Skip to content

Releases: goauthentik/authentik

Release 0.9.0-pre1

08 Jun 14:08
Compare
Choose a tag to compare
Release 0.9.0-pre1 Pre-release
Pre-release

This is a big release. Due to some database changes, it is not compatible to the previous 0.8.x releases and needs a fresh database. See https://passbook.beryju.org/upgrading-from-0.8.x/

- *: add pyright type checking
- *: migrate from PolicyModel to PolicyBindingModel, move Policy to passbook_policies
- *: providers and sources -> channels, PolicyModel to PolicyBindingModel that uses custom M2M through
- *: rename templatetags to clearly identify
- admin: add empty views to all lists, move invitation to stage-invitations
- admin: add flow-stage-bindings, add policy-bindings, add prompts
- admin: add flows
- admin: add generic tests
- admin: cleanup templates, cleanup templatetags
- admin: fix create buttons disappearing on small screens
- admin: fix flow ordering, fix source URLs
- admin: fix incorrect URL
- admin: fix linting
- admin: fix missing stage count
- admin: fix policy testing form not showing the correct result
- admin: fix PropertyMapping widget not rendering properly
- admin: fix sidebar
- admin: fix slow load for templates using get_links
- admin: fix urls applications and sources
- admin: fix urls for applications
- admin: fix wrong name in template
- admin: fixup some urls
- admin: remove inline JS, add CodeMirror widget for jinja and yaml
- admin: remove more duplicate code
- admin: remove redundant code
- admin: show object's docstring on inheritance based lists
- admin: sort types, minor fixups
- admin: update templates and stage views
- build(deps-dev): bump autopep8 from 1.5.1 to 1.5.2
- build(deps-dev): bump autopep8 from 1.5.2 to 1.5.3 (#44)
- build(deps-dev): bump bumpversion from 0.5.3 to 0.6.0
- build(deps-dev): bump coverage from 5.0.4 to 5.1
- build(deps-dev): bump pylint from 2.4.4 to 2.5.2
- build(deps-dev): bump pylint-django from 2.0.14 to 2.0.15
- build(deps): bump @fortawesome/fontawesome-free
- build(deps): bump @patternfly/patternfly in /passbook/static/static
- build(deps): bump boto3 from 1.12.39 to 1.13.11
- build(deps): bump boto3 from 1.13.11 to 1.13.12 (#23)
- build(deps): bump boto3 from 1.13.12 to 1.13.13 (#27)
- build(deps): bump boto3 from 1.13.13 to 1.13.14 (#30)
- build(deps): bump boto3 from 1.13.14 to 1.13.15 (#31)
- build(deps): bump boto3 from 1.13.15 to 1.13.17 (#35)
- build(deps): bump boto3 from 1.13.17 to 1.13.18 (#37)
- build(deps): bump boto3 from 1.13.18 to 1.13.19 (#41)
- build(deps): bump boto3 from 1.13.19 to 1.13.20 (#45)
- build(deps): bump boto3 from 1.13.20 to 1.13.21 (#47)
- build(deps): bump boto3 from 1.13.21 to 1.13.22 (#51)
- build(deps): bump boto3 from 1.13.22 to 1.13.23 (#53)
- build(deps): bump boto3 from 1.13.23 to 1.13.24 (#55)
- build(deps): bump celery from 4.4.2 to 4.4.4 (#50)
- build(deps): bump codemirror in /passbook/static/static
- build(deps): bump codemirror in /passbook/static/static (#29)
- build(deps): bump django from 3.0.5 to 3.0.6
- build(deps): bump django from 3.0.6 to 3.0.7 (#52)
- build(deps): bump django-filter from 2.2.0 to 2.3.0 (#54)
- build(deps): bump django-guardian from 2.2.0 to 2.3.0 (#57)
- build(deps): bump django-otp from 0.8.1 to 0.9.1
- build(deps): bump django-redis from 4.11.0 to 4.12.1 (#38)
