authentik-api 2026.2.3 → 2026.5.0.rc2

data/lib/authentik/api/models/native_logout_challenge.rb

@@ -16,19 +16,43 @@ module Authentik::Api
 
     attr_accessor :response_errors
 
+    attr_accessor :provider_name
+
+    attr_accessor :is_complete
+
     attr_accessor :post_url
 
+    attr_accessor :redirect_url
+
+    attr_accessor :saml_binding
+
     attr_accessor :saml_request
 
-    attr_accessor :relay_state
+    attr_accessor :saml_response
 
-    attr_accessor :provider_name
+    attr_accessor :saml_relay_state
 
-    attr_accessor :binding
+    class EnumAttributeValidator
+      attr_reader :datatype
+      attr_reader :allowable_values
 
-    attr_accessor :redirect_url
+      def initialize(datatype, allowable_values)
+        @allowable_values = allowable_values.map do |value|
+          case datatype.to_s
+          when /Integer/i
+            value.to_i
+          when /Float/i
+            value.to_f
+          else
+            value
+          end
+        end
+      end
 
-    attr_accessor :is_complete
+      def valid?(value)
+        !value || allowable_values.include?(value)
+      end
+    end
 
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
@@ -36,13 +60,14 @@ module Authentik::Api
         :'flow_info' => :'flow_info',
         :'component' => :'component',
         :'response_errors' => :'response_errors',
-        :'post_url' => :'post_url',
-        :'saml_request' => :'saml_request',
-        :'relay_state' => :'relay_state',
         :'provider_name' => :'provider_name',
-        :'binding' => :'binding',
+        :'is_complete' => :'is_complete',
+        :'post_url' => :'post_url',
         :'redirect_url' => :'redirect_url',
-        :'is_complete' => :'is_complete'
+        :'saml_binding' => :'saml_binding',
+        :'saml_request' => :'saml_request',
+        :'saml_response' => :'saml_response',
+        :'saml_relay_state' => :'saml_relay_state'
       }
     end
 
@@ -62,13 +87,14 @@ module Authentik::Api
         :'flow_info' => :'ContextualFlowInfo',
         :'component' => :'String',
         :'response_errors' => :'Hash<String, Array<ErrorDetail>>',
-        :'post_url' => :'String',
-        :'saml_request' => :'String',
-        :'relay_state' => :'String',
         :'provider_name' => :'String',
-        :'binding' => :'String',
+        :'is_complete' => :'Boolean',
+        :'post_url' => :'String',
         :'redirect_url' => :'String',
-        :'is_complete' => :'Boolean'
+        :'saml_binding' => :'SAMLBindingsEnum',
+        :'saml_request' => :'String',
+        :'saml_response' => :'String',
+        :'saml_relay_state' => :'String'
       }
     end
 
@@ -110,34 +136,38 @@ module Authentik::Api
         end
       end
 
-      if attributes.key?(:'post_url')
-        self.post_url = attributes[:'post_url']
+      if attributes.key?(:'provider_name')
+        self.provider_name = attributes[:'provider_name']
       end
 
-      if attributes.key?(:'saml_request')
-        self.saml_request = attributes[:'saml_request']
+      if attributes.key?(:'is_complete')
+        self.is_complete = attributes[:'is_complete']
+      else
+        self.is_complete = false
       end
 
-      if attributes.key?(:'relay_state')
-        self.relay_state = attributes[:'relay_state']
+      if attributes.key?(:'post_url')
+        self.post_url = attributes[:'post_url']
       end
 
-      if attributes.key?(:'provider_name')
-        self.provider_name = attributes[:'provider_name']
+      if attributes.key?(:'redirect_url')
+        self.redirect_url = attributes[:'redirect_url']
       end
 
-      if attributes.key?(:'binding')
-        self.binding = attributes[:'binding']
+      if attributes.key?(:'saml_binding')
+        self.saml_binding = attributes[:'saml_binding']
       end
 
-      if attributes.key?(:'redirect_url')
-        self.redirect_url = attributes[:'redirect_url']
+      if attributes.key?(:'saml_request')
+        self.saml_request = attributes[:'saml_request']
       end
 
-      if attributes.key?(:'is_complete')
-        self.is_complete = attributes[:'is_complete']
-      else
-        self.is_complete = false
+      if attributes.key?(:'saml_response')
+        self.saml_response = attributes[:'saml_response']
+      end
+
+      if attributes.key?(:'saml_relay_state')
+        self.saml_relay_state = attributes[:'saml_relay_state']
       end
     end
 
