authentik-api 2026.5.5 → 2026.5.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b178888531a8a4340a67efa423b1d0dc32c1154d0bd3568293c4d99b30bd00e0
-  data.tar.gz: a9ea915bce3485186e3e6df691e6f32de492a3f29d68edaa616b82a15484670e
+  metadata.gz: 4cfd4adcb7859a84415d1dffbde07e12dcf7adfdcc7a3eaf39c47e5d687e4ddb
+  data.tar.gz: '021159d5430e6008bd0e5a9380e6ccd2df0fe580489a0684120fd53b3ac286ad'
 SHA512:
-  metadata.gz: 2fa0a14435efaf3ff073af1cf941dcf7dac6470080171db25f10d2036e004f53862cdfefe6603a05b87da7d46488a8178f0e648da152161af65aef9e74877881
-  data.tar.gz: fd9348b3a46deeb844201cd531bb5c44b1d8e052fac6e573138b62f1662992c3526a9e88a63fa4499764218deae74495bbdce29999320b5b63532ec1961871fe
+  metadata.gz: 474f31f4a08de75168ea231a9f4c7b439bbe7244391187c8920f5595e7d9e0f91ddaf6557d0ac9cf3fbbb6ef617e9b65b1ce1c59f625db7797518b0923441a35
+  data.tar.gz: 2fa9cbed32ca8d1333d3574feebdde4566e4fdbda1d587f07f61a506a521789bcad18e63b7acb929005934b52065a02f70387f065f9246c7f21ef67e90a974e2

data/README_API.md

@@ -6,9 +6,9 @@ Making authentication simple.
 
 This SDK is automatically generated by the [OpenAPI Generator](https://openapi-generator.tech) project:
 
-- API version: 2026.5.5
-- Package version: 2026.5.5
-- Generator version: 7.24.0-SNAPSHOT
+- API version: 2026.5.7
+- Package version: 2026.5.7
+- Generator version: 7.26.0-SNAPSHOT
 - Build package: org.openapitools.codegen.languages.RubyClientCodegen
 
 ## Installation
@@ -24,16 +24,16 @@ gem build authentik-api.gemspec
 Then either install the gem locally:
 
 ```shell
-gem install ./authentik-api-2026.5.5.gem
+gem install ./authentik-api-2026.5.7.gem
 ```
 
-(for development, run `gem install --dev ./authentik-api-2026.5.5.gem` to install the development dependencies)
+(for development, run `gem install --dev ./authentik-api-2026.5.7.gem` to install the development dependencies)
 
 or publish the gem to a gem hosting service, e.g. [RubyGems](https://rubygems.org/).
 
 Finally add this to the Gemfile:
 
-    gem 'authentik-api', '~> 2026.5.5'
+    gem 'authentik-api', '~> 2026.5.7'
 
 ### Install from Git
 
@@ -2118,3 +2118,14 @@ Authentication schemes defined for the API:
 
 - **Type**: Bearer authentication
 
+### authentik_device_auth
+
+
+### authentik_device_enroll
+
+- **Type**: Bearer authentication
+
+### authentik_device_federation
+
+- **Type**: Bearer authentication
+

data/lib/authentik/api/api/core_api.rb

@@ -1958,7 +1958,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_groups_add_user_create",
@@ -2024,7 +2024,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'Group'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_groups_create",
@@ -2085,7 +2085,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_groups_destroy",
@@ -2179,7 +2179,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'PaginatedGroupList'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_groups_list",
@@ -2247,7 +2247,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'Group'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_groups_partial_update",
@@ -2319,7 +2319,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_groups_remove_user_create",
@@ -2392,7 +2392,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'Group'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_groups_retrieve",
@@ -2464,7 +2464,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'Group'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_groups_update",
@@ -2525,7 +2525,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'Array<UsedBy>'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_groups_used_by_list",
@@ -3519,7 +3519,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'Link'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_account_lockdown_create",
@@ -3585,7 +3585,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'User'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_create",
@@ -3646,7 +3646,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_destroy",
@@ -3779,7 +3779,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'DataExport'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_export_create",
@@ -3851,7 +3851,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_impersonate_create",
@@ -3906,7 +3906,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_impersonate_end_retrieve",
@@ -4051,7 +4051,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'PaginatedUserList'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_list",
@@ -4106,7 +4106,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'SessionUser'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_me_retrieve",
@@ -4174,7 +4174,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'User'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_partial_update",
@@ -4232,7 +4232,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'UserPath'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_paths_retrieve",
@@ -4300,7 +4300,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'Link'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_recovery_create",
@@ -4372,7 +4372,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_recovery_email_create",
@@ -4433,7 +4433,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'User'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_retrieve",
@@ -4499,7 +4499,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'UserServiceAccountResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_service_account_create",
@@ -4571,7 +4571,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_set_password_create",
@@ -4643,7 +4643,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_set_password_hash_create",
@@ -4715,7 +4715,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'User'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_update",
@@ -4776,7 +4776,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'Array<UsedBy>'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || ['authentik']
+      auth_names = opts[:debug_auth_names] || ['authentik', 'authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"CoreApi.core_users_used_by_list",

