authentik icon indicating copy to clipboard operation
authentik copied to clipboard

Nextcloud AIO unshared files and folders are displayed as "Shared" when account created via Authentik SAML / user_saml

Open JarEXE opened this issue 1 year ago • 2 comments

Describe the bug Nextcloud AIO unshared files and folders are displayed as "Shared" when account created via Authentik SAML / user_saml.

To Reproduce Steps to reproduce the behavior:

  1. Configure Authentik saml provider (according to documentation).
  2. Configure Nextcloud user_saml application to connect to Authentik provider.
  3. Create Authentik user account
  4. Log in via Authentik
  5. Navigate to Nextcloud (Nextcloud SAML login)
  6. Go to logged in Nextcloud files and folders web interface

Expected behavior Unshared files and folders should not have any tag stating "Shared by " when they are the original creator and owner of these files and folders. This user should not be "sharing files and folders to themselves".

nextclouduser

This is a user account (test2) that was created directly via Nextcloud and logged in to via "https://my-nextcloud-domain/login?direct=1".

Actual behavior Unshared files and folders all display "Shared by " as if the user is sharing the files and folders to themselves.

unsharedfiles

This is a user account (tester) that was created via Authentik and logged in to via Authentik / Nextcloud SAML.

Logs These are the relevant logs from the Authentik Server when creating a new user, logging in as said user, then logging into Nextcloud with said user via SAML:

{"auth_via": "unauthenticated", "backend": "authentik.core.auth.InbuiltBackend", "event": "Successful authentication", "host": "auth.my.domain", "level": "info", "logger": "authentik.stages.password.stage", "pid": 14, "request_id": "0b24d9e0768c44ebaf4cbb6e7d87a950", "timestamp": "2024-04-25T12:25:04.944326", "user": "fakeuser"}

{"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/default-authentication-flow/?query=next%3D%252F", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 14, "remote": "172.23.150.231", "request_id": "0b24d9e0768c44ebaf4cbb6e7d87a950", "runtime": 1223, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:05.130479", "user": "", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/default-authentication-flow/?query=next%3D%252F", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "172.23.150.231", "request_id": "8920a59e202b4423baf8f2eaee875a21", "runtime": 175, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:05.327241", "user": "", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/default-authentication-flow/?query=next%3D%252F", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "172.23.150.231", "request_id": "e93ded9858984124980e06e1ad77892a", "runtime": 53, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:05.409889", "user": "", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event":"/static/dist/flow/AuthenticatorTOTPStage-e0df08c0.js","host":"auth.my.domain","level":"info","logger":"authentik.router","method":"GET","remote":"172.23.150.231","runtime":"2.974","scheme":"https","size":12103,"status":200,"timestamp":"2024-04-25T12:25:05Z","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event":"/if/flow/default-authentication-flow/assets/fonts/webfonts/fa-solid-900.woff2","host":"auth.my.domain","level":"info","logger":"authentik.router","method":"GET","remote":"172.23.150.231","runtime":"5.823","scheme":"https","size":79100,"status":200,"timestamp":"2024-04-25T12:25:05Z","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "unauthenticated", "event": "/-/health/live/", "host": "localhost:8000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "127.0.0.1", "request_id": "4cf273f4be214f10bb813ec9e6fe871a", "runtime": 26, "scheme": "http", "status": 204, "timestamp": "2024-04-25T12:25:16.702105", "user": "", "user_agent": "goauthentik.io/proxy/healthcheck"}

{"auth_via": "unauthenticated", "event": "Task published", "host": "localhost:8000", "level": "info", "logger": "authentik.root.celery", "pid": 14, "request_id": "d9d9d084814544ddabe3a84bb7183381", "task_id": "d9c4b4ab-a464-4b58-989a-7ab8bb8d1c55", "task_name": "authentik.providers.scim.tasks.scim_signal_direct", "timestamp": "2024-04-25T12:25:20.333623"}

{"auth_via": "secret_key", "event": "/api/v3/outposts/instances/", "host": "localhost:8000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "127.0.0.1", "request_id": "d9d9d084814544ddabe3a84bb7183381", "runtime": 226, "scheme": "http", "status": 200, "timestamp": "2024-04-25T12:25:20.441473", "user": "ak-outpost-d463b7ce73274b89a6887f1538779782", "user_agent": "goauthentik.io/outpost/2023.6.1"}

{"auth_via": "unauthenticated", "event": "Task published", "host": "localhost:8000", "level": "info", "logger": "authentik.root.celery", "pid": 14, "request_id": "ec1d6c7039884e6db5c0c9fb449f68e5", "task_id": "237912a8-c53e-422f-84f3-2d4ca6e1ac10", "task_name": "authentik.providers.scim.tasks.scim_signal_direct", "timestamp": "2024-04-25T12:25:20.622052"}

