Repository navigation

Issues

New issue

Proxy outpost (Rust, 2026.8.0) sends duplicate Host header on token backchannel — nginx rejects with 400, forward auth loops (ERR_TOO_MANY_REDIRECTS)
#25226 · przwr opened on Aug 19, 2026
3
Unable to access dashboard or login after upgrade from 2026.5 -> 2026.8
#25559 · HeyItsJono opened on Aug 28, 2026
12

[Feature Request] Support custom WASM asset URLs for Cap CAPTCHA
Feature
goauthentik/authentik#27140 · opened on Oct 23, 2026
SSO/SAML Support for user switch
Bug
goauthentik/authentik#27138 · opened on Oct 23, 2026
proxy_set_defaults reconciler locks all ProxyProviders for minutes on every process start, blocking /application/o/token/
Bug
goauthentik/authentik#27137 · opened on Oct 23, 2026
Placholder aren't "recognized"
Bug
goauthentik/authentik#27134 · opened on Oct 23, 2026 · Release 2026.11.0
1
Login resets to identification stage: session-rotation races flow executor's /ws/client/ reconnect
goauthentik/authentik#27122 · opened on Oct 22, 2026
Outposts stop receiving messages after 24 h connected: channel group membership expires (breaks RAC)
Bug
goauthentik/authentik#27101 · opened on Oct 22, 2026 · Release 2026.11.0
1
Flow executor: renderer process crashes when a message is rendered (2026.8.3)
goauthentik/authentik#27085 · opened on Oct 21, 2026
remove/replace askama dependency
Task
goauthentik/authentik#27055 · opened on Oct 20, 2026
Add option for hide/show button on password field in prompt stage
Feature
goauthentik/authentik#27050 · opened on Oct 20, 2026 · Release 2026.11.0
Firefox on iOS downloads Cloudflares embedded captcha instead of executing it
Bug
goauthentik/authentik#27049 · opened on Oct 20, 2026
4
Ability to ignore prompt=login for oidc providers
Feature
goauthentik/authentik#27026 · opened on Oct 19, 2026
Change provider wizard behavior
Task
goauthentik/authentik#27017 · opened on Oct 19, 2026 · Release 2026.11.0
Cannot save checkbox prompts as attributes
Bug
goauthentik/authentik#27014 · opened on Oct 19, 2026 · Release 2026.11.0
Flow-Stage Binding Policy Executed Twice
Bug
goauthentik/authentik#26991 · opened on Oct 18, 2026
Worker stuck for 37h retrying post_process_message on a closed DB connection after task time limit, while healthcheck stays healthy (2026.8.4)
Bug
goauthentik/authentik#26989 · opened on Oct 17, 2026 · Release 2026.11.0
WebAuthn authenticator validate always fails with 'Client data challenge was not expected challenge' on 2026.8.4 (split-screen flow, Bitwarden passkey)
goauthentik/authentik#26986 · opened on Oct 17, 2026
3
Global app_access cache invalidation on every User save causes deadlocks and timeouts under concurrent enrollment
goauthentik/authentik#26981 · opened on Oct 16, 2026
Proxy outpost websocket ignores SSL_CERT_FILE / system trust store since 2026.8 (UnknownIssuer with a private CA)
goauthentik/authentik#26980 · opened on Oct 16, 2026
Occasional "failed to send health live request to server" in monitoring
Bug
goauthentik/authentik#26975 · opened on Oct 16, 2026 · Release 2026.11.0
Separate task queues for high priority and background
Task
goauthentik/authentik#26958 · opened on Oct 15, 2026 · Release 2027.2.0
RAC: browser client receiveTimeout of 10 s causes "514 Server timeout" disconnects on idle screens
Bug
goauthentik/authentik#26957 · opened on Oct 15, 2026
1
#26353 (leftmost X-Forwarded-For) reintroduces client-IP spoofing; #25811 should be solved via trusted proxy CIDRs
goauthentik/authentik#26941 · opened on Oct 15, 2026
1
Blueprints aren't reapplied when only their !Env or !File values change
goauthentik/authentik#26925 · opened on Oct 14, 2026
Parallel blueprint applies deadlock when they save providers of the same outpost
goauthentik/authentik#26924 · opened on Oct 14, 2026
SCIM ObjectExistsSyncException does not provide context or remediation
Bug
goauthentik/authentik#26904 · opened on Oct 14, 2026

Navigation Menu

Repository navigation

Issues

Issues

[Feature Request] Support custom WASM asset URLs for Cap CAPTCHA

SSO/SAML Support for user switch

proxy_set_defaults reconciler locks all ProxyProviders for minutes on every process start, blocking /application/o/token/

Placholder aren't "recognized"

Login resets to identification stage: session-rotation races flow executor's /ws/client/ reconnect

Outposts stop receiving messages after 24 h connected: channel group membership expires (breaks RAC)

Flow executor: renderer process crashes when a message is rendered (2026.8.3)

remove/replace askama dependency

Add option for hide/show button on password field in prompt stage

Firefox on iOS downloads Cloudflares embedded captcha instead of executing it

Ability to ignore prompt=login for oidc providers

Change provider wizard behavior

Cannot save checkbox prompts as attributes

Flow-Stage Binding Policy Executed Twice

Worker stuck for 37h retrying post_process_message on a closed DB connection after task time limit, while healthcheck stays healthy (2026.8.4)

WebAuthn authenticator validate always fails with 'Client data challenge was not expected challenge' on 2026.8.4 (split-screen flow, Bitwarden passkey)

Global app_access cache invalidation on every User save causes deadlocks and timeouts under concurrent enrollment

Proxy outpost websocket ignores SSL_CERT_FILE / system trust store since 2026.8 (UnknownIssuer with a private CA)

Occasional "failed to send health live request to server" in monitoring

Separate task queues for high priority and background

RAC: browser client receiveTimeout of 10 s causes "514 Server timeout" disconnects on idle screens

#26353 (leftmost X-Forwarded-For) reintroduces client-IP spoofing; #25811 should be solved via trusted proxy CIDRs

Blueprints aren't reapplied when only their `!Env` or `!File` values change

Parallel blueprint applies deadlock when they save providers of the same outpost

SCIM ObjectExistsSyncException does not provide context or remediation