authentik-api 2026.5.6 → 2026.8.0.rc2

data/lib/authentik/api/api/sources_api.rb

@@ -4317,6 +4317,7 @@ module Authentik::Api
     # @option opts [String] :slug 
     # @option opts [Boolean] :sni 
     # @option opts [Boolean] :start_tls 
+    # @option opts [Boolean] :sync_group_hierarchy 
     # @option opts [Boolean] :sync_groups 
     # @option opts [String] :sync_parent_group 
     # @option opts [Boolean] :sync_users 
@@ -4356,6 +4357,7 @@ module Authentik::Api
     # @option opts [String] :slug 
     # @option opts [Boolean] :sni 
     # @option opts [Boolean] :start_tls 
+    # @option opts [Boolean] :sync_group_hierarchy 
     # @option opts [Boolean] :sync_groups 
     # @option opts [String] :sync_parent_group 
     # @option opts [Boolean] :sync_users 
@@ -4397,6 +4399,7 @@ module Authentik::Api
       query_params[:'slug'] = opts[:'slug'] if !opts[:'slug'].nil?
       query_params[:'sni'] = opts[:'sni'] if !opts[:'sni'].nil?
       query_params[:'start_tls'] = opts[:'start_tls'] if !opts[:'start_tls'].nil?
+      query_params[:'sync_group_hierarchy'] = opts[:'sync_group_hierarchy'] if !opts[:'sync_group_hierarchy'].nil?
       query_params[:'sync_groups'] = opts[:'sync_groups'] if !opts[:'sync_groups'].nil?
       query_params[:'sync_parent_group'] = opts[:'sync_parent_group'] if !opts[:'sync_parent_group'].nil?
       query_params[:'sync_users'] = opts[:'sync_users'] if !opts[:'sync_users'].nil?
@@ -6088,7 +6091,7 @@ module Authentik::Api
     # @option opts [Boolean] :enabled 
     # @option opts [String] :enrollment_flow 
     # @option opts [Boolean] :force_authn 
-    # @option opts [String] :issuer 
+    # @option opts [String] :issuer_override 
     # @option opts [String] :managed 
     # @option opts [String] :name 
     # @option opts [SAMLNameIDPolicyEnum] :name_id_policy 
@@ -6124,7 +6127,7 @@ module Authentik::Api
     # @option opts [Boolean] :enabled 
     # @option opts [String] :enrollment_flow 
     # @option opts [Boolean] :force_authn 
-    # @option opts [String] :issuer 
+    # @option opts [String] :issuer_override 
     # @option opts [String] :managed 
     # @option opts [String] :name 
     # @option opts [SAMLNameIDPolicyEnum] :name_id_policy 
@@ -6162,7 +6165,7 @@ module Authentik::Api
       query_params[:'enabled'] = opts[:'enabled'] if !opts[:'enabled'].nil?
       query_params[:'enrollment_flow'] = opts[:'enrollment_flow'] if !opts[:'enrollment_flow'].nil?
       query_params[:'force_authn'] = opts[:'force_authn'] if !opts[:'force_authn'].nil?
-      query_params[:'issuer'] = opts[:'issuer'] if !opts[:'issuer'].nil?
+      query_params[:'issuer_override'] = opts[:'issuer_override'] if !opts[:'issuer_override'].nil?
       query_params[:'managed'] = opts[:'managed'] if !opts[:'managed'].nil?
       query_params[:'name'] = opts[:'name'] if !opts[:'name'].nil?
       query_params[:'name_id_policy'] = opts[:'name_id_policy'] if !opts[:'name_id_policy'].nil?

data/lib/authentik/api/configuration.rb

@@ -245,6 +245,20 @@ module Authentik::Api
             key: 'Authorization',
             value: "Bearer #{access_token_with_refresh}"
           },
+        'authentik_device_enroll' =>
+          {
+            type: 'bearer',
+            in: 'header',
+            key: 'Authorization',
+            value: "Bearer #{access_token_with_refresh}"
+          },
+        'authentik_device_federation' =>
+          {
+            type: 'bearer',
+            in: 'header',
+            key: 'Authorization',
+            value: "Bearer #{access_token_with_refresh}"
+          },
       }
     end
 

data/lib/authentik/api/inflector.rb

@@ -13,7 +13,8 @@ module Authentik
       IRREGULAR_INFLECTIONS = {
         "OAuth2ProviderSetupUrls" => "OAuth2ProviderSetupURLs",
         "AuthenticatedSessionGeoIp" => "AuthenticatedSessionGeoIp",
-        "AuthenticatedSessionUserAgentOs" => "AuthenticatedSessionUserAgentOs"
+        "AuthenticatedSessionUserAgentOs" => "AuthenticatedSessionUserAgentOs",
+        "SamlVersionEnum" => "SamlVersionEnum"
       }.freeze
       INFLECTIONS = IRREGULAR_INFLECTIONS.merge(REGULAR_INFLECTIONS).freeze
       # Matches inflections followed by an upcase letter or EOL.

