205hlab-mirrors/authentik
2
0
Fork 0
mirror of https://github.com/goauthentik/authentik.git synced 2026-06-17 19:09:11 +03:00
Code Issues Packages Projects Releases Wiki Activity
22,491 Commits 384 Branches 449 Tags
main
Commit Graph

22491 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Connor Peshek c897e40bb4 website/integrations: add opencloud integration (#22497) 
* website/integrations: add opencloud integration

* add steps for all clients

* improve wording and style

* Update website/integrations/chat-communication-collaboration/opencloud/index.mdx

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Connor Peshek <connor@connorpeshek.me>

* Update website/integrations/chat-communication-collaboration/opencloud/index.mdx

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Connor Peshek <connor@connorpeshek.me>

* Update website/integrations/chat-communication-collaboration/opencloud/index.mdx

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Connor Peshek <connor@connorpeshek.me>

* Update website/integrations/chat-communication-collaboration/opencloud/index.mdx

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Connor Peshek <connor@connorpeshek.me>

* add feedback

* Update website/integrations/chat-communication-collaboration/opencloud/index.mdx

Co-authored-by: Dominic R <dominic@goauthentik.io>
Signed-off-by: Connor Peshek <connor@connorpeshek.me>

* move table location

* update advanced proto settings location

* lint

* Apply suggestions from code review

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Connor Peshek <connor@connorpeshek.me>

* lint

* Update index.mdx

Signed-off-by: Connor Peshek <connor@connorpeshek.me>

---------

Signed-off-by: Connor Peshek <connor@connorpeshek.me>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dominic R <dominic@goauthentik.io>
 2026-06-09 11:36:44 -05:00
Connor Peshek f6d7edd4d8 providers/oauth: skip post logout redirect matching if none are saved on the provider (#22718) 
skip post logout redirect matching if none are saved on the provider
 2026-06-09 11:36:01 -05:00
Dominic R 284896176e website/integrations: add Dropbox Sign integration (#22934) 
Add a Dropbox Sign SAML integration guide based on Dropbox's setup documentation.

Closes: #22909

Agent-thread: https://sdko.org/internal/thr/ak/019ea7e9-b2de-7103-893f-2547731ef9cb

A7k-product: product

A7k-product-repo: 3

Co-authored-by: Agent <agent@svc.sdko.net>
 2026-06-09 12:20:15 -04:00
Dominic R eea639c822 website/integrations: add HubSpot (#22933) 
Add a HubSpot SAML SSO integration guide covering authentik and HubSpot setup.

Closes: #22910

Agent-thread: https://sdko.org/internal/thr/ak/019ea7e9-4bf5-78b1-b364-20b68c06a8ce
A7k-product: product
A7k-product-repo: 2

Co-authored-by: Agent <agent@svc.sdko.net>
 2026-06-09 14:04:46 +00:00
sreelim 540c2810b4 website/docs: document SCIM source trust model and security implications (#22535) 
docs: document SCIM source trust model and security implications

Describe tenant-wide user/group correlation, unscoped membership,
destructive DELETE behavior, and default bootstrap group exposure so
operators understand the SCIM Bearer token trust boundary.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-09 09:40:51 -04:00
Dominic R f600a622ae website/integrations: add Dozzle (#22939) 
* website/integrations: Dozzle: cleanup

Closes: #16052

Agent-thread: https://sdko.org/internal/thr/ak/019ea8d4-853c-7282-a700-968e5a50b888
A7k-product: product
A7k-product-repo: 2
Co-authored-by: Agent <agent@svc.sdko.net>

* Update website/integrations/monitoring/dozzle/index.md

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

---------

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Agent <agent@svc.sdko.net>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
 2026-06-09 09:34:47 -04:00
Dominic R 9e1f1f05b6 website/integrations: add IIS integration (#22935) 
* website/integrations: add IIS integration

Add a community IIS integration guide covering proxy provider setup and IIS deployment layouts.

Closes: #19947

Agent-thread: https://sdko.org/internal/thr/ak/019ea7ea-23b6-7400-840f-93af6d11780a

A7k-product: product

A7k-product-repo: 4

Co-authored-by: Agent <agent@svc.sdko.net>

* website/integrations: fix IIS warning syntax

Use the integration guide admonition title format for the IIS ARR warning.

