trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
13,334 Commits 95 Branches 330 Tags 336 MiB
Commit Graph

2273 Commits

Author SHA1 Message Date
Jens L 22ee587e9f
web/user: fix search input styling (#5745) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-24 21:50:35 +02:00
Jens L 1ba734cc7b
web/user: fix MFA enroll dropdown broken when password stage has no configuration flow (#5744) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-24 21:19:19 +02:00
Ken Sternberg 7c43c1a05b
web/user: fix broken search on application library (#5743) 
web: fix broken search on application library

This is *mortifying*.  I didn't test this well enough, and apparently
broke it again once I'd tested it.  This patch restores the original
behavior ("no match" means "just show everything"), and fixes a
small bit of semantic lint -- the "search" feature should not be
assigning meaning to what it finds; it's enough to pass back the
prioritized list to whatever client wanted it, and let the client
decide what to do with it.
 2023-05-24 11:51:49 -07:00
Ken Sternberg 7c7957f160
web/user: refactor LibraryPage for testing, add CTA (#5665) 
* 5171: Fixed README to comply with Prettier rules.

I'm pretty impressed that that worked.  Good on Jens for having that
in the prettier rules.

* web: revised package.json

Removed the migration and web/README.md file.  The former should not have
been included; the latter is currently unprofessional in tone.

* web: revise LibraryPage, add CTA

TL;DR:

- Separated LibraryPage into a bunch of different, independent parts, none of which require
Authentik running to be testable or viewable.
- This made adding the "Add an Application" CTA easier.
- This sets the stage for unit and view testing of the UI

This commit revises the LibraryPage, devolving it into a couple of independent components that have
to asynchronous dependencies, with a single asynchronous master:

- LibraryPage: Loads the UIConfig, UserConfig, and CoreApi, and once those are loaded, launches the
  LibraryPageImpl.
- LibraryPageImpl: the ListView of applications available, and updates the ListView according to
  search criteria it receives via an event listener.
  - LibraryPageImpl.css: The stylesheet. Put here because it's visual clutter.
  - LibraryPageImpl.utils: defines static functions used to filter the view. Here because, again, it
    would otherwise be visual clutter of the LibraryPageImpl.
- ApplicationEmptyState: Shows the "You have no applications" and, if the user is a superuser, the
  "Add an application" button.
- ApplicationSearch: Contains the Fuse implementation and, as the search result is updated, sends
  the selected and filtered app list to the LibraryPage via an event.  Also controls the "Choose an
  application by pressing Enter" event.
- ApplicationList: Displays the list of applications.

All of these components are _responsive_ to changes in the Apps collection via the LibraryPage
itself, but none of them invoke the Apps collection, UIConfig, and CoreApi directly, so it should be
possible to create Storybook implementations that view the LibraryPageImpl itself without having to
have an instance of Authentik running.

If the user is a superuser, the "You have no applications" panel now shows the "Add an Application"
button and a link to the documentation on how to add an application.

* web: lint and prettier updates

\#\# Details

-   Resolves #5171

\#\# Changes

This just updates the prettier and eslint passes.

* \#\# Details

-   Resolves #5171

\#\# Changes

Removed unused declarations.

* \#\# Details

-   web: refactor LibraryPage, resolves #5171

\#\# Changes

Some changes found in code review, including an embarassing failure
to both remove the old internal accessor and propagate the new
one for "isAdmin".

A pattern is emerging that a LitComponent class should consist of:

- styles
- properties
- states
- queries
- other object fields
- constructor()
- connectedCallBack()
- disconnectedCallBack()
- event listeners
- callback helpers
- render helpers
- render()

... in that order.

* actually remove LibraryPage that got re-added in the rebase

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix router import

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use pf-c-button for CTA

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix different alignment compared to old version

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use docLink() for documentation link

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* also open docs in new tab

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* web: minor language changes

As requested by @Tana.

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-22 23:35:26 +02:00
Jens L 5d5938c412
sources/saml: separate verification cert (#5699) 
* sources/saml: allow separate verification certificate to be specified

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add migration to keep current behaviour

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update strings

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* keep testing verification

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-21 14:42:17 +02:00
transifex-integration[bot] 300901e93f
Translations for web/src/locales/en.po in zh-Hans (#5686) 
Translate web/src/locales/en.po in zh-Hans

100% translated source file: 'web/src/locales/en.po'
on the 'zh-Hans' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-05-19 11:05:51 +02:00
transifex-integration[bot] 33386b126c
Translations for web/src/locales/en.po in zh_CN (#5685) 
Translate web/src/locales/en.po in zh_CN

100% translated source file: 'web/src/locales/en.po'
on the 'zh_CN' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-05-19 11:05:33 +02:00
Jens Langhammer 6900ffffd8
release: 2023.5.1 2023-05-18 21:33:38 +02:00
Jens L 6cf7a72831
web/flows: improve UI for TOTP code input (#5676) 
* web/flows: improve UI for TOTP code input

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update locale

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update phrasing

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-18 18:41:53 +02:00
Jens L 79dcc30778
providers/radius: add warning message when radius provider is not used with outpost (#5656) 
* providers/radius: add warning message when radius provider is not used with outpost

same message as Proxy and LDAP provider have

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* format

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-17 16:19:33 +02:00
Jens L 68a1bcf233
providers/SCIM: improve backchannel signalling (#5657) 
* providers/scim: add warning when provider is not used as backchannel provider

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* providers/scim: don't sync SCIM provider that isn't used as backchannel at all

