Marcelo Elizeche Landó
61e45ca59a
docs/release notes: update 2025.12 release notes ( #19043 )
...
* Add links and tags
* Update website/docs/releases/2025/v2025.12.md
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Marcelo Elizeche Landó <marce@melizeche.com >
---------
Signed-off-by: Marcelo Elizeche Landó <marce@melizeche.com >
Co-authored-by: Dominic R <dominic@sdko.org >
2025-12-24 13:01:26 -03:00
dependabot[bot]
0a5e421c9c
core: bump goauthentik.io/api/v3 from 3.2026020.5 to 3.2026020.6 ( #19036 )
...
Bumps [goauthentik.io/api/v3](https://github.com/goauthentik/client-go ) from 3.2026020.5 to 3.2026020.6.
- [Release notes](https://github.com/goauthentik/client-go/releases )
- [Commits](https://github.com/goauthentik/client-go/compare/v3.2026020.5...v3.2026020.6 )
---
updated-dependencies:
- dependency-name: goauthentik.io/api/v3
dependency-version: 3.2026020.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-24 13:58:28 +01:00
dependabot[bot]
097b39d773
web: bump knip from 5.75.1 to 5.77.0 in /web ( #19041 )
...
Bumps [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip ) from 5.75.1 to 5.77.0.
- [Release notes](https://github.com/webpro-nl/knip/releases )
- [Commits](https://github.com/webpro-nl/knip/commits/knip@5.77.0/packages/knip )
---
updated-dependencies:
- dependency-name: knip
dependency-version: 5.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-24 13:56:04 +01:00
dependabot[bot]
a9c2613ba6
web: bump @lit/reactive-element from 2.1.1 to 2.1.2 in /web ( #19037 )
...
Bumps [@lit/reactive-element](https://github.com/lit/lit/tree/HEAD/packages/reactive-element ) from 2.1.1 to 2.1.2.
- [Release notes](https://github.com/lit/lit/releases )
- [Changelog](https://github.com/lit/lit/blob/main/packages/reactive-element/CHANGELOG.md )
- [Commits](https://github.com/lit/lit/commits/lit@2.1.2/packages/reactive-element )
---
updated-dependencies:
- dependency-name: "@lit/reactive-element"
dependency-version: 2.1.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-24 13:55:39 +01:00
dependabot[bot]
4684f8a4c4
web: bump lit from 3.3.1 to 3.3.2 in /web ( #19038 )
...
Bumps [lit](https://github.com/lit/lit/tree/HEAD/packages/lit ) from 3.3.1 to 3.3.2.
- [Release notes](https://github.com/lit/lit/releases )
- [Changelog](https://github.com/lit/lit/blob/main/packages/lit/CHANGELOG.md )
- [Commits](https://github.com/lit/lit/commits/lit-element@3.3.2/packages/lit )
---
updated-dependencies:
- dependency-name: lit
dependency-version: 3.3.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-24 13:54:36 +01:00
Dominic R
7845dcf687
web/admin: use consistent icon for inactive user status ( #19032 )
2025-12-24 03:23:16 +00:00
Jens L.
cc2dbf4db5
core: use chunked_queryset for expired message deletion ( #19028 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-12-24 01:15:45 +01:00
Teffen Ellis
f520c90e16
web: Fix Storybook package resolution with npm link ( #19016 )
2025-12-23 18:40:47 +00:00
Teffen Ellis
342d9eb726
web: Locale selector UI fixes ( #18972 )
...
* Fix alignment, focus.
* Clean up.
* Tidy click area.
* Fix compatibility mode.
* Fix alignment.
* Fix issues surrounding labels, alignment, consistency.
* Update web/src/common/ui/locale/format.ts
Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com >
* Tidy hover states.
* Tidy.
* Clean up parsing.
* Tidy comments, usage.
* Always use script naming over region.
* Remove unused.
* Spacing.