Agent-thread: https://sdko.org/internal/thr/ak/019ea7ea-23b6-7400-840f-93af6d11780a

A7k-product: product

A7k-product-repo: 4

Co-authored-by: Agent <agent@svc.sdko.net>

---------

Co-authored-by: Agent <agent@svc.sdko.net>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
 2026-06-09 09:34:26 -04:00
Dominic R 5acb5a2685 website/integrations: FortiMail: cleanup (#22696) 
Agent-thread: https://sdko.org/internal/threads/019e6b1f-4069-74a0-8c51-fb731643e2f1

Co-authored-by: Agent <agent@svc.sdko.net>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
 2026-06-09 09:33:02 -04:00
dependabot[bot] e9cd445958 website: bump the build group across 1 directory with 3 updates (#22833) 
* website: bump the build group across 1 directory with 3 updates

Bumps the build group with 3 updates in the /website directory: [@rspack/binding-darwin-arm64](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack), [@rspack/binding-linux-arm64-gnu](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack) and [@rspack/binding-linux-x64-gnu](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack).


Updates `@rspack/binding-darwin-arm64` from 2.0.4 to 2.0.6
- [Release notes](https://github.com/web-infra-dev/rspack/releases)
- [Commits](https://github.com/web-infra-dev/rspack/commits/v2.0.6/packages/rspack)

Updates `@rspack/binding-linux-arm64-gnu` from 2.0.4 to 2.0.6
- [Release notes](https://github.com/web-infra-dev/rspack/releases)
- [Commits](https://github.com/web-infra-dev/rspack/commits/v2.0.6/packages/rspack)

Updates `@rspack/binding-linux-x64-gnu` from 2.0.4 to 2.0.6
- [Release notes](https://github.com/web-infra-dev/rspack/releases)
- [Commits](https://github.com/web-infra-dev/rspack/commits/v2.0.6/packages/rspack)

---
updated-dependencies:
- dependency-name: "@rspack/binding-darwin-arm64"
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build
- dependency-name: "@rspack/binding-linux-arm64-gnu"
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build
- dependency-name: "@rspack/binding-linux-x64-gnu"
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2026-06-09 15:28:31 +02:00
dependabot[bot] b55a1b26b7 core: bump goauthentik/fips-python from b332680 to dc515b7 in /lifecycle/container (#22874) 
core: bump goauthentik/fips-python in /lifecycle/container

Bumps goauthentik/fips-python from `b332680` to `dc515b7`.

---
updated-dependencies:
- dependency-name: goauthentik/fips-python
  dependency-version: 3.14.5-slim-trixie-fips
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 14:57:16 +02:00
dependabot[bot] 8ce9ecaec4 ci: bump astral-sh/setup-uv from 8.1.0 to 8.2.0 in /.github/actions/setup (#22923) 
ci: bump astral-sh/setup-uv in /.github/actions/setup

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.1.0 to 8.2.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/08807647e7069bb48b6ef5acd8ec9567f424441b...fac544c07dec837d0ccb6301d7b5580bf5edae39)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 14:56:51 +02:00
dependabot[bot] c0d1d17776 core: bump github.com/go-openapi/runtime from 0.32.2 to 0.32.3 (#22914) 
Bumps [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) from 0.32.2 to 0.32.3.
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](https://github.com/go-openapi/runtime/compare/v0.32.2...v0.32.3)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/runtime
  dependency-version: 0.32.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 14:56:30 +02:00
dependabot[bot] 1163d6a010 core: bump sentry-sdk from 2.61.0 to 2.61.1 (#22916) 
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.61.0 to 2.61.1.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-python/compare/2.61.0...2.61.1)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-version: 2.61.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 14:56:00 +02:00
dependabot[bot] 91b8f85788 ci: bump actions/checkout from 6.0.2 to 6.0.3 (#22877) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 14:55:44 +02:00
dependabot[bot] 2f6d01d62a core: bump daphne from 4.2.1 to 4.2.2 (#22920) 
Bumps [daphne](https://github.com/django/daphne) from 4.2.1 to 4.2.2.
- [Changelog](https://github.com/django/daphne/blob/main/CHANGELOG.txt)
- [Commits](https://github.com/django/daphne/compare/4.2.1...4.2.2)

---
updated-dependencies:
- dependency-name: daphne
  dependency-version: 4.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 14:54:25 +02:00
dependabot[bot] f09b848b67 web: bump the storybook group across 1 directory with 5 updates (#22919) 
Bumps the storybook group with 4 updates in the /web directory: [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs), [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links), [@storybook/web-components](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/web-components) and [@storybook/web-components-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/web-components-vite).


