88fa7e37dc 
					 
					
						
						
							
							outposts: Refactor session end signal and add LDAP support ( #14539 )  
						
						... 
						
						
						
						* outpost: promote session end signal to non-provider specific
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* implement server-side logout in ldap
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix previous import
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* use better retry logic
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* log
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make more generic if we switch from ws to something else
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make it possible to e2e test WS
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix ldap session id
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* ok I actually need to go to bed this took me an hour to fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format; add ldap test
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix leftover state
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove thread
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* use ws base for radius
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* separate test utils
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* rename
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix missing super calls
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* websocket tests with browser 🎉 
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add proxy test for sign out
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix install_id issue with channels tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix proxy basic auth test
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* big code dedupe
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* allow passing go build args
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* improve waiting for outpost
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* rewrite ldap tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* ok actually fix the tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* undo a couple things that need more time to cook
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove unused lockfile-lint dependency since we use a shell script and SFE does not have a lockfile
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix session id for ldap
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix missing createTimestamp and modifyTimestamp ldap attributes
closes  #10474 
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2025-06-10 12:11:21 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b7417e77c7 
					 
					
						
						
							
							outposts: remove duplicate startup/setup code, add pyroscope, make sentry not reconfigure every time ( #14724 )  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2025-06-07 03:01:00 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						65517f3b7f 
					 
					
						
						
							
							enterprise/stages: Add MTLS stage ( #14296 )  
						
						... 
						
						
						
						* prepare client auth with inbuilt server
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* introduce better IPC auth
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* init
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* start stage
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* only allow trusted proxies to set MTLS headers
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* more stage progress
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* dont fail if ipc_key doesn't exist
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* actually install app
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add some tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update API
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix unquote
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix int serial number not jsonable
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* init ui
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add UI
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* unrelated: fix git pull in makefile
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix parse helper
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add test for outpost
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* more tests and improvements
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* improve labels
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add support for multiple CAs on brand
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add support for multiple CAs to MTLS stage
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* dont log ipcuser secret views
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix go mod
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2025-05-19 22:48:17 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						7826e7a605 
					 
					
						
						
							
							core: bump oss/go/microsoft/golang from 1.23-fips-bookworm to 1.24-fips-bookworm ( #13027 )  
						
						... 
						
						
						
						* core: bump oss/go/microsoft/golang
Bumps oss/go/microsoft/golang from 1.23-fips-bookworm to 1.24-fips-bookworm.
---
updated-dependencies:
- dependency-name: oss/go/microsoft/golang
  dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
* upstream docker image, use native fips
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* bump go version
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2025-03-30 03:26:30 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5bcf501842 
					 
					
						
						
							
							outposts/ldap: fix paginator going into infinite loop ( #13677 )  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2025-03-27 00:05:43 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						84b5992e55 
					 
					
						
						
							
							ci: bump golangci/golangci-lint-action from 6 to 7 ( #13661 )  
						
						... 
						
						
						
						* ci: bump golangci/golangci-lint-action from 6 to 7
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6 to 7.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* fix lint
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix v2
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix v3
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2025-03-26 18:03:20 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						ee6fcdfbd8 
					 
					
						
						
							
							internal: fix missing trailing slash in outpost websocket ( #12470 )  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2024-12-23 23:42:42 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						15be3f2461 
					 
					
						
						
							
							internal: fix URL generation for websocket connection ( #12439 )  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2024-12-20 19:18:50 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5e72ec9c0c 
					 
					
						
						
							
							root: support running authentik in subpath ( #8675 )  
						
						... 
						
						
						
						* initial subpath support
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make outpost compatible
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix static files somewhat
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix web interface
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix most static stuff
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix most web links
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix websocket
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix URL for static files
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format web
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add root redirect for subpath
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* set cookie path
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Update internal/config/struct.go
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
Signed-off-by: Jens L. <jens@beryju.org >
* fix sfe
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* bump required version
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix flow background
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix lint and some more links
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix impersonate
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Signed-off-by: Jens L. <jens@beryju.org >
Signed-off-by: Jens L. <jens@goauthentik.io >
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space > 
						
						
					 
					
						2024-11-26 15:38:23 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5be49a8e80 
					 
					
						
						
							
							internal: fix go paginator not setting page correctly ( #11253 )  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2024-09-06 18:38:00 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						d75cdfeaf1 
					 
					
						
						
							
							internal: Use loop instead of recursion in NewAPIController ( #10745 )  
						
						... 
						
						
						
						use loop instead of recursion 
						
						
					 
					
						2024-08-16 15:04:07 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						bb9e679b9a 
					 
					
						
						
							
							outposts: add better UI for showing mismatched versions ( #10885 )  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2024-08-12 23:17:15 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						9b595b2031 
					 
					
						
						
							
							outposts: ensure minimum refresh interval ( #10701 )  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2024-07-31 14:43:03 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						1b285f85c0 
					 
					
						
						
							
							outposts: implement general paginator for list API requests ( #10619 )  
						
						... 
						
