d989f23907
website: bump the build group in /website with 3 updates ( #13730 )
...
Bumps the build group in /website with 3 updates: [@rspack/binding-darwin-arm64](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack ), [@rspack/binding-linux-arm64-gnu](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack ) and [@rspack/binding-linux-x64-gnu](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack ).
Updates `@rspack/binding-darwin-arm64` from 1.2.8 to 1.3.0
- [Release notes](https://github.com/web-infra-dev/rspack/releases )
- [Commits](https://github.com/web-infra-dev/rspack/commits/v1.3.0/packages/rspack )
Updates `@rspack/binding-linux-arm64-gnu` from 1.2.8 to 1.3.0
- [Release notes](https://github.com/web-infra-dev/rspack/releases )
- [Commits](https://github.com/web-infra-dev/rspack/commits/v1.3.0/packages/rspack )
Updates `@rspack/binding-linux-x64-gnu` from 1.2.8 to 1.3.0
- [Release notes](https://github.com/web-infra-dev/rspack/releases )
- [Commits](https://github.com/web-infra-dev/rspack/commits/v1.3.0/packages/rspack )
---
updated-dependencies:
- dependency-name: "@rspack/binding-darwin-arm64"
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: build
- dependency-name: "@rspack/binding-linux-arm64-gnu"
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: build
- dependency-name: "@rspack/binding-linux-x64-gnu"
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: build
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-31 12:27:44 +02:00
059180edef
core: bump astral-sh/uv from 0.6.10 to 0.6.11 ( #13733 )
...
Bumps [astral-sh/uv](https://github.com/astral-sh/uv ) from 0.6.10 to 0.6.11.
- [Release notes](https://github.com/astral-sh/uv/releases )
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/uv/compare/0.6.10...0.6.11 )
---
updated-dependencies:
- dependency-name: astral-sh/uv
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-31 12:27:18 +02:00
22f30634a8
website/docs: Fix Caddy forward auth example ( #13726 )
2025-03-30 20:28:11 +02:00
35ff418c42
policies: buffered policy access view for concurrent authorization attempts when unauthenticated ( #13629 )
...
* policies: buffered policy access view for concurrent authorization attempts when unauthenticated
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* better cleanup
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* more polish
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* more cleanup
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix multiple redirects, add e2e test
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* unrelated: add sp initiated post test
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add SAML parallel test
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* optimise detection of when authentication is in progress
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* better backoff timing
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-30 19:56:03 +02:00
7826e7a605
core: bump oss/go/microsoft/golang from 1.23-fips-bookworm to 1.24-fips-bookworm ( #13027 )
...
* core: bump oss/go/microsoft/golang
Bumps oss/go/microsoft/golang from 1.23-fips-bookworm to 1.24-fips-bookworm.
---
updated-dependencies:
- dependency-name: oss/go/microsoft/golang
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
* upstream docker image, use native fips
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* bump go version
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2025-03-30 03:26:30 +02:00
64f1b8207d
web: bump tar-fs from 2.1.1 to 2.1.2 in /web ( #13713 )
...
Bumps [tar-fs](https://github.com/mafintosh/tar-fs ) from 2.1.1 to 2.1.2.
- [Commits](https://github.com/mafintosh/tar-fs/compare/v2.1.1...v2.1.2 )
---
updated-dependencies:
- dependency-name: tar-fs
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-29 00:51:08 +01:00
b2c13f0614
core: fix flaky tests introduced with is_superuser API fix ( #13709 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-28 22:14:15 +01:00
6965628020
root: bump python patch version to 3.12.9 ( #13710 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-28 22:13:34 +01:00
04be734c49
email tasks migration
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-28 18:55:05 +01:00
1ed6cf7517
more migration
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-28 17:43:17 +01:00
608f63e9a2
website/docs: add reference to setting in CVE ( #13707 )
...
* website/docs: add reference to setting in CVE
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* reword
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-28 17:42:45 +01:00
22fa3a7fba
web: bump API Client version ( #13708 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
2025-03-28 17:42:24 +01:00
d6c4f97158
fix outposts tests
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-28 17:40:01 +01:00
781704fa38
Merge branch 'main' into celery-2-dramatiq
2025-03-28 17:35:05 +01:00
28f4d7d566
fix tests
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-28 17:16:34 +01:00
bcfd6fefa7
release: 2025.2.3 ( #13705 )
...
* release: 2025.2.3
* fix uv lock not being bumped
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-28 17:08:57 +01:00
eae18d0016
website/docs: fix 2025 CVE category title ( #13703 )
...
* website/docs: fix 2025 CVE category title
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add sideeffect of changing session backend
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-28 14:55:56 +01:00
4a12a57c5f
website/docs: update release notes for 2024.12 and 2025.2 ( #13702 )
...
* website/docs: update release notes for 2025.2 and 2024.12
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update v2
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-28 14:49:35 +01:00
71294b7deb
security: fix CVE-2025-29928 ( #13695 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-28 14:20:09 +01:00
5af907db0c
stages/identification: refresh captcha on failure ( #13697 )
...
* refactor cleanup behavior after stage form submit
* refresh captcha on failing Identification stage
* Revert "stages/identification: check captcha after checking authentication (#13533 )"
This reverts commit b7beac6795
.
Including a Captcha stage in an Identification stage is partially to
prevent password spraying attacks. The reverted commit negated this
feature to fix a UX bug. After 6fde42a9170, the functionality can now be
reinstated.
---------
Co-authored-by: Simonyi Gergő <gergo@goauthentik.io >
2025-03-28 14:16:13 +01:00
63a118a2ba
core: fix non-exploitable open redirect ( #13696 )
...
discovered by @dominic-r
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-28 14:15:39 +01:00
d9a3c34a44
core: fix core/user is_superuser filter ( #13693 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-28 14:00:13 +01:00
23bdad7574
website: bump @types/semver from 7.5.8 to 7.7.0 in /website ( #13682 )
...
Bumps [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver ) from 7.5.8 to 7.7.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver )
---
updated-dependencies:
- dependency-name: "@types/semver"
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-28 13:21:30 +01:00
991778b2be
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 20:00:32 +01:00
8ee90826fc
enterprise/stages/source: set is_redirected in flow source stage redirects to ( #13604 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-27 19:07:36 +01:00
9465dafd7d
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 18:54:38 +01:00
75c13a8801
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 18:51:47 +01:00
8c7d4d2f5e
website/docs: Clarify frontend development. Document local overrides. ( #13586 )
...
* website/docs: Clarify setup flow. Document local overrides.
* Update website/docs/developer-docs/setup/frontend-dev-environment.md
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
* Update website/docs/developer-docs/setup/frontend-dev-environment.md
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
* Update website/docs/developer-docs/setup/frontend-dev-environment.md
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
* Update website/docs/developer-docs/setup/frontend-dev-environment.md
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
* Update website/docs/developer-docs/setup/frontend-dev-environment.md
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
* Update website/docs/developer-docs/setup/frontend-dev-environment.md
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
* Update website/docs/developer-docs/setup/full-dev-environment.mdx
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
* Update website/docs/install-config/install/docker-compose.mdx
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
* Update website/docs/developer-docs/setup/frontend-dev-environment.md
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
* Update website/docs/developer-docs/setup/full-dev-environment.mdx
Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com >
* Update authentik/lib/default.yml
Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com >
* fix linting to please the ci check
---------
Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com >
Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com >
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Co-authored-by: Dominic R <dominic@sdko.org >
Co-authored-by: Marcelo Elizeche Landó <marcelo@goauthentik.io >
2025-03-27 11:49:16 -05:00
8ae0f145f5
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 17:30:30 +01:00
4d0e0e3afe
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 15:44:54 +01:00
7aeb874ded
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 15:44:24 +01:00
ffc695f7b8
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 15:42:26 +01:00
93cb621af3
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 14:50:58 +01:00
3a34680196
run scheduler
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 14:46:36 +01:00
2335a3130a
lint
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 14:35:16 +01:00
0bc4b69f52
lint
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 14:33:56 +01:00
43c5c1276d
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 14:33:42 +01:00
a3ebfd9bbd
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-27 14:24:56 +01:00
d72def0368
web/admin: add sync status refresh button ( #13678 )
...
