trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
9,356 Commits 95 Branches 330 Tags 336 MiB
Commit Graph

262 Commits

Author SHA1 Message Date
Jens Langhammer 5374352411 sources/plex: allow users to connect their plex account without login flow 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-03 21:09:02 +01:00
Jens Langhammer a92bce322d web/flows: fix sub_text not rendering for static fields 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-01 20:54:43 +01:00
Jens Langhammer 5646141fe2 stages/identification: add show_source_labels option, to show labels for sources 
closes #1679

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-31 17:57:48 +01:00
Jens Langhammer 06766bdb25 web/user: update form to update mfa devices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-30 15:19:17 +02:00
Jens Langhammer 40f8ce3c4c web/user: rework MFA Device UI to support multiple devices 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-30 14:56:14 +02:00
Jens Langhammer 8296d0c94c web/admin: fix SMS Authenticator stage not loading state correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-14 11:49:55 +02:00
Jens L aef9d27706
stages/authenticator_sms: Add SMS Authenticator Stage (#1577) 
* stages/authenticator_sms: initial implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add initial stage UI

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/elements: clear invalid state when old input was invalid but new input is correct

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_sms: add more logic

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: add basic SMS settings

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_sms: initial working version

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_sms: add tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: optimise totp password manager entry on authenticator_validation stage

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/elements: add grouping support for table

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: allow sms class in authenticator stage

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add grouping to more pages

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/authenticator_validate: add SMS support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: add throttling for flow executor based on session key and pending user

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix style issues

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* ci: add workflow to compile backend translations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-11 17:51:49 +02:00
Jens Langhammer 57e5acaf2f stages/prompt: add sub_text field to add HTML below prompt fields 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-07 18:34:37 +02:00
Jens Langhammer 097a42bb7b web/admin: fix description for flow import 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-06 20:50:43 +02:00
Jens Langhammer 4f57dfda93 web/flows: adjust message for email stage 
closes #1538

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 11:28:11 +02:00
Jens Langhammer 19247accd9 web: fix rendering of token copy button in dark mode 
closes #1528

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-05 11:11:13 +02:00
Jens Langhammer 0692663537 stages/email: add activate_user_on_success flag, add for all example flows 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-04 18:47:51 +02:00
Jens Langhammer e9bb8c896b web/admin: fix LDAP Source form not exposing syncParentGroup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-30 18:10:56 +02:00
Jens Langhammer 94ae52b576 web/admin: don't require username nor name for activate/deactivate toggles 
closes #1491

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-29 09:42:59 +02:00
Jens L f9ad102915
flows: inspector (#1469) 
* flows: add initial inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: change naming a bit

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flow: add inspector frame

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: don't use shadydom when inspecting

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add current stage to api

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* stages/*: fix imports

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: deep-copy plan instead of just adding

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: ui

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: restrict inspector to admin

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add buttons to launch flow with inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: don't automatically follow redirects when inspector is open

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: make current_plan optional, only require historry

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: handle error messages in inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: improve UI when flow is done

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add is_completed flag to inspector

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: fix monkeypatches for tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add inspector tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* ci: re-enable cache

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-28 09:36:48 +02:00
pemontto 674bd9e05c
web/admin: Fix typo 'username address' -> 'username' (#1473) 2021-09-26 12:53:37 +02:00
Jens Langhammer 05db9e5c40 web/admin: handle error correctly when creating user recovery link 
closes #1472

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-26 11:49:40 +02:00
Jens Langhammer 79b92e764e *: fix typos in code 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-25 00:01:11 +02:00
Jens Langhammer 73e3d19384 web/user: add auto-focus search for applications 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-19 21:07:18 +02:00
Jens Langhammer f6e0f0282d core: fix tokens not being viewable but superusers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-19 16:11:20 +02:00
Jens Langhammer 06af306e8a sources/ldap: bump timeout, run each sync component in its own task 
closes #1411

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-17 12:42:20 +02:00
Jens Langhammer 9257f3c919 web/user: add missing stop impersonation button 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-17 10:04:47 +02:00
Jens L 13e2eea72f
web/user: new end-user interface (#1404) 
* web/user: migrate to top navbar

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: prepare config from server

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* re-sort

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove old interface

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* update issue template

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* use notification badge

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: re-add go-to-admin button

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: fix remaining redirects directly to admin

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* make settings better

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* api: ensure sources and stages are sorted

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/user: add sessions and consent

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/oauth2: add post wrapper to stage

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: add new interface to release notes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-16 22:17:05 +02:00
Jens L 9441be1ee2
interface split (#943) 2021-09-16 17:30:16 +02:00
Jens Langhammer 916530f0d8 providers/oauth2: use access_code_validity for id_tokens generated when using an implicit flow, improve wording in web ui 
closes #1369