Updates `@storybook/addon-docs` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/addons/docs)

Updates `@storybook/addon-links` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/addons/links)

Updates `@storybook/web-components` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/renderers/web-components)

Updates `@storybook/web-components-vite` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/frameworks/web-components-vite)

Updates `storybook` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/core)

---
updated-dependencies:
- dependency-name: "@storybook/addon-docs"
  dependency-version: 10.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/addon-links"
  dependency-version: 10.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/web-components"
  dependency-version: 10.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/web-components-vite"
  dependency-version: 10.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: storybook
  dependency-version: 10.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: storybook
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 14:54:09 +02:00
dependabot[bot] acac105feb web: bump the eslint group across 1 directory with 3 updates (#22945) 
Bumps the eslint group with 1 update in the /web directory: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin).


Updates `@typescript-eslint/eslint-plugin` from 8.60.0 to 8.60.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.60.0 to 8.61.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.0/packages/parser)

Updates `@typescript-eslint/utils` from 8.60.0 to 8.60.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/utils/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/utils)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.60.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: eslint
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: eslint
- dependency-name: "@typescript-eslint/utils"
  dependency-version: 8.60.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: eslint
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 14:17:19 +02:00
dependabot[bot] 29550745e0 ci: bump int128/docker-manifest-create-action from 2.21.0 to 2.22.0 (#22946) 
Bumps [int128/docker-manifest-create-action](https://github.com/int128/docker-manifest-create-action) from 2.21.0 to 2.22.0.
- [Release notes](https://github.com/int128/docker-manifest-create-action/releases)
- [Commits](https://github.com/int128/docker-manifest-create-action/compare/b9d644eaa3312dd895ffdafb19333a7b266e6ba9...126c2b2195800ebc112cffe9ad6c2e2cce16eff2)

---
updated-dependencies:
- dependency-name: int128/docker-manifest-create-action
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 14:16:41 +02:00
dependabot[bot] 20bc560087 ci: bump taiki-e/install-action from 2.81.2 to 2.81.7 in /.github/actions/setup (#22948) 
ci: bump taiki-e/install-action in /.github/actions/setup

Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.81.2 to 2.81.7.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/6887963ccf37a9ddcd8c5fa4baeb3e1e5fd61fa1...56545b37b57562edd73171cb6c62cc509db4c34e)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.81.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 14:16:32 +02:00
dependabot[bot] 72cbd237f9 ci: bump codecov/codecov-action from 6.0.1 to 7.0.0 in /.github/actions/test-results (#22949) 
ci: bump codecov/codecov-action in /.github/actions/test-results

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/e79a6962e0d4c0c17b229090214935d2e33f8354...fb8b3582c8e4def4969c97caa2f19720cb33a72f)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 14:16:23 +02:00
Jens L. ed69aa6024 endpoints/connectors/agent: fix exception with invalid auth type (#22943) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2026-06-09 11:19:55 +02:00
frankvoelker d907426a86 website/integations: update wazuh SAML configuration (#22568) 
* fixing wazuh integration Readme

Signed-off-by: frankvoelker <70319084+frankvoelker@users.noreply.github.com>

* Update index.mdx (minor fixes)

Signed-off-by: frankvoelker <70319084+frankvoelker@users.noreply.github.com>

* Add warning and update issuer and entity id

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

* Update website/integrations/monitoring/wazuh/index.mdx

Signed-off-by: Dominic R <dominic@goauthentik.io>

* Update website/integrations/monitoring/wazuh/index.mdx

Signed-off-by: Dominic R <dominic@goauthentik.io>

---------

Signed-off-by: frankvoelker <70319084+frankvoelker@users.noreply.github.com>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dominic R <dominic@goauthentik.io>
 2026-06-09 05:38:12 +00:00
Jens L. f4ed90fcaf tests/e2e: bump selenium and ak-agent to fix endpoint tests (#22942) 2026-06-09 01:37:58 +02:00
Ken Sternberg c5028c88a5 web/maintenance: eliminate the need for DEFAULT_CONFIG boilerplate everywhere (#22892) 
* ## What

         window.authentik.flow = {
             "layout": "{{ flow.layout }}",
    +        "background": "{{ flow.background }}",
    +        "title": "{{ flow.title }}",
         };

Amends the `flow.html` template and `GlobalAuthentik` parser to include new parameters, `background` and `title`, in the flow-specific part of the configuration written to the HTML `<head>` object, and to provide those parameters to client code.

