sysd: windows fixes (#406)

BeryJu · web-flow · commit d2a861fc88e1 · 2025-11-11T13:03:11.000+01:00
* fix msi paths in registry

* fix pam not running on windows

* fix event logs

* bump
diff --git a/browser-ext/manifest.json b/browser-ext/manifest.json
@@ -2,7 +2,7 @@
     "$schema": "https://json.schemastore.org/chrome-manifest",
     "manifest_version": 3,
     "name": "authentik Platform SSO Extension",
-    "version": "0.19.0",
+    "version": "0.20.0",
     "description": "authentik Browser extension for seamless SSO and to launch applications.",
     "permissions": ["storage", "activeTab", "nativeMessaging"],
     "background": {
diff --git a/browser-ext/package-lock.json b/browser-ext/package-lock.json
diff --git a/browser-ext/package.json b/browser-ext/package.json
@@ -1,6 +1,6 @@
 {
     "name": "authentik-browser-ext",
-    "version": "0.19.0",
+    "version": "0.20.0",
     "description": "Authentik Application Launcher Chrome Extension",
     "scripts": {
         "build": "rollup -c",
diff --git a/browser-ext/src/version.ts b/browser-ext/src/version.ts
@@ -1 +1 @@
-export const VERSION = "0.19.0";
+export const VERSION = "0.20.0";
diff --git a/cmd/agent_local/package/macos/authentik Agent.app/Contents/Info.plist b/cmd/agent_local/package/macos/authentik Agent.app/Contents/Info.plist
@@ -11,9 +11,9 @@
 	<key>CFBundleIdentifier</key>
 	<string>io.goauthentik.platform.agent</string>
 	<key>CFBundleShortVersionString</key>
-	<string>0.19.0</string>
+	<string>0.20.0</string>
 	<key>CFBundleVersion</key>
-	<string>0.19.0</string>
+	<string>0.20.0</string>
 	<key>LSMinimumSystemVersion</key>
 	<string>15.0</string>
 	<key>LSUIElement</key>
diff --git a/cmd/agent_local/package/windows/Package.wxs b/cmd/agent_local/package/windows/Package.wxs
@@ -45,7 +45,8 @@
         <File Id="ak_sysd_config"
               Source="$(env.ROOT)/cmd/agent_system/package/windows/config.json" />
 
-        <util:EventSource Log="Application"
+        <RegistryKey Root="HKLM" Key="SYSTEM\CurrentControlSet\Services\EventLog\authentik" />
+        <util:EventSource Log="authentik"
                           Name="authentik System Service"
                           EventMessageFile="[System64Folder]EventCreate.exe"/>
 
@@ -80,18 +81,21 @@
               Source="$(env.PWD)/package/windows/browser-host.json" />
         <RegistryKey Root="HKLM"
                     Key="SOFTWARE\Google\Chrome\NativeMessagingHosts\io.goauthentik.platform">
-          <RegistryValue Type="string" Value="[INSTALLFOLDER]browser-host.json"/>
+          <RegistryValue Type="string" Value="[browser_support]browser-host.json"/>
         </RegistryKey>
         <RegistryKey Root="HKLM"
                     Key="SOFTWARE\Microsoft\Edge\NativeMessagingHosts\io.goauthentik.platform">
-          <RegistryValue Type="string" Value="[INSTALLFOLDER]browser-host.json"/>
+          <RegistryValue Type="string" Value="[browser_support]browser-host.json"/>
         </RegistryKey>
         <RegistryKey Root="HKLM"
                     Key="Software\Mozilla\NativeMessagingHosts\io.goauthentik.platform">
-          <RegistryValue Type="string" Value="[INSTALLFOLDER]browser-host.json"/>
+          <RegistryValue Type="string" Value="[browser_support]browser-host.json"/>
         </RegistryKey>
       </Component>
       <Component Id="credential_provider" Guid="4e4c21de-2c3e-4dc0-9a10-42fcd0fd68e1" Bitness="always64" Directory="wcp">
+        <util:EventSource Log="authentik"
+                  Name="authentik Credential Provider"
+                  EventMessageFile="C:\Windows\System32\mscoree.dll"/>
         <File Id="wcp_cefexe_exe" Source="$(env.ROOT)/bin/wcp/cefexe.exe" />
         <File Id="wcp_chrome_100_percent_pak" Source="$(env.ROOT)/bin/wcp/chrome_100_percent.pak" />
         <File Id="wcp_chrome_200_percent_pak" Source="$(env.ROOT)/bin/wcp/chrome_200_percent.pak" />
@@ -120,7 +124,7 @@
         <RegistryKey Root="HKCR"
                     Key="CLSID\{7BCC7941-18BA-4A8E-8E0A-1D0F8E73577A}">
           <RegistryValue Type="string" Value="authentik Credential Provider" />
-          <RegistryValue Key="InprocServer32" Type="string" Value="[INSTALLFOLDER]ak_cred_provider.dll" />
+          <RegistryValue Key="InprocServer32" Type="string" Value="[wcp]ak_cred_provider.dll" />
           <RegistryValue Key="InprocServer32" Type="string" Name="ThreadingModel" Value="Apartment" />
         </RegistryKey>
       </Component>
diff --git a/common.mk b/common.mk
@@ -3,7 +3,7 @@ SHELL = /bin/bash
 PWD = $(shell pwd)
 UID = $(shell id -u)
 GID = $(shell id -g)
-VERSION = "0.19.0"
+VERSION = "0.20.0"
 VERSION_HASH = $(shell git rev-parse HEAD)
 ifeq ($(OS),Windows_NT)
 ARCH := $(PROCESSOR_ARCHITEW6432)
diff --git a/ee/psso/PSSO/Info.plist b/ee/psso/PSSO/Info.plist
@@ -17,7 +17,7 @@
 	<key>CFBundlePackageType</key>
 	<string>$(PRODUCT_BUNDLE_PACKAGE_TYPE)</string>
 	<key>CFBundleShortVersionString</key>
-	<string>0.19.0</string>
+	<string>0.20.0</string>
 	<key>CFBundleURLTypes</key>
 	<array>
 		<dict>
@@ -28,7 +28,7 @@
 		</dict>
 	</array>
 	<key>CFBundleVersion</key>
-	<string>0.19.0</string>
+	<string>0.20.0</string>
 	<key>LSMinimumSystemVersion</key>
 	<string>$(MACOSX_DEPLOYMENT_TARGET)</string>
 	<key>NSExtension</key>
diff --git a/ee/wcp/ak_cred_provider/include/ak_version.h b/ee/wcp/ak_cred_provider/include/ak_version.h
@@ -1,3 +1,3 @@
 #pragma once
 
