Skip to content

providers/oauth2: add token exchange targeting - #24874

Merged
BeryJu merged 4 commits into
mainfrom
providers/oauth2/token-exchange-audience
Aug 10, 2026
Merged

providers/oauth2: add token exchange targeting#24874
BeryJu merged 4 commits into
mainfrom
providers/oauth2/token-exchange-audience

Conversation

@BeryJu

@BeryJu BeryJu commented Aug 7, 2026

Copy link
Copy Markdown
Member

the last missing piece

@BeryJu
BeryJu requested review from a team as code owners August 7, 2026 14:11
@BeryJu BeryJu added the backport/version-2026.8 Add this label to PRs to backport changes to version-2026.8 label Aug 7, 2026
@netlify

netlify Bot commented Aug 7, 2026

Copy link
Copy Markdown

Deploy Preview for authentik-integrations ready!

Name Link
🔨 Latest commit fed7160
🔍 Latest deploy log https://app.netlify.com/projects/authentik-integrations/deploys/6a79e09bad7b8a0008289617
😎 Deploy Preview https://deploy-preview-24874--authentik-integrations.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify

netlify Bot commented Aug 7, 2026

Copy link
Copy Markdown

Deploy Preview for authentik-docs ready!

Name Link
🔨 Latest commit fed7160
🔍 Latest deploy log https://app.netlify.com/projects/authentik-docs/deploys/6a79e09b054f92000819fb72
😎 Deploy Preview https://deploy-preview-24874--authentik-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@codecov

codecov Bot commented Aug 7, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.47%. Comparing base (771740c) to head (fed7160).
⚠️ Report is 37 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #24874      +/-   ##
==========================================
+ Coverage   91.40%   91.47%   +0.06%     
==========================================
  Files        1145     1147       +2     
  Lines       71751    72278     +527     
  Branches     3875     3875              
==========================================
+ Hits        65586    66113     +527     
  Misses       6130     6130              
  Partials       35       35              
Flag Coverage Δ
conformance 34.81% <7.89%> (-0.06%) ⬇️
e2e 39.49% <7.89%> (-0.08%) ⬇️
integration 31.36% <6.14%> (-0.07%) ⬇️
rust 38.89% <ø> (ø)
unit 93.12% <100.00%> (+0.05%) ⬆️
unit-migrate 93.14% <100.00%> (+0.05%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
@github-actions

github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-fed7160d80586b4b18441fc3f64d8cb66353d766
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-fed7160d80586b4b18441fc3f64d8cb66353d766

Afterwards, run the upgrade commands from the latest release notes.

@kensternberg-authentik kensternberg-authentik left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some suggestions.

Comment thread website/docs/add-secure-apps/providers/oauth2/token_exchange.md Outdated
Comment thread website/docs/add-secure-apps/providers/oauth2/token_exchange.md Outdated
Comment thread website/docs/add-secure-apps/providers/oauth2/token_exchange.md Outdated
Signed-off-by: Jens Langhammer <jens@goauthentik.io>

# Conflicts:
#	authentik/providers/oauth2/views/token.py
@netlify

netlify Bot commented Aug 9, 2026

Copy link
Copy Markdown

Deploy Preview for authentik-storybook ready!

Name Link
🔨 Latest commit dee88de
🔍 Latest deploy log https://app.netlify.com/projects/authentik-storybook/deploys/6a78b17ff5452d0008f8c953
😎 Deploy Preview https://deploy-preview-24874--authentik-storybook.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
@BeryJu
BeryJu enabled auto-merge (squash) August 10, 2026 14:31
@BeryJu
BeryJu merged commit ba709b4 into main Aug 10, 2026
236 of 238 checks passed
@BeryJu
BeryJu deleted the providers/oauth2/token-exchange-audience branch August 10, 2026 15:26
@authentik-cherry-pick

Copy link
Copy Markdown
Contributor

🍒 Cherry-pick to version-2026.8 created: #24955

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport/version-2026.8 Add this label to PRs to backport changes to version-2026.8

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants