search

goauthentik / authentik

The authentication glue you need.
https://goauthentik.io
Other
7.8k stars 598 forks source link

Nextcloud AIO unshared files and folders are displayed as "Shared" when account created via Authentik SAML / user_saml #9425

Open JarEXE opened 2 months ago

JarEXE commented 2 months ago

Describe the bug Nextcloud AIO unshared files and folders are displayed as "Shared" when account created via Authentik SAML / user_saml.

To Reproduce Steps to reproduce the behavior:

  1. Configure Authentik saml provider (according to documentation).
  2. Configure Nextcloud user_saml application to connect to Authentik provider.
  3. Create Authentik user account
  4. Log in via Authentik
  5. Navigate to Nextcloud (Nextcloud SAML login)
  6. Go to logged in Nextcloud files and folders web interface

Expected behavior Unshared files and folders should not have any tag stating "Shared by " when they are the original creator and owner of these files and folders. This user should not be "sharing files and folders to themselves".

nextclouduser

This is a user account (test2) that was created directly via Nextcloud and logged in to via "https://my-nextcloud-domain/login?direct=1".

Actual behavior Unshared files and folders all display "Shared by " as if the user is sharing the files and folders to themselves.

unsharedfiles

This is a user account (tester) that was created via Authentik and logged in to via Authentik / Nextcloud SAML.

Logs These are the relevant logs from the Authentik Server when creating a new user, logging in as said user, then logging into Nextcloud with said user via SAML:

{"auth_via": "unauthenticated", "backend": "authentik.core.auth.InbuiltBackend", "event": "Successful authentication", "host": "auth.my.domain", "level": "info", "logger": "authentik.stages.password.stage", "pid": 14, "request_id": "0b24d9e0768c44ebaf4cbb6e7d87a950", "timestamp": "2024-04-25T12:25:04.944326", "user": "fakeuser"}

{"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/default-authentication-flow/?query=next%3D%252F", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 14, "remote": "172.23.150.231", "request_id": "0b24d9e0768c44ebaf4cbb6e7d87a950", "runtime": 1223, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:05.130479", "user": "", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/default-authentication-flow/?query=next%3D%252F", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "172.23.150.231", "request_id": "8920a59e202b4423baf8f2eaee875a21", "runtime": 175, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:05.327241", "user": "", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/default-authentication-flow/?query=next%3D%252F", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "172.23.150.231", "request_id": "e93ded9858984124980e06e1ad77892a", "runtime": 53, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:05.409889", "user": "", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event":"/static/dist/flow/AuthenticatorTOTPStage-e0df08c0.js","host":"auth.my.domain","level":"info","logger":"authentik.router","method":"GET","remote":"172.23.150.231","runtime":"2.974","scheme":"https","size":12103,"status":200,"timestamp":"2024-04-25T12:25:05Z","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event":"/if/flow/default-authentication-flow/assets/fonts/webfonts/fa-solid-900.woff2","host":"auth.my.domain","level":"info","logger":"authentik.router","method":"GET","remote":"172.23.150.231","runtime":"5.823","scheme":"https","size":79100,"status":200,"timestamp":"2024-04-25T12:25:05Z","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "unauthenticated", "event": "/-/health/live/", "host": "localhost:8000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "127.0.0.1", "request_id": "4cf273f4be214f10bb813ec9e6fe871a", "runtime": 26, "scheme": "http", "status": 204, "timestamp": "2024-04-25T12:25:16.702105", "user": "", "user_agent": "goauthentik.io/proxy/healthcheck"}

{"auth_via": "unauthenticated", "event": "Task published", "host": "localhost:8000", "level": "info", "logger": "authentik.root.celery", "pid": 14, "request_id": "d9d9d084814544ddabe3a84bb7183381", "task_id": "d9c4b4ab-a464-4b58-989a-7ab8bb8d1c55", "task_name": "authentik.providers.scim.tasks.scim_signal_direct", "timestamp": "2024-04-25T12:25:20.333623"}