@@ -164,13 +194,14 @@ module Authentik::Api
           flow_info == o.flow_info &&
           component == o.component &&
           response_errors == o.response_errors &&
-          post_url == o.post_url &&
-          saml_request == o.saml_request &&
-          relay_state == o.relay_state &&
           provider_name == o.provider_name &&
-          binding == o.binding &&
+          is_complete == o.is_complete &&
+          post_url == o.post_url &&
           redirect_url == o.redirect_url &&
-          is_complete == o.is_complete
+          saml_binding == o.saml_binding &&
+          saml_request == o.saml_request &&
+          saml_response == o.saml_response &&
+          saml_relay_state == o.saml_relay_state
     end
 
     # @see the `==` method
@@ -182,7 +213,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [flow_info, component, response_errors, post_url, saml_request, relay_state, provider_name, binding, redirect_url, is_complete].hash
+      [flow_info, component, response_errors, provider_name, is_complete, post_url, redirect_url, saml_binding, saml_request, saml_response, saml_relay_state].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/notification_transport.rb

@@ -21,6 +21,9 @@ module Authentik::Api
 
     attr_accessor :webhook_url
 
+    # When set, the selected ceritifcate is used to validate the certificate of the webhook server.
+    attr_accessor :webhook_ca
+
     # Customize the body of the request. Mapping should return data that is JSON-serializable.
     attr_accessor :webhook_mapping_body
 
@@ -64,6 +67,7 @@ module Authentik::Api
         :'mode' => :'mode',
         :'mode_verbose' => :'mode_verbose',
         :'webhook_url' => :'webhook_url',
+        :'webhook_ca' => :'webhook_ca',
         :'webhook_mapping_body' => :'webhook_mapping_body',
         :'webhook_mapping_headers' => :'webhook_mapping_headers',
         :'email_subject_prefix' => :'email_subject_prefix',
@@ -87,9 +91,10 @@ module Authentik::Api
       {
         :'pk' => :'String',
         :'name' => :'String',
-        :'mode' => :'NotificationTransportModeEnum',
+        :'mode' => :'TransportModeEnum',
         :'mode_verbose' => :'String',
         :'webhook_url' => :'String',
+        :'webhook_ca' => :'String',
         :'webhook_mapping_body' => :'String',
         :'webhook_mapping_headers' => :'String',
         :'email_subject_prefix' => :'String',
@@ -101,6 +106,7 @@ module Authentik::Api
     # List of attributes with nullable: true
     def self.openapi_nullable
       Set.new([
+        :'webhook_ca',
         :'webhook_mapping_body',
         :'webhook_mapping_headers',
       ])
@@ -148,6 +154,10 @@ module Authentik::Api
         self.webhook_url = attributes[:'webhook_url']
       end
 
+      if attributes.key?(:'webhook_ca')
+        self.webhook_ca = attributes[:'webhook_ca']
+      end
+
       if attributes.key?(:'webhook_mapping_body')
         self.webhook_mapping_body = attributes[:'webhook_mapping_body']
       end
@@ -239,6 +249,7 @@ module Authentik::Api
           mode == o.mode &&
           mode_verbose == o.mode_verbose &&
           webhook_url == o.webhook_url &&
+          webhook_ca == o.webhook_ca &&
           webhook_mapping_body == o.webhook_mapping_body &&
           webhook_mapping_headers == o.webhook_mapping_headers &&
           email_subject_prefix == o.email_subject_prefix &&
@@ -255,7 +266,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, mode, mode_verbose, webhook_url, webhook_mapping_body, webhook_mapping_headers, email_subject_prefix, email_template, send_once].hash
+      [pk, name, mode, mode_verbose, webhook_url, webhook_ca, webhook_mapping_body, webhook_mapping_headers, email_subject_prefix, email_template, send_once].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/notification_transport_request.rb

@@ -16,6 +16,9 @@ module Authentik::Api
 
     attr_accessor :webhook_url
 
+    # When set, the selected ceritifcate is used to validate the certificate of the webhook server.
+    attr_accessor :webhook_ca
+
     # Customize the body of the request. Mapping should return data that is JSON-serializable.
     attr_accessor :webhook_mapping_body
 