data/lib/authentik/api/models/app_enum.rb

@@ -80,18 +80,20 @@ module Authentik::Api
     AUTHENTIK_ENTERPRISE_POLICIES_UNIQUE_PASSWORD = "authentik.enterprise.policies.unique_password".freeze
     AUTHENTIK_ENTERPRISE_PROVIDERS_GOOGLE_WORKSPACE = "authentik.enterprise.providers.google_workspace".freeze
     AUTHENTIK_ENTERPRISE_PROVIDERS_MICROSOFT_ENTRA = "authentik.enterprise.providers.microsoft_entra".freeze
+    AUTHENTIK_ENTERPRISE_PROVIDERS_OAUTH2 = "authentik.enterprise.providers.oauth2".freeze
     AUTHENTIK_ENTERPRISE_PROVIDERS_RADIUS = "authentik.enterprise.providers.radius".freeze
     AUTHENTIK_ENTERPRISE_PROVIDERS_SCIM = "authentik.enterprise.providers.scim".freeze
     AUTHENTIK_ENTERPRISE_PROVIDERS_SSF = "authentik.enterprise.providers.ssf".freeze
     AUTHENTIK_ENTERPRISE_PROVIDERS_WS_FEDERATION = "authentik.enterprise.providers.ws_federation".freeze
     AUTHENTIK_ENTERPRISE_REPORTS = "authentik.enterprise.reports".freeze
+    AUTHENTIK_ENTERPRISE_REQUESTS = "authentik.enterprise.requests".freeze
     AUTHENTIK_ENTERPRISE_STAGES_ACCOUNT_LOCKDOWN = "authentik.enterprise.stages.account_lockdown".freeze
     AUTHENTIK_ENTERPRISE_STAGES_AUTHENTICATOR_ENDPOINT_GDTC = "authentik.enterprise.stages.authenticator_endpoint_gdtc".freeze
     AUTHENTIK_ENTERPRISE_STAGES_MTLS = "authentik.enterprise.stages.mtls".freeze
     AUTHENTIK_ENTERPRISE_STAGES_SOURCE = "authentik.enterprise.stages.source".freeze
 
