Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

website/docs: add example policy to enforce unique email address #8955

Merged
merged 2 commits into from
Mar 21, 2024

Conversation

BeryJu
Copy link
Member

@BeryJu BeryJu commented Mar 18, 2024

Details

REPLACE ME


Checklist

  • Local tests pass (ak test authentik/)
  • The code has been formatted (make lint-fix)

If an API change has been made

  • The API schema has been updated (make gen-build)

If changes to the frontend have been made

  • The code has been formatted (make web)

If applicable

  • The documentation has been updated
  • The documentation has been formatted (make website)

@BeryJu BeryJu requested a review from a team as a code owner March 18, 2024 21:41
Copy link

netlify bot commented Mar 18, 2024

Deploy Preview for authentik-docs ready!

Name Link
🔨 Latest commit 1066d9a
🔍 Latest deploy log https://app.netlify.com/sites/authentik-docs/deploys/65fadc50c4a9330008d21c38
😎 Deploy Preview https://deploy-preview-8955--authentik-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Copy link

netlify bot commented Mar 18, 2024

Deploy Preview for authentik-storybook ready!

Name Link
🔨 Latest commit 1066d9a
🔍 Latest deploy log https://app.netlify.com/sites/authentik-storybook/deploys/65fadc50d54da50008f0cd56
😎 Deploy Preview https://deploy-preview-8955--authentik-storybook.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Copy link
Contributor

github-actions bot commented Mar 18, 2024

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-ghcr.io/goauthentik/dev-server:gh-1066d9a8db328c685281c07747182120a7436cc8
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

For arm64, use these values:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-ghcr.io/goauthentik/dev-server:gh-1066d9a8db328c685281c07747182120a7436cc8-arm64
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
image:
    repository: ghcr.io/goauthentik/dev-server
    tag: gh-ghcr.io/goauthentik/dev-server:gh-1066d9a8db328c685281c07747182120a7436cc8

For arm64, use these values:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
image:
    repository: ghcr.io/goauthentik/dev-server
    tag: gh-ghcr.io/goauthentik/dev-server:gh-1066d9a8db328c685281c07747182120a7436cc8-arm64

Afterwards, run the upgrade commands from the latest release notes.

title: Ensure unique email addresses
---

Due to the database design of authentik, Email addresses are by default not required to be unique. This behavior can however be changed by policies.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Due to the database design of authentik, Email addresses are by default not required to be unique. This behavior can however be changed by policies.
Due to the database design of authentik, email addresses are by default not required to be unique. This behavior can however be changed by policies.


Due to the database design of authentik, Email addresses are by default not required to be unique. This behavior can however be changed by policies.

The policy snippet below can be used both with enrollment flows, where the policy should be bound to any stage before the [User write](../../flow/stages/user_write.md) stage, or it can be used with the [Prompt stage](../../flow/stages/prompt/index.md).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we say where the user needs to add this snippet? Is it added in the Expression field of the policy? Or... ?

@tanberry
Copy link
Contributor

Also, I am glad to see this documented, since people do notice and ask about it...

Signed-off-by: Jens Langhammer <[email protected]>
@BeryJu BeryJu merged commit da2eddf into main Mar 21, 2024
63 checks passed
@BeryJu BeryJu deleted the website/docs/policy-usage-email-unique branch March 21, 2024 16:04
kensternberg-authentik added a commit that referenced this pull request Mar 21, 2024
* main:
  website/docs: add example policy to enforce unique email address (#8955)
  web/admin: remove enterprise preview banner (#8991)
  core: bump uvicorn from 0.28.1 to 0.29.0 (#8980)
  core: bump sentry-sdk from 1.42.0 to 1.43.0 (#8981)
  web: bump the babel group in /web with 3 updates (#8983)
  web: bump typescript from 5.4.2 to 5.4.3 in /web (#8984)
  web: bump typescript from 5.4.2 to 5.4.3 in /tests/wdio (#8986)
  web: bump chromedriver from 122.0.6 to 123.0.0 in /tests/wdio (#8987)
  website: bump typescript from 5.4.2 to 5.4.3 in /website (#8989)
  core: bump importlib-metadata from 7.0.2 to 7.1.0 (#8982)
  web: bump the wdio group in /tests/wdio with 3 updates (#8985)
  website: bump postcss from 8.4.37 to 8.4.38 in /website (#8988)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants