user/authentik/APKBUILD

@@ -2,7 +2,7 @@
 # Maintainer: Antoine Martin (ayakael) <dev@ayakael.net>
 pkgname=authentik
 pkgver=2024.4.2
-pkgrel=0
+pkgrel=1
 pkgdesc="An open-source Identity Provider focused on flexibility and versatility"
 url="https://github.com/goauthentik/authentik"
 # s390x: missing py3-celery py3-flower and py3-kombu
@@ -60,8 +60,10 @@ depends="
 	py3-django-otp
 	py3-django-prometheus
 	py3-django-redis
-	py3-django-rest-framework
+	py3-django-rest-framework~=3.14.0
 	py3-django-rest-framework-guardian
+	py3-django-storages
+	py3-django-tenants
 	py3-docker-py
 	py3-dotenv
 	py3-dumb-init
@@ -69,6 +71,7 @@ depends="
 	py3-drf-spectacular
 	py3-email-validator
 	py3-facebook-sdk
+	py3-fido2
 	py3-flower
 	py3-frozenlist
 	py3-geoip2
@@ -101,7 +104,6 @@ depends="
 	py3-prompt_toolkit
 	py3-psycopg
 	py3-psycopg-c
-	py3-pycryptodome
 	py3-pydantic-scim
 	py3-pynacl
 	py3-pyrsistent
@@ -110,6 +112,8 @@ depends="
 	py3-requests
 	py3-requests-oauthlib
 	py3-rsa
+	py3-scim2-filter-parser
+	py3-setproctitle
 	py3-sentry-sdk
 	py3-service_identity
 	py3-setuptools
@@ -122,6 +126,7 @@ depends="
 	py3-twilio
 	py3-twisted
 	py3-txaio
+	py3-tenant-schemas-celery
 	py3-typing-extensions
 	py3-tz
 	py3-ua-parser
@@ -158,6 +163,7 @@ source="
 	authentik-ldap.openrc
 	authentik-ldap.conf
 	authentik-manage.sh
+	fix-ak-bash.patch
 	root-settings-csrf_trusted_origins.patch
 	"
 builddir="$srcdir/"authentik-version-$pkgver
@@ -238,9 +244,10 @@ package() {
 sha512sums="
 58642829e320b1480706363712a73c82e55f79ed6451d5db82482c51b9c1ee13b9999caf152da0944ca277344d38c99a5636a7e9e718f858ca558f17ae9da104  authentik-2024.4.2.tar.gz
 4defb4fe3a4230f4aa517fbecd5e5b8bcef2a64e1b40615660ae9eec33597310a09df5e126f4d39ce7764bd1716c0a7040637699135c103cbc1879593c6c06f1  authentik.openrc
-5d7f28bf5a9f358a0fc3634b2bac6d070c276c3f8181d26fa7e94a17503a4d54556bf7c3207ccd6cb924b81754ed965795d5e2a8aa1af409fd9e32d390ec4cf5  authentik-worker.openrc
+6cb03b9b69df39bb4539fe05c966536314d766b2e9307a92d87070ba5f5b7e7ab70f1b5ee1ab3c0c50c23454f9c5a4caec29e63fdf411bbb7a124ad687569b89  authentik-worker.openrc
 351e6920d987861f8bf0d7ab2f942db716a8dbdad1f690ac662a6ef29ac0fd46cf817cf557de08f1c024703503d36bc8b46f0d9eb1ecaeb399dce4c3bb527d17  authentik-ldap.openrc
 89ee5f0ffdade1c153f3a56ff75b25a7104aa81d8c7a97802a8f4b0eab34850cee39f874dabe0f3c6da3f71d6a0f938f5e8904169e8cdd34d407c8984adee6b0  authentik-ldap.conf
-d2df285e09d05bb78b17cdbf156cb19883764d0ae61d4c8faed599c015277b75c3f51e5fcb35e01fc25d5847f667ff2089d5e6c48b85a3a6b4523278b2eea89d  authentik-manage.sh
+f1a3cb215b6210fa7d857a452a9f2bc4dc0520e49b9fa7027547cff093d740a7e2548f1bf1f8831f7d5ccb80c8e523ee0c8bafcc4dc42d2788725f2137d21bee  authentik-manage.sh
-a50ceddb239851d869212cd5064df117ab977d0e01bf0bc5fa7b5fa6e6428a4af59f802ca223a7e840753f86bfdb0df17d330f9ba4cbaa30a167f51d8aecb9bd  root-settings-csrf_trusted_origins.patch
+3e47db684a3f353dcecdb7bab8836b9d5198766735d77f676a51d952141a0cf9903fcb92e6306c48d2522d7a1f3028b37247fdc1dc74d4d6e043da7eb4f36d49  fix-ak-bash.patch
+5c60e54b6a7829d611af66f5cb8184a002b5ae927efbd024c054a7c176fcb9efcfbe5685279ffcf0390b0f0abb3bb03e02782c6867c2b38d1ad2d508aae83fa0  root-settings-csrf_trusted_origins.patch
 "