---------
Signed-off-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com >
2025-12-23 18:40:02 +00:00
Teffen Ellis
2f8dfff207
website/docs: Prioritize "Release Candidate" over "Current Release" ( #18975 )
...
Normalize labels.
2025-12-23 15:41:42 +01:00
dependabot[bot]
0ba071e1e5
core: bump goauthentik.io/api/v3 from 3.2026020.4 to 3.2026020.5 ( #19017 )
...
Bumps [goauthentik.io/api/v3](https://github.com/goauthentik/client-go ) from 3.2026020.4 to 3.2026020.5.
- [Release notes](https://github.com/goauthentik/client-go/releases )
- [Commits](https://github.com/goauthentik/client-go/compare/v3.2026020.4...v3.2026020.5 )
---
updated-dependencies:
- dependency-name: goauthentik.io/api/v3
dependency-version: 3.2026020.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 14:50:54 +01:00
dependabot[bot]
6443d56d2b
web: bump the eslint group across 1 directory with 3 updates ( #19019 )
...
Bumps the eslint group with 3 updates in the /web directory: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint ).
Updates `@typescript-eslint/eslint-plugin` from 8.50.0 to 8.50.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.1/packages/eslint-plugin )
Updates `@typescript-eslint/parser` from 8.50.0 to 8.50.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.1/packages/parser )
Updates `typescript-eslint` from 8.50.0 to 8.50.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.1/packages/typescript-eslint )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-version: 8.50.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: eslint
- dependency-name: "@typescript-eslint/parser"
dependency-version: 8.50.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: eslint
- dependency-name: typescript-eslint
dependency-version: 8.50.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: eslint
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 13:43:43 +01:00
Jens L.
fcc0438961
web/admin: prevent file upload attempt when backend not managed ( #18646 )
...
* web/admin: prevent file upload attempt when backend not managed
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* wip
* fixup
* rework
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add check for reports
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix delete table for data exports missing details
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Dominic R <dominic@sdko.org >
2025-12-23 13:41:27 +01:00
Jens L.
d9cd1096b9
api: rework schema generation ( #18977 )
...
* api: rework schema generation
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* better error message
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* actually fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* different test
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-12-23 12:20:24 +01:00
dependabot[bot]
fc4765d265
web: bump globby from 16.0.0 to 16.1.0 in /web ( #18995 )
...
Bumps [globby](https://github.com/sindresorhus/globby ) from 16.0.0 to 16.1.0.
- [Release notes](https://github.com/sindresorhus/globby/releases )
- [Commits](https://github.com/sindresorhus/globby/compare/v16.0.0...v16.1.0 )
---
updated-dependencies:
- dependency-name: globby
dependency-version: 16.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 11:50:15 +01:00
dependabot[bot]
4b54684efa
core: bump openapitools/openapi-generator-cli from v7.16.0 to v7.18.0 in /scripts/api ( #19018 )
...
core: bump openapitools/openapi-generator-cli in /scripts/api
Bumps openapitools/openapi-generator-cli from v7.16.0 to v7.18.0.
---
updated-dependencies:
- dependency-name: openapitools/openapi-generator-cli
dependency-version: v7.18.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 11:49:39 +01:00
dependabot[bot]
519958fdbc
web: bump the rollup group across 1 directory with 4 updates ( #18994 )
...
Bumps the rollup group with 4 updates in the /web directory: [@rollup/rollup-darwin-arm64](https://github.com/rollup/rollup ), [@rollup/rollup-linux-arm64-gnu](https://github.com/rollup/rollup ), [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup ) and [rollup](https://github.com/rollup/rollup ).