-#define AK_WCP_VERSION "0.19.0"
+#define AK_WCP_VERSION "0.20.0"
diff --git a/nss/Cargo.lock b/nss/Cargo.lock
diff --git a/nss/Cargo.toml b/nss/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "authentik_nss"
-version = "0.19.0"
+version = "0.20.0"
 edition = "2024"
 license = "MIT"
 description = "NSS module for authentik"
diff --git a/pam/Cargo.lock b/pam/Cargo.lock
diff --git a/pam/Cargo.toml b/pam/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "authentik_pam"
-version = "0.19.0"
+version = "0.20.0"
 edition = "2024"
 license = "MIT"
 description = "libpam-authentik authenticates users through authentik."
diff --git a/pkg/agent_system/cli/agent.go b/pkg/agent_system/cli/agent.go
@@ -29,7 +29,8 @@ var agentCmd = &cobra.Command{
 			return errors.Wrap(err, "failed to check runtime directory")
 		}
 		err = systemlog.Setup(pstr.PlatformString{
-			Windows: pstr.S("authentik Sysd"),
+			// Needs to match event log name in Package.wxs
+			Windows: pstr.S("authentik System Service"),
 			Linux:   pstr.S("ak-sysd"),
 		}.ForCurrent())
 		if err != nil {
diff --git a/pkg/agent_system/components_darwin.go b/pkg/agent_system/components_darwin.go
@@ -1,4 +1,4 @@
-//go:build !linux
+//go:build darwin
 
 package agentsystem
 
diff --git a/pkg/agent_system/components_windows.go b/pkg/agent_system/components_windows.go
@@ -0,0 +1,20 @@
+//go:build windows
+
+package agentsystem
+
+import (
+	"goauthentik.io/platform/pkg/agent_system/component"
+	"goauthentik.io/platform/pkg/agent_system/device"
+	"goauthentik.io/platform/pkg/agent_system/pam"
+	"goauthentik.io/platform/pkg/agent_system/ping"
+	"goauthentik.io/platform/pkg/agent_system/session"
+)
+
+func (sm *SystemAgent) RegisterPlatformComponents() map[string]component.Constructor {
+	return map[string]component.Constructor{
+		device.ID:  device.NewServer,
+		session.ID: session.NewMonitor,
+		pam.ID:     pam.NewServer,
+		ping.ID:    ping.NewServer,
+	}
+}
diff --git a/pkg/platform/log/logs_darwin.go b/pkg/platform/log/logs_darwin.go
diff --git a/pkg/platform/log/logs_windows.go b/pkg/platform/log/logs_windows.go
@@ -35,6 +35,8 @@ func (e *eventLogHook) Levels() []log.Level {
 	}
 }
 
+const windowsEventID = 1000
+
 func (e *eventLogHook) Fire(entry *log.Entry) error {
 	msg := entry.Message
 	if len(entry.Data) > 0 {
@@ -47,14 +49,14 @@ func (e *eventLogHook) Fire(entry *log.Entry) error {
 	}
 	switch entry.Level {
 	case log.InfoLevel:
-		return e.log.Info(1, msg)
+		return e.log.Info(windowsEventID, msg)
 	case log.WarnLevel:
-		return e.log.Warning(1, msg)
+		return e.log.Warning(windowsEventID, msg)
 	case log.ErrorLevel:
-		return e.log.Error(1, msg)
+		return e.log.Error(windowsEventID, msg)
 	default:
 		// Fallback to info if we don't have a level-mapping
-		return e.log.Info(1, msg)
+		return e.log.Info(windowsEventID, msg)
 	}
 }
 

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "authentik-browser-ext",`
`3`		`- "version": "0.19.0",`
	`3`	`+ "version": "0.20.0",`
`4`	`4`	`"description": "Authentik Application Launcher Chrome Extension",`
`5`	`5`	`"scripts": {`
`6`	`6`	`"build": "rollup -c",`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-export const VERSION = "0.19.0";`
	`1`	`+export const VERSION = "0.20.0";`
Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,3 @@`
`1`	`1`	`#pragma once`
`2`	`2`
`3`		`-#define AK_WCP_VERSION "0.19.0"`
	`3`	`+#define AK_WCP_VERSION "0.20.0"`