* main: (23 commits)
web: bump API Client version (#5935)
sources/ldap: add support for cert based auth (#5850)
ci: replace status with state for auto-deployment
ci: don't write CI status to file
ci: add workflow to automatically update next branch (#5921)
providers/ldap: fix Outpost provider listing excluding backchannel providers (#5933)
root: revert to use secret_key for JWT signing (#5934)
sources/ldap: fix duplicate bind when authenticating user directly to… (#5927)
web: bump core-js from 3.30.2 to 3.31.0 in /web (#5928)
core: bump pytest from 7.3.1 to 7.3.2 (#5929)
web: bump @rollup/plugin-commonjs from 25.0.0 to 25.0.1 in /web (#5931)
web: bump @formatjs/intl-listformat from 7.3.0 to 7.4.0 in /web (#5932)
core: bump github.com/go-ldap/ldap/v3 from 3.4.4 to 3.4.5 (#5930)
website/integrations: Fix header in dokuwiki instructions (#5926)
providers/oauth2: launch url: if URL parsing fails, return no launch URL (#5918)
web: bump @babel/core from 7.22.1 to 7.22.5 in /web (#5909)
web: bump @babel/plugin-proposal-decorators from 7.22.3 to 7.22.5 in /web (#5910)
web: bump @babel/preset-typescript from 7.21.5 to 7.22.5 in /web (#5912)
web: bump @babel/preset-env from 7.22.4 to 7.22.5 in /web (#5915)
core: bump requests-mock from 1.10.0 to 1.11.0 (#5911)
...
* ldap: support cert based auth
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* ldap: default sni switch to off
* ldap: `get_info=NONE` on insufficient access error
* fix: Make file locale script
* ldap: add google ldap attribute mappings
* ldap: move google secure ldap blueprint to examples
Revert "ldap: add google ldap attribute mappings"
This reverts commit 8a861bb92c1bd763b6e7ec0513f73b3039a1adb4.
* ldap: remove `validate` for client cert auth
not strictly necessary
* ldap: write temp cert files more securely
* ldap: use first array value for sni when provided csv input
* don't specify tempdir
we set $TMPDIR in the dockerfile
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* limit API to only allow certificate key pairs with private key
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* use maxsplit
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* update locale
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Jens L. <jens@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
* providers/oauth2: launch url: if URL parsing fails, return no launch URL
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
* add test
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* only get provider launch URL when no url is set
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* only catch value error
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
Resolves issue 5165
This commit updates the password match indicator so that the user, and not
the component, makes decisions about the names of the initial and confirmation
inputs.
Update index.md
Added /wp-login.php in the application's configuration to force authentik to directly jump into the login screen for Wordpress' backend. The shown configuration launches the main site instead which seems to be wrong somehow.
Signed-off-by: Oliver Pifferi <oliver@pifferi.info>
* main:
providers/ldap: rework Schema and DSE (#5838)
web/flows: update default flow background (#5905)
web: bump @formatjs/intl-listformat from 7.2.2 to 7.3.0 in /web (#5866)
website/integrations: add account linking note for WriteFreely (#5804)
web: bump @storybook/addon-essentials from 7.0.18 to 7.0.20 in /web (#5894)
web: bump @storybook/web-components-vite from 7.0.18 to 7.0.20 in /web (#5895)
web: bump @storybook/blocks from 7.0.18 to 7.0.20 in /web (#5893)
web: bump storybook from 7.0.18 to 7.0.20 in /web (#5896)
website/docs: correct LDAP StartTLS documentation (#5886)
core: bump python from 3.11.3-slim-bullseye to 3.11.4-slim-bullseye (#5891)
ci: bump docker/setup-qemu-action from 2.1.0 to 2.2.0 (#5892)
core: bump selenium from 4.9.1 to 4.10.0 (#5897)
web: bump pyright from 1.1.312 to 1.1.313 in /web (#5898)
web: bump @storybook/addon-links from 7.0.18 to 7.0.20 in /web (#5899)
web: bump @storybook/web-components from 7.0.18 to 7.0.20 in /web (#5900)
core: bump urllib3 from 2.0.2 to 2.0.3 (#5901)
core: bump ruff from 0.0.271 to 0.0.272 (#5902)
core: bump sentry-sdk from 1.25.0 to 1.25.1 (#5903)
This commit disassembles PromptStage and places function that don't
need a reference to the PromptStage object into a collection of
maps between the Stage type and the prompt associated with it. (In
a better world, this would be a great place to try some post-Midgard
mplementation of itemtype/itemid/itemprop).
This surfaced the nature of the relationship between Password and
Password (Repeat), allowing us to modify both to show password
strength and password matching for the "change password" dialog.
* \#\# Details
web: replace lingui with lit/localize
\#\# Changes
This rather massive shift replaces the lingui and `t()` syntax with lit-localize, XLIFF, and the `msg()`
syntax used by lit-localize. 90% of this work was mechanized; simple perl scripts found and replaced
all uses of `t()` with the appropriate corresponding syntax for `msg()` and `msg(str())`.