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-17 16:19:18 +02:00
Jens L 3195a75b9a
web/admin: fix radius provider page (#5651) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-17 10:56:24 +02:00
tograss daa3c91afc
web/flows: fix authenticator_validate device select not sent to backend (#5638) 2023-05-16 22:55:59 +02:00
Jens L 5eba598584
web/flows: update flow background (#5639) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-16 22:18:13 +02:00
Jens Langhammer 8faec99bd6
release: 2023.5.0 2023-05-16 14:00:48 +02:00
Jens L 52132112f6
web/elements: don't send value from writeOnly field that hasn't been modified (#5614) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-15 19:45:36 +02:00
Jens L 61434c807d
stages/identification: auto-redirect to source when no user fields are selected (#5583) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-11 16:52:30 +02:00
transifex-integration[bot] 78ecbc097c
Translations for web/src/locales/en.po in zh_CN (#5574) 
Translate web/src/locales/en.po in zh_CN

100% translated source file: 'web/src/locales/en.po'
on the 'zh_CN' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-05-11 11:55:49 +02:00
transifex-integration[bot] 7fc350bb0b
Translations for web/src/locales/en.po in zh-Hans (#5575) 
Translate web/src/locales/en.po in zh-Hans

100% translated source file: 'web/src/locales/en.po'
on the 'zh-Hans' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-05-11 11:55:35 +02:00
Jens L c8e074c363
web/admin: add description to notification rule group field (#5568) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-10 21:00:51 +02:00
Jens L fd8c1d41db
web/admin: only show prompt creation when editing prompt stage (#5572) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-10 20:58:13 +02:00
Michael OBrien eb071d4d90
providers/oauth2: add user UUID as subject option (#5556) 
* providers/oauth2: add user UUID as subject option

* Added translations for new OAuth2 subject option
 2023-05-10 17:50:13 +02:00
Jens L 8ccdbdc370
web/user: fix empty banner on application page not showing correctly (#5555) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-09 21:12:58 +02:00
transifex-integration[bot] ad2d38fa4a
Translations for web/src/locales/en.po in zh-Hans (#5534) 
Translate web/src/locales/en.po in zh-Hans

100% translated source file: 'web/src/locales/en.po'
on the 'zh-Hans' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-05-08 22:06:10 +02:00
transifex-integration[bot] b1b0cf8a87
Translations for web/src/locales/en.po in zh_CN (#5535) 
Translate web/src/locales/en.po in zh_CN

100% translated source file: 'web/src/locales/en.po'
on the 'zh_CN' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-05-08 22:06:01 +02:00
Jens L 99e2c6911c
web/admin: add example data for ldap property mapping (#5530) 
* web/admin: add example data for ldap property mapping

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* correctly retry flaky test

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-08 17:18:07 +02:00
Jens L 9bddc9b577
web/admin: remove redundant markdown notice (#5525) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-08 15:33:00 +02:00
Jens L 7acd0558f5
core: applications backchannel provider (#5449) 
* backchannel applications

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add webui

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* include assigned app in provider

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* improve backchannel provider list display

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make ldap provider compatible

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* show backchannel providers in app view

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make backchannel required for SCIM

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* cleanup api

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update docs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* Apply suggestions from code review

Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
Signed-off-by: Jens L. <jens@beryju.org>

* update docs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens L. <jens@beryju.org>
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com>
 2023-05-08 15:29:12 +02:00
Jens L 395dc08f05
web/flows: don't autoclose in redirect stage if redirecting to non-http protocol (#5506) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-07 12:58:14 +02:00
Jens L 8ded11806a
ci: fix backend translate compile ci job (#5500) 
* ci: fix backend translate compile ci job

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix redirect challenge for relative URLs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-06 13:42:41 +02:00
Jens L 36bd4b1e51
web/admin: use radio for client type (#5499) 
* web/admin: use radio for client type

also fix search select not correctly passing all items in .selected callback

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* include unrelated typo fix

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-06 00:11:27 +02:00
Jens L 95a679ab3b
web/flows: rework redirect logic (#5498) 
* web/flows: rework redirect logic

always use redirect stage, remove special logic from flow executor

show better message when redirect target URL isn't http or https (show notice to close the page)

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update strings

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-05 22:24:43 +02:00
Jens L 5ca8eefa8b
web: fix loading text not being loaded (#5497) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-05 22:22:32 +02:00
transifex-integration[bot] c0f3b56012
Translate 'web/src/locales/en.po' in 'zh_CN' (#5467) 
Translate web/src/locales/en.po in zh_CN

100% translated for the source file 'web/src/locales/en.po'
on the 'zh_CN' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-05-03 23:51:45 +03:00
transifex-integration[bot] 53415d8af8
Translate 'web/src/locales/en.po' in 'zh-Hans' (#5468) 
Translate web/src/locales/en.po in zh-Hans

100% translated for the source file 'web/src/locales/en.po'
on the 'zh-Hans' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-05-03 23:51:35 +03:00
Jens L 3f607ee2c8
policies: make policy engine modes consistent with database values (#5462) 
* policies: make policy engine modes consistent with database values

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix in ui

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix missing case

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-03 18:16:16 +03:00
Jens L da6e74a353
web/admin: fix file path setting not saved properly (#5463) 2023-05-03 18:13:34 +03:00
Jens L b1508b9d01
web/admin: add notes for users and groups (#5459) 
* web/admin: add notes for users and groups

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix unrelated typo

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-03 15:19:14 +03:00
Jens L 4601864f94
web/admin: add toggle to hide deactivated users (#5419) 
* web/admin: add toggle to hide deactivated users

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make default user path configurable

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-03 15:09:10 +03:00
Jens L 4da66cdb6b
web/admin: fix radius view page not imported (#5450) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-02 17:44:06 +03:00
Jens L fef841a458
web/admin: always override send method instead of assigning (#5426) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-30 19:55:29 +03:00
Jens L cc8f52b502
web/admin: fix state issue after clearIcon/Background is used and for… (#5423) 
web/admin: fix state issue after clearIcon/Background is used and form is re-used

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-30 14:25:18 +03:00
Jens L 1913b5ec41
web/admin: fix outpost integration list (#5418) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-29 20:35:17 +03:00
Jens L a8332eced6
web/flow: render prompt inputs without unsafeHTML (#5404) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-28 22:46:34 +03:00
transifex-integration[bot] 3af27323de
Translate 'web/src/locales/en.po' in 'zh_CN' (#5412) 
Translate web/src/locales/en.po in zh_CN

100% translated for the source file 'web/src/locales/en.po'
on the 'zh_CN' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-04-28 18:00:50 +03:00
transifex-integration[bot] 8a6febaa02
Translate 'web/src/locales/en.po' in 'zh-Hans' (#5411) 
Translate web/src/locales/en.po in zh-Hans

100% translated for the source file 'web/src/locales/en.po'
on the 'zh-Hans' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-04-28 18:00:35 +03:00
macmoritz 01663468de
web: Fix label not clickable for checkbox and choice field in prompts (#5355) 
* fix label not clickable for checkbox and choice field in prompts

* web/flows: fix label for attribute, fix checkbox styling

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

# Conflicts:
#	web/src/flow/stages/prompt/PromptStage.ts

---------

Co-authored-by: moritz <m.tratar@senbax.computer>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-28 12:26:39 +03:00
Jens L cb0fa6beb9
web: fix API browser error (#5402) 
* web: fix API browser error

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix lint

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update locale

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-28 12:21:46 +03:00
dependabot[bot] dfe8a98849
web: bump @lingui/cli from 3.17.2 to 4.0.0 in /web (#5387) 
* web: bump @lingui/cli from 3.17.2 to 4.0.0 in /web

Bumps [@lingui/cli](https://github.com/lingui/js-lingui) from 3.17.2 to 4.0.0.
- [Release notes](https://github.com/lingui/js-lingui/releases)
- [Changelog](https://github.com/lingui/js-lingui/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lingui/js-lingui/compare/v3.17.2...v4.0.0)

---
updated-dependencies:
- dependency-name: "@lingui/cli"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* update

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* also bump typescript

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix logic error

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-27 18:28:08 +03:00
Jens L e05f028c0a
web/admin: disable generated proxy config by default (#5372) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-25 15:24:31 +03:00
Jens L 158fe2f9bb
web/admin: fix cert expiry coloring (#5354) 2023-04-23 19:16:50 +03:00
Jens L f1cec03dcf
web/admin: remove grouping (#5343) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-21 21:31:23 +03:00
Jens L 948b83a2b2
web: fix build (#5327) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-20 19:48:56 +03:00
sdimovv ee6edec1d8
stages/prompt: Add initial_data prompt field and ability to select a default choice for choice fields (#5095) 
* Added initial_value to model

* Added initial_value to admin panel

* Added initial_value support to flows; updated tests

* Updated default blueprints

* update docs

* Fix test

* Fix another test

* Fix yet another test

* Add placeholder migration

* Remove unused import
 2023-04-19 12:27:51 +02:00
cskwrd 04cc7817ee
web/admin: fix blueprint instance list without metadata or labels (#5296) 
* Update BlueprintListPage.ts

`Object.hasOwn()` throws an exception if the first argument is `null` or `undefined`.
This change ensures that the first argument is never `null` or `undefined`.

Signed-off-by: cskwrd <cskwrd@users.noreply.github.com>

* Update web/src/admin/blueprints/BlueprintListPage.ts

Signed-off-by: Jens L. <jens@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: cskwrd <cskwrd@users.noreply.github.com>
Signed-off-by: Jens L. <jens@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L <jens@beryju.org>
 2023-04-19 12:15:26 +02:00
Jens L 6a554ef45a
web/admin: fix error when prompt previewing fails when loading the page (#5290) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-18 14:53:13 +02:00
Jens L 5f99887b50
web/admin: fix flow stage binding update failing (#5287) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-18 13:10:50 +02:00
Jens L ce5f6d5d43
release: Version 2023.4 (#5283) 
* release: 2023.4.0

* release: 2023.4.1
 2023-04-18 10:45:17 +02:00
Jens L 8160663214
release: 2023.4.0 (#5254) 2023-04-14 13:20:22 +02:00
Jens L e123afd9ee
web/admin: fix impersonate button layout (#5251) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-14 11:20:07 +02:00
Jens L 6a74fa11c6
providers/oauth2: inconsistent client secret generation (#5241) 
* use simpler char set for client secret

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* also adjust radius

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use similar logic in web to generate ids and secrets

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* dont use math.random

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-13 15:06:28 +02:00
Jens L c1615d044b
web/flows: update flow background (#5222) 2023-04-10 19:33:29 +02:00
Jens L f84c176bd0
web/admin: fix sidebar avatar not loaded (#5184) 2023-04-05 15:49:18 +02:00
Jens L 7c7bb9dc2e
web/admin: fix ldap form when editing scim provider from view page (#5164) 2023-04-04 12:42:18 +02:00
sdimovv 6192d01b7e
stages: Add ability to set user friendly names for MFA stages (#5005) 
* Added ability to name MFA stage

* Schema

* Changed Charfield to Textfield

* Regenerated schema

* Add explicit required

* set null instead of blank so title check works

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add help text and adjust wording

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-02 16:52:44 +02:00
Jens L 2084156f1d
web: only show debug locale if debug mode is enabled (#5111) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-28 20:49:40 +02:00
Jens L b9754f9c13
web/user: rework search (#5107) 
closes #5106

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-28 14:09:55 +02:00
Jens L a7fc579202
web/admin: show warning when adding user to superuser group (#5091) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-27 16:27:34 +02:00
Jens L 5c0d7f9a58
web/admin: fix error when creating bindings due to hidden inputs (#5081) 
* web/admin: fix error when creating bindings due to hidden inputs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix flaky test

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-26 18:58:02 +02:00
Jens L 6437fbc814
web/admin: prompt preview (#5078) 
* add initial prompt preview

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* improve error handling

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* don't flood api with requests when fields are changeed

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-25 22:31:48 +01:00
risson 1957717160
providers: Add ability to choose a default authentication flow (#5070) 
* core: add ability to choose a default authentication flow for a provider

Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>

* update web to use correct ak-search-select

I don't think this element existed when the PR was initially created, lol

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* only use provider authentication flow for authentication designation

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-24 13:26:00 +01:00
Jens L b3dd87bbab
web: remove more until (#5057) 
* more cleanup

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* don't dynamically import duo form

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate more

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix import

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* properly send evens when tab isn't switched

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix loop on tabs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate more

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* don't bubble tab events

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove most other uses of until()

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* cleanup user settings

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* only use stale for issues

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-23 23:16:26 +01:00
Jens L 14f0034a0a
web/elements: only render form once instance is loaded (#5049) 
* web/elements: only render form once instance is loaded

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use radio for transport

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* only wait for instance to be loaded if set

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add hook to load additional data in form

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make send an abstract function instead of attribute

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* ensure form is updated after data is loaded

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove until for select and multi-selects in forms

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* don't use until for file uploads

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove last until from form

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove deprecated import

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* prevent form double load, add error handling for PreventFormSubmit

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix double creation of inner element in proxy form

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make PreventFormSubmit work correctly

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-23 14:05:14 +01:00
sdimovv 6b42e404bf
stages/prompt: Fix dropdown invalid choice (#5046) 2023-03-22 21:25:13 +01:00
Jens L 9abd4b3e14
web/admin: fix error listing blueprints with missing metadata (#5041) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-22 10:21:27 +01:00
transifex-integration[bot] 524fbd5838
Translate 'web/src/locales/en.po' in 'zh-Hans' [manual sync] (#5033) 
Translate web/src/locales/en.po in zh-Hans [Manual Sync]

100% translated for the source file 'web/src/locales/en.po'
on the 'zh-Hans' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-03-21 13:04:02 +01:00
transifex-integration[bot] bb7c3456fa
Translate 'web/src/locales/en.po' in 'zh_CN' [manual sync] (#5034) 
Translate web/src/locales/en.po in zh_CN [Manual Sync]

100% translated for the source file 'web/src/locales/en.po'
on the 'zh_CN' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
 2023-03-21 13:03:54 +01:00
Jens L 32840d3909
web/admin: fix error adding users to groups (#5016) 
* web/admin: fix error adding users to groups

and vice versa

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove seed

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-20 18:15:36 +01:00
Jens L 3f5effb1bc
providers/radius: simple radius outpost (#1796) 
* initial implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* cleanup

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add migrations

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix web

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* minor fixes

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use search-select

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update locale

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fixup

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix ip with port being sent to delegated ip

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add radius tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update docs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-20 16:54:35 +01:00
sdimovv 8b52d711e8
stages/prompt: Add Radio Button Group, Dropdown and Text Area prompt fields (#4822) 
* Added radio-button prompt type in model

* Add radio-button prompt

* Refactored radio-button prompt; Added dropdown prompt

* Added tests

* Fixed unrelated to choice fields bug causing validation errors; Added more tests

* Added description for new prompts

* Added docs

* Fix lint

* Add forgotten file changes

* Fix lint

* Small fix

* Add text-area prompts

* Update authentik/stages/prompt/models.py

Co-authored-by: Jens L. <jens@beryju.org>
Signed-off-by: sdimovv <36302090+sdimovv@users.noreply.github.com>

* Update authentik/stages/prompt/models.py

Co-authored-by: Jens L. <jens@beryju.org>
Signed-off-by: sdimovv <36302090+sdimovv@users.noreply.github.com>

* Fix inline css

* remove AKGlobal, update schema

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: sdimovv <36302090+sdimovv@users.noreply.github.com>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens L. <jens@beryju.org>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-19 18:56:17 +01:00
Jens L e2d3a95c80
web: full web components part 1 (#4964) 
* migrate loading

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate api browser

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate base css

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* move tenant fetching to base interface

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* import pre-loaded stages in flow interface and not executor to strip down executor size

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix redirect and such

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-17 23:10:19 +01:00
Jens L bebf18f257
web/admin: fix prompt field display (#4990) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-17 16:05:27 +01:00
Jens L 9dbd54690c
web/elements: fix search select inconsistency (#4989) 
* web/elements: fix search-select inconsistency

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* web/common: fix config having to be json converted everywhere

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* web/elements: refactor form without iron-form

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* web/admin: fix misc

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-17 13:48:34 +01:00
Jens L 8363016982
version: 2023.3 (#4980) 
* release: 2023.3.0

* providers/ldap: fix duplicate attributes (#4972)

closes #4971

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* providers/oauth2: fix response for response_type code and response_mode fragment (#4975)

* web/flows: fix authenticator selector in dark mode (#4974)

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* release: 2023.3.1

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-16 22:43:57 +01:00
Jens L 397b9845ec
web/admin: fix inconsistent display of flows in selections (#4977) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-16 22:39:26 +01:00
Jens L 40cdf6877d
web/flows: fix authenticator selector in dark mode (#4974) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-16 15:59:21 +01:00
Jens L eaf56f4f3f
stages/user_login: stay logged in (#4958) 
* add initial remember me offset

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add to go executor

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add ui for user login stage

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update docs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-15 20:21:05 +01:00
Jens L fd9293e3e8
web/user: fix custom user interface background with dark theme (#4960) 
closes #4947

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-15 18:43:01 +01:00
Jens L 520de8d5b0
web/common: fix tab label color on dark theme (#4959) 
closes #4936

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-15 18:42:36 +01:00
Jens L 73d7b5f110
root: add common fixture loader (#4946) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-14 17:13:03 +01:00
Jens L 2d55d3c743
web/admin: fix wizards with radio selects not working correctly after use (#4933) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-13 23:42:52 +01:00
Jens L b81ddf2b80
web/flows: update background (#4927) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-13 19:14:04 +01:00
Jens L 6f6d22da13
release: 2023.3.0 (#4925) 2023-03-13 19:10:48 +01:00
Jens L 61bf73d2f9
web/elements: fix copy on insecure origins (#4917) 
* web/elements: fix copy on insecure origins

