authentik-api 2026.5.6 → 2026.8.0.rc1

data/lib/authentik/api/models/captcha_stage_request.rb

@@ -22,6 +22,8 @@ module Authentik::Api
 
     attr_accessor :api_url
 
+    attr_accessor :request_content_type
+
     attr_accessor :interactive
 
     attr_accessor :score_min_threshold
@@ -31,6 +33,28 @@ module Authentik::Api
     # When enabled and the received captcha score is outside of the given threshold, the stage will show an error message. When not enabled, the flow will continue, but the data from the captcha will be available in the context for policy decisions
     attr_accessor :error_on_invalid_score
 
+    class EnumAttributeValidator
+      attr_reader :datatype
+      attr_reader :allowable_values
+
+      def initialize(datatype, allowable_values)
+        @allowable_values = allowable_values.map do |value|
+          case datatype.to_s
+          when /Integer/i
+            value.to_i
+          when /Float/i
+            value.to_f
+          else
+            value
+          end
+        end
+      end
+
+      def valid?(value)
+        !value || allowable_values.include?(value)
+      end
+    end
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
@@ -39,6 +63,7 @@ module Authentik::Api
         :'private_key' => :'private_key',
         :'js_url' => :'js_url',
         :'api_url' => :'api_url',
+        :'request_content_type' => :'request_content_type',
         :'interactive' => :'interactive',
         :'score_min_threshold' => :'score_min_threshold',
         :'score_max_threshold' => :'score_max_threshold',
@@ -64,6 +89,7 @@ module Authentik::Api
         :'private_key' => :'String',
         :'js_url' => :'String',
         :'api_url' => :'String',
+        :'request_content_type' => :'RequestContentTypeEnum',
         :'interactive' => :'Boolean',
         :'score_min_threshold' => :'Float',
         :'score_max_threshold' => :'Float',
@@ -119,6 +145,10 @@ module Authentik::Api
         self.api_url = attributes[:'api_url']
       end
 
+      if attributes.key?(:'request_content_type')
+        self.request_content_type = attributes[:'request_content_type']
+      end
+
       if attributes.key?(:'interactive')
         self.interactive = attributes[:'interactive']
       end
@@ -271,6 +301,7 @@ module Authentik::Api
           private_key == o.private_key &&
           js_url == o.js_url &&
           api_url == o.api_url &&
+          request_content_type == o.request_content_type &&
           interactive == o.interactive &&
           score_min_threshold == o.score_min_threshold &&
           score_max_threshold == o.score_max_threshold &&
@@ -286,7 +317,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, public_key, private_key, js_url, api_url, interactive, score_min_threshold, score_max_threshold, error_on_invalid_score].hash
+      [name, public_key, private_key, js_url, api_url, request_content_type, interactive, score_min_threshold, score_max_threshold, error_on_invalid_score].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/compatibility_mode_enum.rb

@@ -13,11 +13,12 @@ module Authentik::Api
     AWS = "aws".freeze
     SLACK = "slack".freeze
     SFDC = "sfdc".freeze
+    GITLAB = "gitlab".freeze
     WEBEX = "webex".freeze
     VCENTER = "vcenter".freeze
 
     def self.all_vars
-      @all_vars ||= [DEFAULT, AWS, SLACK, SFDC, WEBEX, VCENTER].freeze
+      @all_vars ||= [DEFAULT, AWS, SLACK, SFDC, GITLAB, WEBEX, VCENTER].freeze
     end
 
     # Builds the enum from string

data/lib/authentik/api/models/content_type.rb

@@ -17,13 +17,16 @@ module Authentik::Api
 
     attr_accessor :verbose_name_plural
 
+    attr_accessor :fully_qualified_model
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
         :'id' => :'id',
         :'app_label' => :'app_label',
         :'model' => :'model',
-        :'verbose_name_plural' => :'verbose_name_plural'
+        :'verbose_name_plural' => :'verbose_name_plural',
+        :'fully_qualified_model' => :'fully_qualified_model'
       }
     end
 
@@ -43,7 +46,8 @@ module Authentik::Api
         :'id' => :'Integer',
         :'app_label' => :'String',
         :'model' => :'String',
-        :'verbose_name_plural' => :'String'
+        :'verbose_name_plural' => :'String',
+        :'fully_qualified_model' => :'String'
       }
     end
 
