ee04f39e28
enterprise: fix API mixin license validity check (cherry-pick #11331 ) ( #11342 )
...
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
Co-authored-by: Simonyi Gergő <28359278+gergosimonyi@users.noreply.github.com >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
fix API mixin license validity check (#11331 )
2024-09-11 13:22:01 +00:00
2c6aa72f3c
sources/ldap: fix missing search attribute (cherry-pick #11125 ) ( #11340 )
...
sources/ldap: fix missing search attribute (#11125 )
* unrelated
* sources/ldap: fix ldap sync not requesting uniqueness attribute
* check object_uniqueness_field for none
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-09-11 14:03:12 +02:00
bd0afef790
enterprise: show specific error if Install ID is invalid in license (cherry-pick #11317 ) ( #11319 )
...
enterprise: show specific error if Install ID is invalid in license (#11317 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-09-10 19:38:45 +02:00
fc11cc0a1a
core: fix permission check for scoped impersonation (cherry-pick #11315 ) ( #11316 )
...
core: fix permission check for scoped impersonation (#11315 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-09-10 14:19:30 +02:00
2ea04440db
events: optimise marking events as seen (cherry-pick #11297 ) ( #11299 )
...
events: optimise marking events as seen (#11297 )
* events: optimise marking events as seen
* add tests
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-09-09 19:26:43 +02:00
96e1636be3
core: ensure all providers have correct priority (cherry-pick #11280 ) ( #11281 )
...
core: ensure all providers have correct priority (#11280 )
follow up to #11267 which broke SAML lookup
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-09-08 16:09:09 +02:00
c546451a73
root: fix ensure `outpost_connection_discovery runs on worker startup (cherry-pick #11260 ) ( #11270 )
...
root: fix ensure `outpost_connection_discovery runs on worker startup (#11260 )
* root: fix ensure outpost_connection_discovery runs on worker startup
Make outpost_connection_discovery a startup task for default_tenant to ensure it's ran during worker startup. Without this waiting for the 8 hour schedule to fire is required.
fixes: https://github.com/goauthentik/authentik/issues/10933
* format
---------
Signed-off-by: Anthony Rabbito <arabbito@coreweave.com >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Anthony Rabbito <hello@anthonyrabbito.com >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2024-09-07 21:54:30 +02:00
61778053b4
core: ensure proxy provider is correctly looked up (cherry-pick #11267 ) ( #11269 )
...
core: ensure proxy provider is correctly looked up (#11267 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-09-07 21:53:30 +02:00
f5580d311d
release: 2024.8.1
2024-09-07 16:14:54 +02:00
bfaa1046b2
core: fix missing argument name escaping for property mapping (cherry-pick #11231 ) ( #11252 )
...
core: fix missing argument name escaping for property mapping (#11231 )
* escape property mapping args
* improve display of error
* fix error handling, missing dry_run argument
* use different sanitisation
* update docs
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-09-06 16:47:27 +02:00
95c30400cc
providers/ldap: rework search_group migration to work with read replicas (cherry-pick #11228 ) ( #11229 )
...
providers/ldap: rework search_group migration to work with read replicas (#11228 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-09-05 15:57:01 +02:00
a1da183721
root: backport s3 storage changes (cherry-pick #11181 ) ( #11183 )
...
root: backport s3 storage changes (#11181 )
re-add _strip_signing_parameters
removed in https://github.com/jschneier/django-storages/pull/1402
could probably be re-factored to use the same approach that PR uses
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-09-03 22:08:55 +02:00
feea2df0b1
core: fix change_user_type always requiring usernames (cherry-pick #11177 ) ( #11178 )
...
core: fix change_user_type always requiring usernames (#11177 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-09-03 19:09:53 +02:00
6fd87d9ced
providers/ldap: fix migration assuming search group is set (cherry-pick #11170 ) ( #11172 )
...
providers/ldap: fix migration assuming search group is set (#11170 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-09-03 16:27:06 +02:00
091e4d3e4c
enterprise: fix incorrect comparison for latest validity date (cherry-pick #11109 ) ( #11110 )
...
enterprise: fix incorrect comparison for latest validity date (#11109 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-08-29 01:58:56 +02:00
6070508058
providers/oauth2: audit_ignore last_login change for generated service account (cherry-pick #11085 ) ( #11086 )
...
providers/oauth2: audit_ignore last_login change for generated service account (#11085 )
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-08-27 14:32:17 +02:00
ec13a5d84d
release: 2024.8.0-rc1
2024-08-26 16:34:53 +02:00
057de82b01
schemas: fix XML Schema loading...for some reason?