{"auth_via": "secret_key", "event": "/api/v3/outposts/proxy/", "host": "localhost:8000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "127.0.0.1", "request_id": "ec1d6c7039884e6db5c0c9fb449f68e5", "runtime": 216, "scheme": "http", "status": 200, "timestamp": "2024-04-25T12:25:20.686044", "user": "ak-outpost-d463b7ce73274b89a6887f1538779782", "user_agent": "goauthentik.io/outpost/2023.6.1"}

{"event":"updating tenant certificates","level":"info","logger":"authentik.router.tenant_tls","timestamp":"2024-04-25T12:25:20Z"}

{"auth_via": "unauthenticated", "event": "Task published", "host": "localhost:8000", "level": "info", "logger": "authentik.root.celery", "pid": 14, "request_id": "dc6d493056394fa3913aa351bfa6a0e6", "task_id": "b8cc4a38-4a2f-4ced-b8fd-468e11715ac1", "task_name": "authentik.providers.scim.tasks.scim_signal_direct", "timestamp": "2024-04-25T12:25:20.861478"}

{"auth_via": "secret_key", "event": "/api/v3/core/tenants/", "host": "localhost:8000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "127.0.0.1", "request_id": "dc6d493056394fa3913aa351bfa6a0e6", "runtime": 185, "scheme": "http", "status": 200, "timestamp": "2024-04-25T12:25:20.908400", "user": "ak-outpost-d463b7ce73274b89a6887f1538779782", "user_agent": "goauthentik.io/outpost/2023.6.1"}

{"event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 15, "remote": "172.23.120.50", "scheme": "ws", "timestamp": "2024-04-25T12:25:26.549308", "user_agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"}

{"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/default-authentication-flow/?query=next%3D%252F", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 15, "remote": "172.23.150.231", "request_id": "8e4f6d81b3a84a7eaa2054a23d01d998", "runtime": 594, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:36.025081", "user": "", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"action": "login", "auth_via": "unauthenticated", "client_ip": "172.23.150.231", "context": {"auth_method": "password", "auth_method_args": {}, "http_request": {"args": {"next": "/"}, "method": "GET", "path": "/api/v3/flows/executor/default-authentication-flow/"}}, "event": "Created Event", "host": "auth.my.domain", "level": "info", "logger": "authentik.events.models", "pid": 15, "request_id": "96fff0b54bd34924802f45d6007dd17d", "timestamp": "2024-04-25T12:25:36.167153", "user": {"email": "[email protected]", "pk": 31, "username": "fakeuser"}}

{"auth_via": "unauthenticated", "event": "Task published", "host": "auth.my.domain", "level": "info", "logger": "authentik.root.celery", "pid": 15, "request_id": "96fff0b54bd34924802f45d6007dd17d", "task_id": "185de4d9-90c7-4376-b73a-fa4ad0179b78", "task_name": "authentik.events.tasks.event_notification_handler", "timestamp": "2024-04-25T12:25:36.212176"}

{"auth_via": "unauthenticated", "event": "Task published", "host": "auth.my.domain", "level": "info", "logger": "authentik.root.celery", "pid": 15, "request_id": "96fff0b54bd34924802f45d6007dd17d", "task_id": "5ae2ebf8-48ff-48dc-91b4-6aae823baf9a", "task_name": "authentik.providers.scim.tasks.scim_signal_direct", "timestamp": "2024-04-25T12:25:36.225978"}

{"auth_via": "unauthenticated", "event": "Task published", "host": "auth.my.domain", "level": "info", "logger": "authentik.root.celery", "pid": 15, "request_id": "96fff0b54bd34924802f45d6007dd17d", "task_id": "8b8ad03b-ea46-492c-856f-e372354b102a", "task_name": "authentik.policies.reputation.tasks.save_reputation", "timestamp": "2024-04-25T12:25:36.241252"}


{"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/default-authentication-flow/?query=next%3D%252F", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "96fff0b54bd34924802f45d6007dd17d", "runtime": 215, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:36.268735", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "35ea099ea8ff43a0857756934024f3d1", "runtime": 39, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:36.390198", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/if/user/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "cf25bb8eb9d4483cace8730f8e697b00", "runtime": 80, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:36.490109", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 14, "remote": "172.23.150.231", "scheme": "ws", "timestamp": "2024-04-25T12:25:36.785108", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/api/v3/core/users/me/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "12d7054111854a77b0ffd722845a9973", "runtime": 111, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:36.897871", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/api/v3/events/notifications/?ordering=-created&seen=false&user=31", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "009d38f144f9423f9b5d57517cad4fd8", "runtime": 159, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:37.134778", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/api/v3/events/notifications/?ordering=-created&page_size=1&seen=false&user=31", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "172.23.150.231", "request_id": "2022e76a605b4177a41b8f84684600ab", "runtime": 182, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:37.161552", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/api/v3/core/applications/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "172.23.150.231", "request_id": "e3c0ffbe68e346beb859f04cd0ce0a04", "runtime": 334, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:37.299392", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "unauthenticated", "event": "/-/health/live/", "host": "localhost:8000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "127.0.0.1", "request_id": "319ecf4e83a740269984c17f4fc00b0f", "runtime": 30, "scheme": "http", "status": 204, "timestamp": "2024-04-25T12:25:46.698237", "user": "", "user_agent": "goauthentik.io/proxy/healthcheck"}

