authentik-api 2026.2.7 → 2026.5.0.rc1

data/lib/authentik/api/models/brand.rb

@@ -39,6 +39,8 @@ module Authentik::Api
 
     attr_accessor :flow_device_code
 
+    attr_accessor :flow_lockdown
+
     # When set, external users will be redirected to this application after authenticating.
     attr_accessor :default_application
 
@@ -67,6 +69,7 @@ module Authentik::Api
         :'flow_unenrollment' => :'flow_unenrollment',
         :'flow_user_settings' => :'flow_user_settings',
         :'flow_device_code' => :'flow_device_code',
+        :'flow_lockdown' => :'flow_lockdown',
         :'default_application' => :'default_application',
         :'web_certificate' => :'web_certificate',
         :'client_certificates' => :'client_certificates',
@@ -101,6 +104,7 @@ module Authentik::Api
         :'flow_unenrollment' => :'String',
         :'flow_user_settings' => :'String',
         :'flow_device_code' => :'String',
+        :'flow_lockdown' => :'String',
         :'default_application' => :'String',
         :'web_certificate' => :'String',
         :'client_certificates' => :'Array<String>',
@@ -117,6 +121,7 @@ module Authentik::Api
         :'flow_unenrollment',
         :'flow_user_settings',
         :'flow_device_code',
+        :'flow_lockdown',
         :'default_application',
         :'web_certificate',
       ])
@@ -198,6 +203,10 @@ module Authentik::Api
         self.flow_device_code = attributes[:'flow_device_code']
       end
 
+      if attributes.key?(:'flow_lockdown')
+        self.flow_lockdown = attributes[:'flow_lockdown']
+      end
+
       if attributes.key?(:'default_application')
         self.default_application = attributes[:'default_application']
       end
@@ -283,6 +292,7 @@ module Authentik::Api
           flow_unenrollment == o.flow_unenrollment &&
           flow_user_settings == o.flow_user_settings &&
           flow_device_code == o.flow_device_code &&
+          flow_lockdown == o.flow_lockdown &&
           default_application == o.default_application &&
           web_certificate == o.web_certificate &&
           client_certificates == o.client_certificates &&
@@ -298,7 +308,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [brand_uuid, domain, default, branding_title, branding_logo, branding_favicon, branding_custom_css, branding_default_flow_background, flow_authentication, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, default_application, web_certificate, client_certificates, attributes].hash
+      [brand_uuid, domain, default, branding_title, branding_logo, branding_favicon, branding_custom_css, branding_default_flow_background, flow_authentication, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, flow_lockdown, default_application, web_certificate, client_certificates, attributes].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/brand_request.rb

@@ -37,6 +37,8 @@ module Authentik::Api
 
     attr_accessor :flow_device_code
 
+    attr_accessor :flow_lockdown
+
     # When set, external users will be redirected to this application after authenticating.
     attr_accessor :default_application
 
@@ -64,6 +66,7 @@ module Authentik::Api
         :'flow_unenrollment' => :'flow_unenrollment',
         :'flow_user_settings' => :'flow_user_settings',
         :'flow_device_code' => :'flow_device_code',
+        :'flow_lockdown' => :'flow_lockdown',
         :'default_application' => :'default_application',
         :'web_certificate' => :'web_certificate',
         :'client_certificates' => :'client_certificates',
@@ -97,6 +100,7 @@ module Authentik::Api
         :'flow_unenrollment' => :'String',
         :'flow_user_settings' => :'String',
         :'flow_device_code' => :'String',
+        :'flow_lockdown' => :'String',
         :'default_application' => :'String',
         :'web_certificate' => :'String',
         :'client_certificates' => :'Array<String>',
@@ -113,6 +117,7 @@ module Authentik::Api
         :'flow_unenrollment',
         :'flow_user_settings',
         :'flow_device_code',
+        :'flow_lockdown',
         :'default_application',
         :'web_certificate',
       ])
@@ -188,6 +193,10 @@ module Authentik::Api
         self.flow_device_code = attributes[:'flow_device_code']
       end
 
+      if attributes.key?(:'flow_lockdown')
+        self.flow_lockdown = attributes[:'flow_lockdown']
+      end
+
       if attributes.key?(:'default_application')
         self.default_application = attributes[:'default_application']
       end
@@ -342,6 +351,7 @@ module Authentik::Api
           flow_unenrollment == o.flow_unenrollment &&
           flow_user_settings == o.flow_user_settings &&
           flow_device_code == o.flow_device_code &&
+          flow_lockdown == o.flow_lockdown &&
           default_application == o.default_application &&
           web_certificate == o.web_certificate &&
           client_certificates == o.client_certificates &&
@@ -357,7 +367,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [domain, default, branding_title, branding_logo, branding_favicon, branding_custom_css, branding_default_flow_background, flow_authentication, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, default_application, web_certificate, client_certificates, attributes].hash
+      [domain, default, branding_title, branding_logo, branding_favicon, branding_custom_css, branding_default_flow_background, flow_authentication, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, flow_lockdown, default_application, web_certificate, client_certificates, attributes].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/certificate_key_pair.rb

@@ -100,7 +100,7 @@ module Authentik::Api
         :'cert_expiry' => :'Time',
         :'cert_subject' => :'String',
         :'private_key_available' => :'Boolean',
-        :'key_type' => :'KeyTypeEnum',
+        :'key_type' => :'CertificateKeyPairKeyTypeEnum',
         :'certificate_download_url' => :'String',
         :'private_key_download_url' => :'String',
         :'managed' => :'String'

data/lib/authentik/api/models/certificate_key_pair_key_type_enum.rb

@@ -0,0 +1,37 @@
+=begin
+This file is automatically generated by: https://openapi-generator.tech.
+Any manual changes will be lost when the OpenAPI scheme changes.
+
+=end
+
+require 'date'
+require 'time'
+
+module Authentik::Api
+  class CertificateKeyPairKeyTypeEnum
+    RSA = "rsa".freeze
+    EC = "ec".freeze
+    DSA = "dsa".freeze
+    ED25519 = "ed25519".freeze
+    ED448 = "ed448".freeze
+
+    def self.all_vars
+      @all_vars ||= [RSA, EC, DSA, ED25519, ED448].freeze
+    end
+
+    # Builds the enum from string
+    # @param [String] The enum value in the form of the string
+    # @return [String] The enum value
+    def self.build_from_hash(value)
+      new.build_from_hash(value)
+    end
+
+    # Builds the enum from string
+    # @param [String] The enum value in the form of the string
+    # @return [String] The enum value
+    def build_from_hash(value)
+      return value if CertificateKeyPairKeyTypeEnum.all_vars.include?(value)
+      raise "Invalid ENUM value #{value} for class #CertificateKeyPairKeyTypeEnum"
+    end
+  end
+end

data/lib/authentik/api/models/compatibility_mode_enum.rb

@@ -13,9 +13,11 @@ module Authentik::Api
     AWS = "aws".freeze
     SLACK = "slack".freeze
     SFDC = "sfdc".freeze
+    WEBEX = "webex".freeze
+    VCENTER = "vcenter".freeze
 
     def self.all_vars
-      @all_vars ||= [DEFAULT, AWS, SLACK, SFDC].freeze
+      @all_vars ||= [DEFAULT, AWS, SLACK, SFDC, WEBEX, VCENTER].freeze
     end
 
     # Builds the enum from string

data/lib/authentik/api/models/{consent_stage_mode_enum.rb → consent_mode_enum.rb}

@@ -8,7 +8,7 @@ require 'date'
 require 'time'
 
 module Authentik::Api
-  class ConsentStageModeEnum
+  class ConsentModeEnum
     ALWAYS_REQUIRE = "always_require".freeze
     PERMANENT = "permanent".freeze
     EXPIRING = "expiring".freeze
@@ -28,8 +28,8 @@ module Authentik::Api
     # @param [String] The enum value in the form of the string
     # @return [String] The enum value
     def build_from_hash(value)
-      return value if ConsentStageModeEnum.all_vars.include?(value)
-      raise "Invalid ENUM value #{value} for class #ConsentStageModeEnum"
+      return value if ConsentModeEnum.all_vars.include?(value)
+      raise "Invalid ENUM value #{value} for class #ConsentModeEnum"
     end
   end
 end

data/lib/authentik/api/models/consent_stage.rb

@@ -90,7 +90,7 @@ module Authentik::Api
         :'verbose_name_plural' => :'String',
         :'meta_model_name' => :'String',
         :'flow_set' => :'Array<FlowSet>',
-        :'mode' => :'ConsentStageModeEnum',
+        :'mode' => :'ConsentModeEnum',
         :'consent_expire_in' => :'String'
       }
     end

data/lib/authentik/api/models/consent_stage_request.rb

@@ -62,7 +62,7 @@ module Authentik::Api
     def self.openapi_types
       {
         :'name' => :'String',
-        :'mode' => :'ConsentStageModeEnum',
+        :'mode' => :'ConsentModeEnum',
         :'consent_expire_in' => :'String'
       }
     end

data/lib/authentik/api/models/country_code_enum.rb

@@ -60,7 +60,6 @@ module Authentik::Api
     CO = "CO".freeze
     KM = "KM".freeze
     CG = "CG".freeze
-    CD = "CD".freeze
     CK = "CK".freeze
     CR = "CR".freeze
     CI = "CI".freeze
@@ -69,6 +68,7 @@ module Authentik::Api
     CW = "CW".freeze
     CY = "CY".freeze
     CZ = "CZ".freeze
+    CD = "CD".freeze
     DK = "DK".freeze
     DJ = "DJ".freeze
     DM = "DM".freeze
@@ -107,7 +107,6 @@ module Authentik::Api
     GY = "GY".freeze
     HT = "HT".freeze
     HM = "HM".freeze
-    VA = "VA".freeze
     HN = "HN".freeze
     HK = "HK".freeze
     HU = "HU".freeze
@@ -249,6 +248,7 @@ module Authentik::Api
     UY = "UY".freeze
     UZ = "UZ".freeze
     VU = "VU".freeze
+    VA = "VA".freeze
     VE = "VE".freeze
     VN = "VN".freeze
     VG = "VG".freeze
@@ -260,7 +260,7 @@ module Authentik::Api
     ZW = "ZW".freeze
 
     def self.all_vars
-      @all_vars ||= [AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, CV, KH, CM, CA, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CD, CK, CR, CI, HR, CU, CW, CY, CZ, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, SZ, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, VA, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, KP, MK, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, KR, SS, ES, LK, SD, SR, SJ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, UM, US, UY, UZ, VU, VE, VN, VG, VI, WF, EH, YE, ZM, ZW].freeze
+      @all_vars ||= [AF, AX, AL, DZ, AS, AD, AO, AI, AQ, AG, AR, AM, AW, AU, AT, AZ, BS, BH, BD, BB, BY, BE, BZ, BJ, BM, BT, BO, BQ, BA, BW, BV, BR, IO, BN, BG, BF, BI, CV, KH, CM, CA, KY, CF, TD, CL, CN, CX, CC, CO, KM, CG, CK, CR, CI, HR, CU, CW, CY, CZ, CD, DK, DJ, DM, DO, EC, EG, SV, GQ, ER, EE, SZ, ET, FK, FO, FJ, FI, FR, GF, PF, TF, GA, GM, GE, DE, GH, GI, GR, GL, GD, GP, GU, GT, GG, GN, GW, GY, HT, HM, HN, HK, HU, IS, IN, ID, IR, IQ, IE, IM, IL, IT, JM, JP, JE, JO, KZ, KE, KI, KW, KG, LA, LV, LB, LS, LR, LY, LI, LT, LU, MO, MG, MW, MY, MV, ML, MT, MH, MQ, MR, MU, YT, MX, FM, MD, MC, MN, ME, MS, MA, MZ, MM, NA, NR, NP, NL, NC, NZ, NI, NE, NG, NU, NF, KP, MK, MP, NO, OM, PK, PW, PS, PA, PG, PY, PE, PH, PN, PL, PT, PR, QA, RE, RO, RU, RW, BL, SH, KN, LC, MF, PM, VC, WS, SM, ST, SA, SN, RS, SC, SL, SG, SX, SK, SI, SB, SO, ZA, GS, KR, SS, ES, LK, SD, SR, SJ, SE, CH, SY, TW, TJ, TZ, TH, TL, TG, TK, TO, TT, TN, TR, TM, TC, TV, UG, UA, AE, GB, UM, US, UY, UZ, VU, VA, VE, VN, VG, VI, WF, EH, YE, ZM, ZW].freeze
     end
 
