providers/proxy: only intercept auth header when a value is set

[BeryJu]

Details

change the Authorization header setting logic to take into consideration if the username and password are empty from the user attributes are empty strings, and if so not change anything

closes #5846

---

Checklist

• Local tests pass (ak test authentik/)
• The code has been formatted (make lint-fix)

If an API change has been made

• The API schema has been updated (make gen-build)

If changes to the frontend have been made

• The code has been formatted (make web)
• The translation files have been updated (make i18n-extract)

If applicable

• The documentation has been updated
• The documentation has been formatted (make website)

[netlify]

✅ Deploy Preview for authentik-storybook canceled.

Name	Link
🔨 Latest commit	03338a6
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-storybook/deploys/64ced51b93168c0008041c2a

[codecov]

Codecov Report

Patch coverage has no change and project coverage change: +0.01% 🎉

Comparison is base (7124a62) 92.46% compared to head (03338a6) 92.46%.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #6488      +/-   ##
==========================================
+ Coverage   92.46%   92.46%   +0.01%     
==========================================
  Files         561      561              
  Lines       27081    27081              
==========================================
+ Hits        25037    25038       +1     
+ Misses       2044     2043       -1     

Flag	Coverage Δ
e2e	51.58% <ø> (-0.01%)	⬇️
integration	26.57% <ø> (ø)
unit	89.27% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

see 2 files with indirect coverage changes

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-providers-proxy-only-intercept-auth-when-required-1691277371-03338a6
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

For arm64, use these values:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-providers-proxy-only-intercept-auth-when-required-1691277371-03338a6-arm64
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
image:
    repository: ghcr.io/goauthentik/dev-server
    tag: gh-providers-proxy-only-intercept-auth-when-required-1691277371-03338a6

For arm64, use these values:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
image:
    repository: ghcr.io/goauthentik/dev-server
    tag: gh-providers-proxy-only-intercept-auth-when-required-1691277371-03338a6-arm64

Afterwards, run the upgrade commands from the latest release notes.