Updates `@rollup/rollup-darwin-arm64` from 4.53.5 to 4.54.0
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v4.53.5...v4.54.0 )
Updates `@rollup/rollup-linux-arm64-gnu` from 4.53.5 to 4.54.0
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v4.53.5...v4.54.0 )
Updates `@rollup/rollup-linux-x64-gnu` from 4.53.5 to 4.54.0
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v4.53.5...v4.54.0 )
Updates `rollup` from 4.53.5 to 4.54.0
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v4.53.5...v4.54.0 )
---
updated-dependencies:
- dependency-name: "@rollup/rollup-darwin-arm64"
dependency-version: 4.54.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: rollup
- dependency-name: "@rollup/rollup-linux-arm64-gnu"
dependency-version: 4.54.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: rollup
- dependency-name: "@rollup/rollup-linux-x64-gnu"
dependency-version: 4.54.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: rollup
- dependency-name: rollup
dependency-version: 4.54.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: rollup
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-22 23:32:24 +01:00
Dewi Roberts
97ef6a5eb2
website/docs: improve endpoint devices docs ( #19007 )
...
* Remove sudo auth sections
* Add firefox extension link
* Add chrome extension
* Update release notes
* Remove link
* Fix link
* Fix release note wording
2025-12-22 20:32:20 +00:00
Jens L.
e23c28373c
enterprise/search: add static autocomplete structure ( #19008 )
...
* enterprise/search: add static autocomplete structure
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add recursive structured for context
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-12-22 20:53:33 +01:00
Jens L.
7fa28c60c7
enterprise/reports: improve export list, confirmation ( #18981 )
...
* enterprise/reports: use verbose name for model label
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add confirmation for export
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove duplicated api
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix duplicate
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix search query not updated
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* exclude page & page size
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* improve query display
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix user display
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* exclude unset params
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Apply suggestions from code review
Co-authored-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com >
Signed-off-by: Jens L. <jens@beryju.org >
* more code style
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix types
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Signed-off-by: Jens L. <jens@beryju.org >
Co-authored-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com >
2025-12-22 20:35:18 +01:00
Jens L.
3cd1a31365
providers/oauth2: Automated OpenID Conformance tests ( #14785 )
...
* some progress
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* somewhat working?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove some previous debugging things
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make it kinda work
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* revert more debugging stuff
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make tests mostly work
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* smaller screenshots?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove debugging
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* sleep a bit before checking again
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* cleanup, restart loop when we finished an operation
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* refactor conformance helper to requests (thanks chatgpt)
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* properly install subtests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* maybe run in CI?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* dont hardcode IP
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix network and cookie deletion
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* upload cert exports
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* test
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* attempt to switch to generated
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make it work generated?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix teardown
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* re-add implicit and fix?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Revert "re-add implicit and fix?"
This reverts commit 6a4d15fc22cf4b27ffa428be9ecc9a0e778961c6.
* Revert "fix teardown"
This reverts commit cb96b0cb988acedec1fe72ec437b68e2c38ed6b1.
* Revert "make it work generated?"
This reverts commit 4e29d2c5737ee9aaad6c0f4701caf7e0fb110e15.
* Revert "attempt to switch to generated"
This reverts commit 6f851e021d305a93be9cfbb4a9b6783231b6d7cf.
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* check authorize request param earlier
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix some
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix basic suite?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* another actual fix; don't return access_token when using response_type id_token
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add implicit test
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add custom profile scope that includes standard scopes to return number of warnings
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* use actual timestamp
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix missing offline_access, use scoped issuer
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* only run basic+implicit for now, fix other tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* split up
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix offline_access tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix waiting for compete on error
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix duplicate artifact
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix artifact
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* 👀
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix typing
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* typing
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix implicit
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* don't wait for conformance test
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* more disk space
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-12-22 20:21:22 +01:00
dependabot[bot]
b66e4074e2
ci: bump docker/setup-buildx-action from 3.11.1 to 3.12.0 ( #18999 )
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 3.11.1 to 3.12.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](e468171a9d...8d2750c68a )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 3.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-22 16:34:46 +01:00
Jens L.
fa65d4730c
blueprints: fix flaky tests ( #19002 )
...
