trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
7,454 Commits 95 Branches 330 Tags 336 MiB
Commit Graph

134 Commits

Author SHA1 Message Date
Jens Langhammer f1e32b989d Revert "tests: add firefox e2e tests" 
This reverts commit 5693a794b4.
 2021-07-29 18:02:46 +02:00
Jens Langhammer 6aebbec270 Revert "tests/e2e: remove chrome requirement" 
This reverts commit b86fd7b716.
 2021-07-29 18:02:42 +02:00
Jens Langhammer b86fd7b716 tests/e2e: remove chrome requirement 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-29 15:24:54 +02:00
Jens Langhammer 5693a794b4 tests: add firefox e2e tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-29 15:07:13 +02:00
Jens L f01bc20d44
Embedded outpost (#1193) 
* api: allow API requests as managed outpost's account when using secret_key

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: load secret key from env

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: make listener IP configurable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost/proxy: run outpost in background and pass requests conditionally

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: unify branding to embedded

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix embedded outpost not being editable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix mismatched host detection

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: fix LDAP test not including user for embedded outpost

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: fix user matching

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: add tests for secret_key auth

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: load environment variables using github.com/Netflix/go-env

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-29 11:30:30 +02:00
Jens Langhammer 148194e12b tests/e2e: add LDAPS bind tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-19 13:26:36 +02:00
Jens Langhammer 83d2c442a5 tests/e2e: fix ldap tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-18 22:43:35 +02:00
Jens Langhammer 4fe0bd4b6c tests/e2e: fix e2e tests for ldap provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-14 10:10:11 +02:00
Jens Langhammer df92111296 outposts: update outpost permissions on m2m change 
closes #1105

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-04 19:37:12 +02:00
Jens Langhammer 4709dca33c outposts/proxy: always redirect to session-end interface on sign_out 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-01 16:51:36 +02:00
Jens Langhammer 3979b0bde7 tests/e2e: ensure superuser group is created 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-01 12:16:58 +02:00
Jens Langhammer 4280847bcc tests/e2e: add LDAP bind and search tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-01 11:51:07 +02:00
Jens Langhammer ef77a4b64e tests/e2e: fix provider test image 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-19 22:11:09 +02:00
Jens Langhammer 405c690193 tests/e2e: test additionalHeaders with proxy 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-19 12:40:24 +02:00
Jens Langhammer ae8cf00a21 tests/e2e: switch to ghcr images 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 15:32:23 +02:00
Jens Langhammer 9180d448df core: move end-session to core 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-06 13:56:38 +02:00
Jens Langhammer f996f9d4e3 tests/e2e: ensure outpost service account has correct permissions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-04 09:46:31 +02:00
Jens Langhammer e9621bae06 tests: show logs for containers on failed e2e tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-03 22:17:18 +02:00
Jens Langhammer 5e3628bea6 core: add fallback URLs for websocket to cleanup test logs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-03 17:26:18 +02:00
Jens Langhammer 02411bb543 tests/e2e: fix IdentificationStage not having sources set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 17:35:24 +02:00
Jens Langhammer 6893948fa0 tests/e2e: fix invalid flows 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 11:18:47 +02:00
Jens Langhammer bc39320f86 tests/e2e: fix flow titles not being set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 09:50:03 +02:00
Jens Langhammer c6bb6709fd flows: add default challenge response 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 20:27:50 +02:00
Jens Langhammer 9bdd6f23a4 website/docs: add ldap example, use ghcr 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-14 11:19:09 +02:00
Jens Langhammer 919f293fc7 tests/e2e: fix redirect_uri 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-13 13:09:30 +02:00
Jens Langhammer be21a5d172 sources/plex: add general tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 21:55:55 +02:00
Jens Langhammer ea2f623955 tests/e2e: update e2e tests for new source login button 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 21:40:45 +02:00
Jens Langhammer 2507c0eec9 stages/invitation: fix linting 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 12:44:19 +02:00
Jens Langhammer b8a566f4a0 outposts: move local connection check to task, run every 60 minutes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-21 11:34:48 +02:00
Jens Langhammer 76131e40ec tests/e2e: monkey patch OAuth1 test instead of setting URLs manually 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-20 20:03:20 +02:00
Jens Langhammer 05cc8e2b51 tests: only create selenium_screenshots/ on error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 23:23:09 +02:00
Jens Langhammer b299451cab providers/saml: fix metadata download not being unauthenticated 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-01 20:16:07 +02:00
Jens Langhammer bfa0c46588 tests/e2e: fix source tests 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-30 11:05:31 +02:00
Jens Langhammer 69ee18e13d Merge branch 'master' into new-forms 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	Pipfile.lock
#	authentik/api/decorators.py
#	authentik/core/api/applications.py
#	authentik/core/api/users.py
#	authentik/events/api/event.py
#	authentik/events/api/notification_transport.py
#	authentik/flows/api/flows.py
#	swagger.yaml
 2021-03-30 10:26:18 +02:00
dependabot[bot] c180a521ec
build(deps-dev): bump pylint from 2.7.2 to 2.7.3 (#674) 
* build(deps-dev): bump pylint from 2.7.2 to 2.7.3

Bumps [pylint](https://github.com/PyCQA/pylint) from 2.7.2 to 2.7.3.
- [Release notes](https://github.com/PyCQA/pylint/releases)
- [Changelog](https://github.com/PyCQA/pylint/blob/master/ChangeLog)
- [Commits](https://github.com/PyCQA/pylint/compare/pylint-2.7.2...pylint-2.7.3)

Signed-off-by: dependabot[bot] <support@github.com>

* sources/saml: fix linting for SAMLBindingTypes.Redirect

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* sources/oauth: Fix linting for RequestKind

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: fix linting for ChallengeTypes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-30 10:05:14 +02:00
Jens Langhammer fe4791c216 web: initial implementation of new forms 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-25 00:05:11 +01:00
Jens Langhammer 533a719914 sources/oauth: migrate to webcomponents 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-24 20:35:00 +01:00
Jens Langhammer 17f7a97ef3 sources/oauth2: add API For UserSourceConnection 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-24 14:46:08 +01:00
Jens Langhammer dce869b566 flows: fix post-email continuation not working 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-24 12:46:54 +01:00
Jens Langhammer 4612cea970 sources/saml: replace server-side pre-auth views for pre_auth flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-24 09:22:15 +01:00
Jens Langhammer 80cc0fcc61 tests: use dex from ghcr 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-22 22:27:57 +01:00
Jens L fe7f23238c
Static SPA (#648) 
* core: initial migration to /if

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: move jsi18n to api

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests: fix static URLs in tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: add new html files to rollup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix rollup config and nginx config

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add Impersonation support to user API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: add banner for impersonation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests: fix test_user function for new User API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add background to API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: set background from flow API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: make root view login_required for redirect

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: redirect to root-redirect instead of if-admin direct

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: add header to prevent Authorization Basic prompt in browser

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: redirect to root when user/me request fails