- build(deps): bump kombu from 4.6.8 to 4.6.9 (#46)
- build(deps): bump kombu from 4.6.9 to 4.6.10 (#48)
- build(deps): bump lxml from 4.5.0 to 4.5.1 (#24)
- build(deps): bump packaging from 20.3 to 20.4 (#25)
- build(deps): bump sentry-sdk from 0.14.3 to 0.14.4
- build(deps): bump swagger-spec-validator from 2.5.0 to 2.6.0 (#28)
- build(deps): bump swagger-spec-validator from 2.6.0 to 2.7.0 (#56)
- build(deps): bump urllib3 from 1.25.8 to 1.25.9
- ci: add cleanup to CI to remove old tags
- compose: remove explicit bootstrapping
- core: add general admin.py loader, remove individual files
- core: create default user
- core: fix form not showing general errors
- core: fix help_text not always being shown on horizontal form
- core: fix migrations
- core: only show user delete button if an unenrollment flow exists
- core: reduce default nonce time to 30 minutes
- core: remove policies from application form
- core: remove redundant views/forms
- core: remove stub data from user settings
- core: rename nonce to token
- core/auth: fix unittests for flows
- crypto: fix being unable to save with private key
- crypto: fix clean_ methods not returning values
- crypto: re-add default self-signed keypair
- crypto: validate PEM data before saving
- dc: fix compose, remove SESSION_COOKIE_DOMAIN
- docker: fix import order on wait_for_db
- docs: add docs for flows and all stages
- docs: add docs for flows, start docs for stages
- docs: add example for login flow
- docs: add requirements for docs
- docs: add runtime
- docs: add upgrade page
- docs: fix typo'd URL
- docs: fix wrong paths in nav section
- docs: remove last occurrences to jinja2
- docs: simplify index, update, add screenshots
- factors: -> stage
- flows: add caching of plan, add planner unittests
- flows: add check if current plan matches current flow
- flows: add invalidation designation, use as default logout action
- flows: add Planner and Executor unittests
- flows: add support for default_context, etc
- flows: add to api and add forms
- flows: allow username for default flow
- flows: complete migration to FlowExecutorView, fully use context
- flows: Correctly check initial policies on flow with context
- flows: default-auth -> default-authentication
- flows: enum to django TextChoices
- flows: fix denied view not being registered
- flows: fix linting
- flows: fix linting of migrations
- flows: fix unittests and migrations
- flows: implement planner, start new executor
- flows: Load Stages without refreshing the whole page (#33)
- flows: make FlowExecutor fully working without pending user
- flows: make sure flow_slug is logged consistently
- flows: rename AuthenticationStage to StageView as its a general base view
- flows: separate final login step from flow executor
- flows/: more migration progress, consolidate views
- flows/*: Initial flows stage1 implementation
- gh/actions: add codecov
- gh/actions: fix invalid path for codecov
- gh/actions: run coverage xml before codecov
- gh/ci: fix ci syntax
- gh/ci: fix pyright not being installed
- gh/ci: run pyright in python venv
- helm: expose backup settings through helm chart
- helm: fix bootstrap not being used correctly
- helm: fully remove domain, add log_level
- helm: limit deployments to their respective components
- helm: remove explicit bootstrapping
