fix

Signed-off-by: Jens Langhammer <[email protected]>

authentik/blueprints/v1/importer.py

@@ -51,7 +51,10 @@
     MicrosoftEntraProviderUser,
 )
 from authentik.enterprise.providers.rac.models import ConnectionToken
-from authentik.enterprise.stages.authenticator_endpoint_gdtc.models import EndpointDevice, EndpointDeviceConnection
+from authentik.enterprise.stages.authenticator_endpoint_gdtc.models import (
+    EndpointDevice,
+    EndpointDeviceConnection,
+)
 from authentik.events.logs import LogEvent, capture_logs
 from authentik.events.models import SystemTask
 from authentik.events.utils import cleanse_dict

authentik/core/api/devices.py

@@ -14,6 +14,7 @@
 from rest_framework.viewsets import ViewSet
 
 from authentik.core.api.utils import MetaNameSerializer
+from authentik.enterprise.stages.authenticator_endpoint_gdtc.models import EndpointDevice
 from authentik.rbac.decorators import permission_required
 from authentik.stages.authenticator import device_classes, devices_for_user
 from authentik.stages.authenticator.models import Device
@@ -40,6 +41,8 @@ def get_extra_description(self, instance: Device) -> str:
         """Get extra description"""
         if isinstance(instance, WebAuthnDevice):
             return instance.device_type.description
+        if isinstance(instance, EndpointDevice):
+            return instance.data.get("deviceSignals", {}).get("deviceModel")
         return ""
 
 

authentik/core/management/commands/shell.py

@@ -4,6 +4,7 @@
 import platform
 import sys
 import traceback
+from pprint import pprint
 
 from django.apps import apps
 from django.core.management.base import BaseCommand
@@ -34,7 +35,9 @@ def add_arguments(self, parser):
 
     def get_namespace(self):
         """Prepare namespace with all models"""
-        namespace = {}
+        namespace = {
+            "pprint": pprint,
+        }
 
         # Gather Django models and constants from each app
         for app in apps.get_app_configs():

authentik/enterprise/stages/authenticator_endpoint_gdtc/api.py

@@ -56,10 +56,8 @@ class Meta:
 
 class EndpointDeviceViewSet(
     mixins.RetrieveModelMixin,
-    mixins.UpdateModelMixin,
-    mixins.DestroyModelMixin,
-    UsedByMixin,
     mixins.ListModelMixin,
+    UsedByMixin,
     GenericViewSet,
 ):
     """Viewset for Endpoint authenticator devices"""

authentik/flows/challenge.py

@@ -8,7 +8,7 @@
 from django.core.serializers.json import DjangoJSONEncoder
 from django.db import models
 from django.http import JsonResponse
-from rest_framework.fields import CharField, ChoiceField, DictField, BooleanField
+from rest_framework.fields import BooleanField, CharField, ChoiceField, DictField
 from rest_framework.request import Request
 
 from authentik.core.api.utils import PassiveSerializer

schema.yml

@@ -2132,115 +2132,6 @@ paths:
               schema:
                 $ref: '#/components/schemas/GenericError'
           description: ''
-    put:
-      operationId: authenticators_endpoint_update
-      description: Viewset for Endpoint authenticator devices
-      parameters:
-      - in: path
-        name: uuid
-        schema:
-          type: string
-          format: uuid
-        description: A UUID string identifying this Endpoint Device.
-        required: true
-      tags:
-      - authenticators
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/EndpointDeviceRequest'
-        required: true
-      security:
-      - authentik: []
-      responses:
-        '200':
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/EndpointDevice'
-          description: ''
-        '400':
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/ValidationError'
-          description: ''
-        '403':
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/GenericError'
-          description: ''
-    patch:
-      operationId: authenticators_endpoint_partial_update
-      description: Viewset for Endpoint authenticator devices
-      parameters:
-      - in: path
-        name: uuid
-        schema:
-          type: string
-          format: uuid
-        description: A UUID string identifying this Endpoint Device.
-        required: true
-      tags:
-      - authenticators
-      requestBody:
-        content:
-          application/json:
-            schema:
-              $ref: '#/components/schemas/PatchedEndpointDeviceRequest'
-      security:
-      - authentik: []
-      responses:
-        '200':
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/EndpointDevice'
-          description: ''
-        '400':
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/ValidationError'
-          description: ''
-        '403':
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/GenericError'
-          description: ''
-    delete:
-      operationId: authenticators_endpoint_destroy
-      description: Viewset for Endpoint authenticator devices
-      parameters:
-      - in: path
-        name: uuid
-        schema:
-          type: string
-          format: uuid
-        description: A UUID string identifying this Endpoint Device.
-        required: true
-      tags:
-      - authenticators
-      security:
-      - authentik: []
-      responses:
-        '204':
-          description: No response body
-        '400':
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/ValidationError'
-          description: ''
-        '403':
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/GenericError'
-          description: ''
   /authenticators/endpoint/{uuid}/used_by/:
     get:
       operationId: authenticators_endpoint_used_by_list

web/src/user/user-settings/mfa/MFADeviceForm.ts

@@ -60,7 +60,7 @@ export class MFADeviceForm extends ModelForm<Device, string> {
                 break;
             default:
                 throw new SentryIgnoredError(
-                    msg(str`Device type ${device.verboseName} cannot be eddited`),
+                    msg(str`Device type ${device.verboseName} cannot be edited`),
                 );
         }
         return device;