## Why

The `layout` is start-up critical: it tells the Flow interface how the admin wants the Flow page to look, and allows the HTML and CSS to be pre-aligned to that condition. `layout` is determined on a per-Flow bases, not a per-Stage basis; Flows are derived from a tuple of `(Brand, Application?)`, where the opening policy *may* direct a user to a different flow if the user reached authentik via a redirect from a specific application, but will otherwise fall back to the default Flow for the Brand.

The `background` is a field that is required if the `Flow`’s layout is of type `frame_background`; in this case, the part of the viewport not dedicated to the FlowExecutor is reserved for an `<iframe>` that will be filled in with whatever the administrator specifies. Although this gives it the same priority as `layout` (whether it’s provided or undefined) for describing the [chrome](https://developer.mozilla.org/en-US/docs/Glossary/Chrome) around a challenge, it is currently not provided to the application in the start-up config; it is provided in the `challenge` and renders the IFrame as part of the initial challenge.

This patch fixes that; if `layout` is provided, `background` ought to be as well, even if it’s empty. The execution of a Challenge ought not have any influence over the look and feel of the Flow-defined appearance *around* that Challenge.

I have added `title` as well; with that, all of the current theme-and-appearance related configuration details are placed into `<head>` and can be removed from the FlowExecutor.

Server-side, `background` is currently specified: `background = FileField(blank=True, default="")` which is … interesting since we also appear to store URLs in it. I don’t see anything in the FlowSerializer that would change that from a client’s point of view.

This patch furthers the effort to separate flow execution from flow presentation.

- \[🐰\] The code has been formatted (`make web`)

* web/maintenance: eliminate the need for DEFAULT_CONFIG boilerplate everywhere

# Promise:

There is only one file change in the entire PR. I promise. It is `./web/src/common/api/client.ts`.

Every other change is mechanical.

# What

Replace the repetitive boilerplate of importing DEFAULT_CONFIG everywhere by replacing it with an enclosing function that does both instantiation and configuration for you.

# How !?!?!?! (I hear you cry)

Read the `client.ts` file. It shows you the new mechanism.

# Mechanical update:

Every other change to the source code was performed with the following seven-line script: use `prettier --print-width 400` to ensure all the construction expressions would be single-line (they weren’t necessarily always so); identify the files that used `DEFAULT_CONFIG`, replace their `import` statements, replace their instantiation expressions, then clean up the debris.

    $ ./node_modules/.bin/prettier --cache --write -u . --print-width 400
    $ rg -l 'import.*\{ DEFAULT_CONFIG \}' ./src > client-only.txt
    $ perl -pi.bak -e 's{import \{ DEFAULT_CONFIG \} from "\#common/api/config"}{import \{ aki \} from "#common/api/client"}' $(cat client-only.txt )
    $ perl -pi.bak -e 's{new ([A-Z][A-Za-z]+Api)\(DEFAULT_CONFIG\)}{aki(\1)}g' $(cat client-only.txt )
    $ rm client-only.txt
    $ find . -name '*.bak' -exec rm {} \;
    $ npm run prettier
 2026-06-08 09:20:45 -07:00
NiceDevil 3e0d1ddb10 web/elements/ak-dual-select: fix inverted pagination arrow colors in dark theme (#22608) 
The dark theme overrides in ak-pagination assigned the disabled color
variable to the active button and the active color variable to the
overridden disabled-color custom property. As a result, the active arrow
appeared muted and the disabled arrow appeared highlighted on the first
and last pages of paginated lists.

Swap the two values so the active arrow uses the m-plain color and the
disabled custom property keeps the m-plain disabled color.