     def self.all_vars
-      @all_vars ||= [AUTHENTIK_COMMANDS, AUTHENTIK_TENANTS, AUTHENTIK_TASKS, AUTHENTIK_ADMIN, AUTHENTIK_API, AUTHENTIK_CORE, AUTHENTIK_CRYPTO, AUTHENTIK_ENDPOINTS, AUTHENTIK_ENDPOINTS_CONNECTORS_AGENT, AUTHENTIK_ENTERPRISE, AUTHENTIK_EVENTS, AUTHENTIK_ADMIN_FILES, AUTHENTIK_FLOWS, AUTHENTIK_OUTPOSTS, AUTHENTIK_POLICIES_DUMMY, AUTHENTIK_POLICIES_EVENT_MATCHER, AUTHENTIK_POLICIES_EXPIRY, AUTHENTIK_POLICIES_EXPRESSION, AUTHENTIK_POLICIES_GEOIP, AUTHENTIK_POLICIES_PASSWORD, AUTHENTIK_POLICIES_REPUTATION, AUTHENTIK_POLICIES, AUTHENTIK_PROVIDERS_LDAP, AUTHENTIK_PROVIDERS_OAUTH2, AUTHENTIK_PROVIDERS_PROXY, AUTHENTIK_PROVIDERS_RAC, AUTHENTIK_PROVIDERS_RADIUS, AUTHENTIK_PROVIDERS_SAML, AUTHENTIK_PROVIDERS_SCIM, AUTHENTIK_RBAC, AUTHENTIK_RECOVERY, AUTHENTIK_SOURCES_KERBEROS, AUTHENTIK_SOURCES_LDAP, AUTHENTIK_SOURCES_OAUTH, AUTHENTIK_SOURCES_PLEX, AUTHENTIK_SOURCES_SAML, AUTHENTIK_SOURCES_SCIM, AUTHENTIK_SOURCES_TELEGRAM, AUTHENTIK_STAGES_AUTHENTICATOR, AUTHENTIK_STAGES_AUTHENTICATOR_DUO, AUTHENTIK_STAGES_AUTHENTICATOR_EMAIL, AUTHENTIK_STAGES_AUTHENTICATOR_SMS, AUTHENTIK_STAGES_AUTHENTICATOR_STATIC, AUTHENTIK_STAGES_AUTHENTICATOR_TOTP, AUTHENTIK_STAGES_AUTHENTICATOR_VALIDATE, AUTHENTIK_STAGES_AUTHENTICATOR_WEBAUTHN, AUTHENTIK_STAGES_CAPTCHA, AUTHENTIK_STAGES_CONSENT, AUTHENTIK_STAGES_DENY, AUTHENTIK_STAGES_DUMMY, AUTHENTIK_STAGES_EMAIL, AUTHENTIK_STAGES_IDENTIFICATION, AUTHENTIK_STAGES_INVITATION, AUTHENTIK_STAGES_PASSWORD, AUTHENTIK_STAGES_PROMPT, AUTHENTIK_STAGES_REDIRECT, AUTHENTIK_STAGES_USER_DELETE, AUTHENTIK_STAGES_USER_LOGIN, AUTHENTIK_STAGES_USER_LOGOUT, AUTHENTIK_STAGES_USER_WRITE, AUTHENTIK_TASKS_SCHEDULES, AUTHENTIK_BRANDS, AUTHENTIK_BLUEPRINTS, AUTHENTIK_ENTERPRISE_AUDIT, AUTHENTIK_ENTERPRISE_ENDPOINTS_CONNECTORS_AGENT, AUTHENTIK_ENTERPRISE_ENDPOINTS_CONNECTORS_FLEET, AUTHENTIK_ENTERPRISE_ENDPOINTS_CONNECTORS_GOOGLE_CHROME, AUTHENTIK_ENTERPRISE_LIFECYCLE, AUTHENTIK_ENTERPRISE_POLICIES_UNIQUE_PASSWORD, AUTHENTIK_ENTERPRISE_PROVIDERS_GOOGLE_WORKSPACE, AUTHENTIK_ENTERPRISE_PROVIDERS_MICROSOFT_ENTRA, AUTHENTIK_ENTERPRISE_PROVIDERS_RADIUS, AUTHENTIK_ENTERPRISE_PROVIDERS_SCIM, AUTHENTIK_ENTERPRISE_PROVIDERS_SSF, AUTHENTIK_ENTERPRISE_PROVIDERS_WS_FEDERATION, AUTHENTIK_ENTERPRISE_REPORTS, AUTHENTIK_ENTERPRISE_STAGES_ACCOUNT_LOCKDOWN, AUTHENTIK_ENTERPRISE_STAGES_AUTHENTICATOR_ENDPOINT_GDTC, AUTHENTIK_ENTERPRISE_STAGES_MTLS, AUTHENTIK_ENTERPRISE_STAGES_SOURCE].freeze
+      @all_vars ||= [AUTHENTIK_COMMANDS, AUTHENTIK_TENANTS, AUTHENTIK_TASKS, AUTHENTIK_ADMIN, AUTHENTIK_API, AUTHENTIK_CORE, AUTHENTIK_CRYPTO, AUTHENTIK_ENDPOINTS, AUTHENTIK_ENDPOINTS_CONNECTORS_AGENT, AUTHENTIK_ENTERPRISE, AUTHENTIK_EVENTS, AUTHENTIK_ADMIN_FILES, AUTHENTIK_FLOWS, AUTHENTIK_OUTPOSTS, AUTHENTIK_POLICIES_DUMMY, AUTHENTIK_POLICIES_EVENT_MATCHER, AUTHENTIK_POLICIES_EXPIRY, AUTHENTIK_POLICIES_EXPRESSION, AUTHENTIK_POLICIES_GEOIP, AUTHENTIK_POLICIES_PASSWORD, AUTHENTIK_POLICIES_REPUTATION, AUTHENTIK_POLICIES, AUTHENTIK_PROVIDERS_LDAP, AUTHENTIK_PROVIDERS_OAUTH2, AUTHENTIK_PROVIDERS_PROXY, AUTHENTIK_PROVIDERS_RAC, AUTHENTIK_PROVIDERS_RADIUS, AUTHENTIK_PROVIDERS_SAML, AUTHENTIK_PROVIDERS_SCIM, AUTHENTIK_RBAC, AUTHENTIK_RECOVERY, AUTHENTIK_SOURCES_KERBEROS, AUTHENTIK_SOURCES_LDAP, AUTHENTIK_SOURCES_OAUTH, AUTHENTIK_SOURCES_PLEX, AUTHENTIK_SOURCES_SAML, AUTHENTIK_SOURCES_SCIM, AUTHENTIK_SOURCES_TELEGRAM, AUTHENTIK_STAGES_AUTHENTICATOR, AUTHENTIK_STAGES_AUTHENTICATOR_DUO, AUTHENTIK_STAGES_AUTHENTICATOR_EMAIL, AUTHENTIK_STAGES_AUTHENTICATOR_SMS, AUTHENTIK_STAGES_AUTHENTICATOR_STATIC, AUTHENTIK_STAGES_AUTHENTICATOR_TOTP, AUTHENTIK_STAGES_AUTHENTICATOR_VALIDATE, AUTHENTIK_STAGES_AUTHENTICATOR_WEBAUTHN, AUTHENTIK_STAGES_CAPTCHA, AUTHENTIK_STAGES_CONSENT, AUTHENTIK_STAGES_DENY, AUTHENTIK_STAGES_DUMMY, AUTHENTIK_STAGES_EMAIL, AUTHENTIK_STAGES_IDENTIFICATION, AUTHENTIK_STAGES_INVITATION, AUTHENTIK_STAGES_PASSWORD, AUTHENTIK_STAGES_PROMPT, AUTHENTIK_STAGES_REDIRECT, AUTHENTIK_STAGES_USER_DELETE, AUTHENTIK_STAGES_USER_LOGIN, AUTHENTIK_STAGES_USER_LOGOUT, AUTHENTIK_STAGES_USER_WRITE, AUTHENTIK_TASKS_SCHEDULES, AUTHENTIK_BRANDS, AUTHENTIK_BLUEPRINTS, AUTHENTIK_ENTERPRISE_AUDIT, AUTHENTIK_ENTERPRISE_ENDPOINTS_CONNECTORS_AGENT, AUTHENTIK_ENTERPRISE_ENDPOINTS_CONNECTORS_FLEET, AUTHENTIK_ENTERPRISE_ENDPOINTS_CONNECTORS_GOOGLE_CHROME, AUTHENTIK_ENTERPRISE_LIFECYCLE, AUTHENTIK_ENTERPRISE_POLICIES_UNIQUE_PASSWORD, AUTHENTIK_ENTERPRISE_PROVIDERS_GOOGLE_WORKSPACE, AUTHENTIK_ENTERPRISE_PROVIDERS_MICROSOFT_ENTRA, AUTHENTIK_ENTERPRISE_PROVIDERS_OAUTH2, AUTHENTIK_ENTERPRISE_PROVIDERS_RADIUS, AUTHENTIK_ENTERPRISE_PROVIDERS_SCIM, AUTHENTIK_ENTERPRISE_PROVIDERS_SSF, AUTHENTIK_ENTERPRISE_PROVIDERS_WS_FEDERATION, AUTHENTIK_ENTERPRISE_REPORTS, AUTHENTIK_ENTERPRISE_REQUESTS, AUTHENTIK_ENTERPRISE_STAGES_ACCOUNT_LOCKDOWN, AUTHENTIK_ENTERPRISE_STAGES_AUTHENTICATOR_ENDPOINT_GDTC, AUTHENTIK_ENTERPRISE_STAGES_MTLS, AUTHENTIK_ENTERPRISE_STAGES_SOURCE].freeze
     end
 
