authentik-api 2026.5.6 → 2026.8.0.rc1

data/lib/authentik/api/models/ldap_source_request.rb

@@ -100,6 +100,9 @@ module Authentik::Api
     # When to trigger sync for outgoing providers
     attr_accessor :sync_outgoing_trigger_mode
 
+    # Sync group parentage/hierarchy from LDAP directories.
+    attr_accessor :sync_group_hierarchy
+
     class EnumAttributeValidator
       attr_reader :datatype
       attr_reader :allowable_values
@@ -159,7 +162,8 @@ module Authentik::Api
         :'sync_parent_group' => :'sync_parent_group',
         :'lookup_groups_from_user' => :'lookup_groups_from_user',
         :'delete_not_found_objects' => :'delete_not_found_objects',
-        :'sync_outgoing_trigger_mode' => :'sync_outgoing_trigger_mode'
+        :'sync_outgoing_trigger_mode' => :'sync_outgoing_trigger_mode',
+        :'sync_group_hierarchy' => :'sync_group_hierarchy'
       }
     end
 
@@ -210,7 +214,8 @@ module Authentik::Api
         :'sync_parent_group' => :'String',
         :'lookup_groups_from_user' => :'Boolean',
         :'delete_not_found_objects' => :'Boolean',
-        :'sync_outgoing_trigger_mode' => :'SyncOutgoingTriggerModeEnum'
+        :'sync_outgoing_trigger_mode' => :'SyncOutgoingTriggerModeEnum',
+        :'sync_group_hierarchy' => :'Boolean'
       }
     end
 
@@ -392,6 +397,10 @@ module Authentik::Api
       if attributes.key?(:'sync_outgoing_trigger_mode')
         self.sync_outgoing_trigger_mode = attributes[:'sync_outgoing_trigger_mode']
       end
+
+      if attributes.key?(:'sync_group_hierarchy')
+        self.sync_group_hierarchy = attributes[:'sync_group_hierarchy']
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -669,7 +678,8 @@ module Authentik::Api
           sync_parent_group == o.sync_parent_group &&
           lookup_groups_from_user == o.lookup_groups_from_user &&
           delete_not_found_objects == o.delete_not_found_objects &&
-          sync_outgoing_trigger_mode == o.sync_outgoing_trigger_mode
+          sync_outgoing_trigger_mode == o.sync_outgoing_trigger_mode &&
+          sync_group_hierarchy == o.sync_group_hierarchy
     end
 
     # @see the `==` method
@@ -681,7 +691,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, slug, enabled, promoted, authentication_flow, enrollment_flow, user_property_mappings, group_property_mappings, policy_engine_mode, user_matching_mode, user_path_template, icon, server_uri, peer_certificate, client_certificate, bind_cn, bind_password, start_tls, sni, base_dn, additional_user_dn, additional_group_dn, user_object_filter, group_object_filter, group_membership_field, user_membership_attribute, object_uniqueness_field, password_login_update_internal_password, sync_users, sync_users_password, sync_groups, sync_parent_group, lookup_groups_from_user, delete_not_found_objects, sync_outgoing_trigger_mode].hash
+      [name, slug, enabled, promoted, authentication_flow, enrollment_flow, user_property_mappings, group_property_mappings, policy_engine_mode, user_matching_mode, user_path_template, icon, server_uri, peer_certificate, client_certificate, bind_cn, bind_password, start_tls, sni, base_dn, additional_user_dn, additional_group_dn, user_object_filter, group_object_filter, group_membership_field, user_membership_attribute, object_uniqueness_field, password_login_update_internal_password, sync_users, sync_users_password, sync_groups, sync_parent_group, lookup_groups_from_user, delete_not_found_objects, sync_outgoing_trigger_mode, sync_group_hierarchy].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/lifecycle_rule.rb

@@ -101,11 +101,11 @@ module Authentik::Api
         :'interval' => :'String',
         :'grace_period' => :'String',
         :'reviewer_groups' => :'Array<String>',
-        :'reviewer_groups_obj' => :'Array<ReviewerGroup>',
+        :'reviewer_groups_obj' => :'Array<PartialGroup>',
         :'min_reviewers' => :'Integer',
         :'min_reviewers_is_per_group' => :'Boolean',
         :'reviewers' => :'Array<String>',
-        :'reviewers_obj' => :'Array<ReviewerUser>',
+        :'reviewers_obj' => :'Array<PartialUser>',
         :'notification_transports' => :'Array<String>',
         :'target_verbose' => :'String'
       }