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-15 17:14:53 +02:00
Jens Langhammer ef341dd405 stages/user_write: add option to add newly created users to a group 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-14 21:45:34 +02:00
Jens Langhammer 9a7fa39de4 events: allow setting a mapping for webhook transport to customise request payloads 
closes #1383

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-12 01:05:42 +02:00
Jens L 3c1b70c355
outposts/proxyv2 (#1365) 
* outposts/proxyv2: initial commit

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add rs256

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

more stuff

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add forward auth an sign_out

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

match cookie name

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

re-add support for rs256 for backwards compat

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add error handler

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

ensure unique user-agent is used

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

set cookie duration based on id_token expiry

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

build proxy v2

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add ssl

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add basic auth and custom header support

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add application cert loading

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

implement whitelist

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add redis

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

migrate embedded outpost to v2

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

remove old proxy

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

providers/proxy: make token expiration configurable

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

add metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

fix tests

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: only allow one redirect URI

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix docker build for proxy

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove default port offset

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* add AUTHENTIK_HOST_BROWSER

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests: fix e2e/integration tests not using proper tags

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* remove references of old port

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix user_attributes not being loaded correctly

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup dependencies

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-08 18:04:56 +00:00
Jens Langhammer 2db8b07578 events: add mark_all_seen 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-04 22:08:12 +02:00
Jens Langhammer 4fc8e61f8c stages/authenticator_validate: show single button for multiple webauthn authenticators 
tested with browser + yubikey 5

closes #1096

The order of allowCredentials doesn't seem to matter, chrome seems to always choose the internal authenticator first.

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-01 19:28:52 +02:00
Jens Langhammer 78578c6c9d web/admin: allow admins to create tokens 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-25 21:23:32 +02:00
Jens Langhammer 16cfa8cae2 web/admin: add ServiceAccount creation form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-24 20:13:08 +02:00
Jens Langhammer a9af40f85c web/admin: improve delete modal for stage bindings and policy bindings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 17:46:51 +02:00
Jens Langhammer 00e9b91f56 web/admin: fix missing app passwords backend 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 16:47:38 +02:00
Jens Langhammer c4832206fa web/admin: display token's intents 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-23 16:33:12 +02:00
Jens Langhammer 33d5cd2973 web: add notice for Certificate for LDAP Provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-21 18:48:02 +02:00
Jens Langhammer d1403f6f7d web: implement bulk-delete form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-12 23:21:29 +02:00
Jens Langhammer 9430a2eea2 web/elements: add bulk delete form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-12 21:42:52 +02:00
Jens Langhammer 7db3be604c web/admin: allow modification of users groups from user view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-10 21:27:41 +02:00
Jens Langhammer de9d483b9f admin: add API to show embedded outpost status, add notice when its not configured properly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-10 19:16:11 +02:00
Jens Langhammer 557724768a core: add API to directly send recovery link to user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-10 13:54:59 +02:00
Jens Langhammer c025d64ba3 outpost: revert managed config, make authentik_host field optional 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-08 16:58:01 +02:00
Jens Langhammer 1693118df7 web/admin: cleanup display of outpost health 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-07 21:11:28 +02:00
Jens Langhammer 6fe5175f21 core: add UserSelfSerializer and separate method for users to update themselves with limited fields 
rework user settings page to better use form
closes #1227

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 17:42:19 +02:00
Jens Langhammer 1a17ce24f9 web: use single delete button with checkbox and icon-based action buttons 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 12:30:43 +02:00
Jens Langhammer ac77291b6d web/admin: add re-authenticate button for plex 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#1205
 2021-08-01 11:47:39 +02:00
Jens Langhammer 5571aa32b6 web/admin: add UI to copy invitation link 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-01 11:47:22 +02:00
Jens Langhammer 8bb57a1283 web/admin: re-name service connection to integration 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-31 13:48:26 +02:00
Jens Langhammer 577aa7ba79 web/admin: add status card for https and timedrift 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-26 19:58:26 +02:00
Jens Langhammer 5552e0ffa7 web/admin: add notice for event_retention 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-26 18:47:46 +02:00
Jens Langhammer 1972464a20 tenants: make event retention configurable on tenant level 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-24 20:07:12 +02:00
Jens Langhammer 464c27ef17 web: improve UI for event actions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-23 22:27:51 +02:00
Jens Langhammer ff64814f40 web/admin: improve UI for notification toggle 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-22 14:17:56 +02:00
Jens Langhammer 7c2decf5ec providers/ldap: squash migrations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-14 09:22:25 +02:00
Jens Langhammer 90fe1c2ce8 providers/oauth2: allow blank redirect_uris to allow any redirect_uri 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-08 19:28:35 +02:00
Jens Langhammer d07704fdf1 crypto: show both sha1 and sha256 fingerprints 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-03 19:25:27 +02:00
Jens Langhammer 91f7b289cc web/admin: show oauth2 token revoked status 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-07-03 16:04:24 +02:00
Jens Langhammer c19da839b1 stages/user_write: add create_users_as_inactive flag 
close #1086