     # Builds the enum from string

data/lib/authentik/api/models/application.rb

@@ -12,6 +12,8 @@ module Authentik::Api
   class Application < ApiModelBase
     attr_accessor :pk
 
+    attr_accessor :pbm_uuid
+
     # Application's display Name.
     attr_accessor :name
 
@@ -78,6 +80,7 @@ module Authentik::Api
     def self.attribute_map
       {
         :'pk' => :'pk',
+        :'pbm_uuid' => :'pbm_uuid',
         :'name' => :'name',
         :'slug' => :'slug',
         :'provider' => :'provider',
@@ -112,6 +115,7 @@ module Authentik::Api
     def self.openapi_types
       {
         :'pk' => :'String',
+        :'pbm_uuid' => :'String',
         :'name' => :'String',
         :'slug' => :'String',
         :'provider' => :'Integer',
@@ -165,6 +169,12 @@ module Authentik::Api
         self.pk = nil
       end
 
+      if attributes.key?(:'pbm_uuid')
+        self.pbm_uuid = attributes[:'pbm_uuid']
+      else
+        self.pbm_uuid = nil
+      end
+
       if attributes.key?(:'name')
         self.name = attributes[:'name']
       else
@@ -261,6 +271,10 @@ module Authentik::Api
         invalid_properties.push('invalid value for "pk", pk cannot be nil.')
       end
 
