alex/manage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add Authentik access widgets

Browse Source
This commit is contained in:
Developer
2026-07-14 21:41:24 +00:00
parent 4562a9dfca
commit 17976eab80
21 changed files with 1082 additions and 214 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/REQUIREMENTS.md
+10
View File
@@ -134,6 +134,16 @@ fully removed (web-ui-rework; see decision log 2026-06-17).
- The File Browser should persist its current directory and selected file across reloads and tab switches.
- Backend startup should log a secret-safe configuration summary and request/activity diagnostics so configuration issues can be debugged without exposing API keys.
### Authentik Directory and Access Metadata
- Authentik is the read-only identity-directory source for its service page and dashboard widgets.
- Provide read-only user access summaries showing group membership and explicit staff/superuser status.
- Label the summary as **access metadata**, not complete effective authorization: conditional or expression-based Authentik policies are not evaluated by Manage.
- Provide read-only groups and applications lists. Application entries may include safe display metadata such as name, slug, launch URL, and policy-engine mode, but must never expose provider configuration, tokens, or raw policy data.
- The configured Authentik API token must have read access to users, groups, and applications.
- Authentik data reads must remain service-instance scoped and tolerate unavailable upstream services with an empty/error state.
- Authentik widgets are read-only and support bounded display limits for access summaries, groups, and applications.
### Remote Filesystem over SSH
- Connect to a remote media server via SSH.