@@ -57,6 +60,7 @@ module Authentik::Api
         :'name' => :'name',
         :'mode' => :'mode',
         :'webhook_url' => :'webhook_url',
+        :'webhook_ca' => :'webhook_ca',
         :'webhook_mapping_body' => :'webhook_mapping_body',
         :'webhook_mapping_headers' => :'webhook_mapping_headers',
         :'email_subject_prefix' => :'email_subject_prefix',
@@ -79,8 +83,9 @@ module Authentik::Api
     def self.openapi_types
       {
         :'name' => :'String',
-        :'mode' => :'NotificationTransportModeEnum',
+        :'mode' => :'TransportModeEnum',
         :'webhook_url' => :'String',
+        :'webhook_ca' => :'String',
         :'webhook_mapping_body' => :'String',
         :'webhook_mapping_headers' => :'String',
         :'email_subject_prefix' => :'String',
@@ -92,6 +97,7 @@ module Authentik::Api
     # List of attributes with nullable: true
     def self.openapi_nullable
       Set.new([
+        :'webhook_ca',
         :'webhook_mapping_body',
         :'webhook_mapping_headers',
       ])
@@ -127,6 +133,10 @@ module Authentik::Api
         self.webhook_url = attributes[:'webhook_url']
       end
 
+      if attributes.key?(:'webhook_ca')
+        self.webhook_ca = attributes[:'webhook_ca']
+      end
+
       if attributes.key?(:'webhook_mapping_body')
         self.webhook_mapping_body = attributes[:'webhook_mapping_body']
       end
@@ -214,6 +224,7 @@ module Authentik::Api
           name == o.name &&
           mode == o.mode &&
           webhook_url == o.webhook_url &&
+          webhook_ca == o.webhook_ca &&
           webhook_mapping_body == o.webhook_mapping_body &&
           webhook_mapping_headers == o.webhook_mapping_headers &&
           email_subject_prefix == o.email_subject_prefix &&
@@ -230,7 +241,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, mode, webhook_url, webhook_mapping_body, webhook_mapping_headers, email_subject_prefix, email_template, send_once].hash
+      [name, mode, webhook_url, webhook_ca, webhook_mapping_body, webhook_mapping_headers, email_subject_prefix, email_template, send_once].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/o_auth2_provider.rb

@@ -52,6 +52,8 @@ module Authentik::Api
     # Confidential clients are capable of maintaining the confidentiality of their credentials. Public clients are incapable
     attr_accessor :client_type
 
+    attr_accessor :grant_types
+
     attr_accessor :client_id
 
     attr_accessor :client_secret
@@ -134,6 +136,7 @@ module Authentik::Api
         :'verbose_name_plural' => :'verbose_name_plural',
         :'meta_model_name' => :'meta_model_name',
         :'client_type' => :'client_type',
+        :'grant_types' => :'grant_types',
         :'client_id' => :'client_id',
         :'client_secret' => :'client_secret',
         :'access_code_validity' => :'access_code_validity',
@@ -181,6 +184,7 @@ module Authentik::Api
         :'verbose_name_plural' => :'String',
         :'meta_model_name' => :'String',
         :'client_type' => :'ClientTypeEnum',
+        :'grant_types' => :'Array<GrantTypesEnum>',
         :'client_id' => :'String',
         :'client_secret' => :'String',
         :'access_code_validity' => :'String',
@@ -315,6 +319,12 @@ module Authentik::Api
         self.client_type = attributes[:'client_type']
       end
 
+      if attributes.key?(:'grant_types')
+        if (value = attributes[:'grant_types']).is_a?(Array)
+          self.grant_types = value
+        end
+      end
+
       if attributes.key?(:'client_id')
         self.client_id = attributes[:'client_id']
       end
@@ -596,6 +606,7 @@ module Authentik::Api
           verbose_name_plural == o.verbose_name_plural &&
           meta_model_name == o.meta_model_name &&
           client_type == o.client_type &&
+          grant_types == o.grant_types &&
           client_id == o.client_id &&
           client_secret == o.client_secret &&
           access_code_validity == o.access_code_validity &&
@@ -623,7 +634,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, component, assigned_application_slug, assigned_application_name, assigned_backchannel_application_slug, assigned_backchannel_application_name, verbose_name, verbose_name_plural, meta_model_name, client_type, client_id, client_secret, access_code_validity, access_token_validity, refresh_token_validity, refresh_token_threshold, include_claims_in_id_token, signing_key, encryption_key, redirect_uris, logout_uri, logout_method, sub_mode, issuer_mode, jwt_federation_sources, jwt_federation_providers].hash
+      [pk, name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, component, assigned_application_slug, assigned_application_name, assigned_backchannel_application_slug, assigned_backchannel_application_name, verbose_name, verbose_name_plural, meta_model_name, client_type, grant_types, client_id, client_secret, access_code_validity, access_token_validity, refresh_token_validity, refresh_token_threshold, include_claims_in_id_token, signing_key, encryption_key, redirect_uris, logout_uri, logout_method, sub_mode, issuer_mode, jwt_federation_sources, jwt_federation_providers].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/o_auth2_provider_request.rb