+      if @pbm_uuid.nil?
+        invalid_properties.push('invalid value for "pbm_uuid", pbm_uuid cannot be nil.')
+      end
+
       if @name.nil?
         invalid_properties.push('invalid value for "name", name cannot be nil.')
       end
@@ -286,6 +300,7 @@ module Authentik::Api
     def valid?
       warn '[DEPRECATED] the `valid?` method is obsolete'
       return false if @pk.nil?
+      return false if @pbm_uuid.nil?
       return false if @name.nil?
       return false if @slug.nil?
       return false if @slug !~ Regexp.new(/^[-a-zA-Z0-9_]+$/)
@@ -303,6 +318,16 @@ module Authentik::Api
       @pk = pk
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] pbm_uuid Value to be assigned
+    def pbm_uuid=(pbm_uuid)
+      if pbm_uuid.nil?
+        fail ArgumentError, 'pbm_uuid cannot be nil'
+      end
+
+      @pbm_uuid = pbm_uuid
+    end
+
     # Custom attribute writer method with validation
     # @param [Object] name Value to be assigned
     def name=(name)
@@ -344,6 +369,7 @@ module Authentik::Api
       return true if self.equal?(o)
       self.class == o.class &&
           pk == o.pk &&
+          pbm_uuid == o.pbm_uuid &&
           name == o.name &&
           slug == o.slug &&
           provider == o.provider &&
@@ -372,7 +398,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, slug, provider, provider_obj, backchannel_providers, backchannel_providers_obj, launch_url, open_in_new_tab, meta_launch_url, meta_icon, meta_icon_url, meta_icon_themed_urls, meta_description, meta_publisher, policy_engine_mode, group, meta_hide].hash
+      [pk, pbm_uuid, name, slug, provider, provider_obj, backchannel_providers, backchannel_providers_obj, launch_url, open_in_new_tab, meta_launch_url, meta_icon, meta_icon_url, meta_icon_themed_urls, meta_description, meta_publisher, policy_engine_mode, group, meta_hide].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/authenticator_web_authn_stage.rb

@@ -45,9 +45,6 @@ module Authentik::Api
 
     attr_accessor :device_type_restrictions_obj
 
-    # When enabled, a given device can only be registered once.
-    attr_accessor :prevent_duplicate_devices
-
     attr_accessor :max_attempts
 
     class EnumAttributeValidator
@@ -90,7 +87,6 @@ module Authentik::Api
         :'hints' => :'hints',
         :'device_type_restrictions' => :'device_type_restrictions',
         :'device_type_restrictions_obj' => :'device_type_restrictions_obj',
-        :'prevent_duplicate_devices' => :'prevent_duplicate_devices',
         :'max_attempts' => :'max_attempts'
       }
     end
@@ -123,7 +119,6 @@ module Authentik::Api
         :'hints' => :'Array<WebAuthnHintEnum>',
         :'device_type_restrictions' => :'Array<String>',
         :'device_type_restrictions_obj' => :'Array<WebAuthnDeviceType>',
-        :'prevent_duplicate_devices' => :'Boolean',
         :'max_attempts' => :'Integer'
       }
     end
@@ -236,10 +231,6 @@ module Authentik::Api
         self.device_type_restrictions_obj = nil
       end
 
-      if attributes.key?(:'prevent_duplicate_devices')
-        self.prevent_duplicate_devices = attributes[:'prevent_duplicate_devices']
-      end
-
       if attributes.key?(:'max_attempts')
         self.max_attempts = attributes[:'max_attempts']
       end
@@ -428,7 +419,6 @@ module Authentik::Api
           hints == o.hints &&
           device_type_restrictions == o.device_type_restrictions &&
           device_type_restrictions_obj == o.device_type_restrictions_obj &&
-          prevent_duplicate_devices == o.prevent_duplicate_devices &&
           max_attempts == o.max_attempts
     end
 
@@ -441,7 +431,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, flow_set, configure_flow, friendly_name, user_verification, authenticator_attachment, resident_key_requirement, hints, device_type_restrictions, device_type_restrictions_obj, prevent_duplicate_devices, max_attempts].hash
+      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, flow_set, configure_flow, friendly_name, user_verification, authenticator_attachment, resident_key_requirement, hints, device_type_restrictions, device_type_restrictions_obj, max_attempts].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/authenticator_web_authn_stage_request.rb

@@ -27,9 +27,6 @@ module Authentik::Api
 
     attr_accessor :device_type_restrictions
 
-    # When enabled, a given device can only be registered once.
-    attr_accessor :prevent_duplicate_devices
-
     attr_accessor :max_attempts
 
     class EnumAttributeValidator
@@ -65,7 +62,6 @@ module Authentik::Api
         :'resident_key_requirement' => :'resident_key_requirement',
         :'hints' => :'hints',
         :'device_type_restrictions' => :'device_type_restrictions',
-        :'prevent_duplicate_devices' => :'prevent_duplicate_devices',
         :'max_attempts' => :'max_attempts'
       }
     end
@@ -91,7 +87,6 @@ module Authentik::Api
         :'resident_key_requirement' => :'UserVerificationEnum',
         :'hints' => :'Array<WebAuthnHintEnum>',
         :'device_type_restrictions' => :'Array<String>',
-        :'prevent_duplicate_devices' => :'Boolean',
         :'max_attempts' => :'Integer'
       }
     end
@@ -158,10 +153,6 @@ module Authentik::Api
         end
       end
 
-      if attributes.key?(:'prevent_duplicate_devices')
-        self.prevent_duplicate_devices = attributes[:'prevent_duplicate_devices']
-      end
-
       if attributes.key?(:'max_attempts')
         self.max_attempts = attributes[:'max_attempts']
       end
@@ -247,7 +238,6 @@ module Authentik::Api
           resident_key_requirement == o.resident_key_requirement &&
           hints == o.hints &&
           device_type_restrictions == o.device_type_restrictions &&
-          prevent_duplicate_devices == o.prevent_duplicate_devices &&
           max_attempts == o.max_attempts
     end
 
@@ -260,7 +250,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, configure_flow, friendly_name, user_verification, authenticator_attachment, resident_key_requirement, hints, device_type_restrictions, prevent_duplicate_devices, max_attempts].hash
+      [name, configure_flow, friendly_name, user_verification, authenticator_attachment, resident_key_requirement, hints, device_type_restrictions, max_attempts].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/brand.rb

@@ -27,8 +27,13 @@ module Authentik::Api
 
     attr_accessor :branding_default_flow_background
 
+    # URL template for the vector tile source used by the events map. Supports XYZ templates with {z}, {x} and {y} placeholders, or pmtiles:// archive URLs. When empty, the frontend uses the bundled hexworld basemap. This value is part of the brand information served to unauthenticated clients; do not embed API keys or other credentials in it.
+    attr_accessor :branding_map_tiles
+
     attr_accessor :flow_authentication
 
+    attr_accessor :flow_user_switch
+
     attr_accessor :flow_invalidation
 
     attr_accessor :flow_recovery
@@ -41,6 +46,8 @@ module Authentik::Api
 
     attr_accessor :flow_lockdown
 
+    attr_accessor :flow_request
+
     # When set, external users will be redirected to this application after authenticating.
     attr_accessor :default_application
 
@@ -63,13 +70,16 @@ module Authentik::Api
         :'branding_favicon' => :'branding_favicon',
         :'branding_custom_css' => :'branding_custom_css',
         :'branding_default_flow_background' => :'branding_default_flow_background',
+        :'branding_map_tiles' => :'branding_map_tiles',
         :'flow_authentication' => :'flow_authentication',
+        :'flow_user_switch' => :'flow_user_switch',
         :'flow_invalidation' => :'flow_invalidation',
         :'flow_recovery' => :'flow_recovery',
         :'flow_unenrollment' => :'flow_unenrollment',
         :'flow_user_settings' => :'flow_user_settings',
         :'flow_device_code' => :'flow_device_code',
         :'flow_lockdown' => :'flow_lockdown',
+        :'flow_request' => :'flow_request',
         :'default_application' => :'default_application',
         :'web_certificate' => :'web_certificate',
         :'client_certificates' => :'client_certificates',
@@ -98,13 +108,16 @@ module Authentik::Api
         :'branding_favicon' => :'String',
         :'branding_custom_css' => :'String',
         :'branding_default_flow_background' => :'String',
+        :'branding_map_tiles' => :'String',
         :'flow_authentication' => :'String',
+        :'flow_user_switch' => :'String',
         :'flow_invalidation' => :'String',
         :'flow_recovery' => :'String',
         :'flow_unenrollment' => :'String',
         :'flow_user_settings' => :'String',
         :'flow_device_code' => :'String',
         :'flow_lockdown' => :'String',
+        :'flow_request' => :'String',
         :'default_application' => :'String',
         :'web_certificate' => :'String',
         :'client_certificates' => :'Array<String>',
@@ -116,12 +129,14 @@ module Authentik::Api
     def self.openapi_nullable
       Set.new([
         :'flow_authentication',
+        :'flow_user_switch',
         :'flow_invalidation',
         :'flow_recovery',
         :'flow_unenrollment',
         :'flow_user_settings',
         :'flow_device_code',
         :'flow_lockdown',
+        :'flow_request',
         :'default_application',
         :'web_certificate',
       ])
@@ -179,10 +194,18 @@ module Authentik::Api
         self.branding_default_flow_background = attributes[:'branding_default_flow_background']
       end
 
+      if attributes.key?(:'branding_map_tiles')
+        self.branding_map_tiles = attributes[:'branding_map_tiles']
+      end
+
       if attributes.key?(:'flow_authentication')
         self.flow_authentication = attributes[:'flow_authentication']
       end
 
+      if attributes.key?(:'flow_user_switch')
+        self.flow_user_switch = attributes[:'flow_user_switch']
+      end
+
       if attributes.key?(:'flow_invalidation')
         self.flow_invalidation = attributes[:'flow_invalidation']
       end
@@ -207,6 +230,10 @@ module Authentik::Api
         self.flow_lockdown = attributes[:'flow_lockdown']
       end
 
