authentik: Fix runtime errors

[B4dM4n]

Description of changes

This fixes three runtime errors that prevent authentik from running currently.

• djangorestframework v3.15 introduced a regression, that prevents authentik from applying some blueprints, so downgrade to 3.14.0. See 3.15 regression: Serializer validation failed for unique together constraint  encode/django-rest-framework#9358

• Fix scim schema loading from a relative path. If the working directory for the service is not set correctly, this would fail otherwise.

• Add required uvicorn[standard] dependencies, as defined in the pyproject.toml. Without them, gunicorn fails to start.

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
• Interactive test, completing the initial-setup flow:

nix run git+https://gist.github.com/615c73b304b0a20c91deeba22445e778.git \
  --override-input nixpkgs github:B4dM4n/nixpkgs/ef90a00913b67d6d24485c06cfcd6346796b73d8

• NixOS test(s) (look inside nixos/tests)
• and/or package tests
• or, for functions and "core" functionality, tests in lib/tests or pkgs/test
• made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

---

Add a 👍 reaction to pull requests you find important.

[rissson]

Upstream fix for scim: goauthentik/authentik#10574

[B4dM4n]

The upstream patch is now included.

Thanks to @rissson for handling the upstream change.

[pbsbot]

Result of nixpkgs-review pr 329151 run on x86_64-linux 1

1 package built:

• authentik