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-26 16:34:47 +02:00
a6225ad7a7
root: backport version bump ( #11045 )
...
* fix outpost form not loading apps for correct type
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix bug from previous pr
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* release: 2024.6.4
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-23 16:33:07 +02:00
41fbb6dbd7
enterprise: add up-to-date license status ( #11042 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-23 14:05:19 +02:00
3daf8f8db4
security: fix CVE-2024-42490 ( #11022 )
...
CVE-2024-42490
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-22 17:17:06 +02:00
eafb7093c9
providers/scim: optimize sending all members within a group ( #9968 )
...
* providers/scim: optimize sending all members within a group
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* correctly batch requests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-22 16:39:18 +02:00
46acab3b2e
providers/scim: add API endpoint to sync single user ( #8486 )
...
* add api
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add UI
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-22 16:38:55 +02:00
6a9dcdea71
providers/saml: fix incorrect migration for sign_response ( #10975 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-19 16:28:40 +02:00
eb5842fa5a
rbac: generate blueprint schema permissions from defined models not DB ( #10962 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-19 13:44:13 +02:00
d577152f83
providers/SAML: encryption support ( #10934 )
...
* providers/saml: add option to sign assertion and or response
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add encryption
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add form option
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests for API
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-17 21:10:28 +02:00
c3d3646645
web/flows: clean up loading, syntax and transitions ( #10792 )
...
* remove redundant bindings to ${true}
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* better ui for loading during autosubmit
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* default to loading label when setting ?loading
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove more html``
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* refactor non_field_errors
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove more html``
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* no loading label for overlay
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix py
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Revert "web: bump the wdio group across 2 directories with 5 updates (#10945 )"
This reverts commit ea14c57989jens@goauthentik.io >
2024-08-16 14:10:08 +02:00
1cf7b634e6
stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs ( #10913 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
2024-08-15 14:15:07 +02:00
6aee405397
providers/ldap: fix lint ( #10910 )
2024-08-14 15:53:27 +00:00
5d2a3dfab0
providers/ldap: fix missing using in migrations ( #10906 )
2024-08-14 15:22:17 +00:00
8f53d0b9f3
providers/ldap: Remove search group ( #10639 )
...
* remove search_group
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make api operations cleaerer
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix migration
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* actually use get
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* use correct api client for ldap
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix migration
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* unrelated: fix migration warning
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* unrelated: fix styling issue in dark mode
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* unrelated-ish fix button order in wizard
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* unrelated: fix missing css import
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Optimised images with calibre/image-actions
* Update index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Signed-off-by: Jens L. <jens@beryju.org >
* Update index.md
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Signed-off-by: Jens L. <jens@beryju.org >
* Apply suggestions from code review
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
Signed-off-by: Jens L. <jens@beryju.org >
* update release notes based on new template
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Signed-off-by: Jens L. <jens@beryju.org >
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com >
2024-08-14 16:31:11 +02:00
5a2ed5bf30
web: bug - licenseStatus is not defined on initial render ( #10894 )
...
* web: bug / licenseStatus is not defined on initial render
- Test if the licenseStatus is available before rendering the banner
- The banner is rendered correctly when the status becomes available.
The loading sequence is such that if the user reloads the page, the
first attempt to render the license banner fails because the
licenseStatus field is not yet populated; the result is an ugly
`licenseStatus is undefined` on the console.
Because the licenseStatus is a live context, when it is updated
any objects that subscribe to it are scheduled for a re-render.
This is why the system appears to behave correctly now.
While this is invisible to the user, it's still undesirable behavior.
Returning `nothing` requires that we remove the type declarations
as return values from the renderers. Typescript's inferers do
just fine.
* fix some other small things
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2024-08-13 13:39:13 -07:00
bb9e679b9a
outposts: add better UI for showing mismatched versions ( #10885 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-12 23:17:15 +02:00
a7203be850
providers: add provider/ prefix for property mappings API ( #10874 )
2024-08-12 13:13:08 +00:00
a073b7a5b1
enterprise: add support for license flags ( #10842 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-09 22:20:01 +02:00
4b5bb77d99
enterprise: UI improvements, better handling of expiry ( #10828 )
...