+      if attributes.key?(:'flow_request')
+        self.flow_request = attributes[:'flow_request']
+      end
+
       if attributes.key?(:'default_application')
         self.default_application = attributes[:'default_application']
       end
@@ -286,13 +313,16 @@ module Authentik::Api
           branding_favicon == o.branding_favicon &&
           branding_custom_css == o.branding_custom_css &&
           branding_default_flow_background == o.branding_default_flow_background &&
+          branding_map_tiles == o.branding_map_tiles &&
           flow_authentication == o.flow_authentication &&
+          flow_user_switch == o.flow_user_switch &&
           flow_invalidation == o.flow_invalidation &&
           flow_recovery == o.flow_recovery &&
           flow_unenrollment == o.flow_unenrollment &&
           flow_user_settings == o.flow_user_settings &&
           flow_device_code == o.flow_device_code &&
           flow_lockdown == o.flow_lockdown &&
+          flow_request == o.flow_request &&
           default_application == o.default_application &&
           web_certificate == o.web_certificate &&
           client_certificates == o.client_certificates &&
@@ -308,7 +338,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [brand_uuid, domain, default, branding_title, branding_logo, branding_favicon, branding_custom_css, branding_default_flow_background, flow_authentication, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, flow_lockdown, default_application, web_certificate, client_certificates, attributes].hash
+      [brand_uuid, domain, default, branding_title, branding_logo, branding_favicon, branding_custom_css, branding_default_flow_background, branding_map_tiles, flow_authentication, flow_user_switch, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, flow_lockdown, flow_request, default_application, web_certificate, client_certificates, attributes].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/brand_request.rb

@@ -25,8 +25,13 @@ module Authentik::Api
 
     attr_accessor :branding_default_flow_background
 
+    # URL template for the vector tile source used by the events map. Supports XYZ templates with {z}, {x} and {y} placeholders, or pmtiles:// archive URLs. When empty, the frontend uses the bundled hexworld basemap. This value is part of the brand information served to unauthenticated clients; do not embed API keys or other credentials in it.
+    attr_accessor :branding_map_tiles
+
     attr_accessor :flow_authentication
 
+    attr_accessor :flow_user_switch
+
     attr_accessor :flow_invalidation
 
     attr_accessor :flow_recovery
@@ -39,6 +44,8 @@ module Authentik::Api
 
     attr_accessor :flow_lockdown
 
+    attr_accessor :flow_request
+
     # When set, external users will be redirected to this application after authenticating.
     attr_accessor :default_application
 
@@ -60,13 +67,16 @@ module Authentik::Api
         :'branding_favicon' => :'branding_favicon',
         :'branding_custom_css' => :'branding_custom_css',
         :'branding_default_flow_background' => :'branding_default_flow_background',
+        :'branding_map_tiles' => :'branding_map_tiles',
         :'flow_authentication' => :'flow_authentication',
+        :'flow_user_switch' => :'flow_user_switch',
         :'flow_invalidation' => :'flow_invalidation',
         :'flow_recovery' => :'flow_recovery',
         :'flow_unenrollment' => :'flow_unenrollment',
         :'flow_user_settings' => :'flow_user_settings',
         :'flow_device_code' => :'flow_device_code',
         :'flow_lockdown' => :'flow_lockdown',
+        :'flow_request' => :'flow_request',
         :'default_application' => :'default_application',
         :'web_certificate' => :'web_certificate',
         :'client_certificates' => :'client_certificates',
@@ -94,13 +104,16 @@ module Authentik::Api
         :'branding_favicon' => :'String',
         :'branding_custom_css' => :'String',
         :'branding_default_flow_background' => :'String',
+        :'branding_map_tiles' => :'String',
         :'flow_authentication' => :'String',
+        :'flow_user_switch' => :'String',
         :'flow_invalidation' => :'String',
         :'flow_recovery' => :'String',
         :'flow_unenrollment' => :'String',
         :'flow_user_settings' => :'String',
         :'flow_device_code' => :'String',
         :'flow_lockdown' => :'String',
+        :'flow_request' => :'String',
         :'default_application' => :'String',
         :'web_certificate' => :'String',
         :'client_certificates' => :'Array<String>',
@@ -112,12 +125,14 @@ module Authentik::Api
     def self.openapi_nullable
       Set.new([
         :'flow_authentication',
+        :'flow_user_switch',
         :'flow_invalidation',
         :'flow_recovery',
         :'flow_unenrollment',
         :'flow_user_settings',
         :'flow_device_code',
         :'flow_lockdown',
+        :'flow_request',
         :'default_application',
         :'web_certificate',
       ])
@@ -169,10 +184,18 @@ module Authentik::Api
         self.branding_default_flow_background = attributes[:'branding_default_flow_background']
       end
 
+      if attributes.key?(:'branding_map_tiles')
+        self.branding_map_tiles = attributes[:'branding_map_tiles']
+      end
+
       if attributes.key?(:'flow_authentication')
         self.flow_authentication = attributes[:'flow_authentication']
       end
 