* blueprints: attempt to fix tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix postgres debug logging
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-12-22 15:39:05 +01:00
Dominic R
e3d774b3ef
web: fix Open button selecting row instead of navigating ( #18992 )
...
the `isEventTargetingListener()` function only checked the click target and the immediate parent for interactive elements (like links, buttons and more). when clicking the icon inside the Open button, the DOM structure is:
<a href=...> <--- 2 levels up, never checked
<pf-tooltip> <--- immediate parent, not interactive
<i> <---- click target, not interactive
Because <i> and <pf-tooltip> did not match the interactive elements query, the function returned false which caused the table rowClickListener to continue with row selection isntead of allowing the click.
The fix is to update the function to to traverse (up) the entire dom tree from the click target to the listener element (the table cell) and check for each ancestor for the interactive elements.
2025-12-22 15:02:59 +01:00
Jens L.
162e05ff9d
events: notifications live update ( #18980 )
...
* this has been broken for a while but no one noticed...? cc @rissson
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* send WS broadcast for new notifications
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* better layout
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix e2e tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-12-21 23:02:56 +01:00
Henry Skrtich
238cefba45
web/admin: Fix haveibeenpwned link in PasswordPolicyForm ( #18984 )
...
web: Fix haveibeenpwned link in PasswordPolicyForm
2025-12-21 15:02:04 +01:00
Jens L.
bfa46ddc7e
web/admin: fix dark theme on map ( #18985 )
...
web/admin: fix dark theme on map broken
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-12-21 15:01:26 +01:00
Jens L.
e24b60f806
blueprints: add InternallyManagedMixin instead of large list ( #18983 )
...
* blueprints: add InternallyManagedMixin instead of large list
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix recursion
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix e2e tests
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-12-21 03:31:41 +01:00
Stijn van Hees
0c792c8463
website/integrations: Fix path for Cloudflare Access ( #18979 )
...
Co-authored-by: Dominic R <dominic@sdko.org >
2025-12-20 16:57:57 +00:00
Ken Sternberg
1143de97d0
web/maintenance: no unknown tag names ( #18944 )
...
* web: Add InvalidationFlow to Radius Provider dialogues
## What
- Bugfix: adds the InvalidationFlow to the Radius Provider dialogues
- Repairs: `{"invalidation_flow":["This field is required."]}` message, which was *not* propagated
to the Notification.
- Nitpick: Pretties `?foo=${true}` expressions: `s/\?([^=]+)=\$\{true\}/\1/`
## Note
Yes, I know I'm going to have to do more magic when we harmonize the forms, and no, I didn't add the
Property Mappings to the wizard, and yes, I know I'm going to have pain with the *new* version of
the wizard. But this is a serious bug; you can't make Radius servers with *either* of the current
dialogues at the moment.
* This (temporary) change is needed to prevent the unit tests from failing.
\# What
\# Why
\# How
\# Designs
\# Test Steps
\# Other Notes
* Revert "This (temporary) change is needed to prevent the unit tests from failing."
This reverts commit dddde09be5 .
* website: fix bad escaping of URLs in release notes
## What
Fixes bad escaping of URLs in the release notes that resulted in mangled output.
v2024.6.4 had entries that looked like this:
```
##### `GET` /providers/google_workspace/{#123;id}#125;/
```
v2025.4.md had entries that looked like this:
```
##### `GET` /policies/unique_password/{#125;#123;policy_uuid}/
```
A couple of straightforward search-and-replaces has fixed the issue.
## Notes
Two of the release notes had bad escaping of URLs. I'm not sure how the error was made or got past,
but it was obvious when visiting the page.
@Beryju suggested that the bug is due to our using `{...}` to symbolize parameters in a URL while
Docusaurus wants to interpret `{...}` as an internal template instruction, resulting in odd
behavior. In either case, docusarus interpreted the hashtagged entries as links to unrelated issues
in Github (the same two issues, which were "bump version of pylint" and "bump version of sentry"),
which could be very confusing.