Closes #22607

Co-authored-by: nicedevil007 <nicedevil007@users.noreply.github.com>
 2026-06-08 17:41:28 +02:00
authentik-automation[bot] 7fc325fbf5 core, web: update translations (#22871) 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com>
 2026-06-08 17:39:35 +02:00
Jens L. 519a4d73c4 blueprints: handle integrity exception when applying blueprints (#22599) 
this can happen when the server/worker are starting and you also try to apply blueprints with `ak apply_blueprint`, as seen in https://github.com/goauthentik/action-setup-authentik
 2026-06-08 15:24:22 +02:00
Teffen Ellis 5727ae4271 core, internal, packages: fix British spellings flagged by cspell (#22819) 
* core, internal, packages: fix British spellings flagged by cspell

Apply American spellings in Python docstrings/comments, Go log messages, a Rust doc comment, and a template comment (behaviour->behavior, initialise->initialize, finalise->finalize, etc.). Part of enabling cspell's British-spelling rule; the rule itself lands in a separate PR once all areas are clean.

Co-Authored-By: Playpen Agent <279763771+playpen-agent@users.noreply.github.com>

* gen

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: Playpen Agent <279763771+playpen-agent@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2026-06-08 14:55:31 +02:00
Dominic R 54595de4b9 website/integrations: add Notion integration (#22887) 
Agent-thread: https://sdko.org/internal/thr/ak/019e97d4-d2aa-7560-8db1-d175217cb9ac

A7k-product: product

A7k-product-repo: 1

Co-authored-by: Agent <agent@svc.sdko.net>
 2026-06-08 13:52:01 +01:00
Emil Burzo 24157caaf6 ci: remove redundant if in cherry-pick action (#22859) 2026-06-08 14:48:43 +02:00
dependabot[bot] 2176cadb4c core: bump ruff from 0.15.15 to 0.15.16 (#22918) 
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.15 to 0.15.16.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.15...0.15.16)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-08 14:38:01 +02:00
dependabot[bot] 668f363ae7 ci: bump getsentry/action-release from 3.6.1 to 3.7.0 (#22917) 
Bumps [getsentry/action-release](https://github.com/getsentry/action-release) from 3.6.1 to 3.7.0.
- [Release notes](https://github.com/getsentry/action-release/releases)
- [Changelog](https://github.com/getsentry/action-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/action-release/compare/f71adb49d4b2aeeda98052d3de234bbb0f3e03ab...ff07929a6537bac57790c3451cf4d364aca38528)

---
updated-dependencies:
- dependency-name: getsentry/action-release
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-08 14:37:46 +02:00
dependabot[bot] 83854281d0 ci: bump github/codeql-action from 4.36.1 to 4.36.2 (#22921) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.1 to 4.36.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-08 14:37:29 +02:00
dependabot[bot] ec4847182d ci: bump taiki-e/install-action from 2.81.1 to 2.81.2 in /.github/actions/setup (#22884) 
ci: bump taiki-e/install-action in /.github/actions/setup

Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.81.1 to 2.81.2.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/e49978b799e49ff429d162b7a30601a569ab6538...6887963ccf37a9ddcd8c5fa4baeb3e1e5fd61fa1)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.81.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 23:09:14 +02:00
Dominic R 0bfe2eb8f5 website/integrations: add Atlantis integration (#22888) 
* website/integrations: add Atlantis integration

Agent-thread: https://sdko.org/internal/thr/ak/019e97d5-438f-7f33-b67d-71502fc6cfb8
A7k-product: product
A7k-product-repo: 2
Co-authored-by: Agent <agent@svc.sdko.net>

* Update website/integrations/infrastructure/atlantis/index.md

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Dominic R <dominic@goauthentik.io>

* Update website/integrations/infrastructure/atlantis/index.md

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Dominic R <dominic@goauthentik.io>

* Update website/integrations/infrastructure/atlantis/index.md

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Dominic R <dominic@goauthentik.io>

---------

Signed-off-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Agent <agent@svc.sdko.net>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
 2026-06-05 17:17:24 +00:00
Dominic R 82354ceeb0 website/docs: Document WebAuthn device restrictions (#22867) 
* website/docs: document WebAuthn device restrictions

Closes: #22230

Agent-thread: https://sdko.org/internal/threads/019e9487-3482-71c1-8f50-0bcef3a89ebb
A7k-product: product
A7k-product-repo: 2
Co-authored-by: Agent <agent@svc.sdko.net>