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fallback to messages for other clipboard uses

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-13 14:18:48 +01:00
Jens L 9219abf84b
web/admin: fix scim provider layout (#4919) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-13 14:18:35 +01:00
Jens L 56375d7245
web/flows: fix compatibility mode (#4910) 
* fix compatibility mode

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* attach stylesheets to document instead of nothing, fix dark theme

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-12 22:19:03 +01:00
Jens L 10b7d78825
events: set task start time before start not on init (#4908) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-12 15:13:04 +01:00
Jens L e13615c1ae
web/elements: fix flipped theme in codemirror (#4901) 2023-03-10 20:11:02 +01:00
Jens L 59e54901fb
web: fix theming issues when using automatic (#4898) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-10 17:33:03 +01:00
Jens L 9b8c0e3924
web: fix locale inconsistencies (#4888) 
start fixing locale inconsistencies

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-09 23:57:54 +01:00
Jens L b6b820f6f1
web: toggle dark/light theme manually (#4876) 2023-03-09 23:17:53 +01:00
Jens L 9559bc2e1e
providers/scim: add option to filter out service accounts, parent group (#4862) 
* add option to filter out service accounts, parent group

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update docs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rename to filter group

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rework sync card to show scim sync status

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-07 15:39:48 +01:00
Jens L d834ec4db9
web/elements: fix center text not scrolling with container (#4853) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-06 23:21:16 +01:00
Jens L 28ddeb124f
providers: SCIM (#4835) 
* basic user sync

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add group sync and some refactor

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start API

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* allow null authorization flow

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add UI

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make task monitored

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add missing dependency

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make authorization_flow required for most providers via API

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* more UI

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make task result better readable, exclude anonymous user

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add task UI

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add scheduled task for all sync

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make scim errors more readable

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add mappings, migrate to mappings

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add mapping UI and more

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add scim docs to web

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start implementing membership

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate signals to tasks

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate fully to tasks

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* strip none keys, fix lint errors

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix things

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start adding tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix saml

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add scim schemas and validate against it

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* improve error handling

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add group put support, add group tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* send correct application/scim+json headers

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* stop sync if no mappings are confiugred

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add test for task sync

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add membership tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use decorator for tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make tests better

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-06 19:39:08 +01:00
Jens L 2eb7c16a9a
web/admin: set valid correctly when opened and radio is already selected (#4821) 
closes #4813

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-03-01 16:14:32 +01:00
Jens L 87fa50c492
web/admin: workaround for tenant certificate selection being cut off (#4820) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>

#4814
 2023-03-01 15:41:28 +01:00
Jens L 118765ab30
web: fetch custom.css via fetch and add stylesheet (#4804) 
* web: fetch custom.css via fetch and add stylesheet

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* don't hardcode path

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-27 19:54:19 +01:00
Jens L 39d0893303
flows: change default flow stage binding settings (#4784) 
* flows: change default flow stage binding settings

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fallback to correct value

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-27 15:21:26 +01:00
Jens L 612d1c76d4
web/admin: fix chart display with no sources (#4782) 2023-02-24 22:54:11 +01:00
Jens L b7e4ad7234
web/user: fix source connections not being filtered (#4778) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-24 10:22:02 +00:00
Jens L 80f4fccd35
providers/oauth2: OpenID conformance (#4758) 
* don't open inspector by default when debug is enabled

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* encode error in fragment when using hybrid grant_type

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* require nonce for all response_types that get an id_token from the authorization endpoint

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* don't set empty family_name

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* only set at_hash when response has token

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* cleaner way to get login time

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove authentication requirement from authentication flow

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use wrapper

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix auth_time not being handled correctly

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* minor cleanup

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add test files

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove USER_LOGIN_AUTHENTICATED

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rework prompt=login handling

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* also set last login uid for max_age check to prevent double login when max_age and prompt=login is set

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-23 15:26:41 +01:00
Jens L 122055b38b
stages/user_login: terminate others (#4754) 
* rework session list

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use sender filtering for signals when possible

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add terminate_other_sessions

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-22 14:09:28 +01:00
sdimovv c4e24c04f6
core: Improve service account creation (#4751) 
* Added ability to select service account token expiration on creation

* Added call to user.set_unusable_password on service account creation

* Added forgotten call to save()

* Added and improved existsing tests

* Added accidentally deleted help text

* Fix lint
 2023-02-22 13:19:01 +01:00
dependabot[bot] 47e663f48c
web: bump mermaid from 9.4.0 to 10.0.0 in /web (#4752) 
* web: bump mermaid from 9.4.0 to 10.0.0 in /web

Bumps [mermaid](https://github.com/mermaid-js/mermaid) from 9.4.0 to 10.0.0.
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Changelog](https://github.com/mermaid-js/mermaid/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/mermaid-js/mermaid/compare/v9.4.0...v10.0.0)

---
updated-dependencies:
- dependency-name: mermaid
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* update diagram element for mermaid v10

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-22 11:33:08 +01:00
Jens Langhammer 53c03f3635
web/admin: fix mismatched values in charts 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-21 11:59:33 +01:00
Jens Langhammer 6f1721a728
web: refactor rendering of source icons 
closes #4718

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-19 20:17:58 +01:00
Jens Langhammer 99baf1a29e
web/elements: add loading spinner for charts, render middle text with css 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-19 20:10:37 +01:00
Jens Langhammer a68fa06ff9
web/flows: fix fa:// icons in sources not shown correctly 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-19 19:45:57 +01:00
Jens Langhammer d842fc4958
release: 2023.2.2 2023-02-15 19:53:42 +01:00
Jens Langhammer dfb9ae548c
web/admin: fix error when creating new users 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>