{"auth_via": "secret_key", "event": "/api/v3/outposts/instances/", "host": "localhost:8000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "127.0.0.1", "request_id": "d9d9d084814544ddabe3a84bb7183381", "runtime": 226, "scheme": "http", "status": 200, "timestamp": "2024-04-25T12:25:20.441473", "user": "ak-outpost-d463b7ce73274b89a6887f1538779782", "user_agent": "goauthentik.io/outpost/2023.6.1"}

{"auth_via": "unauthenticated", "event": "Task published", "host": "localhost:8000", "level": "info", "logger": "authentik.root.celery", "pid": 14, "request_id": "ec1d6c7039884e6db5c0c9fb449f68e5", "task_id": "237912a8-c53e-422f-84f3-2d4ca6e1ac10", "task_name": "authentik.providers.scim.tasks.scim_signal_direct", "timestamp": "2024-04-25T12:25:20.622052"}

{"auth_via": "secret_key", "event": "/api/v3/outposts/proxy/", "host": "localhost:8000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "127.0.0.1", "request_id": "ec1d6c7039884e6db5c0c9fb449f68e5", "runtime": 216, "scheme": "http", "status": 200, "timestamp": "2024-04-25T12:25:20.686044", "user": "ak-outpost-d463b7ce73274b89a6887f1538779782", "user_agent": "goauthentik.io/outpost/2023.6.1"}

{"event":"updating tenant certificates","level":"info","logger":"authentik.router.tenant_tls","timestamp":"2024-04-25T12:25:20Z"}

{"auth_via": "unauthenticated", "event": "Task published", "host": "localhost:8000", "level": "info", "logger": "authentik.root.celery", "pid": 14, "request_id": "dc6d493056394fa3913aa351bfa6a0e6", "task_id": "b8cc4a38-4a2f-4ced-b8fd-468e11715ac1", "task_name": "authentik.providers.scim.tasks.scim_signal_direct", "timestamp": "2024-04-25T12:25:20.861478"}

{"auth_via": "secret_key", "event": "/api/v3/core/tenants/", "host": "localhost:8000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "127.0.0.1", "request_id": "dc6d493056394fa3913aa351bfa6a0e6", "runtime": 185, "scheme": "http", "status": 200, "timestamp": "2024-04-25T12:25:20.908400", "user": "ak-outpost-d463b7ce73274b89a6887f1538779782", "user_agent": "goauthentik.io/outpost/2023.6.1"}

{"event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 15, "remote": "172.23.120.50", "scheme": "ws", "timestamp": "2024-04-25T12:25:26.549308", "user_agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"}

{"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/default-authentication-flow/?query=next%3D%252F", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 15, "remote": "172.23.150.231", "request_id": "8e4f6d81b3a84a7eaa2054a23d01d998", "runtime": 594, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:36.025081", "user": "", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"action": "login", "auth_via": "unauthenticated", "client_ip": "172.23.150.231", "context": {"auth_method": "password", "auth_method_args": {}, "http_request": {"args": {"next": "/"}, "method": "GET", "path": "/api/v3/flows/executor/default-authentication-flow/"}}, "event": "Created Event", "host": "auth.my.domain", "level": "info", "logger": "authentik.events.models", "pid": 15, "request_id": "96fff0b54bd34924802f45d6007dd17d", "timestamp": "2024-04-25T12:25:36.167153", "user": {"email": "j.eyken@my.email", "pk": 31, "username": "fakeuser"}}

{"auth_via": "unauthenticated", "event": "Task published", "host": "auth.my.domain", "level": "info", "logger": "authentik.root.celery", "pid": 15, "request_id": "96fff0b54bd34924802f45d6007dd17d", "task_id": "185de4d9-90c7-4376-b73a-fa4ad0179b78", "task_name": "authentik.events.tasks.event_notification_handler", "timestamp": "2024-04-25T12:25:36.212176"}

