Conversation
BeryJu
commented
Jan 15, 2026
- when doing device interactive auth, let the endpoint stage continue as we already know the device based on the DTH header
- only show "continuing to device xyz" when using device IA flow, not when using an endpoint stage only
…s we already know the device based on the DTH header Signed-off-by: Jens Langhammer <jens@goauthentik.io>
…hen using an endpoint stage with browser extension Signed-off-by: Jens Langhammer <jens@goauthentik.io>
✅ Deploy Preview for authentik-docs ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
Codecov Report❌ Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #19482 +/- ##
==========================================
+ Coverage 92.54% 93.19% +0.64%
==========================================
Files 949 949
Lines 52015 52030 +15
==========================================
+ Hits 48136 48488 +352
+ Misses 3879 3542 -337
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
…nfusing identification subtext (#19482) * when doing device interactive auth, let the endpoint stage continue as we already know the device based on the DTH header Signed-off-by: Jens Langhammer <jens@goauthentik.io> * only show "continuing to device xyz" when using device IA flow, not when using an endpoint stage with browser extension Signed-off-by: Jens Langhammer <jens@goauthentik.io> * format Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io>
|
🍒 Cherry-pick to |
|
authentik PR Installation instructions Instructions for docker-composeAdd the following block to your AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-725d76095abf3ac84a742bcab0d86a0c34d2c84c
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)sAfterwards, run the upgrade commands from the latest release notes. Instructions for KubernetesAdd the following block to your authentik:
outposts:
container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
image:
repository: ghcr.io/goauthentik/dev-server
tag: gh-725d76095abf3ac84a742bcab0d86a0c34d2c84cAfterwards, run the upgrade commands from the latest release notes. |
…nfusing identification subtext (cherry-pick #19482 to version-2025.12) (#19486) endpoints/connectors/agent: Skip Endpoint stage on device IA & fix confusing identification subtext (#19482) * when doing device interactive auth, let the endpoint stage continue as we already know the device based on the DTH header * only show "continuing to device xyz" when using device IA flow, not when using an endpoint stage with browser extension * format --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io> Co-authored-by: Jens L. <jens@goauthentik.io>
* main: (47 commits) endpoints/connectors/agent: add tests for IA endpoint stage (#19487) website/docs: limiting permissions of AD service account (#19483) endpoints/connectors/agent: Skip Endpoint stage on device IA & fix confusing identification subtext (#19482) root: adjust makefile for non-brew macos (#19479) providers/oauth2: allow property mappings to override scope claim in access tokens (#19226) revert: lib: use orjson for structlog json (#19478) stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#19464) core: bump library/nginx from `e3a22a7` to `c881927` in /website (#19469) core: bump library/node from 25.2.1-trixie to 25.3.0-trixie in /website (#19468) web: bump prettier from 3.7.4 to 3.8.0 in /web (#19471) website/integrations: add MinIO AIStor configuration via environment variables (#19337) root: upgrade ruff lint for 3.14 (#19461) lib: use orjson for structlog json (#19462) ci: fix checkout stable (for 2025.12) (#19448) root: Python 3.14 (#17313) core: bump channels from 4.3.1 to 4.3.2 (#19458) core: bump mypy from 1.18.2 to 1.19.1 (#19457) core: bump google-api-python-client from 2.177.0 to 2.188.0 (#19443) core: bump selenium from 4.32.0 to 4.39.0 (#19455) core: bump msgraph-sdk from 1.39.0 to 1.52.0 (#19454) ...