The inconsistencies between the two releases, and the working releases, suggests that the error was
introduced manually.
* web/maintenance: lint pass to fix broken or unrecognized tag names
# What
This code removes two places in the code that referenced obsolete tag names.
In AkWizardFormPage, the case was a tag that was defined but never used. It, in turn, referenced a tag that did not exist.
In AkApplicationWizard’s ProviderChoices, we referenced eight custom components that did not exist and were never defined anywhere in the code. The references to `renderers` were obsolete; despite being defined they were never used. (This lack of use was covered up by lots of `export`s discarding Typescript’s check against unused field.)
- [x] The code has been formatted
# Why
- WizardFormPage references ‘ak-wizard-form’, which does not exist
- No other component imports, inherits, or extends WizardFormPage. It only exists by itself.
``` shell
$ rg 'WizardFormPage'
src/elements/wizard/WizardFormPage.ts
39:export class WizardFormPage extends WizardPage {
```
- The objects referenced here in these renderers do not exist.
- Without them, the priority ordering code becomes much simpler
- No LocalTypeCreate calls are needed; just use the default API TypeCreate types now
<!-- -->
./src/admin/applications/wizard/steps/ProviderChoices.ts
Unknown tag <ak-application-wizard-authentication-by-oauth>. Did you mean <ak-application-wizard-application-step>?
19: html`<ak-application-wizard-authentication-by-oauth></ak-appl
no-unknown-tag-name
Unknown tag <ak-application-wizard-authentication-by-saml-configuration>. Did you mean <ak-application-wizard-application-step>?
24: html`<ak-application-wizard-authentication-by-saml-configuration></ak-appl
no-unknown-tag-name
* A better way to prioritise, without losing the original script.
* further streamlining the priority order.
* Making it harder to add bad provider models to the application wizard.
* Prettier has opinions.
* Adding these to the tagname maps so lit-analyze can validate their uses.
* Made testing for valid returns from the server generic. Suggestion from @GirlBossRush
2025-12-19 08:20:33 -08:00
Ken Sternberg
d6bc5871fa
web/maintenance: fix missing custom web component imports ( #18942 )
...
* web: Add InvalidationFlow to Radius Provider dialogues
## What
- Bugfix: adds the InvalidationFlow to the Radius Provider dialogues
- Repairs: `{"invalidation_flow":["This field is required."]}` message, which was *not* propagated
to the Notification.
- Nitpick: Pretties `?foo=${true}` expressions: `s/\?([^=]+)=\$\{true\}/\1/`
## Note
Yes, I know I'm going to have to do more magic when we harmonize the forms, and no, I didn't add the
Property Mappings to the wizard, and yes, I know I'm going to have pain with the *new* version of
the wizard. But this is a serious bug; you can't make Radius servers with *either* of the current
dialogues at the moment.
* This (temporary) change is needed to prevent the unit tests from failing.
\# What
\# Why
\# How
\# Designs
\# Test Steps
\# Other Notes
* Revert "This (temporary) change is needed to prevent the unit tests from failing."
This reverts commit dddde09be5 .
* website: fix bad escaping of URLs in release notes
## What
Fixes bad escaping of URLs in the release notes that resulted in mangled output.
v2024.6.4 had entries that looked like this:
```
##### `GET` /providers/google_workspace/{#123;id}#125;/
```
v2025.4.md had entries that looked like this:
```
##### `GET` /policies/unique_password/{#125;#123;policy_uuid}/
```
A couple of straightforward search-and-replaces has fixed the issue.
## Notes
Two of the release notes had bad escaping of URLs. I'm not sure how the error was made or got past,
but it was obvious when visiting the page.