data/lib/authentik/api/api/endpoints_api.rb

@@ -49,7 +49,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'AgentConfig'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || []
+      auth_names = opts[:debug_auth_names] || ['authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"EndpointsApi.endpoints_agents_connectors_agent_config_retrieve",
@@ -111,7 +111,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'AgentTokenResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || []
+      auth_names = opts[:debug_auth_names] || ['authentik_device_federation']
 
       new_options = opts.merge(
         :operation => :"EndpointsApi.endpoints_agents_connectors_auth_fed_create",
@@ -166,7 +166,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'AgentAuthenticationResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || []
+      auth_names = opts[:debug_auth_names] || ['authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"EndpointsApi.endpoints_agents_connectors_auth_ia_create",
@@ -228,7 +228,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type]
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || []
+      auth_names = opts[:debug_auth_names] || ['authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"EndpointsApi.endpoints_agents_connectors_check_in_create",
@@ -421,7 +421,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'AgentTokenResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || []
+      auth_names = opts[:debug_auth_names] || ['authentik_device_enroll']
 
       new_options = opts.merge(
         :operation => :"EndpointsApi.endpoints_agents_connectors_enroll_create",
@@ -1877,7 +1877,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'AgentPSSODeviceRegistrationResponse'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || []
+      auth_names = opts[:debug_auth_names] || ['authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"EndpointsApi.endpoints_agents_psso_register_device_create",
@@ -1941,7 +1941,7 @@ module Authentik::Api
       return_type = opts[:debug_return_type] || 'UserSelf'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || []
+      auth_names = opts[:debug_auth_names] || ['authentik_device_auth']
 
       new_options = opts.merge(
         :operation => :"EndpointsApi.endpoints_agents_psso_register_user_create",

data/lib/authentik/api/configuration.rb

@@ -245,6 +245,20 @@ module Authentik::Api
             key: 'Authorization',
             value: "Bearer #{access_token_with_refresh}"
           },
+        'authentik_device_enroll' =>
+          {
+            type: 'bearer',
+            in: 'header',
+            key: 'Authorization',
+            value: "Bearer #{access_token_with_refresh}"
+          },
+        'authentik_device_federation' =>
+          {
+            type: 'bearer',
+            in: 'header',
+            key: 'Authorization',
+            value: "Bearer #{access_token_with_refresh}"
+          },
       }
     end
 

data/lib/authentik/api/models/authenticator_email_stage.rb

@@ -42,8 +42,6 @@ module Authentik::Api
 
     attr_accessor :username
 
-    attr_accessor :password
-
     attr_accessor :use_tls
 
     attr_accessor :use_ssl
@@ -75,7 +73,6 @@ module Authentik::Api
         :'host' => :'host',
         :'port' => :'port',
         :'username' => :'username',
-        :'password' => :'password',
         :'use_tls' => :'use_tls',
         :'use_ssl' => :'use_ssl',
         :'timeout' => :'timeout',
@@ -112,7 +109,6 @@ module Authentik::Api
         :'host' => :'String',
         :'port' => :'Integer',
         :'username' => :'String',
-        :'password' => :'String',
         :'use_tls' => :'Boolean',
         :'use_ssl' => :'Boolean',
         :'timeout' => :'Integer',
@@ -214,10 +210,6 @@ module Authentik::Api
         self.username = attributes[:'username']
       end
 
-      if attributes.key?(:'password')
-        self.password = attributes[:'password']
-      end
-
       if attributes.key?(:'use_tls')
         self.use_tls = attributes[:'use_tls']
       end
@@ -460,7 +452,6 @@ module Authentik::Api
           host == o.host &&
           port == o.port &&
           username == o.username &&
-          password == o.password &&
           use_tls == o.use_tls &&
           use_ssl == o.use_ssl &&
           timeout == o.timeout &&
@@ -479,7 +470,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, flow_set, configure_flow, friendly_name, use_global_settings, host, port, username, password, use_tls, use_ssl, timeout, from_address, subject, token_expiry, template].hash
+      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, flow_set, configure_flow, friendly_name, use_global_settings, host, port, username, use_tls, use_ssl, timeout, from_address, subject, token_expiry, template].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/authenticator_sms_stage.rb

@@ -39,10 +39,6 @@ module Authentik::Api
 
     attr_accessor :account_sid
 
-    attr_accessor :auth
-
-    attr_accessor :auth_password
-
     attr_accessor :auth_type
 
     # When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
@@ -88,8 +84,6 @@ module Authentik::Api
         :'provider' => :'provider',
         :'from_number' => :'from_number',
         :'account_sid' => :'account_sid',
-        :'auth' => :'auth',
-        :'auth_password' => :'auth_password',
         :'auth_type' => :'auth_type',
         :'verify_only' => :'verify_only',
         :'mapping' => :'mapping'
@@ -121,8 +115,6 @@ module Authentik::Api
         :'provider' => :'ProviderEnum',
         :'from_number' => :'String',
         :'account_sid' => :'String',
-        :'auth' => :'String',
-        :'auth_password' => :'String',
         :'auth_type' => :'AuthTypeEnum',
         :'verify_only' => :'Boolean',
         :'mapping' => :'String'
@@ -223,16 +215,6 @@ module Authentik::Api
         self.account_sid = nil
       end
 
-      if attributes.key?(:'auth')
-        self.auth = attributes[:'auth']
-      else
-        self.auth = nil
-      end
-
-      if attributes.key?(:'auth_password')
-        self.auth_password = attributes[:'auth_password']
-      end
-
       if attributes.key?(:'auth_type')
         self.auth_type = attributes[:'auth_type']
       end
@@ -291,10 +273,6 @@ module Authentik::Api
         invalid_properties.push('invalid value for "account_sid", account_sid cannot be nil.')
       end
 
-      if @auth.nil?
-        invalid_properties.push('invalid value for "auth", auth cannot be nil.')
-      end
-
       invalid_properties
     end
 
@@ -312,7 +290,6 @@ module Authentik::Api
       return false if @provider.nil?
       return false if @from_number.nil?
       return false if @account_sid.nil?
-      return false if @auth.nil?
       true
     end
 
@@ -416,16 +393,6 @@ module Authentik::Api
       @account_sid = account_sid
     end
 
-    # Custom attribute writer method with validation
-    # @param [Object] auth Value to be assigned
-    def auth=(auth)
-      if auth.nil?
-        fail ArgumentError, 'auth cannot be nil'
-      end
-
-      @auth = auth
-    end
-
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)
@@ -443,8 +410,6 @@ module Authentik::Api
           provider == o.provider &&
           from_number == o.from_number &&
           account_sid == o.account_sid &&
-          auth == o.auth &&
-          auth_password == o.auth_password &&
           auth_type == o.auth_type &&
           verify_only == o.verify_only &&
           mapping == o.mapping
@@ -459,7 +424,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, flow_set, configure_flow, friendly_name, provider, from_number, account_sid, auth, auth_password, auth_type, verify_only, mapping].hash
+      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, flow_set, configure_flow, friendly_name, provider, from_number, account_sid, auth_type, verify_only, mapping].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/current_brand_flags.rb

@@ -9,12 +9,6 @@ require 'time'
 
 module Authentik::Api
   class CurrentBrandFlags < ApiModelBase
-    # Configure if applications without any policy/group/user bindings should be accessible to any user.
-    attr_accessor :core_default_app_access
-
-    # Include additional information in audit logs, may incur a performance penalty.
-    attr_accessor :enterprise_audit_include_expanded_diff
-
     # Upon successful authentication, re-start authentication in other open tabs.
     attr_accessor :flows_continuous_login
 
@@ -24,8 +18,6 @@ module Authentik::Api
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
-        :'core_default_app_access' => :'core_default_app_access',
-        :'enterprise_audit_include_expanded_diff' => :'enterprise_audit_include_expanded_diff',
         :'flows_continuous_login' => :'flows_continuous_login',
         :'flows_refresh_others' => :'flows_refresh_others'
       }
@@ -44,8 +36,6 @@ module Authentik::Api
     # Attribute type mapping.
     def self.openapi_types
       {
-        :'core_default_app_access' => :'Boolean',
-        :'enterprise_audit_include_expanded_diff' => :'Boolean',
         :'flows_continuous_login' => :'Boolean',
         :'flows_refresh_others' => :'Boolean'
       }
@@ -73,18 +63,6 @@ module Authentik::Api
         h[k.to_sym] = v
       }
 
-      if attributes.key?(:'core_default_app_access')
-        self.core_default_app_access = attributes[:'core_default_app_access']
-      else
-        self.core_default_app_access = nil
-      end
-
-      if attributes.key?(:'enterprise_audit_include_expanded_diff')
-        self.enterprise_audit_include_expanded_diff = attributes[:'enterprise_audit_include_expanded_diff']
-      else
-        self.enterprise_audit_include_expanded_diff = nil
-      end
-
       if attributes.key?(:'flows_continuous_login')
         self.flows_continuous_login = attributes[:'flows_continuous_login']
       else
@@ -103,14 +81,6 @@ module Authentik::Api
     def list_invalid_properties
       warn '[DEPRECATED] the `list_invalid_properties` method is obsolete'
       invalid_properties = Array.new
-      if @core_default_app_access.nil?
-        invalid_properties.push('invalid value for "core_default_app_access", core_default_app_access cannot be nil.')
-      end
-
-      if @enterprise_audit_include_expanded_diff.nil?
-        invalid_properties.push('invalid value for "enterprise_audit_include_expanded_diff", enterprise_audit_include_expanded_diff cannot be nil.')
-      end
-
       if @flows_continuous_login.nil?
         invalid_properties.push('invalid value for "flows_continuous_login", flows_continuous_login cannot be nil.')
       end
@@ -126,33 +96,11 @@ module Authentik::Api
     # @return true if the model is valid
     def valid?
       warn '[DEPRECATED] the `valid?` method is obsolete'
-      return false if @core_default_app_access.nil?
-      return false if @enterprise_audit_include_expanded_diff.nil?
       return false if @flows_continuous_login.nil?
       return false if @flows_refresh_others.nil?
       true
     end
 
-    # Custom attribute writer method with validation
-    # @param [Object] core_default_app_access Value to be assigned
-    def core_default_app_access=(core_default_app_access)
-      if core_default_app_access.nil?
-        fail ArgumentError, 'core_default_app_access cannot be nil'
-      end
-
-      @core_default_app_access = core_default_app_access
-    end
-
-    # Custom attribute writer method with validation
-    # @param [Object] enterprise_audit_include_expanded_diff Value to be assigned
-    def enterprise_audit_include_expanded_diff=(enterprise_audit_include_expanded_diff)
-      if enterprise_audit_include_expanded_diff.nil?
-        fail ArgumentError, 'enterprise_audit_include_expanded_diff cannot be nil'
-      end
-
-      @enterprise_audit_include_expanded_diff = enterprise_audit_include_expanded_diff
-    end
-
     # Custom attribute writer method with validation
     # @param [Object] flows_continuous_login Value to be assigned
     def flows_continuous_login=(flows_continuous_login)
@@ -178,8 +126,6 @@ module Authentik::Api
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
-          core_default_app_access == o.core_default_app_access &&
-          enterprise_audit_include_expanded_diff == o.enterprise_audit_include_expanded_diff &&
           flows_continuous_login == o.flows_continuous_login &&
           flows_refresh_others == o.flows_refresh_others
     end
@@ -193,7 +139,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [core_default_app_access, enterprise_audit_include_expanded_diff, flows_continuous_login, flows_refresh_others].hash
+      [flows_continuous_login, flows_refresh_others].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/endpoint_device.rb

@@ -72,6 +72,7 @@ module Authentik::Api
       Set.new([
         :'access_group',
         :'expires',
+        :'facts',
       ])
     end
 
@@ -149,10 +150,6 @@ module Authentik::Api
         invalid_properties.push('invalid value for "name", name cannot be nil.')
       end
 
-      if @facts.nil?
-        invalid_properties.push('invalid value for "facts", facts cannot be nil.')
-      end
-
       invalid_properties
     end
 
@@ -162,7 +159,6 @@ module Authentik::Api
       warn '[DEPRECATED] the `valid?` method is obsolete'
       return false if @pbm_uuid.nil?
       return false if @name.nil?
-      return false if @facts.nil?
       true
     end
 
@@ -186,16 +182,6 @@ module Authentik::Api
       @name = name
     end
 
-    # Custom attribute writer method with validation
-    # @param [Object] facts Value to be assigned
-    def facts=(facts)
-      if facts.nil?
-        fail ArgumentError, 'facts cannot be nil'
-      end
-
-      @facts = facts
-    end
-
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)

data/lib/authentik/api/models/endpoint_device_details.rb

@@ -84,6 +84,7 @@ module Authentik::Api
       Set.new([
         :'access_group',
         :'expires',
+        :'facts',
       ])
     end
 
@@ -185,10 +186,6 @@ module Authentik::Api
         invalid_properties.push('invalid value for "name", name cannot be nil.')
       end
 
-      if @facts.nil?
-        invalid_properties.push('invalid value for "facts", facts cannot be nil.')
-      end
-
       if @connections_obj.nil?
         invalid_properties.push('invalid value for "connections_obj", connections_obj cannot be nil.')
       end
@@ -210,7 +207,6 @@ module Authentik::Api
       warn '[DEPRECATED] the `valid?` method is obsolete'
       return false if @pbm_uuid.nil?
       return false if @name.nil?
-      return false if @facts.nil?
       return false if @connections_obj.nil?
       return false if @policies.nil?
       return false if @connections.nil?
@@ -237,16 +233,6 @@ module Authentik::Api
       @name = name
     end
 
-    # Custom attribute writer method with validation
-    # @param [Object] facts Value to be assigned
-    def facts=(facts)
-      if facts.nil?
-        fail ArgumentError, 'facts cannot be nil'
-      end
-
-      @facts = facts
-    end
-
     # Custom attribute writer method with validation
     # @param [Object] connections_obj Value to be assigned
     def connections_obj=(connections_obj)

data/lib/authentik/api/models/kerberos_source.rb

@@ -82,18 +82,12 @@ module Authentik::Api
     # Principal to authenticate to kadmin for sync.
     attr_accessor :sync_principal
 
-    # Credentials cache to authenticate to kadmin for sync. Must be in the form TYPE:residual
-    attr_accessor :sync_ccache
-
     # Get cached source connectivity
     attr_accessor :connectivity
 
     # Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname
     attr_accessor :spnego_server_name
 
-    # Credential cache to use for SPNEGO in form type:residual
-    attr_accessor :spnego_ccache
-
     # If enabled, the authentik-stored password will be updated upon login with the Kerberos password backend
     attr_accessor :password_login_update_internal_password
 
