security: fix CVE-2024-38371 (cherry-pick #10229)

[rissson]

Details

REPLACE ME

---

Checklist

• Local tests pass (ak test authentik/)
• The code has been formatted (make lint-fix)

If an API change has been made

• The API schema has been updated (make gen-build)

If changes to the frontend have been made

• The code has been formatted (make web)

If applicable

• The documentation has been updated
• The documentation has been formatted (make website)

[netlify]

✅ Deploy Preview for authentik-docs canceled.

Name	Link
🔨 Latest commit	99daff6
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-docs/deploys/667be0fe07457c0008fcd38d

[codecov]

Codecov Report

Attention: Patch coverage is 81.25000% with 9 lines in your changes missing coverage. Please review.

Project coverage is 92.37%. Comparing base (6bb180f) to head (99daff6).

Files	Patch %	Lines
authentik/providers/oauth2/views/device_init.py	73.52%	9 Missing ⚠️

Additional details and impacted files

@@                Coverage Diff                 @@
##           version-2024.2   #10235      +/-   ##
==================================================
+ Coverage           92.35%   92.37%   +0.01%     
==================================================
  Files                 631      631              
  Lines               31238    31252      +14     
==================================================
+ Hits                28851    28868      +17     
+ Misses               2387     2384       -3     

Flag	Coverage Δ
e2e	50.77% <22.91%> (+<0.01%)	⬆️
integration	26.18% <0.00%> (-0.02%)	⬇️
unit	89.69% <81.25%> (+0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.