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-28 23:24:54 +02:00
Jens Langhammer 2b1356bb91 flows: add invalid_response_action to configure how the FlowExecutor should handle invalid responses 
closes #1079

Default value of `retry` behaves like previous version.

`restart` and `restart_with_context` restart the flow upon an invalid response. `restart_with_context` keeps the same context of the Flow, allowing users to bind policies that maybe aren't valid on the first execution, but are after a retry, like a reputation policy with a deny stage.

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-28 00:22:09 +02:00
Jens Langhammer 4ec5df6b12 web/admin: fix linting error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-26 22:30:33 +02:00
Jens Langhammer 0403f6d373 web/admin: add flow export button on flow view page 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-26 22:03:19 +02:00
Jens Langhammer 74e578c2bf events: add tenant to event 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-14 18:43:29 +02:00
Jens Langhammer e584fd1344 events: catch unhandled exceptions from request as event, add button to open github issue 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-14 17:22:58 +02:00
Jens Langhammer 31fc4d1cb9 web: migrate banner to sidebar 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-13 22:55:41 +02:00
Jens Langhammer 676b77aa7c stages/identification: add UPN 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-10 22:48:39 +02:00
Jens L 34ae9e6dab
API: add endpoint to show by what objects an object is used (#995) 
* core: add used_by API to show what objects are affected before deletion

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/elements: add support for used_by API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add authentik_used_by_shadows to shadow other models

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: implement used_by API

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: fix duplicate imports

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add action field to used_by api

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: add UI for used_by action

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: add notice to tenant form

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: fix naming in used_by

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: check length for used_by

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: fix used_by for non-pk models

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* *: improve __str__ on models

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add support for many to many in used_by

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-10 11:58:12 +02:00
Jens Langhammer 2210497569 events: add EMAIL_SENT event, show sent emails in event log 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-09 10:28:32 +02:00
Jens Langhammer 2addf71f37 outposts: add service connection to outpost API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-09 09:45:14 +02:00
Jens L dad24c03ff
outposts: set cookies for a domain to authenticate an entire domain (#971) 
* outposts: initial cookie domain implementation

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add cookie domain setting

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: replace forward_auth_mode with general mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: rebuild proxy provider form

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: re-add forward_auth_mode for backwards compat

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix data.mode not being set

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: always set log level to debug when testing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: use new mode attribute

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: only ingress /akprox on forward_domain

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* providers/proxy: fix lint error

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix error on ProxyProviderForm when not using proxy mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: fix default for outpost form's type missing

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/admin: add additional desc for proxy modes

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: fix service account permissions not always being updated

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost/proxy: fix redirecting to incorrect host for domain mode

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: improve error handling for network errors

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outpost: fix image naming not matching main imaeg

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/proxy: fix redirects for domain mode and traefik

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web: fix colour for paragraphs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: fix consent stage not showing permissions correctly

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: add domain-level docs

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* website/docs: fix broken links

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts/proxy: remove dead code

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* web/flows: fix missing id for #header-text

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 23:10:17 +02:00
Jens Langhammer fb8d67a9d9 core: add configure_url to UserSettings for both stages and sources 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 19:21:27 +02:00
Jens Langhammer d9ffb23a80 web/admin: improve ldap form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-08 09:31:36 +02:00
Jens Langhammer bedf7fbcaa web/admin: don't show backup error when server can't backup 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-06 12:51:23 +02:00
Jens Langhammer f5dbdbd48b *: add clear param to file upload API to delete stored file and reset field 
closes #949

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 21:33:03 +02:00
Jens Langhammer 277c2f4aad core: make application.meta_icon nullable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#949
 2021-06-05 21:06:52 +02:00
Jens Langhammer 86b450c6d1 flows: add compatibility_mode to toggle ShadyDOM 
closes #894

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 20:04:30 +02:00
Jens Langhammer 24da24b5d5 stages/identification: allow setting of a password stage to check password and identity in a single step 
closes #970