* web/admin: show enterprise banner on the very top
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* rework license
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix a bunch of things
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add some more tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add more tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix middleware
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* better api
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests for and fix read only mode
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* field name consistency
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-09 14:26:38 +02:00
0b6fb8ff5a
stages/authenticator: actually update last_used ( #10813 )
2024-08-08 12:19:12 +00:00
fd0127ae2a
sources/ldap: Add enabled filter for ldap_password_validate signal ( #10823 )
2024-08-08 14:03:39 +02:00
68af5b0572
sources/plex: add property mappings ( #10772 )
2024-08-08 11:36:24 +02:00
19c3f7dd80
sources/saml: Basic support for EncryptedAssertion element. ( #10099 )
...
* source/saml: Updated backend for encrypted assertion support
* source/saml: all lint-fix checks passed
* source/saml: Used Optional type instead of union, on enc_key_descriptor type hint
* source/saml: request_encrypted_assertion model field migration
* source/saml: Added 'noqa' comment to type hint on encryption key descriptor
* small fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add to UI
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add some error handling
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* sources/saml: Pivot to encryption_kp model field, instead of request_encryption bool
* sources/saml: Typo fix
* re-create migrations
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update web
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add to release notes
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* unrelated fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add improve error handling, add tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* test metadata with encryption and remove WantAssertionsEncrypted since it's not in the schema
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* unrelated fix to radius path
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix unrelated fix...sigh
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* re-migrate
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2024-08-07 19:58:28 +02:00
83b02a17d5
sources: add property mappings for all oauth and saml sources ( #8771 )
...
Co-authored-by: Jens L. <jens@goauthentik.io >
2024-08-07 19:14:22 +02:00
d8c3b8bad2
stages/authenticator: add created, last_updated and last_used metadata ( #10636 )
...
* stages/authenticator: add created, last_updated and last_used metadata
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* lint
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* also show for users
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* set allow_null
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2024-08-07 14:09:49 +02:00
340106594e
providers/proxy: avoid erroring on logout with session_id is None ( #9119 )
...
* providers/proxy: avoid erroring on logout with session_id is None
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* check for session and session_key in signals
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2024-08-07 14:09:32 +02:00
02e852b192
blueprints: handle model referencing non-existent app/model ( #10796 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-06 15:16:45 +02:00
3d63143c38
brands: add OIDC webfinger support ( #10400 )
...
* brands: add OIDC webfinger support for default application
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-06 14:00:01 +02:00
f7b16ed723
policies: add GeoIP policy ( #10454 )
...
* add GeoIP policy
* handle empty lists of ASNs and countries
* handle missing GeoIP database or missing IP from the database
The exceptions raised here are `PolicyException`s to let admins bypass
an execution failure.
* fix translations
whoops
* remove `GeoIPPolicyMode`
Use the policy binding's `negate` option instead
* fix `DataProvision` typing
`ak-dual-select-provider` can handle unpaginated data
* use `django-countries` instead of a static list of countries for ISO-3166
* simplify `GeoIPPolicyForm`
* pass `GeoIPPolicy` on empty policy
* add backend tests to `GeoIPPolicy`
* revise translations
* move `iso-3166/` to `policies/geoip_iso3166/`
* add client-side caching to ISO3166 API call
* fix `GeoIPPolicy` creation
The automatically generated APIs can't seem to handle `CountryField`,
so I'll have to do this by hand too.
* add docs for GeoIP Policy
* docs: stylize
add review suggestions from @tanberry
* refactor `GeoIPPolicy` API
It is now as declarative as I could make it.
* clean up `api.py` and `views.py`
2024-08-06 10:37:29 +00:00
4363c899ac
release: 2024.6.3
2024-08-05 20:08:28 +02:00
b942ae7849
core: applications api: properly select provider ( #10373 )
...
* core: applications api: properly select provider
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* fixup get_launch_url
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* Reapply "core: applications api: add option to only list apps with launch url (#10336 )" (#10370 )
This reverts commit 763a19b914marc.schmitt@risson.space >
* more fixes
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* make website
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* remove serializer change
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
---------
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2024-08-05 16:23:00 +02:00
446a65d56d
root: remove warnings ( #10774 )
...
* remove facebook sdk
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* switch to newer opencontainers fork
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-05 14:50:01 +02:00
0f9459a3f0
enterprise/rac: fix error when listing connection tokens as non-superuser ( #10771 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2024-08-05 13:51:37 +02:00
