* website: bump the docusaurus group in /website with 3 updates Bumps the docusaurus group in /website with 3 updates: [@docusaurus/plugin-client-redirects](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects), [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic) and [@docusaurus/theme-mermaid](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid). Updates `@docusaurus/plugin-client-redirects` from 2.4.3 to 3.0.0 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.0.0/packages/docusaurus-plugin-client-redirects) Updates `@docusaurus/preset-classic` from 2.4.3 to 3.0.0 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.0.0/packages/docusaurus-preset-classic) Updates `@docusaurus/theme-mermaid` from 2.4.3 to 3.0.0 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.0.0/packages/docusaurus-theme-mermaid) --- updated-dependencies: - dependency-name: "@docusaurus/plugin-client-redirects" dependency-type: direct:production update-type: version-update:semver-major dependency-group: docusaurus - dependency-name: "@docusaurus/preset-classic" dependency-type: direct:production update-type: version-update:semver-major dependency-group: docusaurus - dependency-name: "@docusaurus/theme-mermaid" dependency-type: direct:production update-type: version-update:semver-major dependency-group: docusaurus ... Signed-off-by: dependabot[bot] <support@github.com> * update Signed-off-by: Jens Langhammer <jens@goauthentik.io> * migrate docusaurus config to ts Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix docs-only build Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Jens Langhammer <jens@goauthentik.io> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jens Langhammer <jens@goauthentik.io>
		
			
				
	
	
		
			281 lines
		
	
	
		
			7.4 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
			
		
		
	
	
			281 lines
		
	
	