{"auth_via": "session", "event": "/application/saml/smartcloud/sso/binding/init/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "a3adec78a1c2486ca05338ef38a1dbf3", "runtime": 86, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:55.276111", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/if/flow/default-provider-authorization-implicit-consent/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "2290e945a3234f6eab5107951d76268c", "runtime": 75, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:55.370901", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 14, "remote": "172.23.150.231", "scheme": "ws", "timestamp": "2024-04-25T12:25:55.542818", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"action": "authorize_application", "auth_via": "session", "client_ip": "172.23.150.231", "context": {"authorized_application": {"app": "authentik_core", "model_name": "application", "name": "SmartCloud (Files / Nextcloud)", "pk": "11c315e088c7455389321253e276523d"}, "flow": "60f906507a064b3a8f941f8d61c2ee2d", "http_request": {"args": {}, "method": "GET", "path": "/api/v3/flows/executor/default-provider-authorization-implicit-consent/"}}, "event": "Created Event", "host": "auth.my.domain", "level": "info", "logger": "authentik.events.models", "pid": 15, "request_id": "0bc35a5c36114bf29e58d7c73987f7d6", "timestamp": "2024-04-25T12:25:55.709798", "user": {"email": "[email protected]", "pk": 31, "username": "fakeuser"}}

{"auth_via": "session", "event": "Task published", "host": "auth.my.domain", "level": "info", "logger": "authentik.root.celery", "pid": 15, "request_id": "0bc35a5c36114bf29e58d7c73987f7d6", "task_id": "05d5bc9d-c924-4892-a10b-f7714f094cdb", "task_name": "authentik.events.tasks.event_notification_handler", "timestamp": "2024-04-25T12:25:55.761730"}

{"auth_via": "session", "event": "/api/v3/flows/executor/default-provider-authorization-implicit-consent/?query=", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "0bc35a5c36114bf29e58d7c73987f7d6", "runtime": 240, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:55.812560", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/application/saml/smartcloud/sso/binding/redirect/?SAMLRequest=nZJNbxoxEIbv%2FIrId%2FDushuBBUgk9AOJAgokh14i451NLO3aW8%2B4af99jJ02baXk0DlY8sy8j2deeYaya3ux9PRobuCbB6TBRYgfXWtQxOKceWeElahRGNkBClLisPyyEcUoE72zZJVt2T%2By91USERxpa5JsvZqz3fbDZvdpvb2fQFXk40mmxgqmTTM%2BlQBNWYVsmTeTuqwus%2Bk0UzJJ78Bh4MxZwLJBoiF6WBskaSjks6IcZuWwqI55IYpKVJdfk3QVltVGUpQ%2FEvUoOJfBiRF20hGC8g6e4DSyptUGuOz7VqvYz88r8timWutrjmj5SZtamwfuoNYOFPH0zP7FoatUft%2BYFwaKz8fjfrjfHY4Jsvxl2LU16DtwB3DftYLbm83r7ASye3t25D4w7tPk50MqZItIn53vIvrmFv9J64BkLUnO%2BJ%2BwV3wvtmHb9Wpvg4k%2FY%2F4cH63rJL1tSj7KY0bXwya2Cm%2BwB6UbDTX7jVm2rX26diAJ5oycB3bBF4M0y9%2Ffe%2FEM&RelayState=https%3A%2F%2Fteam.smartsecureweb.online%2Fapps%2Fuser_saml%2Fsaml%2Flogin", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "b735ac641b824593b385b0f6649bc3bf", "runtime": 162, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:56.838137", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 15, "remote": "172.23.150.231", "scheme": "ws", "timestamp": "2024-04-25T12:25:56.911476", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/if/flow/default-provider-authorization-implicit-consent/?SAMLRequest=nZJNbxoxEIbv%2FIrId%2FDushuBBUgk9AOJAgokh14i451NLO3aW8%2B4af99jJ02baXk0DlY8sy8j2deeYaya3ux9PRobuCbB6TBRYgfXWtQxOKceWeElahRGNkBClLisPyyEcUoE72zZJVt2T%2By91USERxpa5JsvZqz3fbDZvdpvb2fQFXk40mmxgqmTTM%2BlQBNWYVsmTeTuqwus%2Bk0UzJJ78Bh4MxZwLJBoiF6WBskaSjks6IcZuWwqI55IYpKVJdfk3QVltVGUpQ%2FEvUoOJfBiRF20hGC8g6e4DSyptUGuOz7VqvYz88r8timWutrjmj5SZtamwfuoNYOFPH0zP7FoatUft%2BYFwaKz8fjfrjfHY4Jsvxl2LU16DtwB3DftYLbm83r7ASye3t25D4w7tPk50MqZItIn53vIvrmFv9J64BkLUnO%2BJ%2BwV3wvtmHb9Wpvg4k%2FY%2F4cH63rJL1tSj7KY0bXwya2Cm%2BwB6UbDTX7jVm2rX26diAJ5oycB3bBF4M0y9%2Ffe%2FEM&RelayState=https%3A%2F%2Fteam.smartsecureweb.online%2Fapps%2Fuser_saml%2Fsaml%2Flogin", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "be9bde5ea22c4d359a102684b56261cf", "runtime": 197, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:57.062273", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 14, "remote": "172.23.150.231", "scheme": "ws", "timestamp": "2024-04-25T12:25:57.241874", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"action": "authorize_application", "auth_via": "session", "client_ip": "172.23.150.231", "context": {"authorized_application": {"app": "authentik_core", "model_name": "application", "name": "SmartCloud (Files / Nextcloud)", "pk": "11c315e088c7455389321253e276523d"}, "flow": "60f906507a064b3a8f941f8d61c2ee2d", "http_request": {"args": {"RelayState": "https://team.smartsecureweb.online/apps/user_saml/saml/login", "SAMLRequest": "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"}, "method": "GET", "path": "/api/v3/flows/executor/default-provider-authorization-implicit-consent/"}}, "event": "Created Event", "host": "auth.my.domain", "level": "info", "logger": "authentik.events.models", "pid": 15, "request_id": "2c7a80e2c98849ea9ebbff046b364af1", "timestamp": "2024-04-25T12:25:57.508587", "user": {"email": "[email protected]", "pk": 31, "username": "fakeuser"}}

