-
-
Notifications
You must be signed in to change notification settings - Fork 1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
policies/password: password history #13453
base: main
Are you sure you want to change the base?
Conversation
…ry table If the UniquePasswordPolicy is enabled anywhere, we now record the user's hashed password.
…bound to anything
The system should aim to keep the number of historical passwords to a minimum to avoid wasting storage space. Admins can configure how many passwords they want to preserve. If multiple instances of the UniquePasswordPolicy exist, the system takes the max() value of all enabled policies to determine how many passwords should remain after trimming.
…ings Querying within post_delete for other PolicyBindings will include the PolicyBinding we're deleting. We have to account for that by checking for bindings other than the one we're looking at.
…nc task instead of prior to execution
… to a provided policy type
…PasswordPolicyForm
…rom ManagedAppConfig.
✅ Deploy Preview for authentik-docs canceled.
|
✅ Deploy Preview for authentik-storybook canceled.
|
Codecov ReportAttention: Patch coverage is
✅ All tests successful. No failed tests found. Additional details and impacted files@@ Coverage Diff @@
## main #13453 +/- ##
===========================================
+ Coverage 41.30% 92.70% +51.40%
===========================================
Files 791 802 +11
Lines 40113 40660 +547
===========================================
+ Hits 16567 37693 +21126
+ Misses 23546 2967 -20579
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
authentik PR Installation instructions Instructions for docker-composeAdd the following block to your AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-d4342d57c87e1a1f0ddfa0afb9533512186e8095
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s Afterwards, run the upgrade commands from the latest release notes. Instructions for KubernetesAdd the following block to your authentik:
outposts:
container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
image:
repository: ghcr.io/goauthentik/dev-server
tag: gh-d4342d57c87e1a1f0ddfa0afb9533512186e8095 Afterwards, run the upgrade commands from the latest release notes. |
Details
Continue work done in #10631
Closes #8307
Checklist
ak test authentik/
)make lint-fix
)If an API change has been made
make gen-build
)If changes to the frontend have been made
make web
)If applicable
make website
)