@Beryju suggested that the bug is due to our using `{...}` to symbolize parameters in a URL while
Docusaurus wants to interpret `{...}` as an internal template instruction, resulting in odd
behavior. In either case, docusarus interpreted the hashtagged entries as links to unrelated issues
in Github (the same two issues, which were "bump version of pylint" and "bump version of sentry"),
which could be very confusing.
The inconsistencies between the two releases, and the working releases, suggests that the error was
introduced manually.
* web: lint pass to add all missing custom component imports
# What
The latest version of lit-analyze found 53(!) places in the codebase where we referenced a custom web component but not guarantee that it had been registered with the browser. Most of these are so commonplace that they had already been pulled in and registered elsewhere, but it’s still bad practice to leave these out.
* web/maintenance: lint pass to fix broken or unrecognized tag names
# What
This code removes two places in the code that referenced obsolete tag names.
In AkWizardFormPage, the case was a tag that was defined but never used. It, in turn, referenced a tag that did not exist.
In AkApplicationWizard’s ProviderChoices, we referenced eight custom components that did not exist and were never defined anywhere in the code. The references to `renderers` were obsolete; despite being defined they were never used. (This lack of use was covered up by lots of `export`s discarding Typescript’s check against unused field.)
- [x] The code has been formatted
# Why
- WizardFormPage references ‘ak-wizard-form’, which does not exist
- No other component imports, inherits, or extends WizardFormPage. It only exists by itself.
``` shell
$ rg 'WizardFormPage'
src/elements/wizard/WizardFormPage.ts
39:export class WizardFormPage extends WizardPage {
```
- The objects referenced here in these renderers do not exist.
- Without them, the priority ordering code becomes much simpler
- No LocalTypeCreate calls are needed; just use the default API TypeCreate types now
<!-- -->
./src/admin/applications/wizard/steps/ProviderChoices.ts
Unknown tag <ak-application-wizard-authentication-by-oauth>. Did you mean <ak-application-wizard-application-step>?
19: html`<ak-application-wizard-authentication-by-oauth></ak-appl
no-unknown-tag-name
Unknown tag <ak-application-wizard-authentication-by-saml-configuration>. Did you mean <ak-application-wizard-application-step>?
24: html`<ak-application-wizard-authentication-by-saml-configuration></ak-appl
no-unknown-tag-name
* Revert "web/maintenance: lint pass to fix broken or unrecognized tag names"
This reverts commit e9e073fbcc .
2025-12-19 08:19:25 -08:00
Dewi Roberts
0fec6fb81b
website/docs: add note to active directory source doc ( #18787 )
...
Adds note
Co-authored-by: Dominic R <dominic@sdko.org >
2025-12-19 16:00:17 +01:00
dependabot[bot]
f8cf6b8530
ci: bump actions/attest-build-provenance from 3.0.0 to 3.1.0 ( #18960 )
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](977bb373ed...00014ed6ed )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-19 15:57:50 +01:00
dependabot[bot]
320ca655b4
web: bump @sentry/browser from 10.31.0 to 10.32.0 in /web in the sentry group across 1 directory ( #18957 )
...
web: bump @sentry/browser in /web in the sentry group across 1 directory
Bumps the sentry group with 1 update in the /web directory: [@sentry/browser](https://github.com/getsentry/sentry-javascript ).
Updates `@sentry/browser` from 10.31.0 to 10.32.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases )
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/getsentry/sentry-javascript/compare/10.31.0...10.32.0 )
---
updated-dependencies:
- dependency-name: "@sentry/browser"
dependency-version: 10.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: sentry
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-19 15:57:32 +01:00
dependabot[bot]
72dd63af31
web: bump the swc group across 1 directory with 11 updates ( #18958 )
...
Bumps the swc group with 1 update in the /web directory: [@swc/core](https://github.com/swc-project/swc ).
