authentik-api 2026.5.5 → 2026.8.0.rc1

data/lib/authentik/api/models/user_switch_action_enum.rb

@@ -0,0 +1,34 @@
+=begin
+This file is automatically generated by: https://openapi-generator.tech.
+Any manual changes will be lost when the OpenAPI scheme changes.
+
+=end
+
+require 'date'
+require 'time'
+
+module Authentik::Api
+  class UserSwitchActionEnum
+    ADD = "add".freeze
+    SWITCH = "switch".freeze
+
+    def self.all_vars
+      @all_vars ||= [ADD, SWITCH].freeze
+    end
+
+    # Builds the enum from string
+    # @param [String] The enum value in the form of the string
+    # @return [String] The enum value
+    def self.build_from_hash(value)
+      new.build_from_hash(value)
+    end
+
+    # Builds the enum from string
+    # @param [String] The enum value in the form of the string
+    # @return [String] The enum value
+    def build_from_hash(value)
+      return value if UserSwitchActionEnum.all_vars.include?(value)
+      raise "Invalid ENUM value #{value} for class #UserSwitchActionEnum"
+    end
+  end
+end

data/lib/authentik/api/models/user_switch_request.rb

@@ -0,0 +1,173 @@
+=begin
+This file is automatically generated by: https://openapi-generator.tech.
+Any manual changes will be lost when the OpenAPI scheme changes.
+
+=end
+
+require 'date'
+require 'time'
+
+module Authentik::Api
+  # Request to add or switch users in the current browser.
+  class UserSwitchRequest < ApiModelBase
+    attr_accessor :action
+
+    attr_accessor :user_pk
+
+    class EnumAttributeValidator
+      attr_reader :datatype
+      attr_reader :allowable_values
+
+      def initialize(datatype, allowable_values)
+        @allowable_values = allowable_values.map do |value|
+          case datatype.to_s
+          when /Integer/i
+            value.to_i
+          when /Float/i
+            value.to_f
+          else
+            value
+          end
+        end
+      end
+
+      def valid?(value)
+        !value || allowable_values.include?(value)
+      end
+    end
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    def self.attribute_map
+      {
+        :'action' => :'action',
+        :'user_pk' => :'user_pk'
+      }
+    end
+
+    # Returns attribute mapping this model knows about
+    def self.acceptable_attribute_map
+      attribute_map
+    end
+
+    # Returns all the JSON keys this model knows about
+    def self.acceptable_attributes
+      acceptable_attribute_map.values
+    end
+
+    # Attribute type mapping.
+    def self.openapi_types
+      {
+        :'action' => :'UserSwitchActionEnum',
+        :'user_pk' => :'Integer'
+      }
+    end
+
+    # List of attributes with nullable: true
+    def self.openapi_nullable
+      Set.new([
+      ])
+    end
+
+    # Initializes the object
+    # @param [Hash] attributes Model attributes in the form of hash
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `Authentik::Api::UserSwitchRequest` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      acceptable_attribute_map = self.class.acceptable_attribute_map
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!acceptable_attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `Authentik::Api::UserSwitchRequest`. Please check the name to make sure it's valid. List of attributes: " + acceptable_attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'action')
+        self.action = attributes[:'action']
+      end
+
+      if attributes.key?(:'user_pk')
+        self.user_pk = attributes[:'user_pk']
+      end
+    end
+
+    # Show invalid properties with the reasons. Usually used together with valid?
+    # @return Array for valid properties with the reasons
+    def list_invalid_properties
+      warn '[DEPRECATED] the `list_invalid_properties` method is obsolete'
+      invalid_properties = Array.new
+      invalid_properties
+    end
+
+    # Check to see if the all the properties in the model are valid
+    # @return true if the model is valid
+    def valid?
+      warn '[DEPRECATED] the `valid?` method is obsolete'
+      true
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param [Object] Object to be compared
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          action == o.action &&
+          user_pk == o.user_pk
+    end
+
+    # @see the `==` method
+    # @param [Object] Object to be compared
+    def eql?(o)
+      self == o
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    def hash
+      [action, user_pk].hash
+    end
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def self.build_from_hash(attributes)
+      return nil unless attributes.is_a?(Hash)
+      attributes = attributes.transform_keys(&:to_sym)
+      transformed_hash = {}
+      openapi_types.each_pair do |key, type|
+        if attributes.key?(attribute_map[key]) && attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = nil
+        elsif type =~ /\AArray<(.*)>/i
+          # check to ensure the input is an array given that the attribute
+          # is documented as an array but the input is not
+          if attributes[attribute_map[key]].is_a?(Array)
+            transformed_hash["#{key}"] = attributes[attribute_map[key]].map { |v| _deserialize($1, v) }
+          end
+        elsif !attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = _deserialize(type, attributes[attribute_map[key]])
+        end
+      end
+      new(transformed_hash)
+    end
+
+    # Returns the object in the form of hash
+    # @return [Hash] Returns the object in the form of hash
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      hash
+    end
+
+  end
+
+end

data/lib/authentik/api/models/user_switch_response.rb

@@ -0,0 +1,159 @@
+=begin
+This file is automatically generated by: https://openapi-generator.tech.
+Any manual changes will be lost when the OpenAPI scheme changes.
+
+=end
+
+require 'date'
+require 'time'
+
+module Authentik::Api
+  # Redirect returned after planning a user switch.
+  class UserSwitchResponse < ApiModelBase
+    attr_accessor :redirect
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    def self.attribute_map
+      {
+        :'redirect' => :'redirect'
+      }
+    end
+
+    # Returns attribute mapping this model knows about
+    def self.acceptable_attribute_map
+      attribute_map
+    end
+
+    # Returns all the JSON keys this model knows about
+    def self.acceptable_attributes
+      acceptable_attribute_map.values
+    end
+
+    # Attribute type mapping.
+    def self.openapi_types
+      {
+        :'redirect' => :'String'
+      }
+    end
+
+    # List of attributes with nullable: true
+    def self.openapi_nullable
+      Set.new([
+      ])
+    end
+
+    # Initializes the object
+    # @param [Hash] attributes Model attributes in the form of hash
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `Authentik::Api::UserSwitchResponse` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      acceptable_attribute_map = self.class.acceptable_attribute_map
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!acceptable_attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `Authentik::Api::UserSwitchResponse`. Please check the name to make sure it's valid. List of attributes: " + acceptable_attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'redirect')
+        self.redirect = attributes[:'redirect']
+      else
+        self.redirect = nil
+      end
+    end
+
+    # Show invalid properties with the reasons. Usually used together with valid?
+    # @return Array for valid properties with the reasons
+    def list_invalid_properties
+      warn '[DEPRECATED] the `list_invalid_properties` method is obsolete'
+      invalid_properties = Array.new
+      if @redirect.nil?
+        invalid_properties.push('invalid value for "redirect", redirect cannot be nil.')
+      end
+
+      invalid_properties
+    end
+
+    # Check to see if the all the properties in the model are valid
+    # @return true if the model is valid
+    def valid?
+      warn '[DEPRECATED] the `valid?` method is obsolete'
+      return false if @redirect.nil?
+      true
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] redirect Value to be assigned
+    def redirect=(redirect)
+      if redirect.nil?
+        fail ArgumentError, 'redirect cannot be nil'
+      end
+
+      @redirect = redirect
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param [Object] Object to be compared
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          redirect == o.redirect
+    end
+
+    # @see the `==` method
+    # @param [Object] Object to be compared
+    def eql?(o)
+      self == o
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    def hash
+      [redirect].hash
+    end
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def self.build_from_hash(attributes)
+      return nil unless attributes.is_a?(Hash)
+      attributes = attributes.transform_keys(&:to_sym)
+      transformed_hash = {}
+      openapi_types.each_pair do |key, type|
+        if attributes.key?(attribute_map[key]) && attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = nil
+        elsif type =~ /\AArray<(.*)>/i
+          # check to ensure the input is an array given that the attribute
+          # is documented as an array but the input is not
+          if attributes[attribute_map[key]].is_a?(Array)
+            transformed_hash["#{key}"] = attributes[attribute_map[key]].map { |v| _deserialize($1, v) }
+          end
+        elsif !attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = _deserialize(type, attributes[attribute_map[key]])
+        end
+      end
+      new(transformed_hash)
+    end
+
+    # Returns the object in the form of hash
+    # @return [Hash] Returns the object in the form of hash
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      hash
+    end
+
+  end
+
+end

data/lib/authentik/api/models/ws_federation_provider.rb

@@ -68,6 +68,9 @@ module Authentik::Api
     # Configure how the AuthnContextClassRef value will be created. When left empty, the AuthnContextClassRef will be set based on which authentication methods the user used to authenticate.
     attr_accessor :authn_context_class_ref_mapping
 
+    # SAML assertion version to issue in the security token. Microsoft Entra ID and classic ADFS-style relying parties typically require SAML 1.1.
+    attr_accessor :saml_version
+
     attr_accessor :digest_algorithm
 
     attr_accessor :signature_algorithm
@@ -90,6 +93,9 @@ module Authentik::Api
     # Get WS-Fed url
     attr_accessor :url_wsfed
 
