mirror of
https://github.com/goauthentik/authentik.git
synced 2026-06-18 03:19:51 +03:00
5fa2c3bdf5f5990a76ceabb2cd5c868d1dd88424
* web: Captcha Refinements, Part 2 (#19757) * Move inline styles into separate file. * Fix preferred order of captcha vendor discovery. * Clean up mutation and resize observer lifecycle. * Flesh out controllers. * Tidy refresh. * Fix incompatibilities with Storybook. * Flesh out captcha stories. * Bump package. * Flesh out stories. * Move inline styles into separate file. * Fix preferred order of captcha vendor discovery. * Clean up mutation and resize observer lifecycle. * Flesh out controllers. * Tidy refresh. * Remove unused. * Bump package. (cherry picked from commit388f4262b5) * web: Fix duplicate Turnstile widgets after extended idle (#21380) * Flesh out turnstile fixes. * format Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io> Co-authored-by: Jens Langhammer <jens@goauthentik.io> (cherry picked from commit59ac8ba597) * web: align captcha stage with post-21380 main drift Picks up the non-PR-#21380 changes to captcha files that are already on main: `.style-scope` selector variants in CaptchaStage.css (from #20134) and `export default CaptchaStage` (from #20397). Both are functionally inert on this branch — no code applies the style-scope class to ak-stage-captcha, and no importer uses the default export — but including them keeps the cherry-pick zero-drift against main. * bump. * Enforce strict tsconfig version. Format. * Fix linter warning. --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io> Co-authored-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com> Co-authored-by: Jens Langhammer <jens@goauthentik.io>
providers/oauth2: clip device authorization scope against the provider's ScopeMapping set (cherry-pick #21701 to version-2025.12) (#21798)
providers/radius: fix message authenticator validation (cherry-pick #21824 to version-2025.12) (#21827)
packages/django-dramatiq-postgres: broker: empty message after task completed successfully (cherry-pick #19340 to version-2025.12) (#19356)
…
root: fix compose generation for patch releases release candidates (cherry-pick #21353 to version-2025.12) (#21354)
providers/radius: fix message authenticator validation (cherry-pick #21824 to version-2025.12) (#21827)
web: Fix duplicate Turnstile widgets after extended idle (cherry-pick #21380 to version-2025.12) (#21472)
providers/oauth2: device code flow client id via auth header (cherry-pick #20457 to version-2025.12) (#21803)
web: Capitalize language display names, code owner fix (cherry-pick #19119 to version-2025.12) (#19122)
…
What is authentik?
authentik is an open-source Identity Provider (IdP) for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters.
Our enterprise offering is available for organizations to securely replace existing IdPs such as Okta, Auth0, Entra ID, and Ping Identity for robust, large-scale identity management.
Installation
- Docker Compose: recommended for small/test setups. See the documentation.
- Kubernetes (Helm Chart): recommended for larger setups. See the documentation and the Helm chart repository.
- AWS CloudFormation: deploy on AWS using our official templates. See the documentation.
- DigitalOcean Marketplace: one-click deployment via the official Marketplace app. See the app listing.
Screenshots
| Light | Dark |
|---|---|
![]() |
![]() |
![]() |
![]() |
Development and contributions
See the Developer Documentation for information about setting up local build environments, testing your contributions, and our contribution process.
Security
Please see SECURITY.md.
Adoption
Using authentik? We'd love to hear your story and feature your logo. Email us at hello@goauthentik.io or open a GitHub Issue/PR!
License
Description
The authentication glue you need.
authenticationauthentikauthorizationkubernetesoauth2oauth2-clientoauth2-serveroidcoidc-clientoidc-providerproxyreverse-proxysamlsaml-idpsaml-spsecuritysso
Readme
MIT
1 GiB
Languages
Python
54.4%
TypeScript
34.9%
Go
4.2%
CSS
2.2%
Rust
1.9%
Other
2.3%