user/authentik/authentik-manage.sh

@@ -1,4 +1,3 @@
-
 #!/bin/sh
 
 BUNDLE_DIR='/usr/share/webapps/authentik'

user/authentik/authentik-worker.openrc

@@ -4,8 +4,8 @@ name="$RC_SVCNAME"
 cfgfile="/etc/conf.d/$RC_SVCNAME.conf"
 pidfile="/run/$RC_SVCNAME.pid"
 working_directory="/usr/share/webapps/authentik"
-command="celery"
+command="/usr/bin/authentik-manage"
-command_args="-A authentik.root.celery worker -Ofair --max-tasks-per-child=1 --autoscale 3,1 -E -B -s /tmp/celerybeat-schedule -Q authentik,authentik_scheduled,authentik_events"
+command_args="worker"
 command_user="authentik"
 command_group="authentik"
 start_stop_daemon_args=""

user/authentik/fix-ak-bash.patch

@@ -0,0 +1,10 @@
+diff --git a/lifecycle/ak.orig b/lifecycle/ak
+index 615bfe9..1646274 100755
+--- a/lifecycle/ak.orig
++++ b/lifecycle/ak
+@@ -1,4 +1,4 @@
+-#!/usr/bin/env -S bash -e
++#!/usr/bin/env bash
+ MODE_FILE="${TMPDIR}/authentik-mode"
+ 
+ function log {

user/authentik/root-settings-csrf_trusted_origins.patch

@@ -1,8 +1,8 @@
-diff --git a/authentik/root/settings.py.orig b/authentik/root/settings.py
+diff --git a/authentik/root/settings.py b/authentik/root/settings.py
-index ebfc471..ce1ef3b 100644
+index 15e689b06..8b0c1d744 100644
---- a/authentik/root/settings.py.orig
+--- a/authentik/root/settings.py
 +++ b/authentik/root/settings.py
-@@ -56,6 +56,7 @@ AUTH_USER_MODEL = "authentik_core.User"
+@@ -33,6 +33,7 @@ AUTH_USER_MODEL = "authentik_core.User"
  
  CSRF_COOKIE_NAME = "authentik_csrf"
  CSRF_HEADER_NAME = "HTTP_X_AUTHENTIK_CSRF"

