplicate attributes
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add docs about homedirectory
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix duplicate attributes
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add substitution to values
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-02-22 15:26:41 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						51c6a14786 
					 
					
						
						
							
							providers/ldap: Improve compatibility with LDAP clients ( #4750 )  
						
						... 
						
						
						
						* Fixed invalid LDAP attributes by replacing '.'s and '/'s with '-'
* Leave old fields for now for backward compatibility
* Add forgotten depreceated field
* Fix tests
* Fix tests
* use shorter attribute names
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* sanitize attributes
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* keep both sanitized and unsanitized user fields
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add sanitized fields to test
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-02-22 14:18:22 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7d6b573f8b 
					 
					
						
						
							
							website: migrate to mermaid charts, rework proxy page  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-02-15 12:14:17 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						3170b2f92c 
					 
					
						
						
							
							providers/proxy: add token support for basic auth  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-02-07 22:50:49 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						547c01f481 
					 
					
						
						
							
							website/docs: update Caddy docs to include HTTPS proxying ( #4316 )  
						
						... 
						
						
						
						Update Caddy documentation to include HTTPS proxying
Signed-off-by: Melvin Snijders <mail@melvinsnijders.nl > 
						
						
					 
					
						2023-02-03 14:43:13 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7d4ce41e12 
					 
					
						
						
							
							providers/proxy: outpost wide logout implementation ( #4605 )  
						
						... 
						
						
						
						* initial outpost wide logout implementation
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* handle deserialize error
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix file cleanup, add tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-02-02 21:18:59 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						3a59b75f4a 
					 
					
						
						
							
							website/docs: update ldap provider docs  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-01-20 11:46:57 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						23c69c456a 
					 
					
						
						
							
							providers/proxy: add setting to intercept authorization header ( #4457 )  
						
						... 
						
						
						
						* add setting to intercept authorization header
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* rename to intercept_header_auth
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-01-17 18:56:48 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						19ee98b36d 
					 
					
						
						
							
							outposts/proxy: allow setting no-redirect via header or query param  
						
						... 
						
						
						
						closes  #4455 
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
					
						2023-01-17 10:56:43 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						d31e566873 
					 
					
						
						
							
							outposts/proxy: add header to prevent redirects  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-01-14 22:18:25 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						cd12e177ea 
					 
					
						
						
							
							providers/proxy: add initial header token auth ( #4421 )  
						
						... 
						
						
						
						* initial implementation
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* check for openid/profile claims
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* include jwks sources in proxy provider
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add web ui for jwks
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* only show sources with JWKS data configured
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix introspection tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* start basic
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add basic auth
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add docs, update admonitions
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add client_id to api, add tab for auth
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update locale
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-01-13 16:22:03 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2604dc14fe 
					 
					
						
						
							
							providers/ldap: add code-MFA support for ldap provider ( #4354 )  
						
						... 
						
						
						
						* add code support for ldap provider
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* only try to extract code when auth validator stage is encountered
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* use parseint instead
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2023-01-05 18:32:06 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						dc1359a763 
					 
					
						
						
							
							providers/saml: initial SLO implementation ( #2346 )  
						
						... 
						
						
						
						* providers/saml: initial SLO implementation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* providers/saml: add logout request tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* providers/saml: add tests for POST SLO
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* matrix e2e tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* fix import
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* set e2e matrix name
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* fix imports
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* separate oidc and oauth tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add basic saml slo e2e tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add better metadata download url
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* kinda prepare release notes
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* sort releases into folders
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add slo urls to website
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* fix linking
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add api tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* update docs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2023-01-04 19:45:31 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4e04461820 
					 
					
						
						
							
							website/docs: Change Kubernetes ingress apiVersion out of beta ( #4099 )  
						
						... 
						
						
						
						* Change Kubernetes ingress apiVersion out of beta
* fix lint
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-11-28 16:42:59 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						501d63b3aa 
					 
					
						
						
							
							website/docs: add notice for unique Base DN ( #4073 )  
						
						... 
						
						
						
						* providers/ldap: updates documentation related to issue #4038 
Signed-off-by: John Arrandale <bootsie227@gmail.com >
* providers/ldap: adheres to the CI prettier-check
Signed-off-by: John Arrandale <bootsie227@gmail.com > 
						
						
					 
					
						2022-11-24 20:52:13 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						ac2e85c003 
					 
					
						
						
							
							website/docs: fix 404s on ldap provider docs  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-11-06 00:01:38 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c157030905 
					 
					
						
						
							
							website/docs: remove old banner, fix nginx formatting  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-11-01 17:12:16 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						895658e7a3 
					 
					
						
						
							
							website/integrations: add Organizr integration ( #3802 )  
						
						... 
						
						
						
						* Add new integration application category for Dashboard and initialize organizr service template
* added images and additional info for organizr integration
* alphabetized application integration categories
* alphabetized integration federation and social login categories
* forgot to make website-lint-fix :/
* revert mention of organizr in generic setup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-10-19 10:28:48 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						10cfccd999 
					 
					
						
						
							
							website/docs: add General Setup instructions for LDAP Provider ( #3680 )  
						
						... 
						