@@ -152,10 +146,8 @@ module Authentik::Api
         :'sync_users' => :'sync_users',
         :'sync_users_password' => :'sync_users_password',
         :'sync_principal' => :'sync_principal',
-        :'sync_ccache' => :'sync_ccache',
         :'connectivity' => :'connectivity',
         :'spnego_server_name' => :'spnego_server_name',
-        :'spnego_ccache' => :'spnego_ccache',
         :'password_login_update_internal_password' => :'password_login_update_internal_password',
         :'sync_outgoing_trigger_mode' => :'sync_outgoing_trigger_mode'
       }
@@ -201,10 +193,8 @@ module Authentik::Api
         :'sync_users' => :'Boolean',
         :'sync_users_password' => :'Boolean',
         :'sync_principal' => :'String',
-        :'sync_ccache' => :'String',
         :'connectivity' => :'Hash<String, String>',
         :'spnego_server_name' => :'String',
-        :'spnego_ccache' => :'String',
         :'password_login_update_internal_password' => :'Boolean',
         :'sync_outgoing_trigger_mode' => :'SyncOutgoingTriggerModeEnum'
       }
@@ -371,10 +361,6 @@ module Authentik::Api
         self.sync_principal = attributes[:'sync_principal']
       end
 
-      if attributes.key?(:'sync_ccache')
-        self.sync_ccache = attributes[:'sync_ccache']
-      end
-
       if attributes.key?(:'connectivity')
         if (value = attributes[:'connectivity']).is_a?(Hash)
           self.connectivity = value
@@ -387,10 +373,6 @@ module Authentik::Api
         self.spnego_server_name = attributes[:'spnego_server_name']
       end
 
-      if attributes.key?(:'spnego_ccache')
-        self.spnego_ccache = attributes[:'spnego_ccache']
-      end
-
       if attributes.key?(:'password_login_update_internal_password')
         self.password_login_update_internal_password = attributes[:'password_login_update_internal_password']
       end
@@ -593,10 +575,8 @@ module Authentik::Api
           sync_users == o.sync_users &&
           sync_users_password == o.sync_users_password &&
           sync_principal == o.sync_principal &&
-          sync_ccache == o.sync_ccache &&
           connectivity == o.connectivity &&
           spnego_server_name == o.spnego_server_name &&
-          spnego_ccache == o.spnego_ccache &&
           password_login_update_internal_password == o.password_login_update_internal_password &&
           sync_outgoing_trigger_mode == o.sync_outgoing_trigger_mode
     end
@@ -610,7 +590,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, slug, enabled, promoted, authentication_flow, enrollment_flow, user_property_mappings, group_property_mappings, component, verbose_name, verbose_name_plural, meta_model_name, policy_engine_mode, user_matching_mode, managed, user_path_template, icon, icon_url, icon_themed_urls, group_matching_mode, realm, krb5_conf, kadmin_type, sync_users, sync_users_password, sync_principal, sync_ccache, connectivity, spnego_server_name, spnego_ccache, password_login_update_internal_password, sync_outgoing_trigger_mode].hash
+      [pk, name, slug, enabled, promoted, authentication_flow, enrollment_flow, user_property_mappings, group_property_mappings, component, verbose_name, verbose_name_plural, meta_model_name, policy_engine_mode, user_matching_mode, managed, user_path_template, icon, icon_url, icon_themed_urls, group_matching_mode, realm, krb5_conf, kadmin_type, sync_users, sync_users_password, sync_principal, connectivity, spnego_server_name, password_login_update_internal_password, sync_outgoing_trigger_mode].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/microsoft_entra_provider.rb

@@ -39,8 +39,6 @@ module Authentik::Api
 
     attr_accessor :client_id
 
-    attr_accessor :client_secret
-
     attr_accessor :tenant_id
 
     attr_accessor :exclude_users_service_account
@@ -96,7 +94,6 @@ module Authentik::Api
         :'verbose_name_plural' => :'verbose_name_plural',
         :'meta_model_name' => :'meta_model_name',
         :'client_id' => :'client_id',
-        :'client_secret' => :'client_secret',
         :'tenant_id' => :'tenant_id',
         :'exclude_users_service_account' => :'exclude_users_service_account',
         :'filter_group' => :'filter_group',
@@ -132,7 +129,6 @@ module Authentik::Api
         :'verbose_name_plural' => :'String',
         :'meta_model_name' => :'String',
         :'client_id' => :'String',
-        :'client_secret' => :'String',
         :'tenant_id' => :'String',
         :'exclude_users_service_account' => :'Boolean',
         :'filter_group' => :'String',
@@ -235,12 +231,6 @@ module Authentik::Api
         self.client_id = nil
       end
 