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 16:05:03 +02:00
Jens Langhammer cec47c3cfc providers/oauth2: show id_token issues for refresh token 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 22:05:04 +02:00
Jens Langhammer 3ea2b16a12 tenants: add separate field for favicon url 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 21:31:04 +02:00
Jens Langhammer 85d349e776 web/admin: only allow outpost providers matching outpost type 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-01 23:35:36 +02:00
Jens Langhammer e24a9e3119 policies: fix missing negate flag of policy bindings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-31 11:50:29 +02:00
Jens Langhammer c89b8a5f7c web/admin: add UI for reputations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 23:01:45 +02:00
Jens Langhammer 4d9b362dbf tenants: add migration to add default tenant 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 19:06:35 +02:00
Jens Langhammer ff611f21cd tenants: initial implementation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 17:47:25 +02:00
Jens Langhammer ab25610643 website/docs: add duo docs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 22:11:16 +02:00
Jens Langhammer 6f6ae7831e flows: make use of oneOf OpenAPI to annotate all challenge types 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-24 14:11:23 +02:00
Jens Langhammer 9b57f0b81d Merge branch 'version-2021.5' into next 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	web/src/locales/en.po
#	web/src/locales/pseudo-LOCALE.po
 2021-05-22 20:01:16 +02:00
Jens Langhammer 2c816e6162 providers/proxy: don't use https to communicate with outpost 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-22 18:56:38 +02:00
Jens Langhammer 50308510b4 Merge branch 'version-2021.5' into next 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

# Conflicts:
#	web/src/locales/en.po
#	web/src/locales/pseudo-LOCALE.po
 2021-05-22 13:10:04 +02:00
Jens Langhammer dbcb4d46ba web: fix missing flow and policy cache UI 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-22 13:04:13 +02:00
Jens Langhammer 0f556fe8a3 web: remove po lineNumbers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 00:06:10 +02:00
Jens Langhammer dc2538f59d web/admin: fix outpost health not updating on refresh 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 21:53:19 +02:00
Jens Langhammer 6f8d129dea web/admin: migrate remaining forms 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 12:44:50 +02:00
Jens Langhammer c99afe0ad4 web/admin: remove unused imports 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 12:12:31 +02:00
Jens Langhammer 303b847cdc web/admin: rewrite overview page 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 13:15:27 +02:00
Jens Langhammer 9e3b5d313b web/admin: rewrite sidebar to use full components, switch to categories 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 19:14:37 +02:00
Jens Langhammer 751e77fa9e web: fix package json failing 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 01:24:10 +02:00
Jens Langhammer 928c2bf0d6 web/admin: add launch button to application view page 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 17:08:46 +02:00
Jens Langhammer 0440ad7c09 web/admin: add missing plex source view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 12:09:35 +02:00
Jens Langhammer d330e9ee7f web/flows: fix rendering for plex login 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 22:08:25 +02:00
Jens Langhammer 6fc38436f4 sources/plex: set better defaults on model 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 21:23:13 +02:00
Jens Langhammer 4523550422 stages/invitation: add single_use flag to delete invitation after use 
closes #821

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-03 09:52:38 +02:00
Jens Langhammer 40a885aaaa web/admin: add collapse button to sidebar header on mobile viewport 
closes #813

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-02 12:48:45 +02:00
Jens Langhammer 34c45900c2 stages/identification: allow selection of no user fields to only allow login via sources 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-30 01:07:37 +02:00
Jens L 2a409215d3
outpost: forwardAuth mode (#790) 2021-04-29 18:17:10 +02:00
Jens L c4e4e17f93
providers/oauth2: add access_code_validity (#795) 
closes #794

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 21:03:43 +02:00
Jens Langhammer 5769eb277c website/admin: fix sessionDuration not updated on UserLoginStageForm 
closes #793