* Apply suggestions from code review

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Dominic R <dominic@goauthentik.io>

---------

Signed-off-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Agent <agent@svc.sdko.net>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
 2026-06-05 12:25:59 -04:00
Jens L. 8aaebaf5e6 web/admin: fix Docker outpost integration form CA Cert filter (#22863) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2026-06-05 18:20:28 +02:00
dependabot[bot] 153cb9ca46 web: bump @sentry/browser from 10.54.0 to 10.55.0 in /web in the sentry group across 1 directory (#22873) 
web: bump @sentry/browser in /web in the sentry group across 1 directory

Bumps the sentry group with 1 update in the /web directory: [@sentry/browser](https://github.com/getsentry/sentry-javascript).


Updates `@sentry/browser` from 10.54.0 to 10.55.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-javascript/compare/10.54.0...10.55.0)

---
updated-dependencies:
- dependency-name: "@sentry/browser"
  dependency-version: 10.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sentry
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 18:17:40 +02:00
dependabot[bot] a7fcf3f92b core: bump sentry-sdk from 2.60.0 to 2.61.0 (#22875) 
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.60.0 to 2.61.0.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-python/compare/2.60.0...2.61.0)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-version: 2.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 18:16:55 +02:00
dependabot[bot] 20f1e64509 core: bump google-api-python-client from 2.196.0 to 2.197.0 (#22876) 
Bumps [google-api-python-client](https://github.com/googleapis/google-api-python-client) from 2.196.0 to 2.197.0.
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](https://github.com/googleapis/google-api-python-client/compare/v2.196.0...v2.197.0)

---
updated-dependencies:
- dependency-name: google-api-python-client
  dependency-version: 2.197.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 18:16:46 +02:00
dependabot[bot] 703301302d core: bump kubernetes from 36.0.0 to 36.0.2 (#22879) 
Bumps [kubernetes](https://github.com/kubernetes-client/python) from 36.0.0 to 36.0.2.
- [Release notes](https://github.com/kubernetes-client/python/releases)
- [Changelog](https://github.com/kubernetes-client/python/blob/v36.0.2/CHANGELOG.md)
- [Commits](https://github.com/kubernetes-client/python/compare/v36.0.0...v36.0.2)

---
updated-dependencies:
- dependency-name: kubernetes
  dependency-version: 36.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 18:16:19 +02:00
dependabot[bot] 94f67d8cdc web: bump the bundler group across 1 directory with 3 updates (#22881) 
Bumps the bundler group with 1 update in the /web directory: [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser).


Updates `@vitest/browser` from 4.1.7 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/browser)

Updates `@vitest/browser-playwright` from 4.1.7 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/browser-playwright)

Updates `vitest` from 4.1.7 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest)

---
updated-dependencies:
- dependency-name: "@vitest/browser"
  dependency-version: 4.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: "@vitest/browser-playwright"
  dependency-version: 4.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: vitest
  dependency-version: 4.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 18:14:03 +02:00
dependabot[bot] 30ed2e6480 core: bump debugpy from 1.8.20 to 1.8.21 (#22880) 
Bumps [debugpy](https://github.com/microsoft/debugpy) from 1.8.20 to 1.8.21.
- [Release notes](https://github.com/microsoft/debugpy/releases)
- [Commits](https://github.com/microsoft/debugpy/compare/v1.8.20...v1.8.21)

---
updated-dependencies:
- dependency-name: debugpy
  dependency-version: 1.8.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 18:13:55 +02:00
dependabot[bot] 8cc4e7eb84 ci: bump github/codeql-action from 4.36.0 to 4.36.1 (#22882) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.0 to 4.36.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...87557b9c84dde89fdd9b10e88954ac2f4248e463)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 18:13:30 +02:00
dependabot[bot] b39c6877bf ci: bump AndreKurait/docker-cache from 0.6.0 to 0.7.0 in /.github/actions/setup (#22883) 
ci: bump AndreKurait/docker-cache in /.github/actions/setup

Bumps [AndreKurait/docker-cache](https://github.com/andrekurait/docker-cache) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/andrekurait/docker-cache/releases)
- [Changelog](https://github.com/AndreKurait/docker-cache/blob/main/CHANGELOG.md)
- [Commits](https://github.com/andrekurait/docker-cache/compare/0fe76702a40db986d9663c24954fc14c6a6031b7...7a3887908bdb97935395833df69b060cfcca0f7f)

---
updated-dependencies:
- dependency-name: AndreKurait/docker-cache
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 18:13:21 +02:00
Dominic R f04e2a1619 website/docs: remove stale SFE version badge (#22889) 
Remove the outdated authentik_version metadata from the simplified flow executor docs so the docs build no longer renders an unsupported version badge.