- lib: fix ram usage due to bootstrap
- lib: use TemplateResponse for bad_request_message
- lib/ui: fix human_list for lists with one item
- Merge branch 'docs-flows'
- Merge branch 'master' into docs-flows
- Merge branch 'master' into docs-flows
- Merge branch 'master' into docs-flows
- Merge branch 'master' into docs-flows
- Merge pull request #10 from BeryJu/dependabot/pip/pylint-django-2.0.15
- Merge pull request #11 from BeryJu/dependabot/npm_and_yarn/passbook/static/static/fortawesome/fontawesome-free-5.13.0
- Merge pull request #12 from BeryJu/dependabot/npm_and_yarn/passbook/static/static/codemirror-5.53.2
- Merge pull request #13 from BeryJu/dependabot/pip/autopep8-1.5.2
- Merge pull request #14 from BeryJu/dependabot/npm_and_yarn/passbook/static/static/patternfly/patternfly-2.71.6
- Merge pull request #15 from BeryJu/dependabot/pip/bumpversion-0.6.0
- Merge pull request #16 from BeryJu/dependabot/pip/boto3-1.13.11
- Merge pull request #17 from BeryJu/dependabot/pip/pylint-2.5.2
- Merge pull request #18 from BeryJu/dependabot/pip/django-3.0.6
- Merge pull request #19 from BeryJu/dependabot/pip/coverage-5.1
- Merge pull request #20 from BeryJu/dependabot/pip/django-otp-0.9.1
- Merge pull request #21 from BeryJu/dependabot/pip/sentry-sdk-0.14.4
- Merge pull request #22 from BeryJu/dependabot/pip/urllib3-1.25.9
- Merge pull request #8 from BeryJu/flows-stage1
- Merge pull request #9 from BeryJu/db-reset
- migrate to per-model UUID Primary key, remove UUIDModel (#26)
- new release: 0.9.0-pre1
- policies: add API for policybindings
- policies: rewrite cache_key to prevent wrong cache
- policies/*: remove Policy.negate, order, timeout (#39)
- policies/dummy: fix migrations
- policies/dummy: separate dummy policy from core into app
- policies/engine: add more verbosity
- policies/expression: add pb_flow_plan variable
- policies/expression: add pb_log function to debug
- policies/expression: expose python requests via expression, remove webhook policy
- policies/expression: fix lint error
- policies/expression: migrate to raw python instead of jinja2 (#49)
- policies/expression: use pb_message() for messages instead of returning a tuple
- policies/expression: validate syntax on form clean
- policy: add context to PolicyRequest
- provider/samlv2: more samlv2 progres
- providers/oauth: fix default cors settings
- providers/saml: fix minor typing issue
- providers/saml: optionally verify SAML Signature
- providers/saml: re-add default PropertyMappings
- providers/samlv2: start implementing new SAML Provider
- Revert "*: providers and sources -> channels, PolicyModel to PolicyBindingModel that uses custom M2M through"
- root: add fossa
- root: add swagger to repository
- root: clear cache on debug startup
- root: fix linting errors
- root: fix migrations for CI
- root: fix pylint not correctly ignoring migrations
- root: increase testing verbosity to debug CI
- root: remove need for PASSBOOK_DOMAIN
- root: rewrite bootstrap in python, remove management command
- root: set log level based on DEBUG flag
- root: update docs URL
- root: update pylint ignore list
- root: update readme
- root: update readme
- root: upgrade django-dbbackup
- sources/ldap: add option to disable user sync, move connection init to model
- sources/ldap: fix expression field not being...
Read more