     # Builds the enum from string

data/lib/authentik/api/models/current_brand.rb

@@ -40,6 +40,8 @@ module Authentik::Api
 
     attr_accessor :flow_device_code
 
+    attr_accessor :flow_lockdown
+
     attr_accessor :default_locale
 
     attr_accessor :flags
@@ -84,6 +86,7 @@ module Authentik::Api
         :'flow_unenrollment' => :'flow_unenrollment',
         :'flow_user_settings' => :'flow_user_settings',
         :'flow_device_code' => :'flow_device_code',
+        :'flow_lockdown' => :'flow_lockdown',
         :'default_locale' => :'default_locale',
         :'flags' => :'flags'
       }
@@ -117,6 +120,7 @@ module Authentik::Api
         :'flow_unenrollment' => :'String',
         :'flow_user_settings' => :'String',
         :'flow_device_code' => :'String',
+        :'flow_lockdown' => :'String',
         :'default_locale' => :'String',
         :'flags' => :'CurrentBrandFlags'
       }
@@ -226,6 +230,10 @@ module Authentik::Api
         self.flow_device_code = attributes[:'flow_device_code']
       end
 
+      if attributes.key?(:'flow_lockdown')
+        self.flow_lockdown = attributes[:'flow_lockdown']
+      end
+
       if attributes.key?(:'default_locale')
         self.default_locale = attributes[:'default_locale']
       else
@@ -409,6 +417,7 @@ module Authentik::Api
           flow_unenrollment == o.flow_unenrollment &&
           flow_user_settings == o.flow_user_settings &&
           flow_device_code == o.flow_device_code &&
+          flow_lockdown == o.flow_lockdown &&
           default_locale == o.default_locale &&
           flags == o.flags
     end
@@ -422,7 +431,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [matched_domain, branding_title, branding_logo, branding_logo_themed_urls, branding_favicon, branding_favicon_themed_urls, branding_custom_css, ui_footer_links, ui_theme, flow_authentication, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, default_locale, flags].hash
+      [matched_domain, branding_title, branding_logo, branding_logo_themed_urls, branding_favicon, branding_favicon_themed_urls, branding_custom_css, ui_footer_links, ui_theme, flow_authentication, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, flow_lockdown, default_locale, flags].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/current_brand_flags.rb

@@ -9,19 +9,23 @@ require 'time'
 
 module Authentik::Api
   class CurrentBrandFlags < ApiModelBase
-    attr_accessor :enterprise_audit_include_expanded_diff
+    # Configure if applications without any policy/group/user bindings should be accessible to any user.
+    attr_accessor :core_default_app_access
 
-    attr_accessor :policies_buffered_access_view
+    # Include additional information in audit logs, may incur a performance penalty.
+    attr_accessor :enterprise_audit_include_expanded_diff
 
+    # Upon successful authentication, re-start authentication in other open tabs.
     attr_accessor :flows_continuous_login
 