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-22 13:44:17 +01:00
Jens Langhammer 4c49209f71 core: add user metrics API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-20 17:30:01 +01:00
Jens Langhammer a6123cfbe4 flows: add API for user's stage settings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-18 00:33:12 +01:00
Jens Langhammer 9784c6c828 tests/e2e: fix checks for ak-sidebar since ak-interface uses shadowdom now 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-16 18:38:17 +01:00
Jens Langhammer 93b50e7d6e tests/e2e: add tests for OIDC implicit flow 2021-03-05 17:18:50 +01:00
Jens Langhammer 7f65ae3f92 Merge branch 'master' into stage-challenge 
# Conflicts:
#	web/package-lock.json
 2021-02-28 00:47:18 +01:00
Jens Langhammer ee6b365003 tests/e2e: fix SAML source tests 2021-02-28 00:30:33 +01:00
Jens Langhammer 2ad4bd5c0a tests/e2e: fix oauth source tests 2021-02-28 00:27:18 +01:00
Jens Langhammer 9cdfd8b75a tests/e2e: fix other provider tests 2021-02-28 00:08:57 +01:00
Jens Langhammer 3c8a0081bc tests/e2e: fix more test, add requirements for crypto 2021-02-27 23:33:15 +01:00
Jens Langhammer 088e0e736a tests/e2e: fix more tests, cleanup 2021-02-27 22:57:15 +01:00
Jens Langhammer 55c408a8bf tests/e2e: replace apply_default_data with @apply_migration decorator 2021-02-27 22:32:48 +01:00
Jens Langhammer 07379acf7f tests/e2e: fix enroll tests 2021-02-27 22:09:40 +01:00
Jens Langhammer 380786bfde tests/e2e: fix URLs, use self.login() 2021-02-27 19:02:29 +01:00
Jens Langhammer 402afa1e85 Merge branch 'master' into stage-challenge 
# Conflicts:
#	web/src/elements/buttons/SpinnerButton.ts
 2021-02-27 18:10:08 +01:00
Jens Langhammer 95d0d6f3e8 tests/e2e: add login method 2021-02-26 16:47:01 +01:00
Jens Langhammer 578326eccd tests/e2e: don't use reverse for self.shell_url 2021-02-26 15:13:31 +01:00
Jens Langhammer 535770abbd tests/e2e: fix authenticator tests 2021-02-25 22:54:39 +01:00
Jens Langhammer 3894895d32 stages/authenticator_validate: start rewrite to SPA 2021-02-23 13:50:47 +01:00
Jens Langhammer 217595bb01 tests: start fixing selenium tests 2021-02-21 23:39:02 +01:00
Jens Langhammer 0904fea109 flows: fix migration for e2e tests 2021-02-21 20:47:23 +01:00
Jens Langhammer 27cd10e072 stages/prompt: migrate to SPA 2021-02-21 18:27:34 +01:00
Jens Langhammer b9f409d6d9 stages/consent: migrate to SPA 2021-02-21 13:15:45 +01:00
Jens Langhammer 33f67140f2 stages/identification: move user validation to serializer 2021-02-20 20:16:20 +01:00
Jens Langhammer 8787dc23d0 web: fix linting errors 2021-02-20 19:59:24 +01:00
Jens Langhammer bdb86d7119 *: replace shortcuts.reverse with urls.reverse 2021-02-20 19:13:50 +01:00
Jens Langhammer fdde97cbbf *: replace Dict from typing with normal dict 2021-02-18 13:41:03 +01:00
Jens L 8708e487ae
stages: add WebAuthn stage (#550) 
* core: add User.uid for globally unique user ID

* admin: fix ?next for Flow list

* stages: add initial webauthn implementation

* web: add ak-flow-submit event to submit flow stage

* web: show error message for webauthn registration

* admin: fix next param not redirecting correctly

* stages/webauthn: remove form

* stages/webauthn: add API

* web: update flow diagram on ak-refresh

* stages/webauthn: add initial authentication

* stages/webauthn: initial authentication implementation

* web: cleanup webauthn utils

* stages: rename otp_* to authenticator and move webauthn to authenticator

* docs: fix broken links

* stages/authenticator_*: fix template paths

* stages/authenticator_validate: add device classes

* stages/authenticator_webauthn: implement django_otp.devices

* stages/authenticator_*: update default stage names

* web: add button to create stage on flow page

* web: don't minify HTML, remove nbsp

* admin: fix typo in stage list

* stages/*: use common base class for stage serializer

* stages/authenticator_*: create default objects after rename

* tests/e2e: adjust stage order
 2021-02-17 20:49:58 +01:00
Jens L e25d03d8f4
Managed objects (#519) 
* managed: add base manager and Ops

* core: use ManagedModel for Token and PropertyMapping

* providers/saml: implement managed objects for SAML Provider

* sources/ldap: migrate to managed

* providers/oauth2: migrate to managed

* providers/proxy: migrate to managed

* *: load .managed in apps

* managed: add reconcile task, run on startup

* providers/oauth2: fix import path for managed

* providers/saml: don't set FriendlyName when mapping is none

* *: use ObjectManager in tests to ensure objects exist

* ci: use vmImage ubuntu-latest

* providers/saml: add new mapping for username and user id

* tests: remove docker proxy

* tests/e2e: use updated attribute names

* docs: update SAML docs

* tests/e2e: fix remaining saml cases

* outposts: make tokens as managed

* *: make PropertyMapping SerializerModel

* web: add page for property-mappings

* web: add codemirror to common_styles because codemirror

* docs: fix member-of in nextcloud

* docs: nextcloud add admin

* web: fix refresh reloading data two times

* web: add loading lock to table to prevent double loads

* web: add ability to use null in QueryArgs (value will be skipped)