		
			7.4 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
---
 | 
						|
title: Release 2022.9
 | 
						|
slug: "/releases/2022.9"
 | 
						|
---
 | 
						|
 | 
						|
## Breaking changes
 | 
						|
 | 
						|
-   `WORKERS` environment variable has been renamed to match other config options, see [Configuration](../installation/configuration#authentik_web__workers)
 | 
						|
 | 
						|
## New features
 | 
						|
 | 
						|
-   UI for Duo device Import
 | 
						|
 | 
						|
    Instead of manually having to call an API endpoint, there's now a UI for importing Duo devices.
 | 
						|
 | 
						|
-   Duo Admin API integration
 | 
						|
 | 
						|
    When using a Duo MFA, Duo Access or Duo Beyond plan, authentik can now automatically import devices from Duo into authentik. More info [here](../flow/stages/authenticator_duo/).
 | 
						|
 | 
						|
## API Changes
 | 
						|
 | 
						|
#### What's New
 | 
						|
 | 
						|
---
 | 
						|
 | 
						|
##### `POST` /stages/authenticator/duo/{stage_uuid}/import_device_manual/
 | 
						|
 | 
						|
##### `POST` /stages/authenticator/duo/{stage_uuid}/import_devices_automatic/
 | 
						|
 | 
						|
#### What's Deleted
 | 
						|
 | 
						|
---
 | 
						|
 | 
						|
##### `POST` /stages/authenticator/duo/{stage_uuid}/import_devices/
 | 
						|
 | 
						|
#### What's Changed
 | 
						|
 | 
						|
---
 | 
						|
 | 
						|
##### `GET` /stages/authenticator/duo/{stage_uuid}/
 | 
						|
 | 
						|
###### Return Type:
 | 
						|
 | 
						|
Changed response : **200 OK**
 | 
						|
 | 
						|
-   Changed content type : `application/json`
 | 
						|
 | 
						|
    -   Added property `admin_integration_key` (string)
 | 
						|
 | 
						|
##### `PUT` /stages/authenticator/duo/{stage_uuid}/
 | 
						|
 | 
						|
###### Request:
 | 
						|
 | 
						|
Changed content type : `application/json`
 | 
						|
 | 
						|
-   Added property `admin_integration_key` (string)
 | 
						|
 | 
						|
-   Added property `admin_secret_key` (string)
 | 
						|
 | 
						|
###### Return Type:
 | 
						|
 | 
						|
Changed response : **200 OK**
 | 
						|
 | 
						|
-   Changed content type : `application/json`
 | 
						|
 | 
						|
    -   Added property `admin_integration_key` (string)
 | 
						|
 | 
						|
##### `PATCH` /stages/authenticator/duo/{stage_uuid}/
 | 
						|
 | 
						|
###### Request:
 | 
						|
 | 
						|
Changed content type : `application/json`
 | 
						|
 | 
						|
-   Added property `admin_integration_key` (string)
 | 
						|
 | 
						|
-   Added property `admin_secret_key` (string)
 | 
						|
 | 
						|
###### Return Type:
 | 
						|
 | 
						|
Changed response : **200 OK**
 | 
						|
 | 
						|
-   Changed content type : `application/json`
 | 
						|
 | 
						|
    -   Added property `admin_integration_key` (string)
 | 
						|
 | 
						|
##### `GET` /flows/executor/{flow_slug}/
 | 
						|
 | 
						|
###### Return Type:
 | 
						|
 | 
						|
Changed response : **200 OK**
 | 
						|
 | 
						|
-   Changed content type : `application/json`
 | 
						|
 | 
						|
    Added 'xak-flow-error' component:
 | 
						|
 | 
						|
    -   Property `type` (string)
 | 
						|
 | 
						|
        Enum values:
 | 
						|
 | 
						|
        -   `native`
 | 
						|
        -   `shell`
 | 
						|
        -   `redirect`
 | 
						|
 | 
						|
    -   Property `flow_info` (object)
 | 
						|
 | 
						|
        > Contextual flow information for a challenge
 | 
						|
 | 
						|
        -   Property `title` (string)
 | 
						|
 | 
						|
        -   Property `background` (string)
 | 
						|
 | 
						|
        -   Property `cancel_url` (string)
 | 
						|
 | 
						|
        -   Property `layout` (string)
 | 
						|
 | 
						|
            Enum values:
 | 
						|
 | 
						|
            -   `stacked`
 | 
						|
            -   `content_left`
 | 
						|
            -   `content_right`
 | 
						|
            -   `sidebar_left`
 | 
						|
            -   `sidebar_right`
 | 
						|
 | 
						|
    -   Property `component` (string)
 | 
						|
 | 
						|
    -   Property `response_errors` (object)
 | 
						|
 | 
						|
    -   Property `pending_user` (string)
 | 
						|
 | 
						|
    -   Property `pending_user_avatar` (string)
 | 
						|
 | 
						|
    -   Property `request_id` (string)
 | 
						|
 | 
						|
    -   Property `error` (string)
 | 
						|
 | 
						|
    -   Property `traceback` (string)
 | 
						|
 | 
						|
##### `POST` /flows/executor/{flow_slug}/
 | 
						|
 | 
						|
###### Return Type:
 | 
						|
 | 
						|
Changed response : **200 OK**
 | 
						|
 | 
						|
-   Changed content type : `application/json`
 | 
						|
 | 
						|
    Added 'xak-flow-error' component:
 | 
						|
 | 
						|
    -   Property `type` (string)
 | 
						|
 | 
						|
        Enum values:
 | 
						|
 | 
						|
        -   `native`
 | 
						|
        -   `shell`
 | 
						|
        -   `redirect`
 | 
						|
 | 
						|
    -   Property `flow_info` (object)
 | 
						|
 | 
						|
        > Contextual flow information for a challenge
 | 
						|
 | 
						|
        -   Property `title` (string)
 | 
						|
 | 
						|
        -   Property `background` (string)
 | 
						|
 | 
						|
        -   Property `cancel_url` (string)
 | 
						|
 | 
						|