-      if attributes.key?(:'client_secret')
-        self.client_secret = attributes[:'client_secret']
-      else
-        self.client_secret = nil
-      end
-
       if attributes.key?(:'tenant_id')
         self.tenant_id = attributes[:'tenant_id']
       else
@@ -309,10 +299,6 @@ module Authentik::Api
         invalid_properties.push('invalid value for "client_id", client_id cannot be nil.')
       end
 
-      if @client_secret.nil?
-        invalid_properties.push('invalid value for "client_secret", client_secret cannot be nil.')
-      end
-
       if @tenant_id.nil?
         invalid_properties.push('invalid value for "tenant_id", tenant_id cannot be nil.')
       end
@@ -339,7 +325,6 @@ module Authentik::Api
       return false if @verbose_name_plural.nil?
       return false if @meta_model_name.nil?
       return false if @client_id.nil?
-      return false if @client_secret.nil?
       return false if @tenant_id.nil?
       return false if !@sync_page_size.nil? && @sync_page_size > 2147483647
       return false if !@sync_page_size.nil? && @sync_page_size < 1
@@ -416,16 +401,6 @@ module Authentik::Api
       @client_id = client_id
     end
 
-    # Custom attribute writer method with validation
-    # @param [Object] client_secret Value to be assigned
-    def client_secret=(client_secret)
-      if client_secret.nil?
-        fail ArgumentError, 'client_secret cannot be nil'
-      end
-
-      @client_secret = client_secret
-    end
-
     # Custom attribute writer method with validation
     # @param [Object] tenant_id Value to be assigned
     def tenant_id=(tenant_id)
@@ -470,7 +445,6 @@ module Authentik::Api
           verbose_name_plural == o.verbose_name_plural &&
           meta_model_name == o.meta_model_name &&
           client_id == o.client_id &&
-          client_secret == o.client_secret &&
           tenant_id == o.tenant_id &&
           exclude_users_service_account == o.exclude_users_service_account &&
           filter_group == o.filter_group &&
@@ -490,7 +464,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, property_mappings, property_mappings_group, component, assigned_backchannel_application_slug, assigned_backchannel_application_name, verbose_name, verbose_name_plural, meta_model_name, client_id, client_secret, tenant_id, exclude_users_service_account, filter_group, user_delete_action, group_delete_action, sync_page_size, sync_page_timeout, dry_run].hash
+      [pk, name, property_mappings, property_mappings_group, component, assigned_backchannel_application_slug, assigned_backchannel_application_name, verbose_name, verbose_name_plural, meta_model_name, client_id, tenant_id, exclude_users_service_account, filter_group, user_delete_action, group_delete_action, sync_page_size, sync_page_timeout, dry_run].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/scim_provider.rb

@@ -42,9 +42,6 @@ module Authentik::Api
 
     attr_accessor :verify_certificates
 
-    # Authentication token
-    attr_accessor :token
-
     attr_accessor :auth_mode
 
     # OAuth Source used for authentication
@@ -118,7 +115,6 @@ module Authentik::Api
         :'meta_model_name' => :'meta_model_name',
         :'url' => :'url',
         :'verify_certificates' => :'verify_certificates',
-        :'token' => :'token',
         :'auth_mode' => :'auth_mode',
         :'auth_oauth' => :'auth_oauth',
         :'auth_oauth_params' => :'auth_oauth_params',
@@ -161,7 +157,6 @@ module Authentik::Api
         :'meta_model_name' => :'String',
         :'url' => :'String',
         :'verify_certificates' => :'Boolean',
-        :'token' => :'String',
         :'auth_mode' => :'SCIMAuthenticationModeEnum',
         :'auth_oauth' => :'String',
         :'auth_oauth_params' => :'Hash<String, Object>',
@@ -278,10 +273,6 @@ module Authentik::Api
         self.verify_certificates = attributes[:'verify_certificates']
       end
 