@@ -26,6 +26,8 @@ module Authentik::Api
     # Confidential clients are capable of maintaining the confidentiality of their credentials. Public clients are incapable
     attr_accessor :client_type
 
+    attr_accessor :grant_types
+
     attr_accessor :client_id
 
     attr_accessor :client_secret
@@ -99,6 +101,7 @@ module Authentik::Api
         :'invalidation_flow' => :'invalidation_flow',
         :'property_mappings' => :'property_mappings',
         :'client_type' => :'client_type',
+        :'grant_types' => :'grant_types',
         :'client_id' => :'client_id',
         :'client_secret' => :'client_secret',
         :'access_code_validity' => :'access_code_validity',
@@ -137,6 +140,7 @@ module Authentik::Api
         :'invalidation_flow' => :'String',
         :'property_mappings' => :'Array<String>',
         :'client_type' => :'ClientTypeEnum',
+        :'grant_types' => :'Array<GrantTypesEnum>',
         :'client_id' => :'String',
         :'client_secret' => :'String',
         :'access_code_validity' => :'String',
@@ -213,6 +217,12 @@ module Authentik::Api
         self.client_type = attributes[:'client_type']
       end
 
+      if attributes.key?(:'grant_types')
+        if (value = attributes[:'grant_types']).is_a?(Array)
+          self.grant_types = value
+        end
+      end
+
       if attributes.key?(:'client_id')
         self.client_id = attributes[:'client_id']
       end
@@ -504,6 +514,7 @@ module Authentik::Api
           invalidation_flow == o.invalidation_flow &&
           property_mappings == o.property_mappings &&
           client_type == o.client_type &&
+          grant_types == o.grant_types &&
           client_id == o.client_id &&
           client_secret == o.client_secret &&
           access_code_validity == o.access_code_validity &&
@@ -531,7 +542,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, client_type, client_id, client_secret, access_code_validity, access_token_validity, refresh_token_validity, refresh_token_threshold, include_claims_in_id_token, signing_key, encryption_key, redirect_uris, logout_uri, logout_method, sub_mode, issuer_mode, jwt_federation_sources, jwt_federation_providers].hash
+      [name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, client_type, grant_types, client_id, client_secret, access_code_validity, access_token_validity, refresh_token_validity, refresh_token_threshold, include_claims_in_id_token, signing_key, encryption_key, redirect_uris, logout_uri, logout_method, sub_mode, issuer_mode, jwt_federation_sources, jwt_federation_providers].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/operating_system.rb

@@ -110,8 +110,6 @@ module Authentik::Api
 
       if attributes.key?(:'arch')
         self.arch = attributes[:'arch']
-      else
-        self.arch = nil
       end
     end
 
@@ -124,10 +122,6 @@ module Authentik::Api
         invalid_properties.push('invalid value for "family", family cannot be nil.')
       end
 
-      if @arch.nil?
-        invalid_properties.push('invalid value for "arch", arch cannot be nil.')
-      end
-
       invalid_properties
     end
 
@@ -136,7 +130,6 @@ module Authentik::Api
     def valid?
       warn '[DEPRECATED] the `valid?` method is obsolete'
       return false if @family.nil?
-      return false if @arch.nil?
       true
     end
 
@@ -150,16 +143,6 @@ module Authentik::Api
       @family = family
     end
 
-    # Custom attribute writer method with validation
-    # @param [Object] arch Value to be assigned
-    def arch=(arch)
-      if arch.nil?
-        fail ArgumentError, 'arch cannot be nil'
-      end
-
-      @arch = arch
-    end
-
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)

data/lib/authentik/api/models/operating_system_request.rb

@@ -110,8 +110,6 @@ module Authentik::Api
 
       if attributes.key?(:'arch')
         self.arch = attributes[:'arch']
-      else
-        self.arch = nil
       end
     end
 
@@ -132,11 +130,7 @@ module Authentik::Api
         invalid_properties.push('invalid value for "version", the character length must be greater than or equal to 1.')
       end
 
-      if @arch.nil?
-        invalid_properties.push('invalid value for "arch", arch cannot be nil.')
-      end
-
-      if @arch.to_s.length < 1
+      if !@arch.nil? && @arch.to_s.length < 1
         invalid_properties.push('invalid value for "arch", the character length must be greater than or equal to 1.')
       end
 
@@ -150,8 +144,7 @@ module Authentik::Api
       return false if @family.nil?
       return false if !@name.nil? && @name.to_s.length < 1
       return false if !@version.nil? && @version.to_s.length < 1
-      return false if @arch.nil?
-      return false if @arch.to_s.length < 1
+      return false if !@arch.nil? && @arch.to_s.length < 1
       true
     end