#4685
 2023-02-15 15:32:48 +01:00
Jens Langhammer ade397fc24
web/user: revert truncate behaviour for application description 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-15 11:17:45 +01:00
Jens Langhammer 80de3ee853
release: 2023.2.1 2023-02-14 18:52:36 +01:00
Jens Langhammer 4c5b07a091
web/admin: use full page size for modals 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-14 16:16:26 +01:00
Jens Langhammer fbd00bf5f8
web/admin: remove groups and users from users and group form to prevent accidental removal when updating 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-14 16:15:43 +01:00
Jens Langhammer a598276aa0
web/admin: improve action button spinner on ldap source page 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-14 16:07:31 +01:00
Jens Langhammer 81d70e5d41
release: 2023.2.0 2023-02-14 13:15:47 +01:00
Jens Langhammer 3740b45e1a
web/admin: refactor event geo display 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-13 11:14:40 +01:00
Jens Langhammer eb8181daa0
web/admin: fix geo display with no city 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-13 10:39:29 +01:00
Jens Langhammer 6a25cf6c5d
web/flow: fix layout for context in flow inspector 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-13 10:39:14 +01:00
Jens Langhammer be42e5562d
web: improve truncation of strings 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-13 10:38:48 +01:00
Jens L af43330fd6
providers/oauth2: rework OAuth2 Provider (#4652) 
* always treat flow as openid flow

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* improve issuer URL generation

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* more refactoring

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update introspection

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* more refinement

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate more

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix more things, update api

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* regen migrations

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix a bunch of things

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start updating tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix implicit flow, auto set exp

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix timeozone not used correctly

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix revoke

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* more timezone shenanigans

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix userinfo tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update web

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix proxy outpost

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix api tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix missing at_hash for implicit flows

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* re-include at_hash in implicit auth flow

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use folder context for outpost build

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-09 20:19:48 +01:00
Jens Langhammer 6a64d6b536
web/admin: clarify access code expiration 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>

#4191
 2023-02-08 23:26:33 +01:00
Jens Langhammer 243be8f7bb
web/admin: default to disable policy execution logging 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-08 23:26:06 +01:00
Jens Langhammer a7cf454760
web/admin: add notice for user_login stage session cookie behaviour 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-08 14:18:52 +01:00
Jens Langhammer c5a935474b
web/elements: improve consistency in row selection in table 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-08 00:11:12 +01:00
Jens Langhammer 89417ce455
web: fix token delete form not showing token identifiers 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-08 00:00:17 +01:00
Jens Langhammer c6e638ddc2
web/flows: fix flow background overlay on firefox 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-07 23:09:28 +01:00
Jens Langhammer 0bbe74e2bf
web/admin: fix token edit button 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-06 21:13:43 +01:00
Jens Langhammer 1919a9dd77
web/elements: fix click propagation from modal into table 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-06 16:47:46 +01:00
Jens Langhammer b3323c5d00
web/elements: fix table selection handler firing when click isn't for tr 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-06 11:37:47 +01:00
Jens Langhammer fd9ce531c9
web/elements: improve codemirror contrast in dark theme 
closes #4622

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-06 11:37:47 +01:00
Jens Langhammer 00a16bee76
web/elements: add dropdown css to DOM directly instead of including 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-05 23:32:54 +01:00
Jens Langhammer b9a2323c51
web/elements: fix ak-expand not using correct font 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-05 00:58:30 +01:00
Jens Langhammer de389e2385
web/admin: rework event info page to show all event infos 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-05 00:23:32 +01:00
Jens Langhammer 52a0b19f7e
web/admin: fix dark theme for hover on tables 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-05 00:00:50 +01:00
Jens Langhammer 33f547c870
web/user: refactor loading of data in userinterface 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-04 18:38:40 +01:00
Jens Langhammer c960601a1e
web/admin: add debug page 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-04 17:55:54 +01:00
Jens Langhammer ada44d84f8
web/elements: make table rows clickable to select items 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-02 22:37:59 +01:00
Jens Langhammer 095cb75d6c
web/user: filter tokens by username 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-02-02 11:09:03 +01:00
Jens Langhammer 6345f99aa0
web/elements: fix clashing page url param 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-30 12:01:40 +01:00
Jens Langhammer 72168fae29
providers/oauth2: add user id as "sub" mode 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-29 16:15:03 +01:00
Jens Langhammer 93e665949f
web/admin: fix certificate filtering for SAML verification certificate 
closes #4537

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-26 15:11:10 +01:00
Jens Langhammer 5144a9af4c
web/elements: persist table page in URL parameters 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-26 10:32:59 +01:00
Jens Langhammer 1b6f920265
web/flows: improve handling of flow info 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-25 15:01:08 +01:00
Jens Langhammer 3bf8c915d5
web/flows: update flow background image 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-25 15:00:56 +01:00
Jens L 53b65a9d1a
stages/prompt: field name (#4497) 
* add prompt field name

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove numerical prefix

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix missing name

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use text field

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add description label

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add migrate blueprint to remove old stages

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add task to remove unretrievable blueprints

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* lint

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix blueprint test paths

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* actually fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests even more

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix fixtures

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-24 12:23:22 +01:00
Jens Langhammer 9397598376
release: 2023.1.2 2023-01-23 14:25:55 +01:00
Jens Langhammer 91ffe4e7f9
stages/user_write: fix migration setting wrong value, fix form 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-23 14:05:41 +01:00
Jens Langhammer 430a207865
release: 2023.1.1 2023-01-23 11:34:58 +01:00
Jens Langhammer 1ce2a1b846
stages/email: update tests 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-23 10:43:49 +01:00
Jens Langhammer 767ffc09d0
web/admin: fix plex source authorization flow not being shown correctly 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-21 14:55:13 +01:00
Jens Langhammer 9e30f01fce
web/admin: don't enable execution logging by default 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 17:57:34 +01:00
Jens Langhammer 92090ced9f
web/elements: fix pf-c-switch not rendering correctly in pure tables 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 15:47:11 +01:00
Jens Langhammer ce47d4cf39
web/admin: link group of notification rule 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 15:46:37 +01:00
Jens L c61529e4d4
sources/ldap: add e2e LDAP source tests (#4462) 
* start adding more LDAP source tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* improve healthcheck

