December 2025 Summaries
2 posts from Authentik Security
Filter
Month:
Year:
Post Summaries
Back to Blog
Authentik, an open-source Identity Provider, is improving its file management system by transitioning from Django's built-in storage backend to a more robust and centralized pluggable backend system. This update addresses previous limitations, such as the inability to delete S3 files and lack of file visibility and mapping, by introducing four distinct backends: FileBackend for local storage, S3Backend for S3-compatible storage, StaticBackend for read-only static assets, and PassthroughBackend for external URLs. The new system simplifies file management through a unified API and consistent file picker, enhances security with role-based access control (RBAC) for files, and offers flexible storage options tailored to specific needs. The changes aim to streamline administrative tasks and improve the overall workflow for authentik administrators, with feedback encouraged via GitHub, Discord, or email.
Dec 19, 2025
661 words in the original blog post.
Authentik, an open-source Identity Provider, is exploring the role of AI in its development process while maintaining transparency and human oversight. In light of an incident involving Okta's use of AI, the Authentik team engaged in a candid discussion about their individual and collective use of AI tools like Claude and Copilot, emphasizing that while AI can assist in tasks such as generating boilerplate code or overcoming writer's block, the team ultimately relies on human judgment and expertise for significant decisions and coding tasks. The organization is committed to not integrating AI features indiscriminately into their product and ensures that interactions with their community remain human-led. The team is still deliberating on creating guidelines for AI use, both internally and for community contributors, while inviting feedback from their users on this evolving topic.
Dec 10, 2025
1,126 words in the original blog post.