Updates `@swc/core` from 1.15.6 to 1.15.7
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.15.6...v1.15.7 )
Updates `@swc/core-darwin-arm64` from 1.15.6 to 1.15.7
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.15.6...v1.15.7 )
Updates `@swc/core-darwin-x64` from 1.15.6 to 1.15.7
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.15.6...v1.15.7 )
Updates `@swc/core-linux-arm-gnueabihf` from 1.15.6 to 1.15.7
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.15.6...v1.15.7 )
Updates `@swc/core-linux-arm64-gnu` from 1.15.6 to 1.15.7
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.15.6...v1.15.7 )
Updates `@swc/core-linux-arm64-musl` from 1.15.6 to 1.15.7
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.15.6...v1.15.7 )
Updates `@swc/core-linux-x64-gnu` from 1.15.6 to 1.15.7
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.15.6...v1.15.7 )
Updates `@swc/core-linux-x64-musl` from 1.15.6 to 1.15.7
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.15.6...v1.15.7 )
Updates `@swc/core-win32-arm64-msvc` from 1.15.6 to 1.15.7
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.15.6...v1.15.7 )
Updates `@swc/core-win32-ia32-msvc` from 1.15.6 to 1.15.7
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.15.6...v1.15.7 )
Updates `@swc/core-win32-x64-msvc` from 1.15.6 to 1.15.7
- [Release notes](https://github.com/swc-project/swc/releases )
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md )
- [Commits](https://github.com/swc-project/swc/compare/v1.15.6...v1.15.7 )
---
updated-dependencies:
- dependency-name: "@swc/core"
dependency-version: 1.15.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: swc
- dependency-name: "@swc/core-darwin-arm64"
dependency-version: 1.15.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: swc
- dependency-name: "@swc/core-darwin-x64"
dependency-version: 1.15.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: swc
- dependency-name: "@swc/core-linux-arm-gnueabihf"
dependency-version: 1.15.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: swc
- dependency-name: "@swc/core-linux-arm64-gnu"
dependency-version: 1.15.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: swc
- dependency-name: "@swc/core-linux-arm64-musl"
dependency-version: 1.15.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: swc
- dependency-name: "@swc/core-linux-x64-gnu"
dependency-version: 1.15.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: swc
- dependency-name: "@swc/core-linux-x64-musl"
dependency-version: 1.15.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: swc
- dependency-name: "@swc/core-win32-arm64-msvc"
dependency-version: 1.15.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: swc
- dependency-name: "@swc/core-win32-ia32-msvc"
dependency-version: 1.15.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: swc
- dependency-name: "@swc/core-win32-x64-msvc"
dependency-version: 1.15.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: swc
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-19 15:47:34 +01:00
dependabot[bot]
4cbffd5b27
web: bump chromedriver from 143.0.2 to 143.0.3 in /web ( #18959 )
...
Bumps [chromedriver](https://github.com/giggio/node-chromedriver ) from 143.0.2 to 143.0.3.
- [Commits](https://github.com/giggio/node-chromedriver/compare/143.0.2...143.0.3 )
---
updated-dependencies:
- dependency-name: chromedriver
dependency-version: 143.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-19 15:29:13 +01:00
dependabot[bot]
4d9f4638fa
core: bump goauthentik.io/api/v3 from 3.2026020.3 to 3.2026020.4 ( #18956 )
...
Bumps [goauthentik.io/api/v3](https://github.com/goauthentik/client-go ) from 3.2026020.3 to 3.2026020.4.
- [Release notes](https://github.com/goauthentik/client-go/releases )
- [Commits](https://github.com/goauthentik/client-go/compare/v3.2026020.3...v3.2026020.4 )
---
updated-dependencies:
- dependency-name: goauthentik.io/api/v3
dependency-version: 3.2026020.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-19 11:36:45 +00:00
Connor Peshek
646a0d3692
root: move docker files to lifecycle/containers and change docker-compose to compose ( #16624 )
2025-12-18 18:23:54 -06:00
Dominic R
59460ac840
flows/executor: fix KeyError when session has no existing plan ( #18951 )
2025-12-19 00:21:32 +00:00
Jens L.
c67cd41c22
web/admin: fix endpoints user binding ( #18935 )
...