* web/admin: add refresh button to sync status card
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* auto-expand if there's just one task
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-27 00:06:12 +01:00
5bcf501842
outposts/ldap: fix paginator going into infinite loop ( #13677 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-03-27 00:05:43 +01:00
13fc216c68
website/integrations-all: convert authentik configuration to wizard ( #13144 )
...
* init
* 6 more
* tana...
* quick reformat
* welp only time for one change
* wip
* wip
* wip
* wip
* wip
* wip
* wip
* wip
* Revert "wip"
This reverts commit e71f0d22e3f093350e8d12eaad5e5c0f9d38253c.
* wip
* wip
* wip
* wip
* wip
* wip
* wip
* wip
* wip
* a
2025-03-26 16:38:57 -05:00
27aed4b315
web: ensure wizard modal closes on first cancel click ( #13636 )
...
The application wizard modal previously required two clicks of the cancel
button to close when opened from the User Interface.
This was caused by improper event handling where events
would propagate up the DOM tree potentially triggering multiple handlers.
2025-03-26 18:16:46 +01:00
84b5992e55
ci: bump golangci/golangci-lint-action from 6 to 7 ( #13661 )
...
* ci: bump golangci/golangci-lint-action from 6 to 7
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6 to 7.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* fix lint
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix v2
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix v3
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2025-03-26 18:03:20 +01:00
7eb985f636
website: bump the build group in /website with 3 updates ( #13660 )
...
Bumps the build group in /website with 3 updates: [@swc/core-darwin-arm64](https://github.com/swc-project/swc ), [@swc/core-linux-arm64-gnu](https://github.com/swc-project/swc ) and [@swc/core-linux-x64-gnu](https://github.com/swc-project/swc ).
Updates `@swc/core-darwin-arm64` from 1.11.12 to 1.11.13
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.11.12...v1.11.13 )
Updates `@swc/core-linux-arm64-gnu` from 1.11.12 to 1.11.13
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.11.12...v1.11.13 )
Updates `@swc/core-linux-x64-gnu` from 1.11.12 to 1.11.13
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.11.12...v1.11.13 )
---
updated-dependencies:
- dependency-name: "@swc/core-darwin-arm64"
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build
- dependency-name: "@swc/core-linux-arm64-gnu"
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build
- dependency-name: "@swc/core-linux-x64-gnu"
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: build
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-26 17:05:42 +01:00
d3172ae904
web: bump vite from 5.4.14 to 5.4.15 in /web ( #13672 )
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 5.4.14 to 5.4.15.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.15/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v5.4.15/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-26 14:22:25 +01:00
88662b54c1
core: bump astral-sh/uv from 0.6.9 to 0.6.10 ( #13669 )
...
Bumps [astral-sh/uv](https://github.com/astral-sh/uv ) from 0.6.9 to 0.6.10.
- [Release notes](https://github.com/astral-sh/uv/releases )
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/uv/compare/0.6.9...0.6.10 )
---
updated-dependencies:
- dependency-name: astral-sh/uv
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-26 12:01:43 +01:00
b38bc8c1c4
lifecycle/aws: bump aws-cdk from 2.1005.0 to 2.1006.0 in /lifecycle/aws ( #13670 )
...
Bumps [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk ) from 2.1005.0 to 2.1006.0.
- [Release notes](https://github.com/aws/aws-cdk-cli/releases )
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1006.0/packages/aws-cdk )
---
updated-dependencies:
- dependency-name: aws-cdk
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-26 12:00:06 +01:00
a9b648842a
website/docs: Flesh out integrations copy changes. ( #13619 )
...
* website/docs: Flesh out integrations copy changes.
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com >
* Lint.
* Revert removed section. Fix links.
* reorder integrations page sections
Signed-off-by: Fletcher Heisler <fheisler@users.noreply.github.com >
* add back page title
Signed-off-by: Fletcher Heisler <fheisler@users.noreply.github.com >
* move cards to very end of topic
* fix broken anchor link
---------
Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com >
Signed-off-by: Fletcher Heisler <fheisler@users.noreply.github.com >
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Co-authored-by: Fletcher Heisler <fheisler@users.noreply.github.com >
Co-authored-by: Tana M Berry <tana@goauthentik.com >
2025-03-25 12:40:21 -05:00
af5b894e62
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-25 18:32:06 +01:00
c982066235
wip
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-03-25 18:31:43 +01:00