+    # Refresh other tabs after successful authentication.
     attr_accessor :flows_refresh_others
 
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
+        :'core_default_app_access' => :'core_default_app_access',
         :'enterprise_audit_include_expanded_diff' => :'enterprise_audit_include_expanded_diff',
-        :'policies_buffered_access_view' => :'policies_buffered_access_view',
         :'flows_continuous_login' => :'flows_continuous_login',
         :'flows_refresh_others' => :'flows_refresh_others'
       }
@@ -40,8 +44,8 @@ module Authentik::Api
     # Attribute type mapping.
     def self.openapi_types
       {
+        :'core_default_app_access' => :'Boolean',
         :'enterprise_audit_include_expanded_diff' => :'Boolean',
-        :'policies_buffered_access_view' => :'Boolean',
         :'flows_continuous_login' => :'Boolean',
         :'flows_refresh_others' => :'Boolean'
       }
@@ -69,16 +73,16 @@ module Authentik::Api
         h[k.to_sym] = v
       }
 
-      if attributes.key?(:'enterprise_audit_include_expanded_diff')
-        self.enterprise_audit_include_expanded_diff = attributes[:'enterprise_audit_include_expanded_diff']
+      if attributes.key?(:'core_default_app_access')
+        self.core_default_app_access = attributes[:'core_default_app_access']
       else
-        self.enterprise_audit_include_expanded_diff = nil
+        self.core_default_app_access = nil
       end
 
-      if attributes.key?(:'policies_buffered_access_view')
-        self.policies_buffered_access_view = attributes[:'policies_buffered_access_view']
+      if attributes.key?(:'enterprise_audit_include_expanded_diff')
+        self.enterprise_audit_include_expanded_diff = attributes[:'enterprise_audit_include_expanded_diff']
       else
-        self.policies_buffered_access_view = nil
+        self.enterprise_audit_include_expanded_diff = nil
       end
 
       if attributes.key?(:'flows_continuous_login')
@@ -99,12 +103,12 @@ module Authentik::Api
     def list_invalid_properties
       warn '[DEPRECATED] the `list_invalid_properties` method is obsolete'
       invalid_properties = Array.new
-      if @enterprise_audit_include_expanded_diff.nil?
-        invalid_properties.push('invalid value for "enterprise_audit_include_expanded_diff", enterprise_audit_include_expanded_diff cannot be nil.')
+      if @core_default_app_access.nil?
+        invalid_properties.push('invalid value for "core_default_app_access", core_default_app_access cannot be nil.')
       end
 
-      if @policies_buffered_access_view.nil?
-        invalid_properties.push('invalid value for "policies_buffered_access_view", policies_buffered_access_view cannot be nil.')
+      if @enterprise_audit_include_expanded_diff.nil?
+        invalid_properties.push('invalid value for "enterprise_audit_include_expanded_diff", enterprise_audit_include_expanded_diff cannot be nil.')
       end
 
       if @flows_continuous_login.nil?
@@ -122,31 +126,31 @@ module Authentik::Api
     # @return true if the model is valid
     def valid?
       warn '[DEPRECATED] the `valid?` method is obsolete'
+      return false if @core_default_app_access.nil?
       return false if @enterprise_audit_include_expanded_diff.nil?
-      return false if @policies_buffered_access_view.nil?
       return false if @flows_continuous_login.nil?
       return false if @flows_refresh_others.nil?
       true
     end
 
     # Custom attribute writer method with validation
-    # @param [Object] enterprise_audit_include_expanded_diff Value to be assigned
-    def enterprise_audit_include_expanded_diff=(enterprise_audit_include_expanded_diff)
-      if enterprise_audit_include_expanded_diff.nil?
-        fail ArgumentError, 'enterprise_audit_include_expanded_diff cannot be nil'
+    # @param [Object] core_default_app_access Value to be assigned
+    def core_default_app_access=(core_default_app_access)
+      if core_default_app_access.nil?
+        fail ArgumentError, 'core_default_app_access cannot be nil'
       end
 