@@ -92,6 +96,12 @@ module Authentik::Api
       else
         self.verbose_name_plural = nil
       end
+
+      if attributes.key?(:'fully_qualified_model')
+        self.fully_qualified_model = attributes[:'fully_qualified_model']
+      else
+        self.fully_qualified_model = nil
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -115,6 +125,10 @@ module Authentik::Api
         invalid_properties.push('invalid value for "verbose_name_plural", verbose_name_plural cannot be nil.')
       end
 
+      if @fully_qualified_model.nil?
+        invalid_properties.push('invalid value for "fully_qualified_model", fully_qualified_model cannot be nil.')
+      end
+
       invalid_properties
     end
 
@@ -126,6 +140,7 @@ module Authentik::Api
       return false if @app_label.nil?
       return false if @model.nil?
       return false if @verbose_name_plural.nil?
+      return false if @fully_qualified_model.nil?
       true
     end
 
@@ -169,6 +184,16 @@ module Authentik::Api
       @verbose_name_plural = verbose_name_plural
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] fully_qualified_model Value to be assigned
+    def fully_qualified_model=(fully_qualified_model)
+      if fully_qualified_model.nil?
+        fail ArgumentError, 'fully_qualified_model cannot be nil'
+      end
+
+      @fully_qualified_model = fully_qualified_model
+    end
+
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)
@@ -177,7 +202,8 @@ module Authentik::Api
           id == o.id &&
           app_label == o.app_label &&
           model == o.model &&
-          verbose_name_plural == o.verbose_name_plural
+          verbose_name_plural == o.verbose_name_plural &&
+          fully_qualified_model == o.fully_qualified_model
     end
 
     # @see the `==` method
@@ -189,7 +215,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [id, app_label, model, verbose_name_plural].hash
+      [id, app_label, model, verbose_name_plural, fully_qualified_model].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/current_brand.rb

@@ -30,6 +30,8 @@ module Authentik::Api
 
     attr_accessor :flow_authentication
 
+    attr_accessor :flow_user_switch
+
     attr_accessor :flow_invalidation
 
     attr_accessor :flow_recovery
@@ -42,6 +44,8 @@ module Authentik::Api
 
     attr_accessor :flow_lockdown
 
+    attr_accessor :flow_request
+
     attr_accessor :default_locale
 
     attr_accessor :flags
@@ -81,12 +85,14 @@ module Authentik::Api
         :'ui_footer_links' => :'ui_footer_links',
         :'ui_theme' => :'ui_theme',
         :'flow_authentication' => :'flow_authentication',
+        :'flow_user_switch' => :'flow_user_switch',
         :'flow_invalidation' => :'flow_invalidation',
         :'flow_recovery' => :'flow_recovery',
         :'flow_unenrollment' => :'flow_unenrollment',
         :'flow_user_settings' => :'flow_user_settings',
         :'flow_device_code' => :'flow_device_code',
         :'flow_lockdown' => :'flow_lockdown',
+        :'flow_request' => :'flow_request',
         :'default_locale' => :'default_locale',
         :'flags' => :'flags'
       }
@@ -115,12 +121,14 @@ module Authentik::Api
         :'ui_footer_links' => :'Array<FooterLink>',
         :'ui_theme' => :'UiThemeEnum',
         :'flow_authentication' => :'String',
+        :'flow_user_switch' => :'String',
         :'flow_invalidation' => :'String',
         :'flow_recovery' => :'String',
         :'flow_unenrollment' => :'String',
         :'flow_user_settings' => :'String',
         :'flow_device_code' => :'String',
         :'flow_lockdown' => :'String',
+        :'flow_request' => :'String',
         :'default_locale' => :'String',
         :'flags' => :'CurrentBrandFlags'
       }
@@ -210,6 +218,10 @@ module Authentik::Api
         self.flow_authentication = attributes[:'flow_authentication']
       end
 
+      if attributes.key?(:'flow_user_switch')
+        self.flow_user_switch = attributes[:'flow_user_switch']
+      end
+
       if attributes.key?(:'flow_invalidation')
         self.flow_invalidation = attributes[:'flow_invalidation']
       end
@@ -234,6 +246,10 @@ module Authentik::Api
         self.flow_lockdown = attributes[:'flow_lockdown']
       end
 