Agent-thread: https://sdko.org/internal/thr/ak/019e97f6-17fb-7a82-af20-01ac41d5b1f7
A7k-product: product
A7k-product-repo: 4

Co-authored-by: Agent <agent@svc.sdko.net>
 2026-06-05 09:57:54 -04:00
Dominic R 0bc2f57a10 website/docs: clean up proxy provider docs (#22870) 
* website/docs: clean up proxy provider docs

Closes: #22526

Agent-thread: https://sdko.org/internal/threads/019e9490-38cd-7611-a8b3-97b5e75db9f9

A7k-product: product

A7k-product-repo: 3

Co-authored-by: Agent <agent@svc.sdko.net>

* Apply Dewi's great suggestions

Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dominic R <dominic@goauthentik.io>
Signed-off-by: Dominic R <dominic@goauthentik.io>

* fix lint

---------

Signed-off-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Agent <agent@svc.sdko.net>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
 2026-06-05 14:54:42 +01:00
Dewi Roberts f98a24e0bc website/integrations: add warning to all SAML integration guides (#22569) 
* Adds warning to all SAML integration guides

* Fix version number...

* website/integrations: reuse SAML provider warning

Extract the repeated SAML provider 2026.5 warning into a shared integrations partial so guide updates stay consistent.

Agent-thread: https://sdko.org/internal/threads/019e64f2-15ba-7a72-93d6-e40ddc96e4b6

Co-authored-by: Agent <agent@svc.sdko.net>

---------

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Agent <agent@svc.sdko.net>
 2026-06-05 13:46:16 +00:00
NiceDevil df3dbbef9e website/integrations: FortiAnalyzer (#22610) 
* website/integrations: FortiAnalyzer

Add an integration guide for FortiAnalyzer with SAML SSO against authentik,
covering the SAML provider configuration, a `username` property mapping, and
the FortiAnalyzer Single Sign-On settings (tested with FortiAnalyzer 8.0).

Also add ADOM to the integrations spell-check dictionary because the term is
used by multiple Fortinet products (FortiAnalyzer, FortiManager, FortiGate)
and will likely appear in future guides as well.

* website/integrations: FortiAnalyzer: cleanup

Update the FortiAnalyzer SAML guide to match the current integration template and verified Fortinet/authentik behavior.

Agent-thread: https://sdko.org/internal/threads/019e6120-ca6e-7301-a10f-669607e5ac61
Co-authored-by: Agent <agent@svc.sdko.net>

* trigger ci???

Signed-off-by: Dominic R <dominic@goauthentik.io>

---------

Signed-off-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: nicedevil007 <nicedevil007@users.noreply.github.com>
Co-authored-by: Dominic R <dominic@goauthentik.io>
Co-authored-by: Agent <agent@svc.sdko.net>
Co-authored-by: Dominic R <dominic@sdko.org>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
 2026-06-05 13:05:21 +00:00
Teffen Ellis f4b9b0aa77 website: fix British spellings flagged by cspell (#22818) 
* website: fix British spellings flagged by cspell

Apply American spellings (behaviour->behavior, colour->color, organise->organize, etc.) across release notes, integration docs, and security docs. Part of enabling cspell's British-spelling rule; the rule itself lands in a separate PR once all areas are clean.

Co-Authored-By: Playpen Agent <279763771+playpen-agent@users.noreply.github.com>

* Update website/docs/developer-docs/docs/style-guide.mdx

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

---------

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Playpen Agent <279763771+playpen-agent@users.noreply.github.com>
Co-authored-by: Dewi Roberts <dewi@goauthentik.io>
Co-authored-by: Dominic R <dominic@goauthentik.io>
 2026-06-05 12:17:39 +00:00