        -   Property `layout` (string)
 | 
						|
 | 
						|
            Enum values:
 | 
						|
 | 
						|
            -   `stacked`
 | 
						|
            -   `content_left`
 | 
						|
            -   `content_right`
 | 
						|
            -   `sidebar_left`
 | 
						|
            -   `sidebar_right`
 | 
						|
 | 
						|
    -   Property `component` (string)
 | 
						|
 | 
						|
    -   Property `response_errors` (object)
 | 
						|
 | 
						|
    -   Property `pending_user` (string)
 | 
						|
 | 
						|
    -   Property `pending_user_avatar` (string)
 | 
						|
 | 
						|
    -   Property `request_id` (string)
 | 
						|
 | 
						|
    -   Property `error` (string)
 | 
						|
 | 
						|
    -   Property `traceback` (string)
 | 
						|
 | 
						|
##### `POST` /stages/authenticator/duo/
 | 
						|
 | 
						|
###### Request:
 | 
						|
 | 
						|
Changed content type : `application/json`
 | 
						|
 | 
						|
-   Added property `admin_integration_key` (string)
 | 
						|
 | 
						|
-   Added property `admin_secret_key` (string)
 | 
						|
 | 
						|
###### Return Type:
 | 
						|
 | 
						|
Changed response : **201 Created**
 | 
						|
 | 
						|
-   Changed content type : `application/json`
 | 
						|
 | 
						|
    -   Added property `admin_integration_key` (string)
 | 
						|
 | 
						|
##### `GET` /stages/authenticator/duo/
 | 
						|
 | 
						|
###### Return Type:
 | 
						|
 | 
						|
Changed response : **200 OK**
 | 
						|
 | 
						|
-   Changed content type : `application/json`
 | 
						|
 | 
						|
    -   Changed property `results` (array)
 | 
						|
 | 
						|
        Changed items (object): > AuthenticatorDuoStage Serializer
 | 
						|
 | 
						|
        -   Added property `admin_integration_key` (string)
 | 
						|
 | 
						|
## Minor changes/fixes
 | 
						|
 | 
						|
-   \*: cleanup stray print calls
 | 
						|
-   \*: remove remaining default creation code in squashed migrations
 | 
						|
-   blueprint: fix EntryInvalidError not being handled in tasks
 | 
						|
-   blueprints: add meta model to apply blueprint within blueprint for dependencies (#3486)
 | 
						|
-   blueprints: don't export events by default and exclude anonymous user
 | 
						|
-   blueprints: OCI registry support (#3500)
 | 
						|
-   blueprints: use correct log level when re-logging import validation logs
 | 
						|
-   core: fix custom favicon not being set correctly on load
 | 
						|
-   core: improve error template (#3521)
 | 
						|
-   crypto: add command to import certificates
 | 
						|
-   events: fix MonitoredTasks' save_on_success not behaving as expected
 | 
						|
-   events: reset task info when not saving on success
 | 
						|
-   events: save event to test notification transport
 | 
						|
-   flows: fix incorrect diagram for policies bound to flows
 | 
						|
-   flows: migrate FlowExecutor error handler to native challenge instead of shell
 | 
						|
-   internal: fix outposts not logging flow execution errors correctly
 | 
						|
-   internal: optimise outpost's flow executor to use less requests
 | 
						|
-   internal: use config system for workers/threads, document the settings (#3626)
 | 
						|
-   outposts: fix oauth state when using signature routing (#3616)
 | 
						|
-   outposts/proxy: fix redirect path when external host is a subdirectory (#3628)
 | 
						|
-   providers/oauth2: add x5c (#3556)
 | 
						|
-   providers/proxy: fix routing based on signature in traefik and caddy
 | 
						|
-   root: make redis persistent in docker-compose
 | 
						|
-   root: reuse custom log helper from config and cleanup duplicate functions
 | 
						|
-   root: shorten outpost docker healthcheck intervals
 | 
						|
-   sources/ldap: start_tls before binding but without reading server info
 | 
						|
-   sources/oauth: use GitHub's dedicated email API when no public email address is configured
 | 
						|
-   sources/oauth: use UPN for username with azure AD source
 | 
						|
-   stages/authenticator_duo: fix 404 when current user does not have permissions to view stage
 | 
						|
-   stages/authenticator_duo: improved import (#3601)
 | 
						|
-   stages/consent: default to expiring consent instead of always_require
 | 
						|
-   tenants: handle all errors in default_locale
 | 
						|
-   web: fix checkbox styling on applications form
 | 
						|
-   web: fix scrolling in modals in low-height views (#3596)
 | 
						|
-   web: use mermaidjs (#3623)
 | 
						|
-   web/admin: enable blueprint instances by default
 | 
						|
-   web/flows: fix ak-locale prompt being rendered without name attribute
 | 
						|
-   web/flows: update flow background
 | 
						|
-   web/user: justify content on user settings page on desktop
 | 
						|
 | 
						|
## Upgrading
 | 
						|
 | 
						|
This release does not introduce any new requirements.
 | 
						|
 | 
						|
### docker-compose
 | 
						|
 | 
						|
Download the docker-compose file for 2022.9 from [here](https://goauthentik.io/version/2022.9/docker-compose.yml). Afterwards, simply run `docker-compose up -d`.
 | 
						|
 | 
						|
### Kubernetes
 | 
						|
 | 
						|
Update your values to use the new images:
 | 
						|
 | 
						|
```yaml
 | 
						|
image:
 | 
						|
    repository: ghcr.io/goauthentik/server
 | 
						|
    tag: 2022.9.1
 | 
						|
```
 |