+      if attributes.key?(:'flow_request')
+        self.flow_request = attributes[:'flow_request']
+      end
+
       if attributes.key?(:'default_locale')
         self.default_locale = attributes[:'default_locale']
       else
@@ -412,12 +428,14 @@ module Authentik::Api
           ui_footer_links == o.ui_footer_links &&
           ui_theme == o.ui_theme &&
           flow_authentication == o.flow_authentication &&
+          flow_user_switch == o.flow_user_switch &&
           flow_invalidation == o.flow_invalidation &&
           flow_recovery == o.flow_recovery &&
           flow_unenrollment == o.flow_unenrollment &&
           flow_user_settings == o.flow_user_settings &&
           flow_device_code == o.flow_device_code &&
           flow_lockdown == o.flow_lockdown &&
+          flow_request == o.flow_request &&
           default_locale == o.default_locale &&
           flags == o.flags
     end
@@ -431,7 +449,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [matched_domain, branding_title, branding_logo, branding_logo_themed_urls, branding_favicon, branding_favicon_themed_urls, branding_custom_css, ui_footer_links, ui_theme, flow_authentication, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, flow_lockdown, default_locale, flags].hash
+      [matched_domain, branding_title, branding_logo, branding_logo_themed_urls, branding_favicon, branding_favicon_themed_urls, branding_custom_css, ui_footer_links, ui_theme, flow_authentication, flow_user_switch, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, flow_lockdown, flow_request, default_locale, flags].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/current_brand_flags.rb

@@ -9,12 +9,6 @@ require 'time'
 
 module Authentik::Api
   class CurrentBrandFlags < ApiModelBase
-    # Configure if applications without any policy/group/user bindings should be accessible to any user.
-    attr_accessor :core_default_app_access
-
-    # Include additional information in audit logs, may incur a performance penalty.
-    attr_accessor :enterprise_audit_include_expanded_diff
-
     # Upon successful authentication, re-start authentication in other open tabs.
     attr_accessor :flows_continuous_login
 
@@ -24,8 +18,6 @@ module Authentik::Api
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
-        :'core_default_app_access' => :'core_default_app_access',
-        :'enterprise_audit_include_expanded_diff' => :'enterprise_audit_include_expanded_diff',
         :'flows_continuous_login' => :'flows_continuous_login',
         :'flows_refresh_others' => :'flows_refresh_others'
       }
@@ -44,8 +36,6 @@ module Authentik::Api
     # Attribute type mapping.
     def self.openapi_types
       {
-        :'core_default_app_access' => :'Boolean',
-        :'enterprise_audit_include_expanded_diff' => :'Boolean',
         :'flows_continuous_login' => :'Boolean',
         :'flows_refresh_others' => :'Boolean'
       }
@@ -73,18 +63,6 @@ module Authentik::Api
         h[k.to_sym] = v
       }
 
-      if attributes.key?(:'core_default_app_access')
-        self.core_default_app_access = attributes[:'core_default_app_access']
-      else
-        self.core_default_app_access = nil
-      end
-
-      if attributes.key?(:'enterprise_audit_include_expanded_diff')
-        self.enterprise_audit_include_expanded_diff = attributes[:'enterprise_audit_include_expanded_diff']
-      else
-        self.enterprise_audit_include_expanded_diff = nil
-      end
-
       if attributes.key?(:'flows_continuous_login')
         self.flows_continuous_login = attributes[:'flows_continuous_login']
       else
@@ -103,14 +81,6 @@ module Authentik::Api
     def list_invalid_properties
       warn '[DEPRECATED] the `list_invalid_properties` method is obsolete'
       invalid_properties = Array.new
-      if @core_default_app_access.nil?
-        invalid_properties.push('invalid value for "core_default_app_access", core_default_app_access cannot be nil.')
-      end
-
-      if @enterprise_audit_include_expanded_diff.nil?
-        invalid_properties.push('invalid value for "enterprise_audit_include_expanded_diff", enterprise_audit_include_expanded_diff cannot be nil.')
-      end
-
       if @flows_continuous_login.nil?
         invalid_properties.push('invalid value for "flows_continuous_login", flows_continuous_login cannot be nil.')
       end
@@ -126,33 +96,11 @@ module Authentik::Api
     # @return true if the model is valid
     def valid?
       warn '[DEPRECATED] the `valid?` method is obsolete'
-      return false if @core_default_app_access.nil?
-      return false if @enterprise_audit_include_expanded_diff.nil?
       return false if @flows_continuous_login.nil?
       return false if @flows_refresh_others.nil?
       true
     end
 
-    # Custom attribute writer method with validation
-    # @param [Object] core_default_app_access Value to be assigned
-    def core_default_app_access=(core_default_app_access)
-      if core_default_app_access.nil?
-        fail ArgumentError, 'core_default_app_access cannot be nil'
-      end
-
-      @core_default_app_access = core_default_app_access
-    end
-
-    # Custom attribute writer method with validation
-    # @param [Object] enterprise_audit_include_expanded_diff Value to be assigned
-    def enterprise_audit_include_expanded_diff=(enterprise_audit_include_expanded_diff)
-      if enterprise_audit_include_expanded_diff.nil?
-        fail ArgumentError, 'enterprise_audit_include_expanded_diff cannot be nil'
-      end
-
-      @enterprise_audit_include_expanded_diff = enterprise_audit_include_expanded_diff
-    end
-
     # Custom attribute writer method with validation
     # @param [Object] flows_continuous_login Value to be assigned
     def flows_continuous_login=(flows_continuous_login)
@@ -178,8 +126,6 @@ module Authentik::Api
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
-          core_default_app_access == o.core_default_app_access &&
-          enterprise_audit_include_expanded_diff == o.enterprise_audit_include_expanded_diff &&
           flows_continuous_login == o.flows_continuous_login &&
           flows_refresh_others == o.flows_refresh_others
     end
@@ -193,7 +139,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [core_default_app_access, enterprise_audit_include_expanded_diff, flows_continuous_login, flows_refresh_others].hash
+      [flows_continuous_login, flows_refresh_others].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/device_user_binding.rb

@@ -39,6 +39,10 @@ module Authentik::Api
     # Result if the Policy execution fails.
     attr_accessor :failure_result
 
+    attr_accessor :expires
+
+    attr_accessor :expiring
+
     attr_accessor :is_primary
 
     attr_accessor :connector
@@ -61,6 +65,8 @@ module Authentik::Api
         :'order' => :'order',
         :'timeout' => :'timeout',
         :'failure_result' => :'failure_result',
+        :'expires' => :'expires',
+        :'expiring' => :'expiring',
         :'is_primary' => :'is_primary',
         :'connector' => :'connector',
         :'connector_obj' => :'connector_obj'
@@ -93,6 +99,8 @@ module Authentik::Api
         :'order' => :'Integer',
         :'timeout' => :'Integer',
         :'failure_result' => :'Boolean',
+        :'expires' => :'Time',
+        :'expiring' => :'Boolean',
         :'is_primary' => :'Boolean',
         :'connector' => :'String',
         :'connector_obj' => :'Connector'
@@ -108,6 +116,7 @@ module Authentik::Api
         :'policy_obj',
         :'group_obj',
         :'user_obj',
+        :'expires',
         :'connector',
       ])
     end
@@ -192,6 +201,18 @@ module Authentik::Api
         self.failure_result = attributes[:'failure_result']
       end
 
+      if attributes.key?(:'expires')
+        self.expires = attributes[:'expires']
+      else
+        self.expires = nil
+      end
+
+      if attributes.key?(:'expiring')
+        self.expiring = attributes[:'expiring']
+      else
+        self.expiring = nil
+      end
+
       if attributes.key?(:'is_primary')
         self.is_primary = attributes[:'is_primary']
       end
@@ -242,6 +263,10 @@ module Authentik::Api
         invalid_properties.push('invalid value for "timeout", must be greater than or equal to 0.')
       end
 
+      if @expiring.nil?
+        invalid_properties.push('invalid value for "expiring", expiring cannot be nil.')
+      end
+
       if @connector_obj.nil?
         invalid_properties.push('invalid value for "connector_obj", connector_obj cannot be nil.')
       end
@@ -260,6 +285,7 @@ module Authentik::Api
       return false if @order < -2147483648
       return false if !@timeout.nil? && @timeout > 2147483647
       return false if !@timeout.nil? && @timeout < 0
+      return false if @expiring.nil?
       return false if @connector_obj.nil?
       true
     end
@@ -320,6 +346,16 @@ module Authentik::Api
       @timeout = timeout
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] expiring Value to be assigned
+    def expiring=(expiring)
+      if expiring.nil?
+        fail ArgumentError, 'expiring cannot be nil'
+      end
+
+      @expiring = expiring
+    end
+
     # Custom attribute writer method with validation
     # @param [Object] connector_obj Value to be assigned
     def connector_obj=(connector_obj)
@@ -348,6 +384,8 @@ module Authentik::Api
           order == o.order &&
           timeout == o.timeout &&
           failure_result == o.failure_result &&
+          expires == o.expires &&
+          expiring == o.expiring &&
           is_primary == o.is_primary &&
           connector == o.connector &&
           connector_obj == o.connector_obj
@@ -362,7 +400,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, policy, group, user, policy_obj, group_obj, user_obj, target, negate, enabled, order, timeout, failure_result, is_primary, connector, connector_obj].hash
+      [pk, policy, group, user, policy_obj, group_obj, user_obj, target, negate, enabled, order, timeout, failure_result, expires, expiring, is_primary, connector, connector_obj].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/event_actions.rb

@@ -13,6 +13,7 @@ module Authentik::Api
     LOGIN_FAILED = "login_failed".freeze
     LOGOUT = "logout".freeze
     USER_WRITE = "user_write".freeze
+    USER_OFFBOARDED = "user_offboarded".freeze
     SUSPICIOUS_REQUEST = "suspicious_request".freeze
     PASSWORD_SET = "password_set".freeze
     SECRET_VIEW = "secret_view".freeze
@@ -41,10 +42,14 @@ module Authentik::Api
     REVIEW_OVERDUE = "review_overdue".freeze
     REVIEW_ATTESTED = "review_attested".freeze
     REVIEW_COMPLETED = "review_completed".freeze
+    ACCESS_REQUEST_CREATED = "access_request_created".freeze
+    ACCESS_REQUEST_APPROVED = "access_request_approved".freeze
+    ACCESS_REQUEST_DENIED = "access_request_denied".freeze
+    ACCESS_REQUEST_REVOKED = "access_request_revoked".freeze
     CUSTOM = "custom_".freeze
 
     def self.all_vars
-      @all_vars ||= [LOGIN, LOGIN_FAILED, LOGOUT, USER_WRITE, SUSPICIOUS_REQUEST, PASSWORD_SET, SECRET_VIEW, SECRET_ROTATE, INVITATION_USED, AUTHORIZE_APPLICATION, SOURCE_LINKED, IMPERSONATION_STARTED, IMPERSONATION_ENDED, FLOW_EXECUTION, POLICY_EXECUTION, POLICY_EXCEPTION, PROPERTY_MAPPING_EXCEPTION, SYSTEM_TASK_EXECUTION, SYSTEM_TASK_EXCEPTION, SYSTEM_EXCEPTION, CONFIGURATION_ERROR, CONFIGURATION_WARNING, MODEL_CREATED, MODEL_UPDATED, MODEL_DELETED, EMAIL_SENT, UPDATE_AVAILABLE, EXPORT_READY, REVIEW_INITIATED, REVIEW_OVERDUE, REVIEW_ATTESTED, REVIEW_COMPLETED, CUSTOM].freeze
+      @all_vars ||= [LOGIN, LOGIN_FAILED, LOGOUT, USER_WRITE, USER_OFFBOARDED, SUSPICIOUS_REQUEST, PASSWORD_SET, SECRET_VIEW, SECRET_ROTATE, INVITATION_USED, AUTHORIZE_APPLICATION, SOURCE_LINKED, IMPERSONATION_STARTED, IMPERSONATION_ENDED, FLOW_EXECUTION, POLICY_EXECUTION, POLICY_EXCEPTION, PROPERTY_MAPPING_EXCEPTION, SYSTEM_TASK_EXECUTION, SYSTEM_TASK_EXCEPTION, SYSTEM_EXCEPTION, CONFIGURATION_ERROR, CONFIGURATION_WARNING, MODEL_CREATED, MODEL_UPDATED, MODEL_DELETED, EMAIL_SENT, UPDATE_AVAILABLE, EXPORT_READY, REVIEW_INITIATED, REVIEW_OVERDUE, REVIEW_ATTESTED, REVIEW_COMPLETED, ACCESS_REQUEST_CREATED, ACCESS_REQUEST_APPROVED, ACCESS_REQUEST_DENIED, ACCESS_REQUEST_REVOKED, CUSTOM].freeze
     end
 
     # Builds the enum from string