* web: add hide option to property mappings

* web: fix linting
 2021-02-03 21:18:31 +01:00
dependabot[bot] bc9e7e8b93
build(deps): bump structlog from 20.1.0 to 20.2.0 (#445) 
* build(deps): bump structlog from 20.1.0 to 20.2.0

Bumps [structlog](https://github.com/hynek/structlog) from 20.1.0 to 20.2.0.
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/hynek/structlog/compare/20.1.0...20.2.0)

Signed-off-by: dependabot[bot] <support@github.com>

* *: use structlog.stdlib instead of structlog for type-hints

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-01-01 15:39:43 +01:00
Jens Langhammer ee2e737782 providers/oauth2: remove response_type field as spec doesn't require validation 2020-12-27 18:12:47 +01:00
Jens Langhammer d47d9103c7 tests: fix e2e tests for redirect_uri errors 2020-12-27 13:00:05 +01:00
Jens Langhammer d4c9c667c9 tests: fix URLs to use user-details instead of user-settings 2020-12-13 00:48:46 +01:00
dependabot[bot] 2caa1e7650
build(deps-dev): bump bandit from 1.6.2 to 1.6.3 (#371) 
* build(deps-dev): bump bandit from 1.6.2 to 1.6.3

Bumps [bandit](https://github.com/PyCQA/bandit) from 1.6.2 to 1.6.3.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](https://github.com/PyCQA/bandit/compare/1.6.2...1.6.3)

Signed-off-by: dependabot[bot] <support@github.com>

* root: update for new bandit version

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
 2020-12-07 11:21:07 +01:00
Jens Langhammer 01482d8468 tests: fix images being pulled from dockerhub, again 2020-12-06 21:23:57 +01:00
Jens Langhammer 45c4469d47 tests: fix images being pulled from dockerhub 2020-12-06 20:47:12 +01:00
Jens Langhammer 8a526ad452 root: use proxy for e2e tests 2020-12-06 19:52:26 +01:00
Jens L 867e161f32
tests: fix proxy pipeline (#367) 
* tests: retry on WebDriverException

* tests: remove debug statements
 2020-12-06 16:17:51 +01:00
Jens L 1cfe1aff13
wip: rename to authentik (#361) 
* root: initial rename

* web: rename custom element prefix

* root: rename external functions with pb_ prefix

* root: fix formatting

* root: replace domain with goauthentik.io

* proxy: update path

* root: rename remaining prefixes

* flows: rename file extension

* root: pbadmin -> akadmin

* docs: fix image filenames

* lifecycle: ignore migration files

* ci: copy default config from current source before loading last tagged

* *: new sentry dsn

* tests: fix missing python3.9-dev package

* root: add additional migrations for service accounts created by outposts

* core: mark system-created service accounts with attribute

* policies/expression: fix pb_ replacement not working

* web: fix last linting errors, add lit-analyse

* policies/expressions: fix lint errors

* web: fix sidebar display on screens where not all items fit

* proxy: attempt to fix proxy pipeline

* proxy: use go env GOPATH to get gopath

* lib: fix user_default naming inconsistency

* docs: add upgrade docs

* docs: update screenshots to use authentik

* admin: fix create button on empty-state of outpost

* web: fix modal submit not refreshing SiteShell and Table

* web: fix height of app-card and height of generic icon

* web: fix rendering of subtext

* admin: fix version check error not being caught

* web: fix worker count not being shown

* docs: update screenshots

* root: new icon

* web: fix lint error

* admin: fix linting error

* root: migrate coverage config to pyproject
 2020-12-05 22:08:42 +01:00
Jens Langhammer f51acb97a9 tests: fix docker proxy missing for single test 2020-11-28 21:29:11 +01:00
Jens Langhammer c738ea573c tests/e2e: fix logic error 2020-11-25 12:41:13 +01:00
Jens Langhammer 34f54a96cf tests: update e2e tests for SPA 2020-11-23 14:24:42 +01:00
Jens Langhammer 9c3bc4eb38 tests: move integration tests into separate folder, add separate pipeline task 2020-11-19 14:35:43 +01:00