						
						
						* outposts: implement general paginator
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* migrate LDAP
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* change main outpost refresh logic to use paginator everywhere
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add comments to understand anything
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* actually use paginator everywhere
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2024-07-29 22:14:18 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						0fe751269e 
					 
					
						
						
							
							outposts: make refresh interval configurable ( #10138 )  
						
						... 
						
						
						
						* outposts: make refresh interval configurable
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* frontend
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* black again
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* switch to using config attribute
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* lint
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
---------
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space > 
						
						
					 
					
						2024-07-05 13:14:28 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4f40b1e27c 
					 
					
						
						
							
							crypto: update fingerprint at same time as certificate ( #10036 )  
						
						... 
						
						
						
						Previously the fingerprint was only set when initially adding a key, if it
changed for any reason (like a renewed certificate) then every execution of
`Get` would lead to a full update. The certificate itself got cached, but the
fingerprint remained stale for next time.
This increased the chance of a fatal race during the cache update.
closes  #9907  
						
						
					 
					
						2024-06-10 20:16:35 +09:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c3445374c2 
					 
					
						
						
							
							core: FIPS ( #9683 )  
						
						... 
						
						
						
						Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space > 
						
						
					 
					
						2024-05-23 17:34:52 +00:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						25e72558eb 
					 
					
						
						
							
							core: optimise user list endpoint ( #8353 )  
						
						... 
						
						
						
						* unrelated changes
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* optimization pass 1: reduce N tenant lookups by taking tenant from request, reduce get_anonymous calls
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix lint
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make it easier to exclude anonymous user
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2024-01-30 01:55:26 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						240cf6dd94 
					 
					
						
						
							
							enterprise/providers: Add RAC [AUTH-15] ( #7291 )  
						
						... 
						
						
						
						* add basic guacamole
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make everything mostly work
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add rac build to CI
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix resize, fix web lint, sendSize correctly
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* pre-send connection from client, format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* improve throughput
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* cleanup
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* rework TokenOutpostConsumer into middleware
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix some layout issues
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add outpost controllers
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* start testing audio things
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix a bunch of things
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add deps
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix to work with outpost group
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add simple loadbalancing
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add simple reconnect
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* show reconnecting text
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix error when checking ports
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* move to providers
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add flow check to interface
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix go lint
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix rac app label
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix audio
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add logging
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* cleanup
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* allow overriding all settings
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix duplicate keyboard, debug high DPI
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* re-add deps
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix lint
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix missing __init__.py breaking model loading
I love python
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* bump successful ws connection to info
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* hide cursor since guac draws that
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add clipboard support (bidirectional)
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make codespell not want to break the code
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* run pr comment in separate task
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* start endpoint and property mapping stuff
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* more endpoint things
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* unrelated: fix event model_pk filtering with ints
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* unrelated: improve event display for changelog
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* rebuild endpoint stuff again
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* idk special url
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* more stuff, connect token with session
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add disconnect
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* rework disconnect
cleanly disconnect from guacd instead of just letting the connection timeout
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* clear cache when creating outpost
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* support host:port and fix protocol
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* center smaller viewport
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* rework connection to wait more and stop after some time
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add policy control to endpoints
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove provider protocol
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* don't switch to different outpost connection when already chosen
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* start using property mappings, add static settings
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add some RAC mapping settings
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix lint
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* start adding tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests for event changes
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests and fix issues found by said tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add preview banner, move endpoints to main page
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add locale
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* auto-select endpoint if only one is available
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* backport https://github.com/goauthentik/authentik/pull/7831  to rac
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* dont select property mappings on endpoints
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make table modal only load when opened
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* only auto-redirect when open
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix web deps
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* check for token expiry and terminate session
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* re-add endpoint name to title
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* disconnect connection when token is manually deleted
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add initial RAC docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add connection expiry setting to provider
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix flaky tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-12-30 21:33:14 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						729ef4d786 
					 
					
						
						
							
							root: bump python deps (django 5) ( #7862 )  
						
						... 
						
						
						
						* bump python deps
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* vendor pickle serializer for now
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
#7761 
* cleanup some things and re-build api scheme
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix web and go
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* actually fix go...?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* better annotate json fields
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* use jsondictfield wherever
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove all virtualenvs?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* ?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* final version bump
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-12-18 22:07:59 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						4db365c947 
					 
					
						
						
							
							providers/proxy: improve SLO by backchannel logging out sessions ( #7099 )  
						
						... 
						
						
						
						* outposts: add support for provider-specific websocket messages
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* providers/proxy: add custom signal on logout to logout in provider
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-10-09 01:06:52 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						367f86ecfb 
					 
					
						
						
							
							root: optimise healthchecks ( #5337 )  
						
						... 
						
						
						
						* tests: remove redundant healthchecks
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* internal: do healthcheck within proxy instead of wget to use correct port
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix tags
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-04-21 13:32:48 +03:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						5aa43eeb04 
					 
					
						
						
							
							internal: better error message when outpost API controller couldn't fetch outposts  
						
						... 
						
						
						
						closes  #4642 
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
					
						2023-02-08 14:13:17 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a9b32e2f97 
					 
					
						
						
							
							providers/ldap: add unbind flow execution ( #4484 )  
						
						... 
						