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* try local webdriver

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add full samba tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix locale types

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 15:03:56 +01:00
Jens Langhammer e78bc1b32f
web/admin: improve display of system task exception 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 12:13:11 +01:00
Jens Langhammer 89c4a7b4a4
web/admin: improve display of rule severity 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 12:09:53 +01:00
Jens Langhammer d9cc45f9ce
web/elements: fix SearchSelect not working on safari 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-19 00:08:23 +01:00
Jens Langhammer 515a402db7
web/flows: fix flow executor background overlay in safari 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-18 20:43:19 +01:00
Jens Langhammer 49b6c71079
release: 2023.1.0 2023-01-18 15:49:45 +01:00
Jens L 23c69c456a
providers/proxy: add setting to intercept authorization header (#4457) 
* add setting to intercept authorization header

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rename to intercept_header_auth

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-17 18:56:48 +01:00
Jens Langhammer 8deced771d
web/admin: fix broken outpost form 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-14 15:45:35 +01:00
Jens Langhammer 1bd6107ec7
web: fix scrollbar corner color in dark mode 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-13 17:24:38 +01:00
Jens L cd12e177ea
providers/proxy: add initial header token auth (#4421) 
* initial implementation

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* check for openid/profile claims

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* include jwks sources in proxy provider

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add web ui for jwks

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* only show sources with JWKS data configured

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix introspection tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* start basic

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add basic auth

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add docs, update admonitions

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add client_id to api, add tab for auth

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* update locale

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-13 16:22:03 +01:00
Jens L 36822c128c
admin: include task duration in API (#4428) 
include task duration in API

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-13 13:21:49 +01:00
Jens Langhammer df42480284
web/elements: use correct Action Label for user related events 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 23:57:05 +01:00
Jens Langhammer 81e9f2d608
web/admin: fix overflow in aggregate cards 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 14:12:02 +01:00
Jens L ddbd8153e2
web: migrate checkbox to switch (#4409) 
* start migrating to switch

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* general cleanup

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove broken Create provider

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate all

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* migrate table selectors, fix dark theme

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 13:37:49 +01:00
Jens L 67a6fa6399
events: rework metrics (#4407) 
* rework metrics

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* change graphs to be over last week

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix  Apps with most usage card

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 12:21:07 +01:00
Jens Langhammer a35b8f5862
web/admin: better show dev build 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 11:16:53 +01:00
Jens Langhammer d6f5b8e421
web/elements: fix pagination page button colours in dark mode 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-11 00:38:23 +01:00
Jens L b424c5dd27
web/admin: rework admin dashboard, add more links, remove user and group graphs (#4399) 2023-01-10 23:47:55 +01:00
Jens L 1ed24a5eef
blueprints: internal storage (#4397) 
* rework oci client

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add blueprint content

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add UI

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make path optional

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add validation

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-10 22:00:34 +01:00
Jens Langhammer f2961cb536
web/admin: link impersonation user for events 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-10 16:20:43 +01:00
Jens Langhammer 4d66e42708
web: add core-js polyfill for safari 
sigh

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-10 11:59:25 +01:00
Jens Langhammer d1aa1f46da
web/admin: show GeoIP information inline in events 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-09 16:01:00 +01:00
Jens Langhammer 643b36b732
web/admin: fix certificate filtering for LDAP verification certificate 
closes #4376

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-06 16:43:50 +01:00
Jens Langhammer 001869641d
web: ensure img tags have alt attributes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-06 12:44:51 +01:00
Jens L a960ce9454
stages/user_write: add more user creation options (#4367) 
* add more user creation options

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update blueprints and docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-05 15:46:20 +01:00
Jens L e6b5810e03
polices/hibp: remove deprecated (#4363) 
* remove hibp

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* don't save event matcher apps in migrations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup migrations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update docs, update some phrasing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-05 13:19:26 +01:00
Jens Langhammer 78b711ec9d
Merge branch 'version-2022.12' 2023-01-05 10:41:54 +01:00
Jens Langhammer ac07833688
release: 2022.12.2 2023-01-05 10:01:30 +01:00
Jens Langhammer be473470a4
web/admin: fix lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:40:18 +01:00
Jens Langhammer 445cd5b2c4
web: fix radio label code in dark mode 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:40:15 +01:00
Jens Langhammer 805a4b766a
web/admin: migrate webauthn forms to radio 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:40:12 +01:00
Jens Langhammer f15946e216
web/admin: fix lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:39:44 +01:00
Jens Langhammer b54415dcde
web: fix radio label code in dark mode 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:38:34 +01:00
Jens Langhammer 471293ba25
web/admin: migrate webauthn forms to radio 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 22:38:23 +01:00
Jens L dc1359a763
providers/saml: initial SLO implementation (#2346) 
* providers/saml: initial SLO implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/saml: add logout request tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/saml: add tests for POST SLO

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* matrix e2e tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix import

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* set e2e matrix name

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix imports

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* separate oidc and oauth tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add basic saml slo e2e tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add better metadata download url

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* kinda prepare release notes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* sort releases into folders

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add slo urls to website

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix linking

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add api tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 19:45:31 +01:00
Jens Langhammer 119a268eb7
web: add custom scrollbar 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 11:53:01 +01:00
Jens Langhammer e887a315be
providers/oauth2: correctly advertise supported response_modes_supported 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-04 10:21:34 +01:00
Jens Langhammer f54e82781a
web/elements: fix dropdown menu closing before selecting item sometimes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-03 10:11:23 +01:00
Jens L ffed653cae
web/admin: migrate api calls to async (#4335) 
migrate api calls to async

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-02 16:13:07 +01:00
Jens L ba5cd6e719
web/admin: add Radio control, search-select fixes (#4333) 
* move search select to forms folder