user/py3-django-rest-framework/APKBUILD

@@ -0,0 +1,59 @@
+# Contributor: Leonardo Arena <rnalrd@alpinelinux.org>
+# Contributor: Justin Berthault <justin.berthault@zaclys.net>
+# Maintainer: Antoine Martin (ayakael) <dev@ayakael.net>
+pkgname=py3-django-rest-framework
+_pkgname=django-rest-framework
+pkgver=3.14.0
+pkgrel=0
+pkgdesc="Web APIs for Django"
+url="https://github.com/encode/django-rest-framework"
+arch="noarch"
+license="Custom"
+depends="
+	py3-django
+	py3-tz
+"
+makedepends="
+	py3-setuptools
+	py3-gpep517
+	py3-wheel
+"
+checkdepends="
+	py3-pytest-django
+	py3-pytest-cov
+	py3-core-api
+	py3-jinja2
+	py3-uritemplate
+	py3-django-guardian
+	py3-psycopg2
+	py3-markdown
+	py3-yaml
+	py3-inflection
+"
+subpackages="$pkgname-pyc"
+source="$pkgname-$pkgver.tar.gz::https://github.com/encode/$_pkgname/archive/$pkgver.tar.gz"
+options="!check" # Failing tests
+builddir="$srcdir"/$_pkgname-$pkgver
+
+build() {
+	gpep517 build-wheel \
+		--wheel-dir .dist \
+		--output-fd 3 3>&1 >&2
+}
+
+check() {
+	python3 -m venv --clear --without-pip --system-site-packages .testenv
+	.testenv/bin/python3 -m installer "$builddir"/.dist/*.whl
+	# test_urlpatterns: AssertionError: assert [<URLPattern ''>] is not [<URLPattern ''>]
+	# test_markdown: rather hard to decipher assertion error
+	.testenv/bin/python3 -m pytest -v -k 'not test_urlpatterns and not test_markdown'
+}
+
+package() {
+	python3 -m installer -d "$pkgdir" \
+		.dist/*.whl
+}
+
+sha512sums="
+c1012c656b427e0318b2056e2f984ddc75a5b4e85f375c76fba165ad06e285848eee1bc6dc76c097daec57d780efb2551110199d62ce636a03951aec13ab4013  py3-django-rest-framework-3.14.0.tar.gz
+"

user/py3-django-tenants/APKBUILD

@@ -0,0 +1,43 @@
+# Contributor: Antoine Martin (ayakael) <dev@ayakael.net>
+# Maintainer: Antoine Martin (ayakael) <dev@ayakael.net>
+pkgname=py3-django-tenants
+#_pkgreal is used by apkbuild-pypi to find modules at PyPI
+_pkgreal=django-tenants
+pkgver=3.6.1
+pkgrel=0
+pkgdesc="Tenant support for Django using PostgreSQL schemas."
+url="https://pypi.python.org/project/django-tenants"
+arch="noarch"
+license="KIT"
+depends="py3-django py3-psycopg py3-gunicorn py3-coverage"
+checkdepends="python3-dev py3-pytest"
+makedepends="py3-setuptools py3-gpep517 py3-wheel"
+source="
+	$pkgname-$pkgver.tar.gz::https://codeload.github.com/django-tenants/django-tenants/tar.gz/refs/tags/v$pkgver
+	997_update-from-pgclone-schema.patch
+	"
+builddir="$srcdir/$_pkgreal-$pkgver"
+options="!check" # Requires setting up test database
+subpackages="$pkgname-pyc"
+
+build() {
+	gpep517 build-wheel \
+		--wheel-dir .dist \
+		--output-fd 3 3>&1 >&2
+}
+
+check() {
+	python3 -m venv --clear --without-pip --system-site-packages .testenv
+	.testenv/bin/python3 -m installer .dist/*.whl
+	DJANGO_SETTINGS_MODULE=tests.settings .testenv/bin/python3 -m pytest -v
+}
+
+package() {
+	python3 -m installer -d "$pkgdir" \
+		.dist/*.whl
+}
+
+sha512sums="
+b18afce81ccc89e49fcc4ebe85d90be602415ca898c1660a4e71e2bef6a3ed2e8c724e94b61d8c6f48f3fb19eb2a87d6a6f5bbf449b3e2f661f87e4b5638eafb  py3-django-tenants-3.6.1.tar.gz
+f2424bb188db2e3c7d13c15e5bdf0959c6f794e68dbc677c8b876d4faa321f78aded5565539f1bfd97583c6df0fcc19ec05abe203b08407e4446dd7194756825  997_update-from-pgclone-schema.patch
+"

