authentik-api 2026.5.6 → 2026.8.0.rc2

data/lib/authentik/api/models/patched_ldap_source_request.rb

@@ -100,6 +100,9 @@ module Authentik::Api
     # When to trigger sync for outgoing providers
     attr_accessor :sync_outgoing_trigger_mode
 
+    # Sync group parentage/hierarchy from LDAP directories.
+    attr_accessor :sync_group_hierarchy
+
     class EnumAttributeValidator
       attr_reader :datatype
       attr_reader :allowable_values
@@ -159,7 +162,8 @@ module Authentik::Api
         :'sync_parent_group' => :'sync_parent_group',
         :'lookup_groups_from_user' => :'lookup_groups_from_user',
         :'delete_not_found_objects' => :'delete_not_found_objects',
-        :'sync_outgoing_trigger_mode' => :'sync_outgoing_trigger_mode'
+        :'sync_outgoing_trigger_mode' => :'sync_outgoing_trigger_mode',
+        :'sync_group_hierarchy' => :'sync_group_hierarchy'
       }
     end
 
@@ -210,7 +214,8 @@ module Authentik::Api
         :'sync_parent_group' => :'String',
         :'lookup_groups_from_user' => :'Boolean',
         :'delete_not_found_objects' => :'Boolean',
-        :'sync_outgoing_trigger_mode' => :'SyncOutgoingTriggerModeEnum'
+        :'sync_outgoing_trigger_mode' => :'SyncOutgoingTriggerModeEnum',
+        :'sync_group_hierarchy' => :'Boolean'
       }
     end
 
@@ -384,6 +389,10 @@ module Authentik::Api
       if attributes.key?(:'sync_outgoing_trigger_mode')
         self.sync_outgoing_trigger_mode = attributes[:'sync_outgoing_trigger_mode']
       end
+
+      if attributes.key?(:'sync_group_hierarchy')
+        self.sync_group_hierarchy = attributes[:'sync_group_hierarchy']
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -641,7 +650,8 @@ module Authentik::Api
           sync_parent_group == o.sync_parent_group &&
           lookup_groups_from_user == o.lookup_groups_from_user &&
           delete_not_found_objects == o.delete_not_found_objects &&
-          sync_outgoing_trigger_mode == o.sync_outgoing_trigger_mode
+          sync_outgoing_trigger_mode == o.sync_outgoing_trigger_mode &&
+          sync_group_hierarchy == o.sync_group_hierarchy
     end
 
     # @see the `==` method
@@ -653,7 +663,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, slug, enabled, promoted, authentication_flow, enrollment_flow, user_property_mappings, group_property_mappings, policy_engine_mode, user_matching_mode, user_path_template, icon, server_uri, peer_certificate, client_certificate, bind_cn, bind_password, start_tls, sni, base_dn, additional_user_dn, additional_group_dn, user_object_filter, group_object_filter, group_membership_field, user_membership_attribute, object_uniqueness_field, password_login_update_internal_password, sync_users, sync_users_password, sync_groups, sync_parent_group, lookup_groups_from_user, delete_not_found_objects, sync_outgoing_trigger_mode].hash
+      [name, slug, enabled, promoted, authentication_flow, enrollment_flow, user_property_mappings, group_property_mappings, policy_engine_mode, user_matching_mode, user_path_template, icon, server_uri, peer_certificate, client_certificate, bind_cn, bind_password, start_tls, sni, base_dn, additional_user_dn, additional_group_dn, user_object_filter, group_object_filter, group_membership_field, user_membership_attribute, object_uniqueness_field, password_login_update_internal_password, sync_users, sync_users_password, sync_groups, sync_parent_group, lookup_groups_from_user, delete_not_found_objects, sync_outgoing_trigger_mode, sync_group_hierarchy].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/patched_o_auth2_dynamic_client_registration_request.rb

@@ -0,0 +1,286 @@
+=begin
+This file is automatically generated by: https://openapi-generator.tech.
+Any manual changes will be lost when the OpenAPI scheme changes.
+
+=end
+
+require 'date'
+require 'time'
+
+module Authentik::Api
+  # Serializer for OAuth2DynamicClientRegistration
+  class PatchedOAuth2DynamicClientRegistrationRequest < ApiModelBase
+    attr_accessor :provider
+
+    # Group to assign to automatically created applications.
+    attr_accessor :default_application_group
+
+    # Authorization flow applied to dynamically registered clients.
+    attr_accessor :override_authorization_flow
+
+    attr_accessor :override_invalidation_flow
+
+    # Scope mappings applied to dynamically registered clients.
+    attr_accessor :override_property_mappings
+
+    # Maximum access token validity for registered clients (Format: hours=1;minutes=2;seconds=3).
+    attr_accessor :access_token_validity
+
+    # Maximum refresh token validity for registered clients (Format: hours=1;minutes=2;seconds=3).
+    attr_accessor :refresh_token_validity
+
+    # If empty, all grant types are allowed.
+    attr_accessor :allowed_grant_types
+
+    attr_accessor :policy_engine_mode
+
+    class EnumAttributeValidator
+      attr_reader :datatype
+      attr_reader :allowable_values
+
+      def initialize(datatype, allowable_values)
+        @allowable_values = allowable_values.map do |value|
+          case datatype.to_s
+          when /Integer/i
+            value.to_i
+          when /Float/i
+            value.to_f
+          else
+            value
+          end
+        end
+      end
+
+      def valid?(value)
+        !value || allowable_values.include?(value)
+      end
+    end
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    def self.attribute_map
+      {
+        :'provider' => :'provider',
+        :'default_application_group' => :'default_application_group',
+        :'override_authorization_flow' => :'override_authorization_flow',
+        :'override_invalidation_flow' => :'override_invalidation_flow',
+        :'override_property_mappings' => :'override_property_mappings',
+        :'access_token_validity' => :'access_token_validity',
+        :'refresh_token_validity' => :'refresh_token_validity',
+        :'allowed_grant_types' => :'allowed_grant_types',
+        :'policy_engine_mode' => :'policy_engine_mode'
+      }
+    end
+
+    # Returns attribute mapping this model knows about
+    def self.acceptable_attribute_map
+      attribute_map
+    end
+
+    # Returns all the JSON keys this model knows about
+    def self.acceptable_attributes
+      acceptable_attribute_map.values
+    end
+
+    # Attribute type mapping.
+    def self.openapi_types
+      {
+        :'provider' => :'Integer',
+        :'default_application_group' => :'String',
+        :'override_authorization_flow' => :'String',
+        :'override_invalidation_flow' => :'String',
+        :'override_property_mappings' => :'Array<String>',
+        :'access_token_validity' => :'String',
+        :'refresh_token_validity' => :'String',
+        :'allowed_grant_types' => :'Array<GrantTypeEnum>',
+        :'policy_engine_mode' => :'PolicyEngineMode'
+      }
+    end
+
+    # List of attributes with nullable: true
+    def self.openapi_nullable
+      Set.new([
+        :'override_authorization_flow',
+        :'override_invalidation_flow',
+      ])
+    end
+
+    # Initializes the object
+    # @param [Hash] attributes Model attributes in the form of hash
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `Authentik::Api::PatchedOAuth2DynamicClientRegistrationRequest` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      acceptable_attribute_map = self.class.acceptable_attribute_map
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!acceptable_attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `Authentik::Api::PatchedOAuth2DynamicClientRegistrationRequest`. Please check the name to make sure it's valid. List of attributes: " + acceptable_attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'provider')
+        self.provider = attributes[:'provider']
+      end
+
+      if attributes.key?(:'default_application_group')
+        self.default_application_group = attributes[:'default_application_group']
+      end
+
+      if attributes.key?(:'override_authorization_flow')
+        self.override_authorization_flow = attributes[:'override_authorization_flow']
+      end
+
+      if attributes.key?(:'override_invalidation_flow')
+        self.override_invalidation_flow = attributes[:'override_invalidation_flow']
+      end
+
+      if attributes.key?(:'override_property_mappings')
+        if (value = attributes[:'override_property_mappings']).is_a?(Array)
+          self.override_property_mappings = value
+        end
+      end
+
+      if attributes.key?(:'access_token_validity')
+        self.access_token_validity = attributes[:'access_token_validity']
+      end
+
+      if attributes.key?(:'refresh_token_validity')
+        self.refresh_token_validity = attributes[:'refresh_token_validity']
+      end
+
+      if attributes.key?(:'allowed_grant_types')
+        if (value = attributes[:'allowed_grant_types']).is_a?(Array)
+          self.allowed_grant_types = value
+        end
+      end
+
+      if attributes.key?(:'policy_engine_mode')
+        self.policy_engine_mode = attributes[:'policy_engine_mode']
+      end
+    end
+
+    # Show invalid properties with the reasons. Usually used together with valid?
+    # @return Array for valid properties with the reasons
+    def list_invalid_properties
+      warn '[DEPRECATED] the `list_invalid_properties` method is obsolete'
+      invalid_properties = Array.new
+      if !@access_token_validity.nil? && @access_token_validity.to_s.length < 1
+        invalid_properties.push('invalid value for "access_token_validity", the character length must be greater than or equal to 1.')
+      end
+
+      if !@refresh_token_validity.nil? && @refresh_token_validity.to_s.length < 1
+        invalid_properties.push('invalid value for "refresh_token_validity", the character length must be greater than or equal to 1.')
+      end
+
+      invalid_properties
+    end
+
+    # Check to see if the all the properties in the model are valid
+    # @return true if the model is valid
+    def valid?
+      warn '[DEPRECATED] the `valid?` method is obsolete'
+      return false if !@access_token_validity.nil? && @access_token_validity.to_s.length < 1
+      return false if !@refresh_token_validity.nil? && @refresh_token_validity.to_s.length < 1
+      true
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] access_token_validity Value to be assigned
+    def access_token_validity=(access_token_validity)
+      if access_token_validity.nil?
+        fail ArgumentError, 'access_token_validity cannot be nil'
+      end
+
+      if access_token_validity.to_s.length < 1
+        fail ArgumentError, 'invalid value for "access_token_validity", the character length must be greater than or equal to 1.'
+      end
+
+      @access_token_validity = access_token_validity
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] refresh_token_validity Value to be assigned
+    def refresh_token_validity=(refresh_token_validity)
+      if refresh_token_validity.nil?
+        fail ArgumentError, 'refresh_token_validity cannot be nil'
+      end
+
+      if refresh_token_validity.to_s.length < 1
+        fail ArgumentError, 'invalid value for "refresh_token_validity", the character length must be greater than or equal to 1.'
+      end
+
+      @refresh_token_validity = refresh_token_validity
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param [Object] Object to be compared
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          provider == o.provider &&
+          default_application_group == o.default_application_group &&
+          override_authorization_flow == o.override_authorization_flow &&
+          override_invalidation_flow == o.override_invalidation_flow &&
+          override_property_mappings == o.override_property_mappings &&
+          access_token_validity == o.access_token_validity &&
+          refresh_token_validity == o.refresh_token_validity &&
+          allowed_grant_types == o.allowed_grant_types &&
+          policy_engine_mode == o.policy_engine_mode
+    end
+
+    # @see the `==` method
+    # @param [Object] Object to be compared
+    def eql?(o)
+      self == o
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    def hash
+      [provider, default_application_group, override_authorization_flow, override_invalidation_flow, override_property_mappings, access_token_validity, refresh_token_validity, allowed_grant_types, policy_engine_mode].hash
+    end
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def self.build_from_hash(attributes)
+      return nil unless attributes.is_a?(Hash)
+      attributes = attributes.transform_keys(&:to_sym)
+      transformed_hash = {}
+      openapi_types.each_pair do |key, type|
+        if attributes.key?(attribute_map[key]) && attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = nil
+        elsif type =~ /\AArray<(.*)>/i
+          # check to ensure the input is an array given that the attribute
+          # is documented as an array but the input is not
+          if attributes[attribute_map[key]].is_a?(Array)
+            transformed_hash["#{key}"] = attributes[attribute_map[key]].map { |v| _deserialize($1, v) }
+          end
+        elsif !attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = _deserialize(type, attributes[attribute_map[key]])
+        end
+      end
+      new(transformed_hash)
+    end
+
+    # Returns the object in the form of hash
+    # @return [Hash] Returns the object in the form of hash
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      hash
+    end
+
+  end
+
+end