{"auth_via": "unauthenticated", "event": "Task published", "host": "auth.my.domain", "level": "info", "logger": "authentik.root.celery", "pid": 15, "request_id": "96fff0b54bd34924802f45d6007dd17d", "task_id": "5ae2ebf8-48ff-48dc-91b4-6aae823baf9a", "task_name": "authentik.providers.scim.tasks.scim_signal_direct", "timestamp": "2024-04-25T12:25:36.225978"}

{"auth_via": "unauthenticated", "event": "Task published", "host": "auth.my.domain", "level": "info", "logger": "authentik.root.celery", "pid": 15, "request_id": "96fff0b54bd34924802f45d6007dd17d", "task_id": "8b8ad03b-ea46-492c-856f-e372354b102a", "task_name": "authentik.policies.reputation.tasks.save_reputation", "timestamp": "2024-04-25T12:25:36.241252"}

{"auth_via": "unauthenticated", "event": "/api/v3/flows/executor/default-authentication-flow/?query=next%3D%252F", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "96fff0b54bd34924802f45d6007dd17d", "runtime": 215, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:36.268735", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "35ea099ea8ff43a0857756934024f3d1", "runtime": 39, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:36.390198", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/if/user/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "cf25bb8eb9d4483cace8730f8e697b00", "runtime": 80, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:36.490109", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 14, "remote": "172.23.150.231", "scheme": "ws", "timestamp": "2024-04-25T12:25:36.785108", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/api/v3/core/users/me/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "12d7054111854a77b0ffd722845a9973", "runtime": 111, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:36.897871", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/api/v3/events/notifications/?ordering=-created&seen=false&user=31", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "009d38f144f9423f9b5d57517cad4fd8", "runtime": 159, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:37.134778", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/api/v3/events/notifications/?ordering=-created&page_size=1&seen=false&user=31", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "172.23.150.231", "request_id": "2022e76a605b4177a41b8f84684600ab", "runtime": 182, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:37.161552", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/api/v3/core/applications/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14, "remote": "172.23.150.231", "request_id": "e3c0ffbe68e346beb859f04cd0ce0a04", "runtime": 334, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:37.299392", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "unauthenticated", "event": "/-/health/live/", "host": "localhost:8000", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "127.0.0.1", "request_id": "319ecf4e83a740269984c17f4fc00b0f", "runtime": 30, "scheme": "http", "status": 204, "timestamp": "2024-04-25T12:25:46.698237", "user": "", "user_agent": "goauthentik.io/proxy/healthcheck"}

{"auth_via": "session", "event": "/application/saml/smartcloud/sso/binding/init/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "a3adec78a1c2486ca05338ef38a1dbf3", "runtime": 86, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:55.276111", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/if/flow/default-provider-authorization-implicit-consent/", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "2290e945a3234f6eab5107951d76268c", "runtime": 75, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:55.370901", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 14, "remote": "172.23.150.231", "scheme": "ws", "timestamp": "2024-04-25T12:25:55.542818", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"action": "authorize_application", "auth_via": "session", "client_ip": "172.23.150.231", "context": {"authorized_application": {"app": "authentik_core", "model_name": "application", "name": "SmartCloud (Files / Nextcloud)", "pk": "11c315e088c7455389321253e276523d"}, "flow": "60f906507a064b3a8f941f8d61c2ee2d", "http_request": {"args": {}, "method": "GET", "path": "/api/v3/flows/executor/default-provider-authorization-implicit-consent/"}}, "event": "Created Event", "host": "auth.my.domain", "level": "info", "logger": "authentik.events.models", "pid": 15, "request_id": "0bc35a5c36114bf29e58d7c73987f7d6", "timestamp": "2024-04-25T12:25:55.709798", "user": {"email": "j.eyken@my.email", "pk": 31, "username": "fakeuser"}}