-      if attributes.key?(:'token')
-        self.token = attributes[:'token']
-      end
-
       if attributes.key?(:'auth_mode')
         self.auth_mode = attributes[:'auth_mode']
       end
@@ -516,7 +507,6 @@ module Authentik::Api
           meta_model_name == o.meta_model_name &&
           url == o.url &&
           verify_certificates == o.verify_certificates &&
-          token == o.token &&
           auth_mode == o.auth_mode &&
           auth_oauth == o.auth_oauth &&
           auth_oauth_params == o.auth_oauth_params &&
@@ -542,7 +532,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, property_mappings, property_mappings_group, component, assigned_backchannel_application_slug, assigned_backchannel_application_name, verbose_name, verbose_name_plural, meta_model_name, url, verify_certificates, token, auth_mode, auth_oauth, auth_oauth_params, auth_oauth_token_last_updated, auth_oauth_token_expires, auth_oauth_url_callback, auth_oauth_url_start, compatibility_mode, service_provider_config_cache_timeout, exclude_users_service_account, sync_page_size, sync_page_timeout, group_filters, dry_run].hash
+      [pk, name, property_mappings, property_mappings_group, component, assigned_backchannel_application_slug, assigned_backchannel_application_name, verbose_name, verbose_name_plural, meta_model_name, url, verify_certificates, auth_mode, auth_oauth, auth_oauth_params, auth_oauth_token_last_updated, auth_oauth_token_expires, auth_oauth_url_callback, auth_oauth_url_start, compatibility_mode, service_provider_config_cache_timeout, exclude_users_service_account, sync_page_size, sync_page_timeout, group_filters, dry_run].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/version.rb

@@ -6,6 +6,6 @@ Any manual changes will be lost when the OpenAPI scheme changes.
 
 module Authentik
   module Api
-    VERSION = '2026.5.5'
+    VERSION = '2026.5.7'
   end
 end

data/spec/models/authenticator_email_stage_spec.rb

@@ -99,12 +99,6 @@ describe Authentik::Api::AuthenticatorEmailStage do
     end
   end
 
-  describe 'test attribute "password"' do
-    it 'should work' do
-      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
-    end
-  end
-
   describe 'test attribute "use_tls"' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/

data/spec/models/authenticator_sms_stage_spec.rb

@@ -93,18 +93,6 @@ describe Authentik::Api::AuthenticatorSMSStage do
     end
   end
 
-  describe 'test attribute "auth"' do
-    it 'should work' do
-      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
-    end
-  end
-
-  describe 'test attribute "auth_password"' do
-    it 'should work' do
-      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
-    end
-  end
-
   describe 'test attribute "auth_type"' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/

data/spec/models/current_brand_flags_spec.rb

@@ -21,18 +21,6 @@ describe Authentik::Api::CurrentBrandFlags do
     end
   end
 
-  describe 'test attribute "core_default_app_access"' do
-    it 'should work' do
-      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
-    end
-  end
-
-  describe 'test attribute "enterprise_audit_include_expanded_diff"' do
-    it 'should work' do
-      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
-    end
-  end
-
   describe 'test attribute "flows_continuous_login"' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/

data/spec/models/kerberos_source_spec.rb

@@ -183,12 +183,6 @@ describe Authentik::Api::KerberosSource do
     end
   end
 
-  describe 'test attribute "sync_ccache"' do
-    it 'should work' do
-      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
-    end
-  end
-
   describe 'test attribute "connectivity"' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
@@ -201,12 +195,6 @@ describe Authentik::Api::KerberosSource do
     end
   end
 
-  describe 'test attribute "spnego_ccache"' do
-    it 'should work' do
-      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
-    end
-  end
-
   describe 'test attribute "password_login_update_internal_password"' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/

data/spec/models/microsoft_entra_provider_spec.rb

@@ -87,12 +87,6 @@ describe Authentik::Api::MicrosoftEntraProvider do
     end
   end
 
-  describe 'test attribute "client_secret"' do
-    it 'should work' do
-      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
-    end
-  end
-
   describe 'test attribute "tenant_id"' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/

data/spec/models/scim_provider_spec.rb

@@ -93,12 +93,6 @@ describe Authentik::Api::SCIMProvider do
     end
   end
 
-  describe 'test attribute "token"' do
-    it 'should work' do
-      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
-    end
-  end
-
   describe 'test attribute "auth_mode"' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: authentik-api
 version: !ruby/object:Gem::Version
-  version: 2026.5.5
+  version: 2026.5.7
 platform: ruby
 authors:
 - David Uhlig