data/lib/authentik/api/models/model_enum.rb

@@ -15,6 +15,7 @@ module Authentik::Api
     AUTHENTIK_CORE_APPLICATION = "authentik_core.application".freeze
     AUTHENTIK_CORE_APPLICATIONENTITLEMENT = "authentik_core.applicationentitlement".freeze
     AUTHENTIK_CORE_TOKEN = "authentik_core.token".freeze
+    AUTHENTIK_CORE_OBJECTATTRIBUTE = "authentik_core.objectattribute".freeze
     AUTHENTIK_CRYPTO_CERTIFICATEKEYPAIR = "authentik_crypto.certificatekeypair".freeze
     AUTHENTIK_ENDPOINTS_DEVICEUSERBINDING = "authentik_endpoints.deviceuserbinding".freeze
     AUTHENTIK_ENDPOINTS_DEVICEACCESSGROUP = "authentik_endpoints.deviceaccessgroup".freeze
@@ -44,6 +45,7 @@ module Authentik::Api
     AUTHENTIK_PROVIDERS_LDAP_LDAPPROVIDER = "authentik_providers_ldap.ldapprovider".freeze
     AUTHENTIK_PROVIDERS_OAUTH2_SCOPEMAPPING = "authentik_providers_oauth2.scopemapping".freeze
     AUTHENTIK_PROVIDERS_OAUTH2_OAUTH2PROVIDER = "authentik_providers_oauth2.oauth2provider".freeze
+    AUTHENTIK_PROVIDERS_OAUTH2_OAUTH2DYNAMICCLIENTREGISTRATION = "authentik_providers_oauth2.oauth2dynamicclientregistration".freeze
     AUTHENTIK_PROVIDERS_PROXY_PROXYPROVIDER = "authentik_providers_proxy.proxyprovider".freeze
     AUTHENTIK_PROVIDERS_RAC_RACPROVIDER = "authentik_providers_rac.racprovider".freeze
     AUTHENTIK_PROVIDERS_RAC_ENDPOINT = "authentik_providers_rac.endpoint".freeze
@@ -119,6 +121,7 @@ module Authentik::Api
     AUTHENTIK_LIFECYCLE_LIFECYCLERULE = "authentik_lifecycle.lifecyclerule".freeze
     AUTHENTIK_LIFECYCLE_LIFECYCLEITERATION = "authentik_lifecycle.lifecycleiteration".freeze
     AUTHENTIK_LIFECYCLE_REVIEW = "authentik_lifecycle.review".freeze
+    AUTHENTIK_LIFECYCLE_USEROFFBOARDING = "authentik_lifecycle.useroffboarding".freeze
     AUTHENTIK_POLICIES_UNIQUE_PASSWORD_UNIQUEPASSWORDPOLICY = "authentik_policies_unique_password.uniquepasswordpolicy".freeze
     AUTHENTIK_PROVIDERS_GOOGLE_WORKSPACE_GOOGLEWORKSPACEPROVIDER = "authentik_providers_google_workspace.googleworkspaceprovider".freeze
     AUTHENTIK_PROVIDERS_GOOGLE_WORKSPACE_GOOGLEWORKSPACEPROVIDERMAPPING = "authentik_providers_google_workspace.googleworkspaceprovidermapping".freeze
@@ -127,13 +130,17 @@ module Authentik::Api
     AUTHENTIK_PROVIDERS_SSF_SSFPROVIDER = "authentik_providers_ssf.ssfprovider".freeze
     AUTHENTIK_PROVIDERS_WS_FEDERATION_WSFEDERATIONPROVIDER = "authentik_providers_ws_federation.wsfederationprovider".freeze
     AUTHENTIK_REPORTS_DATAEXPORT = "authentik_reports.dataexport".freeze
+    AUTHENTIK_REQUESTS_REQUESTRULECHILDBINDING = "authentik_requests.requestrulechildbinding".freeze
+    AUTHENTIK_REQUESTS_REQUESTRULEBINDING = "authentik_requests.requestrulebinding".freeze
+    AUTHENTIK_REQUESTS_REQUESTRULE = "authentik_requests.requestrule".freeze
+    AUTHENTIK_REQUESTS_GRANTREQUEST = "authentik_requests.grantrequest".freeze
     AUTHENTIK_STAGES_ACCOUNT_LOCKDOWN_ACCOUNTLOCKDOWNSTAGE = "authentik_stages_account_lockdown.accountlockdownstage".freeze
     AUTHENTIK_STAGES_AUTHENTICATOR_ENDPOINT_GDTC_AUTHENTICATORENDPOINTGDTCSTAGE = "authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage".freeze
     AUTHENTIK_STAGES_MTLS_MUTUALTLSSTAGE = "authentik_stages_mtls.mutualtlsstage".freeze
     AUTHENTIK_STAGES_SOURCE_SOURCESTAGE = "authentik_stages_source.sourcestage".freeze
 
     def self.all_vars
-      @all_vars ||= [AUTHENTIK_TENANTS_DOMAIN, AUTHENTIK_CORE_GROUP, AUTHENTIK_CORE_USER, AUTHENTIK_CORE_APPLICATION, AUTHENTIK_CORE_APPLICATIONENTITLEMENT, AUTHENTIK_CORE_TOKEN, AUTHENTIK_CRYPTO_CERTIFICATEKEYPAIR, AUTHENTIK_ENDPOINTS_DEVICEUSERBINDING, AUTHENTIK_ENDPOINTS_DEVICEACCESSGROUP, AUTHENTIK_ENDPOINTS_ENDPOINTSTAGE, AUTHENTIK_ENDPOINTS_CONNECTORS_AGENT_AGENTCONNECTOR, AUTHENTIK_ENDPOINTS_CONNECTORS_AGENT_AGENTDEVICEUSERBINDING, AUTHENTIK_ENDPOINTS_CONNECTORS_AGENT_ENROLLMENTTOKEN, AUTHENTIK_ENTERPRISE_LICENSE, AUTHENTIK_EVENTS_EVENT, AUTHENTIK_EVENTS_NOTIFICATIONTRANSPORT, AUTHENTIK_EVENTS_NOTIFICATION, AUTHENTIK_EVENTS_NOTIFICATIONRULE, AUTHENTIK_EVENTS_NOTIFICATIONWEBHOOKMAPPING, AUTHENTIK_FLOWS_FLOW, AUTHENTIK_FLOWS_FLOWSTAGEBINDING, AUTHENTIK_OUTPOSTS_DOCKERSERVICECONNECTION, AUTHENTIK_OUTPOSTS_KUBERNETESSERVICECONNECTION, AUTHENTIK_OUTPOSTS_OUTPOST, AUTHENTIK_POLICIES_DUMMY_DUMMYPOLICY, AUTHENTIK_POLICIES_EVENT_MATCHER_EVENTMATCHERPOLICY, AUTHENTIK_POLICIES_EXPIRY_PASSWORDEXPIRYPOLICY, AUTHENTIK_POLICIES_EXPRESSION_EXPRESSIONPOLICY, AUTHENTIK_POLICIES_GEOIP_GEOIPPOLICY, AUTHENTIK_POLICIES_PASSWORD_PASSWORDPOLICY, AUTHENTIK_POLICIES_REPUTATION_REPUTATIONPOLICY, AUTHENTIK_POLICIES_POLICYBINDING, AUTHENTIK_PROVIDERS_LDAP_LDAPPROVIDER, AUTHENTIK_PROVIDERS_OAUTH2_SCOPEMAPPING, AUTHENTIK_PROVIDERS_OAUTH2_OAUTH2PROVIDER, AUTHENTIK_PROVIDERS_PROXY_PROXYPROVIDER, AUTHENTIK_PROVIDERS_RAC_RACPROVIDER, AUTHENTIK_PROVIDERS_RAC_ENDPOINT, AUTHENTIK_PROVIDERS_RAC_RACPROPERTYMAPPING, AUTHENTIK_PROVIDERS_RADIUS_RADIUSPROVIDER, AUTHENTIK_PROVIDERS_RADIUS_RADIUSPROVIDERPROPERTYMAPPING, AUTHENTIK_PROVIDERS_SAML_SAMLPROVIDER, AUTHENTIK_PROVIDERS_SAML_SAMLPROPERTYMAPPING, AUTHENTIK_PROVIDERS_SCIM_SCIMPROVIDER, AUTHENTIK_PROVIDERS_SCIM_SCIMMAPPING, AUTHENTIK_RBAC_ROLE, AUTHENTIK_RBAC_INITIALPERMISSIONS, AUTHENTIK_SOURCES_KERBEROS_KERBEROSSOURCE, AUTHENTIK_SOURCES_KERBEROS_KERBEROSSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_KERBEROS_USERKERBEROSSOURCECONNECTION, AUTHENTIK_SOURCES_KERBEROS_GROUPKERBEROSSOURCECONNECTION, AUTHENTIK_SOURCES_LDAP_LDAPSOURCE, AUTHENTIK_SOURCES_LDAP_LDAPSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_LDAP_USERLDAPSOURCECONNECTION, AUTHENTIK_SOURCES_LDAP_GROUPLDAPSOURCECONNECTION, AUTHENTIK_SOURCES_OAUTH_OAUTHSOURCE, AUTHENTIK_SOURCES_OAUTH_OAUTHSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_OAUTH_USEROAUTHSOURCECONNECTION, AUTHENTIK_SOURCES_OAUTH_GROUPOAUTHSOURCECONNECTION, AUTHENTIK_SOURCES_PLEX_PLEXSOURCE, AUTHENTIK_SOURCES_PLEX_PLEXSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_PLEX_USERPLEXSOURCECONNECTION, AUTHENTIK_SOURCES_PLEX_GROUPPLEXSOURCECONNECTION, AUTHENTIK_SOURCES_SAML_SAMLSOURCE, AUTHENTIK_SOURCES_SAML_SAMLSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_SAML_USERSAMLSOURCECONNECTION, AUTHENTIK_SOURCES_SAML_GROUPSAMLSOURCECONNECTION, AUTHENTIK_SOURCES_SCIM_SCIMSOURCE, AUTHENTIK_SOURCES_SCIM_SCIMSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_TELEGRAM_TELEGRAMSOURCE, AUTHENTIK_SOURCES_TELEGRAM_TELEGRAMSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_TELEGRAM_USERTELEGRAMSOURCECONNECTION, AUTHENTIK_SOURCES_TELEGRAM_GROUPTELEGRAMSOURCECONNECTION, AUTHENTIK_STAGES_AUTHENTICATOR_DUO_AUTHENTICATORDUOSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_DUO_DUODEVICE, AUTHENTIK_STAGES_AUTHENTICATOR_EMAIL_AUTHENTICATOREMAILSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_EMAIL_EMAILDEVICE, AUTHENTIK_STAGES_AUTHENTICATOR_SMS_AUTHENTICATORSMSSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_SMS_SMSDEVICE, AUTHENTIK_STAGES_AUTHENTICATOR_STATIC_AUTHENTICATORSTATICSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_STATIC_STATICDEVICE, AUTHENTIK_STAGES_AUTHENTICATOR_TOTP_AUTHENTICATORTOTPSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_TOTP_TOTPDEVICE, AUTHENTIK_STAGES_AUTHENTICATOR_VALIDATE_AUTHENTICATORVALIDATESTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_WEBAUTHN_AUTHENTICATORWEBAUTHNSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_WEBAUTHN_WEBAUTHNDEVICE, AUTHENTIK_STAGES_CAPTCHA_CAPTCHASTAGE, AUTHENTIK_STAGES_CONSENT_CONSENTSTAGE, AUTHENTIK_STAGES_DENY_DENYSTAGE, AUTHENTIK_STAGES_DUMMY_DUMMYSTAGE, AUTHENTIK_STAGES_EMAIL_EMAILSTAGE, AUTHENTIK_STAGES_IDENTIFICATION_IDENTIFICATIONSTAGE, AUTHENTIK_STAGES_INVITATION_INVITATIONSTAGE, AUTHENTIK_STAGES_INVITATION_INVITATION, AUTHENTIK_STAGES_PASSWORD_PASSWORDSTAGE, AUTHENTIK_STAGES_PROMPT_PROMPT, AUTHENTIK_STAGES_PROMPT_PROMPTSTAGE, AUTHENTIK_STAGES_REDIRECT_REDIRECTSTAGE, AUTHENTIK_STAGES_USER_DELETE_USERDELETESTAGE, AUTHENTIK_STAGES_USER_LOGIN_USERLOGINSTAGE, AUTHENTIK_STAGES_USER_LOGOUT_USERLOGOUTSTAGE, AUTHENTIK_STAGES_USER_WRITE_USERWRITESTAGE, AUTHENTIK_TASKS_SCHEDULES_SCHEDULE, AUTHENTIK_BRANDS_BRAND, AUTHENTIK_BLUEPRINTS_BLUEPRINTINSTANCE, AUTHENTIK_ENDPOINTS_CONNECTORS_FLEET_FLEETCONNECTOR, AUTHENTIK_ENDPOINTS_CONNECTORS_GOOGLE_CHROME_GOOGLECHROMECONNECTOR, AUTHENTIK_LIFECYCLE_LIFECYCLERULE, AUTHENTIK_LIFECYCLE_LIFECYCLEITERATION, AUTHENTIK_LIFECYCLE_REVIEW, AUTHENTIK_POLICIES_UNIQUE_PASSWORD_UNIQUEPASSWORDPOLICY, AUTHENTIK_PROVIDERS_GOOGLE_WORKSPACE_GOOGLEWORKSPACEPROVIDER, AUTHENTIK_PROVIDERS_GOOGLE_WORKSPACE_GOOGLEWORKSPACEPROVIDERMAPPING, AUTHENTIK_PROVIDERS_MICROSOFT_ENTRA_MICROSOFTENTRAPROVIDER, AUTHENTIK_PROVIDERS_MICROSOFT_ENTRA_MICROSOFTENTRAPROVIDERMAPPING, AUTHENTIK_PROVIDERS_SSF_SSFPROVIDER, AUTHENTIK_PROVIDERS_WS_FEDERATION_WSFEDERATIONPROVIDER, AUTHENTIK_REPORTS_DATAEXPORT, AUTHENTIK_STAGES_ACCOUNT_LOCKDOWN_ACCOUNTLOCKDOWNSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_ENDPOINT_GDTC_AUTHENTICATORENDPOINTGDTCSTAGE, AUTHENTIK_STAGES_MTLS_MUTUALTLSSTAGE, AUTHENTIK_STAGES_SOURCE_SOURCESTAGE].freeze
+      @all_vars ||= [AUTHENTIK_TENANTS_DOMAIN, AUTHENTIK_CORE_GROUP, AUTHENTIK_CORE_USER, AUTHENTIK_CORE_APPLICATION, AUTHENTIK_CORE_APPLICATIONENTITLEMENT, AUTHENTIK_CORE_TOKEN, AUTHENTIK_CORE_OBJECTATTRIBUTE, AUTHENTIK_CRYPTO_CERTIFICATEKEYPAIR, AUTHENTIK_ENDPOINTS_DEVICEUSERBINDING, AUTHENTIK_ENDPOINTS_DEVICEACCESSGROUP, AUTHENTIK_ENDPOINTS_ENDPOINTSTAGE, AUTHENTIK_ENDPOINTS_CONNECTORS_AGENT_AGENTCONNECTOR, AUTHENTIK_ENDPOINTS_CONNECTORS_AGENT_AGENTDEVICEUSERBINDING, AUTHENTIK_ENDPOINTS_CONNECTORS_AGENT_ENROLLMENTTOKEN, AUTHENTIK_ENTERPRISE_LICENSE, AUTHENTIK_EVENTS_EVENT, AUTHENTIK_EVENTS_NOTIFICATIONTRANSPORT, AUTHENTIK_EVENTS_NOTIFICATION, AUTHENTIK_EVENTS_NOTIFICATIONRULE, AUTHENTIK_EVENTS_NOTIFICATIONWEBHOOKMAPPING, AUTHENTIK_FLOWS_FLOW, AUTHENTIK_FLOWS_FLOWSTAGEBINDING, AUTHENTIK_OUTPOSTS_DOCKERSERVICECONNECTION, AUTHENTIK_OUTPOSTS_KUBERNETESSERVICECONNECTION, AUTHENTIK_OUTPOSTS_OUTPOST, AUTHENTIK_POLICIES_DUMMY_DUMMYPOLICY, AUTHENTIK_POLICIES_EVENT_MATCHER_EVENTMATCHERPOLICY, AUTHENTIK_POLICIES_EXPIRY_PASSWORDEXPIRYPOLICY, AUTHENTIK_POLICIES_EXPRESSION_EXPRESSIONPOLICY, AUTHENTIK_POLICIES_GEOIP_GEOIPPOLICY, AUTHENTIK_POLICIES_PASSWORD_PASSWORDPOLICY, AUTHENTIK_POLICIES_REPUTATION_REPUTATIONPOLICY, AUTHENTIK_POLICIES_POLICYBINDING, AUTHENTIK_PROVIDERS_LDAP_LDAPPROVIDER, AUTHENTIK_PROVIDERS_OAUTH2_SCOPEMAPPING, AUTHENTIK_PROVIDERS_OAUTH2_OAUTH2PROVIDER, AUTHENTIK_PROVIDERS_OAUTH2_OAUTH2DYNAMICCLIENTREGISTRATION, AUTHENTIK_PROVIDERS_PROXY_PROXYPROVIDER, AUTHENTIK_PROVIDERS_RAC_RACPROVIDER, AUTHENTIK_PROVIDERS_RAC_ENDPOINT, AUTHENTIK_PROVIDERS_RAC_RACPROPERTYMAPPING, AUTHENTIK_PROVIDERS_RADIUS_RADIUSPROVIDER, AUTHENTIK_PROVIDERS_RADIUS_RADIUSPROVIDERPROPERTYMAPPING, AUTHENTIK_PROVIDERS_SAML_SAMLPROVIDER, AUTHENTIK_PROVIDERS_SAML_SAMLPROPERTYMAPPING, AUTHENTIK_PROVIDERS_SCIM_SCIMPROVIDER, AUTHENTIK_PROVIDERS_SCIM_SCIMMAPPING, AUTHENTIK_RBAC_ROLE, AUTHENTIK_RBAC_INITIALPERMISSIONS, AUTHENTIK_SOURCES_KERBEROS_KERBEROSSOURCE, AUTHENTIK_SOURCES_KERBEROS_KERBEROSSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_KERBEROS_USERKERBEROSSOURCECONNECTION, AUTHENTIK_SOURCES_KERBEROS_GROUPKERBEROSSOURCECONNECTION, AUTHENTIK_SOURCES_LDAP_LDAPSOURCE, AUTHENTIK_SOURCES_LDAP_LDAPSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_LDAP_USERLDAPSOURCECONNECTION, AUTHENTIK_SOURCES_LDAP_GROUPLDAPSOURCECONNECTION, AUTHENTIK_SOURCES_OAUTH_OAUTHSOURCE, AUTHENTIK_SOURCES_OAUTH_OAUTHSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_OAUTH_USEROAUTHSOURCECONNECTION, AUTHENTIK_SOURCES_OAUTH_GROUPOAUTHSOURCECONNECTION, AUTHENTIK_SOURCES_PLEX_PLEXSOURCE, AUTHENTIK_SOURCES_PLEX_PLEXSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_PLEX_USERPLEXSOURCECONNECTION, AUTHENTIK_SOURCES_PLEX_GROUPPLEXSOURCECONNECTION, AUTHENTIK_SOURCES_SAML_SAMLSOURCE, AUTHENTIK_SOURCES_SAML_SAMLSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_SAML_USERSAMLSOURCECONNECTION, AUTHENTIK_SOURCES_SAML_GROUPSAMLSOURCECONNECTION, AUTHENTIK_SOURCES_SCIM_SCIMSOURCE, AUTHENTIK_SOURCES_SCIM_SCIMSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_TELEGRAM_TELEGRAMSOURCE, AUTHENTIK_SOURCES_TELEGRAM_TELEGRAMSOURCEPROPERTYMAPPING, AUTHENTIK_SOURCES_TELEGRAM_USERTELEGRAMSOURCECONNECTION, AUTHENTIK_SOURCES_TELEGRAM_GROUPTELEGRAMSOURCECONNECTION, AUTHENTIK_STAGES_AUTHENTICATOR_DUO_AUTHENTICATORDUOSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_DUO_DUODEVICE, AUTHENTIK_STAGES_AUTHENTICATOR_EMAIL_AUTHENTICATOREMAILSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_EMAIL_EMAILDEVICE, AUTHENTIK_STAGES_AUTHENTICATOR_SMS_AUTHENTICATORSMSSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_SMS_SMSDEVICE, AUTHENTIK_STAGES_AUTHENTICATOR_STATIC_AUTHENTICATORSTATICSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_STATIC_STATICDEVICE, AUTHENTIK_STAGES_AUTHENTICATOR_TOTP_AUTHENTICATORTOTPSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_TOTP_TOTPDEVICE, AUTHENTIK_STAGES_AUTHENTICATOR_VALIDATE_AUTHENTICATORVALIDATESTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_WEBAUTHN_AUTHENTICATORWEBAUTHNSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_WEBAUTHN_WEBAUTHNDEVICE, AUTHENTIK_STAGES_CAPTCHA_CAPTCHASTAGE, AUTHENTIK_STAGES_CONSENT_CONSENTSTAGE, AUTHENTIK_STAGES_DENY_DENYSTAGE, AUTHENTIK_STAGES_DUMMY_DUMMYSTAGE, AUTHENTIK_STAGES_EMAIL_EMAILSTAGE, AUTHENTIK_STAGES_IDENTIFICATION_IDENTIFICATIONSTAGE, AUTHENTIK_STAGES_INVITATION_INVITATIONSTAGE, AUTHENTIK_STAGES_INVITATION_INVITATION, AUTHENTIK_STAGES_PASSWORD_PASSWORDSTAGE, AUTHENTIK_STAGES_PROMPT_PROMPT, AUTHENTIK_STAGES_PROMPT_PROMPTSTAGE, AUTHENTIK_STAGES_REDIRECT_REDIRECTSTAGE, AUTHENTIK_STAGES_USER_DELETE_USERDELETESTAGE, AUTHENTIK_STAGES_USER_LOGIN_USERLOGINSTAGE, AUTHENTIK_STAGES_USER_LOGOUT_USERLOGOUTSTAGE, AUTHENTIK_STAGES_USER_WRITE_USERWRITESTAGE, AUTHENTIK_TASKS_SCHEDULES_SCHEDULE, AUTHENTIK_BRANDS_BRAND, AUTHENTIK_BLUEPRINTS_BLUEPRINTINSTANCE, AUTHENTIK_ENDPOINTS_CONNECTORS_FLEET_FLEETCONNECTOR, AUTHENTIK_ENDPOINTS_CONNECTORS_GOOGLE_CHROME_GOOGLECHROMECONNECTOR, AUTHENTIK_LIFECYCLE_LIFECYCLERULE, AUTHENTIK_LIFECYCLE_LIFECYCLEITERATION, AUTHENTIK_LIFECYCLE_REVIEW, AUTHENTIK_LIFECYCLE_USEROFFBOARDING, AUTHENTIK_POLICIES_UNIQUE_PASSWORD_UNIQUEPASSWORDPOLICY, AUTHENTIK_PROVIDERS_GOOGLE_WORKSPACE_GOOGLEWORKSPACEPROVIDER, AUTHENTIK_PROVIDERS_GOOGLE_WORKSPACE_GOOGLEWORKSPACEPROVIDERMAPPING, AUTHENTIK_PROVIDERS_MICROSOFT_ENTRA_MICROSOFTENTRAPROVIDER, AUTHENTIK_PROVIDERS_MICROSOFT_ENTRA_MICROSOFTENTRAPROVIDERMAPPING, AUTHENTIK_PROVIDERS_SSF_SSFPROVIDER, AUTHENTIK_PROVIDERS_WS_FEDERATION_WSFEDERATIONPROVIDER, AUTHENTIK_REPORTS_DATAEXPORT, AUTHENTIK_REQUESTS_REQUESTRULECHILDBINDING, AUTHENTIK_REQUESTS_REQUESTRULEBINDING, AUTHENTIK_REQUESTS_REQUESTRULE, AUTHENTIK_REQUESTS_GRANTREQUEST, AUTHENTIK_STAGES_ACCOUNT_LOCKDOWN_ACCOUNTLOCKDOWNSTAGE, AUTHENTIK_STAGES_AUTHENTICATOR_ENDPOINT_GDTC_AUTHENTICATORENDPOINTGDTCSTAGE, AUTHENTIK_STAGES_MTLS_MUTUALTLSSTAGE, AUTHENTIK_STAGES_SOURCE_SOURCESTAGE].freeze
     end
 
