Jens L.

OAuth2 Provider: accept login_hint when authenticating

1

#13952 ref https://github.com/goauthentik/internal-customer-ref/issues/6 we do this with the OAuth source outgoing now, but not for the OAuth provider

core: separate applications API

5

this separates the concept of "RBAC accessible application" and "Policy-accessible application" I dont remember what issue this was but we chatted about this at some point @dominic-r

- Move logic for one-time blueprint import to blueprints (backend) - Move button & modal to blueprints list - Also have button on flows page - In modal, add option...

Currently we exclude looking up related objects in audit logs for performance reasons Some customers want additional data so it should be an option to enable this ref https://github.com/goauthentik/internal-customer-ref/issues/2 ref...

root: Python 3.14

5

🥧 time don't merge yet todos: - [ ] Integration tests fail - [ ] E2E tests are either broken or more flaky - [ ] Update developer docs for...

Create more guiding UX

3

- Wizard to create invitations - Wizard to create user and add to group - Wizard to create group and add users - More application wizard - OAuth/SAML source wizard...

web/admin: prevent file upload attempt when backend not managed

5

uploading with an un-manageable backend results in a 405 This will only show up if you deploy in k8s and don't configure S3 and dont have a PVC

core: add flag for future default behaviour of requiring a binding to access an application

5

## Details closes #2245 closes #3732 This adds a flag to early opt in to the new behaviour which will make applications not accessible by default, and require a binding...

stages/password: replace session-based retries with reputation

5

needs to be discussed upsides: - updates to the session are not atomic so it is possible to squeeze in more requests that should've been rejected - retries are global...