version/2024.12.2

goauthentik/authentikversion/2024.12.2Jan 9, 2025by authentik-automation[bot]

Upgrading?

AI Summary

Focuses on Kerberos authentication improvements, RBAC permissions endpoint access, and SAML response validation.

Key Highlights

  • Fixed Kerberos authentication to use the user's username instead of the first found.
  • Fixed invalid SAML Response when both assertion and response are signed.
  • Allowed authenticated users on the permissions endpoint.

Full Release Notes

See https://docs.goauthentik.io/docs/releases/2024.12#fixed-in-2024122

## What's Changed
* internal: fix missing trailing slash in outpost websocket (cherry-pick #12470) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/12471
* sources/kerberos: authenticate with the user's username instead of the first username in authentik (cherry-pick #12497) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/12579
* rbac: permissions endpoint: allow authenticated users (cherry-pick #12608) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/12610
* core: fix error when creating new user with default path (cherry-pick #12609) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/12612
* providers/saml: fix invalid SAML Response when assertion and response are signed (cherry-pick #12611) by @gcp-cherry-pick-bot in https://github.com/goauthentik/authentik/pull/12613


**Full Changelog**: https://github.com/goauthentik/authentik/compare/version/2024.12.1...version/2024.12.2

Related Repositories