outpost: proxyv2: Use Postgres for the Embedded Outpost by dominic-r · Pull Request #16628 · goauthentik/authentik

dominic-r · 2025-09-05T01:34:34Z

Updates the proxyv2 embedded outpost to store it's sessions in Postgres instead of Redis due to the deprecation in authentik 2025.10

todo:

code review myself it
potential escaping of postgres dsn
fix the postgres tests that I need to find a way to run on mac
that todo in postgresstore

notion-workspace · 2025-09-05T01:34:58Z

Embedded outpost: Use Postgres instead of redis

codecov · 2025-09-05T01:40:16Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.62%. Comparing base (14bc8b8) to head (631a051).
⚠️ Report is 15 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #16628      +/-   ##
==========================================
- Coverage   92.96%   92.62%   -0.35%     
==========================================
  Files         857      857              
  Lines       46563    46608      +45     
==========================================
- Hits        43288    43171     -117     
- Misses       3275     3437     +162

Flag	Coverage Δ
e2e	`44.86% <100.00%> (-1.15%)`	⬇️
integration	`23.07% <100.00%> (-0.05%)`	⬇️
unit	`91.05% <100.00%> (+<0.01%)`	⬆️
unit-migrate	`91.10% <100.00%> (+<0.01%)`	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

authentik/outposts/models.py

internal/outpost/proxyv2/postgresstore/postgresstore.go

authentik/providers/proxy/models.py

internal/outpost/proxyv2/application/claims.go

docker-compose.outposttest.yml

authentik/providers/proxy/models.py

internal/outpost/proxyv2/application/auth.go

internal/outpost/proxyv2/application/oauth.go

internal/outpost/proxyv2/postgresstore/postgresstore.go

internal/outpost/proxyv2/application/session_postgres_test.go

Co-authored-by: Jens Langhammer <jens@goauthentik.io> Signed-off-by: Jens Langhammer <jens@goauthentik.io> Signed-off-by: Dominic R <dominic@sdko.org>

authentik/providers/proxy/models.py

Co-authored-by: Jens L. <jens@beryju.org> Signed-off-by: Dominic R <dominic@sdko.org>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* main: (56 commits) translate: Updates for file locale/en/LC_MESSAGES/django.po in fr (#17361) website/docs: add entra id scim source (#17357) outpost: proxyv2: Use Postgres for the Embedded Outpost (#16628) tasks: set uid early (#17356) tasks: only set tenant on task creation (#17358) core: bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 (#17346) web: bump eslint-plugin-react-hooks from 6.1.1 to 7.0.0 in /packages/eslint-config in the eslint group across 1 directory (#17347) web: bump chromedriver from 141.0.0 to 141.0.1 in /web (#17348) web: bump knip from 5.64.1 to 5.64.2 in /web (#17349) web: bump @formatjs/intl-listformat from 7.7.11 to 7.7.12 in /web (#17350) web: bump pino from 9.13.0 to 10.0.0 in /web (#17351) core: bump axllent/mailpit from v1.27.9 to v1.27.10 in /tests/e2e (#17352) enterprise/providers/gws+entra: fix group integrity error during discovery (#17355) core, web: update translations (#17342) ci: bump snok/container-retention-policy from 2.2.1 to 3.0.1 (#17344) core: bump goauthentik.io/api/v3 from 3.2025100.18 to 3.2025100.20 (#17345) packages/django-dramatiq-postgres: broker: task retrieval fixes and improvements (#17335) enterprise/providers/gws+entra: fix integrity error during discovery (#17341) web: bump API Client version (#17340) api: Clean schema up more (#17055) ...

This comment was marked as off-topic.

Sign in to view

dominic-r mentioned this pull request Sep 6, 2025

outposts: use sqlite or postgres for sessions #15465

Closed

6 tasks

rissson reviewed Sep 15, 2025

View reviewed changes

authentik/outposts/models.py Outdated Show resolved Hide resolved

internal/outpost/proxyv2/postgresstore/postgresstore.go Outdated Show resolved Hide resolved

internal/outpost/proxyv2/postgresstore/postgresstore.go Outdated Show resolved Hide resolved

dominic-r force-pushed the sdko/proxyv2-sessions-postgres branch from b8aee81 to 1e6e1cb Compare September 17, 2025 22:51

BeryJu reviewed Sep 30, 2025

View reviewed changes

authentik/providers/proxy/models.py Outdated Show resolved Hide resolved

internal/outpost/proxyv2/application/claims.go Outdated Show resolved Hide resolved

docker-compose.outposttest.yml Outdated Show resolved Hide resolved

dominic-r force-pushed the sdko/proxyv2-sessions-postgres branch 3 times, most recently from 4fbaf32 to 2539c47 Compare October 4, 2025 20:12

dominic-r marked this pull request as ready for review October 4, 2025 20:13

dominic-r requested review from a team as code owners October 4, 2025 20:13

dominic-r requested review from BeryJu, Copilot and rissson and removed request for Copilot October 4, 2025 20:14

BeryJu requested changes Oct 8, 2025

View reviewed changes

BeryJu requested a review from a team as a code owner October 8, 2025 16:57

rissson approved these changes Oct 8, 2025

View reviewed changes

rissson requested a review from BeryJu October 8, 2025 17:22

dominic-r commented Oct 8, 2025

View reviewed changes

internal/outpost/proxyv2/postgresstore/postgresstore.go Outdated Show resolved Hide resolved

dominic-r commented Oct 8, 2025

View reviewed changes

internal/outpost/proxyv2/application/session_postgres_test.go Outdated Show resolved Hide resolved

dominic-r force-pushed the sdko/proxyv2-sessions-postgres branch from 4884893 to 2351273 Compare October 9, 2025 01:05

dominic-r and others added 2 commits October 8, 2025 21:08

wip

df6ab64

Co-authored-by: Jens Langhammer <jens@goauthentik.io> Signed-off-by: Jens Langhammer <jens@goauthentik.io> Signed-off-by: Dominic R <dominic@sdko.org>

remove testing files

874041c

dominic-r force-pushed the sdko/proxyv2-sessions-postgres branch from cf5ad24 to 874041c Compare October 9, 2025 01:08

a

7367acf

dominic-r added 4 commits October 8, 2025 21:54

wip

43df59e

pls

112a046

pls2

989d808

a

5c09900

BeryJu reviewed Oct 9, 2025

View reviewed changes

authentik/providers/proxy/models.py Outdated Show resolved Hide resolved

dominic-r and others added 2 commits October 9, 2025 07:24

Update authentik/providers/proxy/models.py

464a9ef

Co-authored-by: Jens L. <jens@beryju.org> Signed-off-by: Dominic R <dominic@sdko.org>

makemigrations

8428d31

dominic-r requested a review from BeryJu October 9, 2025 11:27

pls

a55bc6b

BeryJu approved these changes Oct 9, 2025

View reviewed changes

dominic-r and others added 14 commits October 9, 2025 07:37

pls1000

6fae61a

dont migrate in go

38745dd

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

set uuid

f7f41d5

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

fix more test cases

595daf0

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

better logging

7b67d06

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

set gorm nowfunc (gorm defaults to local time)

60cdf9c

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

improve test db closing

b1a797e

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

move expiration to field

9b69e95

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

dont' manually set table

f8fc79b

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

refactor tests more

c853185

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

more refactor

5ae43f0

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

fix em

0b6a90d

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

postgres cleanup is done by worker

fb71ada

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

update expiry and set expiring

631a051

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

BeryJu merged commit 6dde8bd into goauthentik:main Oct 9, 2025
90 of 92 checks passed

dominic-r deleted the sdko/proxyv2-sessions-postgres branch October 9, 2025 15:26

BeryJu mentioned this pull request Oct 28, 2025

x-authentik-jwt header empty after upgrade to 2025.10.0 #17750

Closed

JohnTheNerd mentioned this pull request Nov 15, 2025

Proxy outpost in authentik 2025.10 fails with spaces in Postgres password #18175

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

outpost: proxyv2: Use Postgres for the Embedded Outpost#16628

outpost: proxyv2: Use Postgres for the Embedded Outpost#16628
BeryJu merged 24 commits intogoauthentik:mainfrom
dominic-r:sdko/proxyv2-sessions-postgres

dominic-r commented Sep 5, 2025 •

edited

Loading

Uh oh!

This comment was marked as off-topic.

This comment was marked as off-topic.

notion-workspace bot commented Sep 5, 2025

Uh oh!

This comment was marked as off-topic.

codecov bot commented Sep 5, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

dominic-r commented Sep 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as off-topic.

This comment was marked as off-topic.

notion-workspace bot commented Sep 5, 2025

Uh oh!

This comment was marked as off-topic.

codecov bot commented Sep 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dominic-r commented Sep 5, 2025 •

edited

Loading

codecov bot commented Sep 5, 2025 •

edited

Loading