Release 0.8.15-beta

10 Apr 20:00
Compare
Choose a tag to compare
  • providers/saml: fix metadata rendering when no singing keypair is selected
  • providers/saml: fix wrong signing property being checked

Release 0.8.14-beta

10 Apr 19:27
Compare
Choose a tag to compare
  • actions: don't setup custom python, use system pip
  • actions: don't update pip to fix CI
  • actions: don't update system pip
  • actions: install pipenv as root
  • actions: install wheel package
  • actions: remove cache
  • bump dependencies
  • crypto: add property for private_key
  • crypto: implement simple certificate-key pair for easier management
  • lib: fix imports being changed every time
  • Merge pull request #7 from BeryJu/crypto
  • new release: 0.8.13-beta
  • providers/oidc: fill claims with userinfo
  • providers/oidc: fix skip_authorization not being synced to oidc_client
  • providers/saml: fix signing_kp typo
  • providers/saml: switch to new crypto
  • sources/saml: switch to new crypto
  • ui: fix title, fix navigation on user settings

Release 0.8.12-beta

28 Feb 10:56
Compare
Choose a tag to compare
  • admin: fix some models not being paginated
  • api: update old field names
  • core: remove some more dead code, add more help texts for factors
  • docs: fix some typos
  • providers/saml: fix CSRF errors with POST binding
  • ui: add template for csrf errors
  • ui: re-enable branding on navbar
  • ui: re-organize some of the navigation to make it cleaner for end-users

Release 0.8.11-beta

25 Feb 10:41
Compare
Choose a tag to compare
  • lib/sentry: fix SentryIgnoredException not being ignored correctly
  • providers/saml: fix AccessRequiredView.dispatch not being called
  • providers/saml: fix CannotHandleAssertion Error still being sent to sentry
  • providers/saml: fix leftover data in session, fix IdP initiated login
  • providers/saml: fix wrong key being used for params

Release 0.8.9-beta

24 Feb 12:26
Compare
Choose a tag to compare
  • admin: exclude anonymous user from listing
  • admin: show prettified yaml
  • all: remove dead code
  • audit: save model's name or string representation
  • core: fix saving of policy not correctly clearing it's cache
  • core: sort sources on login view
  • deploy: use new bootstrap command
  • lib: add bootstrap command
  • lib: add more errors to sentry ignore
  • policies: add unittests for evaluator
  • root: add process ID to logging output
  • root: set SameSite to None when debugging
  • sources/oauth: fix invalid headers, fix invalid function signature
  • ui: fix automatic slug generation
  • ui: fix height of multiple select input
  • ui: fix icon sizing on login
  • ui: fix lists not being rendered correctly
  • ui: re-add automatic slug generation
  • ui: show default icon for source without icon
  • ui: update more remaining templates
  • ui: update remaining forms, completely remove jQuery

Release 0.8.10-beta

24 Feb 14:33
Compare
Choose a tag to compare
  • core: sort provider by pk when selection application provider
  • helm: fix inconsistent labels
  • lib/logging: fix typo
  • providers/oidc: add error template
  • providers/saml: fix users being able to authenticate without audit logs being created
  • root: fix logging.basicConfig being called by pyjwkest

Release 0.8.8-beta

23 Feb 13:48
Compare
Choose a tag to compare
  • actions: build : on push
  • admin: fix provider list not having pagination
  • audit: don't pop password as its censored already
  • core: add migration to fix null fields in core.application
  • core: fix default Null causing issues in translation
  • policies/expression: add pb_client_ip field
  • sources: remove policies as they are not used currently
  • sources/oauth: slugify provider type instead of just lowercase
  • ui: add missing discord and twitter icons

Release 0.8.7-beta

21 Feb 21:21
Compare
Choose a tag to compare
  • admin: show object usage count instead of list
  • helm: change static healthcheck and port
  • ui: fix app icon not showing
  • ui: fix application grid icons, fix SAML Authorize

Release 0.8.6-beta

21 Feb 20:39
Compare
Choose a tag to compare
  • audit: crit fix audit log not being protected correctly
  • all: add more helpful help_text to models
  • all: fix left over references to error templates
  • audit: fix failed login events not being logged
  • Merge branch 'master' into pf4
  • Merge pull request #5 from BeryJu/pf4
  • providers/saml: fix 500 when SAML Provider not assigned to application
  • root: run bandit as part of pre-commit
  • root: use defusedxml's defuse_stdlib globally
  • static: use codemirror from npm
  • ui: centrally load CodeMirror and init via data tag
  • ui: clean up more generic forms, remove is_login everywhere
  • ui: clean up some more remaining templates
  • ui: fix branding viewport
  • ui: fixup minor issues, add static app
  • ui: include font-awesome
  • ui: rewrite admin templates to pf4, add some helper scripts
  • ui: update static docker image to download NPM modules
  • ui: update templates for jinja2-related fields
  • ui: use compact templates