						
						
						* Added General Setup instructions for LDAP Provider
* Added General Setup instructions for LDAP Provider and updated relative links
* updated LDAP Outpost note verbiage
* Corrected the case for LDAP and renamed to Generic Setup
* removed ldapsearch example from index page
* updated verbiage around multifactor authentication
* removed note about local LDAP provider
* updated sidebar to reflect generic_setup
* updated logging info
* corrected typo
* updated stage creation instructions and screenshot
* corrected another typo
* corrected another typo
* reword some things
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-10-16 14:57:57 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						8ed2f7fe9e 
					 
					
						
						
							
							providers/oauth2: add device flow ( #3334 )  
						
						... 
						
						
						
						* start device flow
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* web: fix inconsistent app filtering
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add tenant device code flow
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add throttling to device code view
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* somewhat unrelated changes
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add initial device code entry flow
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add finish stage
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* it works
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add support for verification_uri_complete
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add some tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add more tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add docs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-10-11 12:42:10 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						19c36d20b5 
					 
					
						
						
							
							website/docs: improve nginx examples ( #3372 )  
						
						... 
						
						
						
						* website/docs: improve nginx examples
Signed-off-by: itsmesid <693151+arevindh@users.noreply.github.com >
* website/docs: improve nginx examples
Signed-off-by: itsmesid <693151+arevindh@users.noreply.github.com > 
						
						
					 
					
						2022-08-30 21:19:25 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c6bb41890e 
					 
					
						
						
							
							website/docs: add port_in_redirect in nginx config to prevent invalid port in redirect ( #3397 )  
						
						... 
						
						
						
						* Proposal and fix for issue #3359 
By adding `port_in_redirect off` in the configuration for the NginxProxyManager (NPM), will avoid a redirect to port 4443.
Credit to @adtwomey for the suggestions.
https://github.com/goauthentik/authentik/issues/3359 
Signed-off-by: Zolo <39656359+zolodev@users.noreply.github.com >
* Adding a comment
Signed-off-by: Zolo <39656359+zolodev@users.noreply.github.com >
Signed-off-by: Zolo <39656359+zolodev@users.noreply.github.com > 
						
						
					 
					
						2022-08-29 17:57:18 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b41acebf5b 
					 
					
						
						
							
							providers/proxy: add caddy endpoint ( #3330 )  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-07-29 10:58:53 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						1c64616ebd 
					 
					
						
						
							
							sources/ldap: add configuration for LDAP Source ciphers  
						
						... 
						
						
						
						closes  #3110 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
					
						2022-07-01 19:53:49 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						23273f53cc 
					 
					
						
						
							
							providers/oauth2: if no scopes are sent in authorize request, select all configured scopes  
						
						... 
						
						
						
						closes  #3112 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
					
						2022-07-01 19:45:26 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f6042f29f6 
					 
					
						
						
							
							website/docs: add notice to use in-cluster service for nginx forward auth  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-06-30 21:33:47 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						e17f7020e6 
					 
					
						
						
							
							webiste/docs: use autogenerated pages and categories ( #3102 )  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-06-15 20:56:27 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						8dbb0bd2c6 
					 
					
						
						
							
							providers/oauth2: token revoke ( #3077 )  
						
						
						
						
					 
					
						2022-06-11 18:49:16 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4c39e08dd4 
					 
					
						
						
							
							website/docs: fix incorrect oauth end-session URL  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-06-06 12:48:06 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						8447e9b9c2 
					 
					
						
						
							
							providers/proxy: envoy v2 ( #3029 )  
						
						... 
						
						
						
						* add path prefix
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* use prefix correctly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* only set redirect if session doesn't have a redirect yet
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-06-03 10:32:52 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f9a419107a 
					 
					
						
						
							
							outposts/proxyv2: add basic envoy support ( #3026 )  
						
						... 
						
						
						
						* outposts/proxyv2: add basic envoy support
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* don't crash when backend is not available
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add envoy tests and docs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-06-03 00:06:09 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4d17111233 
					 
					
						
						
							
							website/docs: Fix misconfiguration causing POST requests behing Nginx to timeout ( #2967 )  
						
						... 
						
						
						
						* Update _nginx_proxy_manager.md
* Update _nginx_standalone.md 
						
						
					 
					
						2022-05-26 11:52:57 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b4e75218f5 
					 
					
						
						
							
							sources/oauth: OIDC well-known and JWKS ( #2936 )  
						
						... 
						
						
						
						* add initial
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add provider
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* include source and jwk key id in event
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add more docs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add tests for source
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* fix web formatting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add provider tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* fix lint error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-05-24 21:02:50 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						296779ddf1 
					 
					
						
						
							
							providers/ldap: remove technical preview disclaimer  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-05-15 17:33:03 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f9469e3f99 
					 
					
						
						
							
							website: format docs with prettier ( #2833 )  
						
						... 
						
						
						
						* run prettier
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add scim to comparison
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-05-09 21:22:41 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						ab2299ba1e 
					 
					
						
						
							
							outposts/ldap: cached bind ( #2824 )  
						
						... 
						
						
						
						* initial cached ldap bind support
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add web
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add docs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* clean up api generation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* use gh action for golangci-lint
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-05-08 16:48:53 +02:00