+    # Get Issuer/EntityID URL
+    attr_accessor :url_issuer
+
     class EnumAttributeValidator
       attr_reader :datatype
       attr_reader :allowable_values
@@ -136,6 +142,7 @@ module Authentik::Api
         :'session_valid_not_on_or_after' => :'session_valid_not_on_or_after',
         :'name_id_mapping' => :'name_id_mapping',
         :'authn_context_class_ref_mapping' => :'authn_context_class_ref_mapping',
+        :'saml_version' => :'saml_version',
         :'digest_algorithm' => :'digest_algorithm',
         :'signature_algorithm' => :'signature_algorithm',
         :'signing_kp' => :'signing_kp',
@@ -144,7 +151,8 @@ module Authentik::Api
         :'sign_logout_request' => :'sign_logout_request',
         :'default_name_id_policy' => :'default_name_id_policy',
         :'url_download_metadata' => :'url_download_metadata',
-        :'url_wsfed' => :'url_wsfed'
+        :'url_wsfed' => :'url_wsfed',
+        :'url_issuer' => :'url_issuer'
       }
     end
 
@@ -182,6 +190,7 @@ module Authentik::Api
         :'session_valid_not_on_or_after' => :'String',
         :'name_id_mapping' => :'String',
         :'authn_context_class_ref_mapping' => :'String',
+        :'saml_version' => :'SamlVersionEnum',
         :'digest_algorithm' => :'DigestAlgorithmEnum',
         :'signature_algorithm' => :'SignatureAlgorithmEnum',
         :'signing_kp' => :'String',
@@ -190,7 +199,8 @@ module Authentik::Api
         :'sign_logout_request' => :'Boolean',
         :'default_name_id_policy' => :'SAMLNameIDPolicyEnum',
         :'url_download_metadata' => :'String',
-        :'url_wsfed' => :'String'
+        :'url_wsfed' => :'String',
+        :'url_issuer' => :'String'
       }
     end
 
@@ -339,6 +349,10 @@ module Authentik::Api
         self.authn_context_class_ref_mapping = attributes[:'authn_context_class_ref_mapping']
       end
 
+      if attributes.key?(:'saml_version')
+        self.saml_version = attributes[:'saml_version']
+      end
+
       if attributes.key?(:'digest_algorithm')
         self.digest_algorithm = attributes[:'digest_algorithm']
       end
@@ -378,6 +392,12 @@ module Authentik::Api
       else
         self.url_wsfed = nil
       end
+
+      if attributes.key?(:'url_issuer')
+        self.url_issuer = attributes[:'url_issuer']
+      else
+        self.url_issuer = nil
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -433,6 +453,10 @@ module Authentik::Api
         invalid_properties.push('invalid value for "url_wsfed", url_wsfed cannot be nil.')
       end
 
+      if @url_issuer.nil?
+        invalid_properties.push('invalid value for "url_issuer", url_issuer cannot be nil.')
+      end
+
       invalid_properties
     end
 
@@ -452,6 +476,7 @@ module Authentik::Api
       return false if @wtrealm.nil?
       return false if @url_download_metadata.nil?
       return false if @url_wsfed.nil?
+      return false if @url_issuer.nil?
       true
     end
 
@@ -575,6 +600,16 @@ module Authentik::Api
       @url_wsfed = url_wsfed
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] url_issuer Value to be assigned
+    def url_issuer=(url_issuer)
+      if url_issuer.nil?
+        fail ArgumentError, 'url_issuer cannot be nil'
+      end
+
+      @url_issuer = url_issuer
+    end
+
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)
@@ -601,6 +636,7 @@ module Authentik::Api
           session_valid_not_on_or_after == o.session_valid_not_on_or_after &&
           name_id_mapping == o.name_id_mapping &&
           authn_context_class_ref_mapping == o.authn_context_class_ref_mapping &&
+          saml_version == o.saml_version &&
           digest_algorithm == o.digest_algorithm &&
           signature_algorithm == o.signature_algorithm &&
           signing_kp == o.signing_kp &&
@@ -609,7 +645,8 @@ module Authentik::Api
           sign_logout_request == o.sign_logout_request &&
           default_name_id_policy == o.default_name_id_policy &&
           url_download_metadata == o.url_download_metadata &&
-          url_wsfed == o.url_wsfed
+          url_wsfed == o.url_wsfed &&
+          url_issuer == o.url_issuer
     end
 
