policies: buffered policy access view for concurrent authorization attempts when unauthenticated 2025.4

[BeryJu]

see #13629 and #14180)

This reverts commit 6aaec08496b5851927d6da70455a2d3d39a3a29b.

Signed-off-by: Jens Langhammer [email protected]

Conflicts:

authentik/flows/views/interface.py

Details

REPLACE ME

---

Checklist

• [ ] Local tests pass (ak test authentik/)
• [ ] The code has been formatted (make lint-fix)

If an API change has been made

• [ ] The API schema has been updated (make gen-build)

If changes to the frontend have been made

• [ ] The code has been formatted (make web)

If applicable

• [ ] The documentation has been updated
• [ ] The documentation has been formatted (make website)

[netlify[bot]]

✅ Deploy Preview for authentik-storybook ready!

Name	Link
🔨 Latest commit	7c32fc8c17fdbc7d0ee67f2959cea1b99cb13a2c
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-storybook/deploys/6825e0a6053ba900083bb572
😎 Deploy Preview	https://deploy-preview-14520--authentik-storybook.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[netlify[bot]]

✅ Deploy Preview for authentik-docs canceled.

Name	Link
🔨 Latest commit	de1ec20d7a21ce8096de75d3800f3e97f4538d49
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-docs/deploys/685024c9d99ec90008ef6474

[github-actions[bot]]

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-de1ec20d7a21ce8096de75d3800f3e97f4538d49
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-de1ec20d7a21ce8096de75d3800f3e97f4538d49

Afterwards, run the upgrade commands from the latest release notes.

[codecov[bot]]

Codecov Report

Attention: Patch coverage is 96.40719% with 6 lines in your changes missing coverage. Please review.

Project coverage is 92.74%. Comparing base (14a6430) to head (de1ec20). Report is 19 commits behind head on version-2025.4.

:white_check_mark: All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
authentik/policies/tests/test_views.py	97.56%	2 Missing :warning:
authentik/policies/views.py	96.29%	2 Missing :warning:
authentik/providers/saml/views/flows.py	80.00%	1 Missing :warning:
authentik/providers/saml/views/slo.py	80.00%	1 Missing :warning:

Additional details and impacted files

@@                Coverage Diff                 @@
##           version-2025.4   #14520      +/-   ##
==================================================
+ Coverage           92.70%   92.74%   +0.04%     
==================================================
  Files                 809      810       +1     
  Lines               41524    41671     +147     
==================================================
+ Hits                38494    38647     +153     
+ Misses               3030     3024       -6     

Flag	Coverage Δ
e2e	47.81% <47.30%> (+0.01%)	:arrow_up:
integration	24.32% <0.59%> (-0.09%)	:arrow_down:
unit	90.57% <85.02%> (+0.01%)	:arrow_up:

Flags with carried forward coverage won't be shown. Click here to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

:rocket: New features to boost your workflow:

• :package: JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.