{"auth_via": "session", "event": "Task published", "host": "auth.my.domain", "level": "info", "logger": "authentik.root.celery", "pid": 15, "request_id": "0bc35a5c36114bf29e58d7c73987f7d6", "task_id": "05d5bc9d-c924-4892-a10b-f7714f094cdb", "task_name": "authentik.events.tasks.event_notification_handler", "timestamp": "2024-04-25T12:25:55.761730"}

{"auth_via": "session", "event": "/api/v3/flows/executor/default-provider-authorization-implicit-consent/?query=", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "0bc35a5c36114bf29e58d7c73987f7d6", "runtime": 240, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:55.812560", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/application/saml/smartcloud/sso/binding/redirect/?SAMLRequest=nZJNbxoxEIbv%2FIrId%2FDushuBBUgk9AOJAgokh14i451NLO3aW8%2B4af99jJ02baXk0DlY8sy8j2deeYaya3ux9PRobuCbB6TBRYgfXWtQxOKceWeElahRGNkBClLisPyyEcUoE72zZJVt2T%2By91USERxpa5JsvZqz3fbDZvdpvb2fQFXk40mmxgqmTTM%2BlQBNWYVsmTeTuqwus%2Bk0UzJJ78Bh4MxZwLJBoiF6WBskaSjks6IcZuWwqI55IYpKVJdfk3QVltVGUpQ%2FEvUoOJfBiRF20hGC8g6e4DSyptUGuOz7VqvYz88r8timWutrjmj5SZtamwfuoNYOFPH0zP7FoatUft%2BYFwaKz8fjfrjfHY4Jsvxl2LU16DtwB3DftYLbm83r7ASye3t25D4w7tPk50MqZItIn53vIvrmFv9J64BkLUnO%2BJ%2BwV3wvtmHb9Wpvg4k%2FY%2F4cH63rJL1tSj7KY0bXwya2Cm%2BwB6UbDTX7jVm2rX26diAJ5oycB3bBF4M0y9%2Ffe%2FEM&RelayState=https%3A%2F%2Fteam.smartsecureweb.online%2Fapps%2Fuser_saml%2Fsaml%2Flogin", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "b735ac641b824593b385b0f6649bc3bf", "runtime": 162, "scheme": "https", "status": 302, "timestamp": "2024-04-25T12:25:56.838137", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 15, "remote": "172.23.150.231", "scheme": "ws", "timestamp": "2024-04-25T12:25:56.911476", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"auth_via": "session", "event": "/if/flow/default-provider-authorization-implicit-consent/?SAMLRequest=nZJNbxoxEIbv%2FIrId%2FDushuBBUgk9AOJAgokh14i451NLO3aW8%2B4af99jJ02baXk0DlY8sy8j2deeYaya3ux9PRobuCbB6TBRYgfXWtQxOKceWeElahRGNkBClLisPyyEcUoE72zZJVt2T%2By91USERxpa5JsvZqz3fbDZvdpvb2fQFXk40mmxgqmTTM%2BlQBNWYVsmTeTuqwus%2Bk0UzJJ78Bh4MxZwLJBoiF6WBskaSjks6IcZuWwqI55IYpKVJdfk3QVltVGUpQ%2FEvUoOJfBiRF20hGC8g6e4DSyptUGuOz7VqvYz88r8timWutrjmj5SZtamwfuoNYOFPH0zP7FoatUft%2BYFwaKz8fjfrjfHY4Jsvxl2LU16DtwB3DftYLbm83r7ASye3t25D4w7tPk50MqZItIn53vIvrmFv9J64BkLUnO%2BJ%2BwV3wvtmHb9Wpvg4k%2FY%2F4cH63rJL1tSj7KY0bXwya2Cm%2BwB6UbDTX7jVm2rX26diAJ5oycB3bBF4M0y9%2Ffe%2FEM&RelayState=https%3A%2F%2Fteam.smartsecureweb.online%2Fapps%2Fuser_saml%2Fsaml%2Flogin", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "be9bde5ea22c4d359a102684b56261cf", "runtime": 197, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:57.062273", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 14, "remote": "172.23.150.231", "scheme": "ws", "timestamp": "2024-04-25T12:25:57.241874", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