+      if attributes.key?(:'flow_user_switch')
+        self.flow_user_switch = attributes[:'flow_user_switch']
+      end
+
       if attributes.key?(:'flow_invalidation')
         self.flow_invalidation = attributes[:'flow_invalidation']
       end
@@ -197,6 +220,10 @@ module Authentik::Api
         self.flow_lockdown = attributes[:'flow_lockdown']
       end
 
+      if attributes.key?(:'flow_request')
+        self.flow_request = attributes[:'flow_request']
+      end
+
       if attributes.key?(:'default_application')
         self.default_application = attributes[:'default_application']
       end
@@ -345,13 +372,16 @@ module Authentik::Api
           branding_favicon == o.branding_favicon &&
           branding_custom_css == o.branding_custom_css &&
           branding_default_flow_background == o.branding_default_flow_background &&
+          branding_map_tiles == o.branding_map_tiles &&
           flow_authentication == o.flow_authentication &&
+          flow_user_switch == o.flow_user_switch &&
           flow_invalidation == o.flow_invalidation &&
           flow_recovery == o.flow_recovery &&
           flow_unenrollment == o.flow_unenrollment &&
           flow_user_settings == o.flow_user_settings &&
           flow_device_code == o.flow_device_code &&
           flow_lockdown == o.flow_lockdown &&
+          flow_request == o.flow_request &&
           default_application == o.default_application &&
           web_certificate == o.web_certificate &&
           client_certificates == o.client_certificates &&
@@ -367,7 +397,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [domain, default, branding_title, branding_logo, branding_favicon, branding_custom_css, branding_default_flow_background, flow_authentication, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, flow_lockdown, default_application, web_certificate, client_certificates, attributes].hash
+      [domain, default, branding_title, branding_logo, branding_favicon, branding_custom_css, branding_default_flow_background, branding_map_tiles, flow_authentication, flow_user_switch, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, flow_lockdown, flow_request, default_application, web_certificate, client_certificates, attributes].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/captcha_stage.rb

@@ -35,6 +35,8 @@ module Authentik::Api
 
     attr_accessor :api_url
 
+    attr_accessor :request_content_type
+
     attr_accessor :interactive
 
     attr_accessor :score_min_threshold
@@ -44,6 +46,28 @@ module Authentik::Api
     # When enabled and the received captcha score is outside of the given threshold, the stage will show an error message. When not enabled, the flow will continue, but the data from the captcha will be available in the context for policy decisions
     attr_accessor :error_on_invalid_score
 
+    class EnumAttributeValidator
+      attr_reader :datatype
+      attr_reader :allowable_values
+
+      def initialize(datatype, allowable_values)
+        @allowable_values = allowable_values.map do |value|
+          case datatype.to_s
+          when /Integer/i
+            value.to_i
+          when /Float/i
+            value.to_f
+          else
+            value
+          end
+        end
+      end
+
+      def valid?(value)
+        !value || allowable_values.include?(value)
+      end
+    end
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
@@ -57,6 +81,7 @@ module Authentik::Api
         :'public_key' => :'public_key',
         :'js_url' => :'js_url',
         :'api_url' => :'api_url',
+        :'request_content_type' => :'request_content_type',
         :'interactive' => :'interactive',
         :'score_min_threshold' => :'score_min_threshold',
         :'score_max_threshold' => :'score_max_threshold',
@@ -87,6 +112,7 @@ module Authentik::Api
         :'public_key' => :'String',
         :'js_url' => :'String',
         :'api_url' => :'String',
+        :'request_content_type' => :'RequestContentTypeEnum',
         :'interactive' => :'Boolean',
         :'score_min_threshold' => :'Float',
         :'score_max_threshold' => :'Float',
@@ -174,6 +200,10 @@ module Authentik::Api
         self.api_url = attributes[:'api_url']
       end
 
+      if attributes.key?(:'request_content_type')
+        self.request_content_type = attributes[:'request_content_type']
+      end
+
       if attributes.key?(:'interactive')
         self.interactive = attributes[:'interactive']
       end
@@ -341,6 +371,7 @@ module Authentik::Api
           public_key == o.public_key &&
           js_url == o.js_url &&
           api_url == o.api_url &&
+          request_content_type == o.request_content_type &&
           interactive == o.interactive &&
           score_min_threshold == o.score_min_threshold &&
           score_max_threshold == o.score_max_threshold &&
@@ -356,7 +387,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, flow_set, public_key, js_url, api_url, interactive, score_min_threshold, score_max_threshold, error_on_invalid_score].hash
+      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, flow_set, public_key, js_url, api_url, request_content_type, interactive, score_min_threshold, score_max_threshold, error_on_invalid_score].hash
     end
 
     # Builds the object from hash