The XLIFF files were auto-generated from the PO files. They have not been audited, and they should be
checked over by professional translators. The actual _strings_ have not been changed, but as this was
a mechanized change there is always the possibility of mis-translation-- not by the translator, but by
the script.
* web: revise lit/localize: fix two installation issues.
* web: revise localization
TL;DR:
- Replaced all of Lingui's `t()` syntax with `msg()` syntax.
- Mechanically (i.e with a script) converted all of the PO files to XLIFF files
- Refactored the localization code to be a bit smarter:
- the function `getBestMatchLocale` takes the locale lists and a requested locale, and returns the
first match of:
- The locale's code exactly matches the requested locale
- The locale code exactly matches the prefix of the requested locale (i.e the "en" part of "en-US")
- the locale code's prefix exactly matches the prefix of the requested locale
This function is passed to lit-locate's `loadLocale()`.
- `activateLocale()` just calls `loadLocale()` now.
- `autodetectLanguage` searches the following, and picks the first that returns a valid locale
object, before passing it to `loadLocale()`:
- The User's settings
- A `?locale=` component found in `window.location.search`
- The `window.navigator.language` field
- English
The `msg()` only runs when it's run. This seems obvious, but it means that you cannot cache
strings at load time; they must be kept inside functions that are re-run so that the `msg()` engine
can look up the strings in the preferred language of the user at that moment.
You can use thunks-of-strings if you really need them that way.
* Including the 'xliff-converter' in case anyone wants to review it.
* The xliff-converter is tagged as 'xliff-converter', but has been
deleted.
\#\# Details
- Resolves#5171
\#\# Changes
\#\#\# New Features
- Adds a "Add an Application" to the LibraryView if there are no applications and the user is an administrator.
\#\#\# Breaking Changes
- Adds breaking change which causes \<issue\>.
\#\# Checklist
- [ ] Local tests pass (`ak test authentik/`)
- [ ] The code has been formatted (`make lint-fix`)
If an API change has been made
- [ ] The API schema has been updated (`make gen-build`)
If changes to the frontend have been made
- [ ] The code has been formatted (`make web`)
- [ ] The translation files have been updated (`make i18n-extract`)
If applicable
- [ ] The documentation has been updated
- [ ] The documentation has been formatted (`make website`)
* web: fix redundant locales for zh suite.
* web: prettier pass for locale update
* web: localization moderization
Changed the names of the lit-localize commands to make it clear they're
part of the localization effort, and not just "build" and "extract".
* web: add storybook to test components
* update transifex config
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* fix package lock?
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* use build not compile
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
* web: conversion to lit-localize
The CI produced a list of problems that I hadn't caught earlier,
due to a typo ("localize build" is correct, "localize compile" is
not) I had left in package.json. They were minor and linty, but
it was still wise to fix them.
* web: replace lingui with lit/locale
This commit fixes some minor linting issues that were hidden by a typo in package.json. The
issues were not apparently problematic from a Javascript point of view, but they pointed
to sloppy thinking in the progression of types through the system, so I cleaned them
up and formalized the types from LocaleModule to AkLocale.
* web: replace lingui with lit/localize
One problem that has repeatedly come up is that localize's templates do not produce
JavaScript that conforms with our shop style. I've replaced `build-locale` with
a two-step that builds the locale *and* ensures that it conforms to the shop style
via `prettier` every time.
* web: replace lingui with lit-locale
This commit applies the most recent bundle of translations to the
new lit-locale aspect component. It also revises the algorithm
for *finding* the correct locale, replacing the complex fall-back
with some rather straightforward regular expressions.
In the case of Chinese, the fallback comes at the end of the
selection list, which may not be, er, politically valuable
(since Taiwan and Hong Kong come before, being exceptions that
need to be tested). If we need a different order for presentation,
that'll be a future feature.
* web: replace lingui with lit/locale
Well, that was embarassing.
* web: add storybook
The delta on this didn't make any sense; putting it back causes no behavioral
changes.
* web: add Storybook
Fixed a typo in the package.json that prevented the TSC check
from passing.
* web: incorporate storybook
This commit includes a number of type and definitional changes needed to make lit-analyze pass. In
most cases, it was a matter of reassuring Lit that we were using the right type and the right type
converter, or configuring the property such that it should never be called as an attribute.
The most controversial change is adding the 'no-incompatible-type-binding' to the LIT analyzer
configuration (found in `tsconfig.json`). This "routes around" lit-analyzer not doing very well
understanding that some HTML objects can have generic property types, as long as the renderer is
configured correctly.
The 'no-missing-import: off' setting is required as lit-analyzer also does not use the tsconfig
`paths` setting correctly and cannot find objects defined via aliases.
It's a shame JSON can't support comments; these should be in the tsconfig.json file directly. As it
is, I've started a README file that includes a section to record configuration decisions.
Deleted the lingui.config file as we're not using it anymore
* ignore storybook build in git
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
Ken Sternberg
authentik-automation[bot]
ChandonPierre
Jens Langhammer
risson
dependabot[bot]
Nils K
Oliver Pifferi
Ken Sternberg