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-12-19 00:07:52 +01:00
Teffen Ellis
5a840e8f6d
website/docs: Fix version parsing. ( #18948 )
2025-12-18 21:59:48 +00:00
Dewi Roberts
81771ce609
website/docs: release notes: add endpoint device links to 2025.12 notes ( #18940 )
...
Add links to release notes
2025-12-18 20:16:59 +00:00
Teffen Ellis
5babdf64cb
website/docs: Fix labels, Pre-Release detection ( #18945 )
...
* Fix import path.
* Show unlisted entries if release.
* Fix sidebar rendering.
* Fix positioning of pre-release note. Tidy phrasing.
* Clarify pre-release vs draft.
2025-12-18 21:01:47 +01:00
Dewi Roberts
de298d72de
website/docs: endpoint devices ( #18634 )
...
* Initial
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* Apply suggestions from code review
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Dewi Roberts <dewi@goauthentik.io >
* Apply suggestions from code review
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Dewi Roberts <dewi@goauthentik.io >
* Apply suggestions
* Apply suggestions
* Apply suggestions from code review
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Dewi Roberts <dewi@goauthentik.io >
* Apply suggestions from code review
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Dewi Roberts <dewi@goauthentik.io >
* WIP
* Apply suggestions from code review
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Dewi Roberts <dewi@goauthentik.io >
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* fixes
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* WIP
* Optimised images with calibre/image-actions
* Optimised images with calibre/image-actions
* Optimised images with calibre/image-actions
* Optimised images with calibre/image-actions
* Optimised images with calibre/image-actions
* Optimised images with calibre/image-actions
* Optimised images with calibre/image-actions
* Fix anchor
* Update website/docs/endpoint-devices/index.mdx
Co-authored-by: Dominic R <dominic@sdko.org >
Signed-off-by: Dewi Roberts <dewi@goauthentik.io >
* WIP
---------
Signed-off-by: Dewi Roberts <dewi@goauthentik.io >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Dominic R <dominic@sdko.org >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
2025-12-18 19:09:11 +00:00
Jens L.
d7f3055cd8
stages/identification: replace sleep with make_password ( #18883 )
...
* stages/identification: replace sleep with make_password
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-12-18 19:09:10 +01:00
Jens L.
0beb8f9a12
web/elements: progress-bar and table loading header ( #18934 )
...
* add ak-progress-bar
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* make intermediate smaller
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* add table
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* hide table overflow
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
2025-12-18 17:44:21 +01:00
Marc 'risson' Schmitt
6bfa07d761
crypto: fix extra cert data in db migration ( #18937 )
2025-12-18 16:34:31 +00:00
Weilu Jia
8d4c05c7e7
website/integrations: Add launch URL for Immich ( #18921 )
...
Signed-off-by: Weilu Jia <optix2000@users.noreply.github.com >
2025-12-18 16:24:51 +00:00
Victor Nawothnig
598b92d928
web/flow: Fix spurious double submit on ak-stage-autosubmit ( #18727 )
...
* Fix double submission on ak-stage-autosubmit
* use updated correctly
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Victor Nawothnig <Victor.Nawothnig+git@icloud.com >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2025-12-18 14:35:18 +00:00
Simonyi Gergő
90c8f23862
packages/ak-guardian: cast safely ( #18929 )
...
* packages/ak-guardian: cast safely
* use `regexp_like` instead of `pg_input_is_valid`
* alternative approach: RawSQL subquery
* remove extra fields we don't need
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* prevent subquery collapse
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* take into account foreignkeys
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* shut up bandit
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* clean up a bit
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
---------
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2025-12-18 15:29:10 +01:00