{"auth_via": "session", "event": "Task published", "host": "auth.my.domain", "level": "info", "logger": "authentik.root.celery", "pid": 15, "request_id": "2c7a80e2c98849ea9ebbff046b364af1", "task_id": "8aba9f03-c191-4267-8900-46fbf41d96e5", "task_name": "authentik.events.tasks.event_notification_handler", "timestamp": "2024-04-25T12:25:57.591592"}

{"auth_via": "session", "event": "/api/v3/flows/executor/default-provider-authorization-implicit-consent/?query=SAMLRequest%3DnZJNbxoxEIbv%252FIrId%252FDushuBBUgk9AOJAgokh14i451NLO3aW8%252B4af99jJ02baXk0DlY8sy8j2deeYaya3ux9PRobuCbB6TBRYgfXWtQxOKceWeElahRGNkBClLisPyyEcUoE72zZJVt2T%252By91USERxpa5JsvZqz3fbDZvdpvb2fQFXk40mmxgqmTTM%252BlQBNWYVsmTeTuqwus%252Bk0UzJJ78Bh4MxZwLJBoiF6WBskaSjks6IcZuWwqI55IYpKVJdfk3QVltVGUpQ%252FEvUoOJfBiRF20hGC8g6e4DSyptUGuOz7VqvYz88r8timWutrjmj5SZtamwfuoNYOFPH0zP7FoatUft%252BYFwaKz8fjfrjfHY4Jsvxl2LU16DtwB3DftYLbm83r7ASye3t25D4w7tPk50MqZItIn53vIvrmFv9J64BkLUnO%252BJ%252BwV3wvtmHb9Wpvg4k%252FY%252F4cH63rJL1tSj7KY0bXwya2Cm%252BwB6UbDTX7jVm2rX26diAJ5oycB3bBF4M0y9%252Ffe%252FEM%26RelayState%3Dhttps%253A%252F%252Fteam.smartsecureweb.online%252Fapps%252Fuser_saml%252Fsaml%252Flogin", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "2c7a80e2c98849ea9ebbff046b364af1", "runtime": 376, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:57.634444", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

Version and Deployment (please complete the following information):

  • authentik version: 2023.6.1
  • Deployment: Podman

Additional context Do not know how much this helps but here is an issue that was opened on the user_saml github regarding the same thing:

#https://github.com/nextcloud/server/issues/45089

JarEXE avatar Apr 25 '24 12:04 JarEXE

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

huh guess nobody at authentik could repro this?

Fuseteam avatar Jun 25 '24 18:06 Fuseteam

https://github.com/nextcloud/server/issues/45089#issuecomment-2259862012

JarEXE avatar Aug 06 '24 16:08 JarEXE