data/lib/authentik/api/models/patched_o_auth2_provider_request.rb

@@ -140,7 +140,7 @@ module Authentik::Api
         :'invalidation_flow' => :'String',
         :'property_mappings' => :'Array<String>',
         :'client_type' => :'ClientTypeEnum',
-        :'grant_types' => :'Array<GrantTypesEnum>',
+        :'grant_types' => :'Array<GrantTypeEnum>',
         :'client_id' => :'String',
         :'client_secret' => :'String',
         :'access_code_validity' => :'String',

data/lib/authentik/api/models/patched_o_auth_source_request.rb

@@ -331,22 +331,6 @@ module Authentik::Api
         invalid_properties.push('invalid value for "user_path_template", the character length must be greater than or equal to 1.')
       end
 
-      if !@request_token_url.nil? && @request_token_url.to_s.length > 255
-        invalid_properties.push('invalid value for "request_token_url", the character length must be smaller than or equal to 255.')
-      end
-
-      if !@authorization_url.nil? && @authorization_url.to_s.length > 255
-        invalid_properties.push('invalid value for "authorization_url", the character length must be smaller than or equal to 255.')
-      end
-
-      if !@access_token_url.nil? && @access_token_url.to_s.length > 255
-        invalid_properties.push('invalid value for "access_token_url", the character length must be smaller than or equal to 255.')
-      end
-
-      if !@profile_url.nil? && @profile_url.to_s.length > 255
-        invalid_properties.push('invalid value for "profile_url", the character length must be smaller than or equal to 255.')
-      end
-
       if !@consumer_key.nil? && @consumer_key.to_s.length < 1
         invalid_properties.push('invalid value for "consumer_key", the character length must be greater than or equal to 1.')
       end
@@ -366,10 +350,6 @@ module Authentik::Api
       return false if !@slug.nil? && @slug.to_s.length < 1
       return false if !@slug.nil? && @slug !~ Regexp.new(/^[-a-zA-Z0-9_]+$/)
       return false if !@user_path_template.nil? && @user_path_template.to_s.length < 1
-      return false if !@request_token_url.nil? && @request_token_url.to_s.length > 255
-      return false if !@authorization_url.nil? && @authorization_url.to_s.length > 255
-      return false if !@access_token_url.nil? && @access_token_url.to_s.length > 255
-      return false if !@profile_url.nil? && @profile_url.to_s.length > 255
       return false if !@consumer_key.nil? && @consumer_key.to_s.length < 1
       return false if !@consumer_secret.nil? && @consumer_secret.to_s.length < 1
       true
@@ -422,46 +402,6 @@ module Authentik::Api
       @user_path_template = user_path_template
     end
 
-    # Custom attribute writer method with validation
-    # @param [Object] request_token_url Value to be assigned
-    def request_token_url=(request_token_url)
-      if !request_token_url.nil? && request_token_url.to_s.length > 255
-        fail ArgumentError, 'invalid value for "request_token_url", the character length must be smaller than or equal to 255.'
-      end
-
-      @request_token_url = request_token_url
-    end
-
-    # Custom attribute writer method with validation
-    # @param [Object] authorization_url Value to be assigned
-    def authorization_url=(authorization_url)
-      if !authorization_url.nil? && authorization_url.to_s.length > 255
-        fail ArgumentError, 'invalid value for "authorization_url", the character length must be smaller than or equal to 255.'
-      end
-
-      @authorization_url = authorization_url
-    end
-
-    # Custom attribute writer method with validation
-    # @param [Object] access_token_url Value to be assigned
-    def access_token_url=(access_token_url)
-      if !access_token_url.nil? && access_token_url.to_s.length > 255
-        fail ArgumentError, 'invalid value for "access_token_url", the character length must be smaller than or equal to 255.'
-      end
-
-      @access_token_url = access_token_url
-    end
-
-    # Custom attribute writer method with validation
-    # @param [Object] profile_url Value to be assigned
-    def profile_url=(profile_url)
-      if !profile_url.nil? && profile_url.to_s.length > 255
-        fail ArgumentError, 'invalid value for "profile_url", the character length must be smaller than or equal to 255.'
-      end
-
-      @profile_url = profile_url
-    end
-
     # Custom attribute writer method with validation
     # @param [Object] consumer_key Value to be assigned
     def consumer_key=(consumer_key)