-      @enterprise_audit_include_expanded_diff = enterprise_audit_include_expanded_diff
+      @core_default_app_access = core_default_app_access
     end
 
     # Custom attribute writer method with validation
-    # @param [Object] policies_buffered_access_view Value to be assigned
-    def policies_buffered_access_view=(policies_buffered_access_view)
-      if policies_buffered_access_view.nil?
-        fail ArgumentError, 'policies_buffered_access_view cannot be nil'
+    # @param [Object] enterprise_audit_include_expanded_diff Value to be assigned
+    def enterprise_audit_include_expanded_diff=(enterprise_audit_include_expanded_diff)
+      if enterprise_audit_include_expanded_diff.nil?
+        fail ArgumentError, 'enterprise_audit_include_expanded_diff cannot be nil'
       end
 
-      @policies_buffered_access_view = policies_buffered_access_view
+      @enterprise_audit_include_expanded_diff = enterprise_audit_include_expanded_diff
     end
 
     # Custom attribute writer method with validation
@@ -174,8 +178,8 @@ module Authentik::Api
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
+          core_default_app_access == o.core_default_app_access &&
           enterprise_audit_include_expanded_diff == o.enterprise_audit_include_expanded_diff &&
-          policies_buffered_access_view == o.policies_buffered_access_view &&
           flows_continuous_login == o.flows_continuous_login &&
           flows_refresh_others == o.flows_refresh_others
     end
@@ -189,7 +193,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [enterprise_audit_include_expanded_diff, policies_buffered_access_view, flows_continuous_login, flows_refresh_others].hash
+      [core_default_app_access, enterprise_audit_include_expanded_diff, flows_continuous_login, flows_refresh_others].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/delivery_method_enum.rb

@@ -11,9 +11,11 @@ module Authentik::Api
   class DeliveryMethodEnum
     HTTPS___SCHEMAS_OPENID_NET_SECEVENT_RISC_DELIVERY_METHOD_PUSH = "https://schemas.openid.net/secevent/risc/delivery-method/push".freeze
     HTTPS___SCHEMAS_OPENID_NET_SECEVENT_RISC_DELIVERY_METHOD_POLL = "https://schemas.openid.net/secevent/risc/delivery-method/poll".freeze
+    URN_IETF_RFC_8935 = "urn:ietf:rfc:8935".freeze
+    URN_IETF_RFC_8936 = "urn:ietf:rfc:8936".freeze
 
     def self.all_vars
-      @all_vars ||= [HTTPS___SCHEMAS_OPENID_NET_SECEVENT_RISC_DELIVERY_METHOD_PUSH, HTTPS___SCHEMAS_OPENID_NET_SECEVENT_RISC_DELIVERY_METHOD_POLL].freeze
+      @all_vars ||= [HTTPS___SCHEMAS_OPENID_NET_SECEVENT_RISC_DELIVERY_METHOD_PUSH, HTTPS___SCHEMAS_OPENID_NET_SECEVENT_RISC_DELIVERY_METHOD_POLL, URN_IETF_RFC_8935, URN_IETF_RFC_8936].freeze
     end
 
     # Builds the enum from string

data/lib/authentik/api/models/event_matcher_policy.rb

@@ -44,6 +44,8 @@ module Authentik::Api
     # Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
     attr_accessor :model
 
+    attr_accessor :query
+
     class EnumAttributeValidator
       attr_reader :datatype
       attr_reader :allowable_values
@@ -80,7 +82,8 @@ module Authentik::Api
         :'action' => :'action',
         :'client_ip' => :'client_ip',
         :'app' => :'app',
-        :'model' => :'model'
+        :'model' => :'model',
+        :'query' => :'query'
       }
     end
 