{"action": "authorize_application", "auth_via": "session", "client_ip": "172.23.150.231", "context": {"authorized_application": {"app": "authentik_core", "model_name": "application", "name": "SmartCloud (Files / Nextcloud)", "pk": "11c315e088c7455389321253e276523d"}, "flow": "60f906507a064b3a8f941f8d61c2ee2d", "http_request": {"args": {"RelayState": "https://team.smartsecureweb.online/apps/user_saml/saml/login", "SAMLRequest": "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"}, "method": "GET", "path": "/api/v3/flows/executor/default-provider-authorization-implicit-consent/"}}, "event": "Created Event", "host": "auth.my.domain", "level": "info", "logger": "authentik.events.models", "pid": 15, "request_id": "2c7a80e2c98849ea9ebbff046b364af1", "timestamp": "2024-04-25T12:25:57.508587", "user": {"email": "j.eyken@my.email", "pk": 31, "username": "fakeuser"}}

{"auth_via": "session", "event": "Task published", "host": "auth.my.domain", "level": "info", "logger": "authentik.root.celery", "pid": 15, "request_id": "2c7a80e2c98849ea9ebbff046b364af1", "task_id": "8aba9f03-c191-4267-8900-46fbf41d96e5", "task_name": "authentik.events.tasks.event_notification_handler", "timestamp": "2024-04-25T12:25:57.591592"}

{"auth_via": "session", "event": "/api/v3/flows/executor/default-provider-authorization-implicit-consent/?query=SAMLRequest%3DnZJNbxoxEIbv%252FIrId%252FDushuBBUgk9AOJAgokh14i451NLO3aW8%252B4af99jJ02baXk0DlY8sy8j2deeYaya3ux9PRobuCbB6TBRYgfXWtQxOKceWeElahRGNkBClLisPyyEcUoE72zZJVt2T%252By91USERxpa5JsvZqz3fbDZvdpvb2fQFXk40mmxgqmTTM%252BlQBNWYVsmTeTuqwus%252Bk0UzJJ78Bh4MxZwLJBoiF6WBskaSjks6IcZuWwqI55IYpKVJdfk3QVltVGUpQ%252FEvUoOJfBiRF20hGC8g6e4DSyptUGuOz7VqvYz88r8timWutrjmj5SZtamwfuoNYOFPH0zP7FoatUft%252BYFwaKz8fjfrjfHY4Jsvxl2LU16DtwB3DftYLbm83r7ASye3t25D4w7tPk50MqZItIn53vIvrmFv9J64BkLUnO%252BJ%252BwV3wvtmHb9Wpvg4k%252FY%252F4cH63rJL1tSj7KY0bXwya2Cm%252BwB6UbDTX7jVm2rX26diAJ5oycB3bBF4M0y9%252Ffe%252FEM%26RelayState%3Dhttps%253A%252F%252Fteam.smartsecureweb.online%252Fapps%252Fuser_saml%252Fsaml%252Flogin", "host": "auth.my.domain", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 15, "remote": "172.23.150.231", "request_id": "2c7a80e2c98849ea9ebbff046b364af1", "runtime": 376, "scheme": "https", "status": 200, "timestamp": "2024-04-25T12:25:57.634444", "user": "fakeuser", "user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"}

Version and Deployment (please complete the following information):

Additional context Do not know how much this helps but here is an issue that was opened on the user_saml github regarding the same thing:

https://github.com/nextcloud/server/issues/45089

authentik-automation[bot] commented 1 week ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

Fuseteam commented 1 week ago

huh guess nobody at authentik could repro this?