						
						
						add unbind flow execution
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-01-23 20:36:30 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a9680d6088 
					 
					
						
						
							
							internal: fix race condition with config loading on startup, add index on debug server  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens@goauthentik.io > 
						
						
					 
					
						2023-01-08 20:33:04 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						2b2323fae7 
					 
					
						
						
							
							outposts: include hostname in outpost heartbeat  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-12-28 16:07:52 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						c21c1757de 
					 
					
						
						
							
							core: bump github.com/getsentry/sentry-go from 0.15.0 to 0.16.0 ( #4179 )  
						
						... 
						
						
						
						* core: bump github.com/getsentry/sentry-go from 0.15.0 to 0.16.0
Bumps [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go ) from 0.15.0 to 0.16.0.
- [Release notes](https://github.com/getsentry/sentry-go/releases )
- [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/getsentry/sentry-go/compare/v0.15.0...v0.16.0 )
---
updated-dependencies:
- dependency-name: github.com/getsentry/sentry-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* update custom tracer
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-12-09 12:20:41 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						be9790ef8a 
					 
					
						
						
							
							internal: reuse http transport to prevent leaking connections ( #3996 )  
						
						... 
						
						
						
						* Fix: Using the same http transport as the api
* fix: Using global tlsTransport instead of newly created one 
						
						
					 
					
						2022-11-25 18:24:01 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						276af8457d 
					 
					
						
						
							
							root: make sentry DSN configurable ( #4016 )  
						
						... 
						
						
						
						* make sentry DSN configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* make proxy smarter
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* fix typo in config struct
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-11-15 16:05:29 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						44e4f2e561 
					 
					
						
						
							
							crypto: make certificate parsing optional for crypto api ( #3711 )  
						
						
						
						
					 
					
						2022-10-01 00:06:00 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b6267fdf28 
					 
					
						
						
							
							*: add versioned user agent to sentry  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-06-20 11:54:10 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						bdf76bb4b7 
					 
					
						
						
							
							internal: skip tracing for go healthcheck and metrics endpoints  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-06-10 22:21:11 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f9a419107a 
					 
					
						
						
							
							outposts/proxyv2: add basic envoy support ( #3026 )  
						
						... 
						
						
						
						* outposts/proxyv2: add basic envoy support
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* don't crash when backend is not available
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* add envoy tests and docs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-06-03 00:06:09 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						a286f999e2 
					 
					
						
						
							
							api: migrate to openapi generator v6 ( #2968 )  
						
						... 
						
						
						
						* migrate to openapi generator v6
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
* bump api
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-05-26 15:15:30 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						be26b92927 
					 
					
						
						
							
							internal: cleanup outpost logs  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-05-21 13:18:06 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						b46eb7198b 
					 
					
						
						
							
							internal: handle log level not being set in config  
						
						... 
						
						
						
						closes  #2650 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
					
						2022-04-03 13:23:55 +02:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						62a939b91d 
					 
					
						
						
							
							internal: bump api client to v3  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-03-03 10:40:07 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						e70e031a1f 
					 
					
						
						
							
							internal: start adding tests to outpost  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-01-24 20:12:25 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						819af78e2b 
					 
					
						
						
							
							internal: make internal go version match python version  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2022-01-14 10:45:37 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						47356915b1 
					 
					
						
						
							
							outposts: fix outpost's sentry not sending release  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2021-12-23 19:01:32 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						87e99625e6 
					 
					
						
						
							
							internal: update tenant certificates on outpost refresh  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2021-12-23 00:38:49 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						34b11524f1 
					 
					
						
						
							
							tenants: add web certificate field, make authentik's core certificate configurable based on keypair  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2021-12-22 11:43:45 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						3c048a1921 
					 
					
						
						
							
							outposts/proxy: fix session not expiring correctly due to miscalculation  
						
						... 
						
						
						
						closes  #1976 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
					
						2021-12-21 13:10:57 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						92b4244e81 
					 
					
						
						
							
							providers/proxy: update traefik regex  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org >
#1969  
						
						
					 
					
						2021-12-20 22:43:58 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						f910da0f8a 
					 
					
						
						
							
							outposts: fix initial refresh not calling Server.Refresh()  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2021-12-20 21:47:32 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						fc9d270992 
					 
					
						
						
							
							outposts/ldap: fix log formatter and level not being set correctly  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2021-12-20 21:46:01 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						621773c1ea 
					 
					
						
						
							
							internal: rework global logging settings, embedded outpost no longer overwrites core, clean up double init  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2021-12-20 21:23:19 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						052e465041 
					 
					
						
						
							
							outpost: re-run globalSetup when updating config  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2021-12-20 21:08:03 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						68637cf7cf 
					 
					
						
						
							
							outposts: handle/ignore http Abort handler  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2021-12-20 19:42:45 +01:00 
						 
				 
			
				
					
						
					 
					
						
						
							
						
						03da87991f 
					 
					
						
						
							
							outposts: don't use custom environment  
						
						... 
						
						
						
						Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org > 
						
						
					 
					
						2021-12-16 19:12:05 +01:00