@@ -108,7 +111,8 @@ module Authentik::Api
         :'action' => :'EventActions',
         :'client_ip' => :'String',
         :'app' => :'AppEnum',
-        :'model' => :'ModelEnum'
+        :'model' => :'ModelEnum',
+        :'query' => :'String'
       }
     end
 
@@ -118,7 +122,8 @@ module Authentik::Api
         :'action',
         :'client_ip',
         :'app',
-        :'model'
+        :'model',
+        :'query'
       ])
     end
 
@@ -199,6 +204,10 @@ module Authentik::Api
       if attributes.key?(:'model')
         self.model = attributes[:'model']
       end
+
+      if attributes.key?(:'query')
+        self.query = attributes[:'query']
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -337,7 +346,8 @@ module Authentik::Api
           action == o.action &&
           client_ip == o.client_ip &&
           app == o.app &&
-          model == o.model
+          model == o.model &&
+          query == o.query
     end
 
     # @see the `==` method
@@ -349,7 +359,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, execution_logging, component, verbose_name, verbose_name_plural, meta_model_name, bound_to, action, client_ip, app, model].hash
+      [pk, name, execution_logging, component, verbose_name, verbose_name_plural, meta_model_name, bound_to, action, client_ip, app, model, query].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/event_matcher_policy_request.rb

@@ -27,6 +27,8 @@ module Authentik::Api
     # Match events created by selected model. When left empty, all models are matched. When an app is selected, all the application's models are matched.
     attr_accessor :model
 
+    attr_accessor :query
+
     class EnumAttributeValidator
       attr_reader :datatype
       attr_reader :allowable_values
@@ -57,7 +59,8 @@ module Authentik::Api
         :'action' => :'action',
         :'client_ip' => :'client_ip',
         :'app' => :'app',
-        :'model' => :'model'
+        :'model' => :'model',
+        :'query' => :'query'
       }
     end
 
@@ -79,7 +82,8 @@ module Authentik::Api
         :'action' => :'EventActions',
         :'client_ip' => :'String',
         :'app' => :'AppEnum',
-        :'model' => :'ModelEnum'
+        :'model' => :'ModelEnum',
+        :'query' => :'String'
       }
     end
 
@@ -89,7 +93,8 @@ module Authentik::Api
         :'action',
         :'client_ip',
         :'app',
-        :'model'
+        :'model',
+        :'query'
       ])
     end
 
@@ -134,6 +139,10 @@ module Authentik::Api
       if attributes.key?(:'model')
         self.model = attributes[:'model']
       end
+
+      if attributes.key?(:'query')
+        self.query = attributes[:'query']
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -153,6 +162,10 @@ module Authentik::Api
         invalid_properties.push('invalid value for "client_ip", the character length must be greater than or equal to 1.')
       end
 
+      if !@query.nil? && @query.to_s.length < 1
+        invalid_properties.push('invalid value for "query", the character length must be greater than or equal to 1.')
+      end
+
       invalid_properties
     end
 
@@ -163,6 +176,7 @@ module Authentik::Api
       return false if @name.nil?
       return false if @name.to_s.length < 1
       return false if !@client_ip.nil? && @client_ip.to_s.length < 1
+      return false if !@query.nil? && @query.to_s.length < 1
       true
     end
 
@@ -190,6 +204,16 @@ module Authentik::Api
       @client_ip = client_ip
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] query Value to be assigned
+    def query=(query)
+      if !query.nil? && query.to_s.length < 1
+        fail ArgumentError, 'invalid value for "query", the character length must be greater than or equal to 1.'
+      end
+
+      @query = query
+    end
+
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)
@@ -200,7 +224,8 @@ module Authentik::Api
           action == o.action &&
           client_ip == o.client_ip &&
           app == o.app &&
-          model == o.model
+          model == o.model &&
+          query == o.query
     end
 
     # @see the `==` method
@@ -212,7 +237,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, execution_logging, action, client_ip, app, model].hash
+      [name, execution_logging, action, client_ip, app, model, query].hash
     end
 
     # Builds the object from hash