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 09:16:04 +02:00
Jens Langhammer b59b9314e4 web/flows/identification: fix phrasing account recovery 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-25 18:50:19 +02:00
Jens Langhammer c1ab5c5556 web: fix title not being loaded from config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#770
 2021-04-22 23:50:37 +02:00
Jens Langhammer 799d186510 web/flows: fix Sentry not being loaded correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-22 20:48:22 +02:00
Jens Langhammer 003df44a34 web/admin: adjust phrasing of cards on overview page 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-22 14:07:30 +02:00
Jens Langhammer 1f49aea48d web/admin: fix mismatched required tags 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-22 10:33:36 +02:00
Jens Langhammer 7346ccf2b7 web/admin: add description for fields in proxy provider form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-21 10:18:00 +02:00
Jens Langhammer fec098a823 web/admin: only allow policies to be bound to sources as users/groups cannot be checked 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-20 23:30:37 +02:00
Jens Langhammer 73950b72e5 web/admin: improve phrasing for Policy bindings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-20 23:16:17 +02:00
Jens Langhammer 8a6879afa5 core: add superuser_full_list to applications list, shows all applications when superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 16:07:30 +02:00
Jens Langhammer dd2cd09637 web/admin: fix undefined being shown when viewing application 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-18 19:04:10 +02:00
Jens Langhammer f328b21e89 providers/oauth2: Set CORS Headers for token endpoint, check Origin header against redirect URLs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-18 14:20:50 +02:00
Jens Langhammer 52abd959eb sources/oauth: save null instead of empty string for sources without configurable URLs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 21:15:06 +02:00
Jens Langhammer 766c4873a0 web/admin: add ability to add users to a group whilst creating a group 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 19:56:49 +02:00
Jens Langhammer e32070ddeb web/admin: fix errors in user profile when non-superuser 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 17:24:58 +02:00
Jens Langhammer c5e2635903 core: improve messaging when creating a recovery link for a user when no recovery flow exists 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 10:09:46 +02:00
Jens Langhammer 513d3c1c31 web: add support for PII for sentry, add user feedback dialog 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-13 18:35:26 +02:00
Jens Langhammer 55bb9b6643 web/admin: show banner when backend and frontend versions mismatch 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-13 16:52:02 +02:00
Jens Langhammer 430e3c576c web: always set css variables 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 19:00:29 +02:00
Jens Langhammer fe17c3aa34 web/admin: add tab to show events of a user 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 18:46:26 +02:00
Jens Langhammer 4216577565 web/elements: make provider clickable for user's oauth codes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 18:24:27 +02:00
Jens Langhammer 5522c94b65 web/admin: fix OutpostDeploymentModal not being closable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 23:31:11 +02:00
Jens Langhammer f156c0f05d web/admin: fix header hight for inherited objects 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 20:58:45 +02:00
Jens Langhammer 182256c53e web/admin: migrate GroupForm to use TableModal instead of select multiple 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 20:23:48 +02:00
Jens Langhammer 7c761ff3d9 web/elements: add close button to notification drawer for mobile 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 17:43:07 +02:00
Jens Langhammer f6b8dc5cea web/admin: move SidebarHamburger into PageHeader 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 17:42:15 +02:00
Jens Langhammer 6f7fb4c919 web/elements: add PageHeader element to replace page 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 17:09:40 +02:00
Jens Langhammer f3aea29324 web/admin: add additional explanation what stages do 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 12:52:17 +02:00
Jens Langhammer f5921f8480 web/admin: add additional explanation what policies do 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 12:37:08 +02:00
Jens Langhammer c82cd4fbcf web/admin: fix CSS for outpost deployment modal, fix URL 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-10 12:20:45 +02:00
Jens Langhammer c887139367 web/elements: add ak-label for status to replace simple icons 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-09 17:09:38 +02:00
Jens Langhammer 34b8a97ae9 web/admin: add custom rendering for inbuilt sources 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-09 16:30:53 +02:00
Jens Langhammer 23f269d676 web/admin: add note that attributes are yaml/json 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-09 14:30:49 +02:00
Jens Langhammer 963af1ac1e web/admin: adjust label for ldap password sync 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-09 11:24:13 +02:00
Jens Langhammer d37c33d941 sources/ldap: only save sync state in TaskInfo, return TaskInfo in API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-08 23:33:41 +02:00
Jens Langhammer c5abecf578 web/admin: add provider create button to application form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-08 22:16:59 +02:00
Jens L a2a35e49a9
improved out-of-box experience (#704) 2021-04-06 20:25:22 +02:00
Jens Langhammer fb409a73a1 web/elements: Fix display in deleteform when object has no name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-06 17:36:42 +02:00
Jens Langhammer d5169504ea web/admin: add button to create prompt on PromptStageForm 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-06 16:58:28 +02:00
Jens Langhammer 20de845f2b web/admin: fix inconsistent modal size from BoundPoliciesList 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-06 12:11:48 +02:00
Jens Langhammer b98b4f2ae7 web/admin: add backup status card 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-05 20:40:30 +02:00
Jens Langhammer d48badbca3 web/admin: show ldap sync status on overview page 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-05 20:36:31 +02:00
Jens Langhammer d0230c0b54 web: fix misc strings not being translated properly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-05 01:12:13 +02:00
Jens Langhammer a9336d0983 web: allow for non-path elements in hash, store current tab page in hash 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-05 01:04:14 +02:00
Jens Langhammer a66b832154 web/admin: fix policies of oauth/saml source not being configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-04 21:03:57 +02:00