user/py3-scim2-filter-parser/APKBUILD

@@ -0,0 +1,38 @@
+# Contributor: Antoine Martin (ayakael) <dev@ayakael.net>
+# Maintainer: Antoine Martin (ayakael) <dev@ayakael.net>
+pkgname=py3-scim2-filter-parser
+#_pkgreal is used by apkbuild-pypi to find modules at PyPI
+_pkgreal=scim2-filter-parser
+pkgver=0.5.0
+pkgrel=0
+pkgdesc="A customizable parser/transpiler for SCIM2.0 filters"
+url="https://pypi.python.org/project/scim2-filter-parser"
+arch="noarch"
+license="MIT"
+depends="py3-django py3-sly"
+checkdepends="py3-pytest"
+makedepends="py3-setuptools py3-gpep517 py3-wheel poetry"
+source="$pkgname-$pkgver.tar.gz::https://github.com/15five/scim2-filter-parser/archive/refs/tags/$pkgver.tar.gz"
+builddir="$srcdir/$_pkgreal-$pkgver"
+subpackages="$pkgname-pyc"
+
+build() {
+	gpep517 build-wheel \
+		--wheel-dir .dist \
+		--output-fd 3 3>&1 >&2
+}
+
+check() {
+	python3 -m venv --clear --without-pip --system-site-packages .testenv
+	.testenv/bin/python3 -m installer .dist/*.whl
+	.testenv/bin/python3 -m pytest -v
+}
+
+package() {
+	python3 -m installer -d "$pkgdir" \
+		.dist/*.whl
+}
+
+sha512sums="
+5347852af6b82a764a32bc491a7e0f05f06b4f4d93dfa375668b5ca1a15ee58f488702536e350100fe5c96a5c94c492ea8cbd0e1952c5920d5a10e1453357f8c  py3-scim2-filter-parser-0.5.0.tar.gz
+"

user/py3-tenant-schemas-celery/APKBUILD

@@ -0,0 +1,41 @@
+# Contributor: Antoine Martin (ayakael) <dev@ayakael.net>
+# Maintainer: Antoine Martin (ayakael) <dev@ayakael.net>
+pkgname=py3-tenant-schemas-celery
+#_pkgreal is used by apkbuild-pypi to find modules at PyPI
+_pkgreal=tenant-schemas-celery
+pkgver=2.2.0
+pkgrel=0
+pkgdesc="Celery integration for django-tenant-schemas and django-tenants"
+url="https://pypi.python.org/project/tenant-schemas-celery"
+arch="noarch"
+license="MIT"
+depends="py3-django-tenants py3-celery"
+checkdepends="python3-dev py3-pytest"
+makedepends="py3-setuptools py3-gpep517 py3-wheel"
+source="
+	$pkgname-$pkgver.tar.gz::https://codeload.github.com/maciej-gol/tenant-schemas-celery/tar.gz/refs/tags/$pkgver
+	"
+options="!check" # Test suite wants docker
+builddir="$srcdir/$_pkgreal-$pkgver"
+subpackages="$pkgname-pyc"
+
+build() {
+	gpep517 build-wheel \
+		--wheel-dir .dist \
+		--output-fd 3 3>&1 >&2
+}
+
+check() {
+	python3 -m venv --clear --without-pip --system-site-packages .testenv
+	.testenv/bin/python3 -m installer .dist/*.whl
+	DJANGO_SETTINGS_MODULE=tests.settings .testenv/bin/python3 -m pytest -v
+}
+
+package() {
+	python3 -m installer -d "$pkgdir" \
+		.dist/*.whl
+}
+
+sha512sums="
+dad71011306936dc84d966797b113008780750e9e973513092bec892be0d1468e0a0e7e8e2fcca9765309a27767e1c72bdaad7c8aca16353ae1eef783c239148  py3-tenant-schemas-celery-2.2.0.tar.gz
+"