     # @see the `==` method
@@ -621,7 +658,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, component, assigned_application_slug, assigned_application_name, assigned_backchannel_application_slug, assigned_backchannel_application_name, verbose_name, verbose_name_plural, meta_model_name, reply_url, wtrealm, assertion_valid_not_before, assertion_valid_not_on_or_after, session_valid_not_on_or_after, name_id_mapping, authn_context_class_ref_mapping, digest_algorithm, signature_algorithm, signing_kp, encryption_kp, sign_assertion, sign_logout_request, default_name_id_policy, url_download_metadata, url_wsfed].hash
+      [pk, name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, component, assigned_application_slug, assigned_application_name, assigned_backchannel_application_slug, assigned_backchannel_application_name, verbose_name, verbose_name_plural, meta_model_name, reply_url, wtrealm, assertion_valid_not_before, assertion_valid_not_on_or_after, session_valid_not_on_or_after, name_id_mapping, authn_context_class_ref_mapping, saml_version, digest_algorithm, signature_algorithm, signing_kp, encryption_kp, sign_assertion, sign_logout_request, default_name_id_policy, url_download_metadata, url_wsfed, url_issuer].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/ws_federation_provider_request.rb

@@ -42,6 +42,9 @@ module Authentik::Api
     # Configure how the AuthnContextClassRef value will be created. When left empty, the AuthnContextClassRef will be set based on which authentication methods the user used to authenticate.
     attr_accessor :authn_context_class_ref_mapping
 
+    # SAML assertion version to issue in the security token. Microsoft Entra ID and classic ADFS-style relying parties typically require SAML 1.1.
+    attr_accessor :saml_version
+
     attr_accessor :digest_algorithm
 
     attr_accessor :signature_algorithm
@@ -95,6 +98,7 @@ module Authentik::Api
         :'session_valid_not_on_or_after' => :'session_valid_not_on_or_after',
         :'name_id_mapping' => :'name_id_mapping',
         :'authn_context_class_ref_mapping' => :'authn_context_class_ref_mapping',
+        :'saml_version' => :'saml_version',
         :'digest_algorithm' => :'digest_algorithm',
         :'signature_algorithm' => :'signature_algorithm',
         :'signing_kp' => :'signing_kp',
@@ -130,6 +134,7 @@ module Authentik::Api
         :'session_valid_not_on_or_after' => :'String',
         :'name_id_mapping' => :'String',
         :'authn_context_class_ref_mapping' => :'String',
+        :'saml_version' => :'SamlVersionEnum',
         :'digest_algorithm' => :'DigestAlgorithmEnum',
         :'signature_algorithm' => :'SignatureAlgorithmEnum',
         :'signing_kp' => :'String',
@@ -227,6 +232,10 @@ module Authentik::Api
         self.authn_context_class_ref_mapping = attributes[:'authn_context_class_ref_mapping']
       end
 
+      if attributes.key?(:'saml_version')
+        self.saml_version = attributes[:'saml_version']
+      end
+
       if attributes.key?(:'digest_algorithm')
         self.digest_algorithm = attributes[:'digest_algorithm']
       end
@@ -447,6 +456,7 @@ module Authentik::Api
           session_valid_not_on_or_after == o.session_valid_not_on_or_after &&
           name_id_mapping == o.name_id_mapping &&
           authn_context_class_ref_mapping == o.authn_context_class_ref_mapping &&
+          saml_version == o.saml_version &&
           digest_algorithm == o.digest_algorithm &&
           signature_algorithm == o.signature_algorithm &&
           signing_kp == o.signing_kp &&
@@ -465,7 +475,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, reply_url, wtrealm, assertion_valid_not_before, assertion_valid_not_on_or_after, session_valid_not_on_or_after, name_id_mapping, authn_context_class_ref_mapping, digest_algorithm, signature_algorithm, signing_kp, encryption_kp, sign_assertion, sign_logout_request, default_name_id_policy].hash
+      [name, authentication_flow, authorization_flow, invalidation_flow, property_mappings, reply_url, wtrealm, assertion_valid_not_before, assertion_valid_not_on_or_after, session_valid_not_on_or_after, name_id_mapping, authn_context_class_ref_mapping, saml_version, digest_algorithm, signature_algorithm, signing_kp, encryption_kp, sign_assertion, sign_logout_request, default_name_id_policy].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/version.rb

@@ -6,6 +6,6 @@ Any manual changes will be lost when the OpenAPI scheme changes.
 
 module Authentik
   module Api
-    VERSION = '2026.5.5'
+    VERSION = '2026.8.0.rc1'
   end
 end

data/spec/api/admin_api_spec.rb

@@ -87,6 +87,7 @@ describe 'AdminApi' do
   # unit tests for admin_models_list
   # Read-only view list all installed models
   # @param [Hash] opts the optional parameters
+  # @option opts [Boolean] :filter_has_attributes 
   # @return [Array<App>]
   describe 'admin_models_list test' do
     it 'should work' do