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add radio, migrate smaller lists

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* move dropdown when scrolling, hide when container out of frame

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-02 14:51:44 +01:00
Jens Langhammer 9564894eda
web/elements: trigger search select data update on connected callback 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-02 10:26:52 +01:00
Jens Langhammer 475853fb14
web: update tsconfig strictness 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 23:44:15 +01:00
Jens Langhammer 964fdf171b
web: add check compile test to prevent compile errors/warnings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 23:32:05 +01:00
Jens Langhammer aef9a22331
web/admin: fix error in outpost form dropdown 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 22:27:23 +01:00
Jens Langhammer 3980eea7c6
web/flows: rework error display, always use ak-stage-flow-error instead of shell 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 21:43:44 +01:00
Jens Langhammer d6d72489a7
web/flows: add close button to flow inspector 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 21:26:21 +01:00
Jens Langhammer 9fdfb8c99b
stages/dummy: add toggle to throw error for debugging 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 21:25:53 +01:00
Jens Langhammer b9bb27008e
web/elements: fix selection of blank elements in search-select, fix issue when re-opening dropdown 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 20:10:16 +01:00
Jens Langhammer 82184b2882
web/flows: fix alternate captchas not loading 
closes #4321

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 18:49:41 +01:00
Jens Langhammer 9ea0441559
web/elements: correctly display selected empty option when blankable is enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2023-01-01 18:19:32 +01:00
Jens Langhammer a03a64b35c
web/admin: fix error when creating SAML Provider from metadata 
closes #4315

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-31 12:54:42 +01:00
Jens Langhammer 780b986be8
web/elements: only find pages for directly related slots 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-30 22:35:57 +01:00
Jens Langhammer 2c42c87689
release: 2022.12.1 2022-12-30 13:43:42 +01:00
Jens Langhammer 316c6966b7
web/admin: post-migration cleanup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 23:24:43 +01:00
Jens Langhammer 6a44695c48
web/admin: use flow slug as main name for flow dropdown 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 22:53:15 +01:00
Jens Langhammer c46b2d5573
web/admin: finish migration to search-select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 22:48:28 +01:00
Jens Langhammer 35678c18c5
web/admin: replace more selects with search select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 21:49:36 +01:00
Jens Langhammer 5fba08c911
web/admin: replace more selects with search select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 13:15:09 +01:00
Jens Langhammer 1149a61986
web/admin: replace certificate selection with ak-search-select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 11:56:54 +01:00
Jens Langhammer 7a10872854
web/admin: replace flow selections with ak-search-select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 11:50:18 +01:00
Jens Langhammer 8a1b6693a7
web/elements: make ak-search-select limited in height and scroll 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 11:14:13 +01:00
Jens Langhammer 90c89aec76
web/admin: replace stage selections with ak-search-select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 11:14:13 +01:00
Jens Langhammer b429e24392
web/admin: replace group selections with ak-search-select 
closes #4157

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 11:14:12 +01:00
Jens Langhammer e02b99bfbc
web/admin: replace user selections with ak-search-select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#4157
 2022-12-29 11:00:57 +01:00
Jens Langhammer 6d86067cea
web/elements: add grouping and descriptions to search select 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-29 10:56:12 +01:00
Jens Langhammer 4d527a0ac5
web/user: fix user settings stuck loading 
closes #4297

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 20:48:02 +01:00
Jens Langhammer b1020fde64
web/elements: render ak-seach-select dropdown correctly in modals 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 20:38:57 +01:00
Jens Langhammer e6aa4c9327
web/admin: rework outpost health 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 16:16:18 +01:00
Jens Langhammer 24eb4ed963
release: 2022.12.0 2022-12-28 13:00:49 +01:00
Jens Langhammer 0e6400bfea
web/admin: improve user/group UX for adding/removing users to and from groups 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 12:55:38 +01:00
Jens Langhammer be308b3392
web/admin: lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 12:07:14 +01:00
Jens Langhammer b16d1134ea
core: add endpoints to add/remove users from group atomically 
closes #4252

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-28 10:50:30 +01:00
Jens Langhammer 78f7eb4345
web/elements: fix wizard form page changing state before being active 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-27 20:21:58 +01:00
Jens Langhammer 4a6f8d2ef2
web/flows: update flow background 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-27 13:47:16 +01:00
Jens Langhammer 3eecc76717
web/admin: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-26 15:35:08 +01:00
Jens Langhammer dbaf03430e
web/admin: show stage binding form when creating stage in bound list 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-25 15:09:22 +01:00
Jens Langhammer bfa0360764
web/admin: show policy binding form when creating policy in bound list 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-25 14:59:45 +01:00
Jens Langhammer 0423023d2e
web/elements: fix table select-all checkbox being checked with no elements 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-25 14:10:02 +01:00
Jens Langhammer 5132f0f876
web/admin: more consistent label usage, use compact labels 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-25 14:06:29 +01:00
Jens Langhammer 08b0075335
web/admin: fix import error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-25 13:18:56 +01:00
Jens Langhammer 700a4cb72c
web/admin: fix application to provider links 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-24 21:55:29 +01:00
Jens Langhammer 283c93c57b
website: copy static files instead of linking them to prevent cache issues 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-23 15:18:21 +01:00
Jens Langhammer 1b86a3d5d6
Merge branch 'version-2022.11' 2022-12-23 14:39:52 +01:00
Jens Langhammer 9dc0bb2a77
release: 2022.11.4 2022-12-23 14:17:48 +01:00
Jens L 2d827eaae1
security: fix CVE 2022 23555 (#4274) 
* add flow to invitation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* show warning on invitation page

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add security advisory

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-23 14:16:30 +01:00
Jens L 47d79ac28c
security: fix CVE 2022 46172 (#4275) 
* fallback to current user in user_write, add flag to disable user creation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update api and web ui

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update default flows

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add cve post to website

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-23 14:16:26 +01:00