     # Builds the enum from string

data/lib/authentik/api/models/notification_mode_enum.rb

@@ -0,0 +1,35 @@
+=begin
+This file is automatically generated by: https://openapi-generator.tech.
+Any manual changes will be lost when the OpenAPI scheme changes.
+
+=end
+
+require 'date'
+require 'time'
+
+module Authentik::Api
+  class NotificationModeEnum
+    ALL = "all".freeze
+    DIRECT = "direct".freeze
+    RANDOM_MIN_REVIEWERS = "random_min_reviewers".freeze
+
+    def self.all_vars
+      @all_vars ||= [ALL, DIRECT, RANDOM_MIN_REVIEWERS].freeze
+    end
+
+    # Builds the enum from string
+    # @param [String] The enum value in the form of the string
+    # @return [String] The enum value
+    def self.build_from_hash(value)
+      new.build_from_hash(value)
+    end
+
+    # Builds the enum from string
+    # @param [String] The enum value in the form of the string
+    # @return [String] The enum value
+    def build_from_hash(value)
+      return value if NotificationModeEnum.all_vars.include?(value)
+      raise "Invalid ENUM value #{value} for class #NotificationModeEnum"
+    end
+  end
+end

data/lib/authentik/api/models/o_auth2_dynamic_client_registration.rb

@@ -0,0 +1,291 @@
+=begin
+This file is automatically generated by: https://openapi-generator.tech.
+Any manual changes will be lost when the OpenAPI scheme changes.
+
+=end
+
+require 'date'
+require 'time'
+
+module Authentik::Api
+  # Serializer for OAuth2DynamicClientRegistration
+  class OAuth2DynamicClientRegistration < ApiModelBase
+    attr_accessor :pbm_uuid
+
+    attr_accessor :provider
+
+    # Group to assign to automatically created applications.
+    attr_accessor :default_application_group
+
+    # Authorization flow applied to dynamically registered clients.
+    attr_accessor :override_authorization_flow
+
+    attr_accessor :override_invalidation_flow
+
+    # Scope mappings applied to dynamically registered clients.
+    attr_accessor :override_property_mappings
+
+    # Maximum access token validity for registered clients (Format: hours=1;minutes=2;seconds=3).
+    attr_accessor :access_token_validity
+
+    # Maximum refresh token validity for registered clients (Format: hours=1;minutes=2;seconds=3).
+    attr_accessor :refresh_token_validity
+
+    # If empty, all grant types are allowed.
+    attr_accessor :allowed_grant_types
+
+    attr_accessor :policy_engine_mode
+
+    class EnumAttributeValidator
+      attr_reader :datatype
+      attr_reader :allowable_values
+
+      def initialize(datatype, allowable_values)
+        @allowable_values = allowable_values.map do |value|
+          case datatype.to_s
+          when /Integer/i
+            value.to_i
+          when /Float/i
+            value.to_f
+          else
+            value
+          end
+        end
+      end
+
+      def valid?(value)
+        !value || allowable_values.include?(value)
+      end
+    end
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    def self.attribute_map
+      {
+        :'pbm_uuid' => :'pbm_uuid',
+        :'provider' => :'provider',
+        :'default_application_group' => :'default_application_group',
+        :'override_authorization_flow' => :'override_authorization_flow',
+        :'override_invalidation_flow' => :'override_invalidation_flow',
+        :'override_property_mappings' => :'override_property_mappings',
+        :'access_token_validity' => :'access_token_validity',
+        :'refresh_token_validity' => :'refresh_token_validity',
+        :'allowed_grant_types' => :'allowed_grant_types',
+        :'policy_engine_mode' => :'policy_engine_mode'
+      }
+    end
+
+    # Returns attribute mapping this model knows about
+    def self.acceptable_attribute_map
+      attribute_map
+    end
+
+    # Returns all the JSON keys this model knows about
+    def self.acceptable_attributes
+      acceptable_attribute_map.values
+    end
+
+    # Attribute type mapping.
+    def self.openapi_types
+      {
+        :'pbm_uuid' => :'String',
+        :'provider' => :'Integer',
+        :'default_application_group' => :'String',
+        :'override_authorization_flow' => :'String',
+        :'override_invalidation_flow' => :'String',
+        :'override_property_mappings' => :'Array<String>',
+        :'access_token_validity' => :'String',
+        :'refresh_token_validity' => :'String',
+        :'allowed_grant_types' => :'Array<GrantTypeEnum>',
+        :'policy_engine_mode' => :'PolicyEngineMode'
+      }
+    end
+
+    # List of attributes with nullable: true
+    def self.openapi_nullable
+      Set.new([
+        :'override_authorization_flow',
+        :'override_invalidation_flow',
+      ])
+    end
+
+    # Initializes the object
+    # @param [Hash] attributes Model attributes in the form of hash
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `Authentik::Api::OAuth2DynamicClientRegistration` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      acceptable_attribute_map = self.class.acceptable_attribute_map
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!acceptable_attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `Authentik::Api::OAuth2DynamicClientRegistration`. Please check the name to make sure it's valid. List of attributes: " + acceptable_attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'pbm_uuid')
+        self.pbm_uuid = attributes[:'pbm_uuid']
+      else
+        self.pbm_uuid = nil
+      end
+
+      if attributes.key?(:'provider')
+        self.provider = attributes[:'provider']
+      else
+        self.provider = nil
+      end
+
+      if attributes.key?(:'default_application_group')
+        self.default_application_group = attributes[:'default_application_group']
+      end
+
+      if attributes.key?(:'override_authorization_flow')
+        self.override_authorization_flow = attributes[:'override_authorization_flow']
+      end
+
+      if attributes.key?(:'override_invalidation_flow')
+        self.override_invalidation_flow = attributes[:'override_invalidation_flow']
+      end
+
+      if attributes.key?(:'override_property_mappings')
+        if (value = attributes[:'override_property_mappings']).is_a?(Array)
+          self.override_property_mappings = value
+        end
+      end
+
+      if attributes.key?(:'access_token_validity')
+        self.access_token_validity = attributes[:'access_token_validity']
+      end
+
+      if attributes.key?(:'refresh_token_validity')
+        self.refresh_token_validity = attributes[:'refresh_token_validity']
+      end
+
+      if attributes.key?(:'allowed_grant_types')
+        if (value = attributes[:'allowed_grant_types']).is_a?(Array)
+          self.allowed_grant_types = value
+        end
+      end
+
+      if attributes.key?(:'policy_engine_mode')
+        self.policy_engine_mode = attributes[:'policy_engine_mode']
+      end
+    end
+
+    # Show invalid properties with the reasons. Usually used together with valid?
+    # @return Array for valid properties with the reasons
+    def list_invalid_properties
+      warn '[DEPRECATED] the `list_invalid_properties` method is obsolete'
+      invalid_properties = Array.new
+      if @pbm_uuid.nil?
+        invalid_properties.push('invalid value for "pbm_uuid", pbm_uuid cannot be nil.')
+      end
+
+      if @provider.nil?
+        invalid_properties.push('invalid value for "provider", provider cannot be nil.')
+      end
+
+      invalid_properties
+    end
+
+    # Check to see if the all the properties in the model are valid
+    # @return true if the model is valid
+    def valid?
+      warn '[DEPRECATED] the `valid?` method is obsolete'
+      return false if @pbm_uuid.nil?
+      return false if @provider.nil?
+      true
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] pbm_uuid Value to be assigned
+    def pbm_uuid=(pbm_uuid)
+      if pbm_uuid.nil?
+        fail ArgumentError, 'pbm_uuid cannot be nil'
+      end
+
+      @pbm_uuid = pbm_uuid
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] provider Value to be assigned
+    def provider=(provider)
+      if provider.nil?
+        fail ArgumentError, 'provider cannot be nil'
+      end
+
+      @provider = provider
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param [Object] Object to be compared
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          pbm_uuid == o.pbm_uuid &&
+          provider == o.provider &&
+          default_application_group == o.default_application_group &&
+          override_authorization_flow == o.override_authorization_flow &&
+          override_invalidation_flow == o.override_invalidation_flow &&
+          override_property_mappings == o.override_property_mappings &&
+          access_token_validity == o.access_token_validity &&
+          refresh_token_validity == o.refresh_token_validity &&
+          allowed_grant_types == o.allowed_grant_types &&
+          policy_engine_mode == o.policy_engine_mode
+    end
+
+    # @see the `==` method
+    # @param [Object] Object to be compared
+    def eql?(o)
+      self == o
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    def hash
+      [pbm_uuid, provider, default_application_group, override_authorization_flow, override_invalidation_flow, override_property_mappings, access_token_validity, refresh_token_validity, allowed_grant_types, policy_engine_mode].hash
+    end
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def self.build_from_hash(attributes)
+      return nil unless attributes.is_a?(Hash)
+      attributes = attributes.transform_keys(&:to_sym)
+      transformed_hash = {}
+      openapi_types.each_pair do |key, type|
+        if attributes.key?(attribute_map[key]) && attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = nil
+        elsif type =~ /\AArray<(.*)>/i
+          # check to ensure the input is an array given that the attribute
+          # is documented as an array but the input is not
+          if attributes[attribute_map[key]].is_a?(Array)
+            transformed_hash["#{key}"] = attributes[attribute_map[key]].map { |v| _deserialize($1, v) }
+          end
+        elsif !attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = _deserialize(type, attributes[attribute_map[key]])
+        end
+      end
+      new(transformed_hash)
+    end
+
+    # Returns the object in the form of hash
+    # @return [Hash] Returns the object in the form of hash
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      hash
+    end
+
+  end
+
+end