authentik-api 2026.5.7 → 2026.8.0.rc1

data/lib/authentik/api/models/captcha_stage.rb

@@ -35,6 +35,8 @@ module Authentik::Api
 
     attr_accessor :api_url
 
+    attr_accessor :request_content_type
+
     attr_accessor :interactive
 
     attr_accessor :score_min_threshold
@@ -44,6 +46,28 @@ module Authentik::Api
     # When enabled and the received captcha score is outside of the given threshold, the stage will show an error message. When not enabled, the flow will continue, but the data from the captcha will be available in the context for policy decisions
     attr_accessor :error_on_invalid_score
 
+    class EnumAttributeValidator
+      attr_reader :datatype
+      attr_reader :allowable_values
+
+      def initialize(datatype, allowable_values)
+        @allowable_values = allowable_values.map do |value|
+          case datatype.to_s
+          when /Integer/i
+            value.to_i
+          when /Float/i
+            value.to_f
+          else
+            value
+          end
+        end
+      end
+
+      def valid?(value)
+        !value || allowable_values.include?(value)
+      end
+    end
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
@@ -57,6 +81,7 @@ module Authentik::Api
         :'public_key' => :'public_key',
         :'js_url' => :'js_url',
         :'api_url' => :'api_url',
+        :'request_content_type' => :'request_content_type',
         :'interactive' => :'interactive',
         :'score_min_threshold' => :'score_min_threshold',
         :'score_max_threshold' => :'score_max_threshold',
@@ -87,6 +112,7 @@ module Authentik::Api
         :'public_key' => :'String',
         :'js_url' => :'String',
         :'api_url' => :'String',
+        :'request_content_type' => :'RequestContentTypeEnum',
         :'interactive' => :'Boolean',
         :'score_min_threshold' => :'Float',
         :'score_max_threshold' => :'Float',
@@ -174,6 +200,10 @@ module Authentik::Api
         self.api_url = attributes[:'api_url']
       end
 
+      if attributes.key?(:'request_content_type')
+        self.request_content_type = attributes[:'request_content_type']
+      end
+
       if attributes.key?(:'interactive')
         self.interactive = attributes[:'interactive']
       end
@@ -341,6 +371,7 @@ module Authentik::Api
           public_key == o.public_key &&
           js_url == o.js_url &&
           api_url == o.api_url &&
+          request_content_type == o.request_content_type &&
           interactive == o.interactive &&
           score_min_threshold == o.score_min_threshold &&
           score_max_threshold == o.score_max_threshold &&
@@ -356,7 +387,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, flow_set, public_key, js_url, api_url, interactive, score_min_threshold, score_max_threshold, error_on_invalid_score].hash
+      [pk, name, component, verbose_name, verbose_name_plural, meta_model_name, flow_set, public_key, js_url, api_url, request_content_type, interactive, score_min_threshold, score_max_threshold, error_on_invalid_score].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/captcha_stage_request.rb

@@ -22,6 +22,8 @@ module Authentik::Api
 
     attr_accessor :api_url
 
+    attr_accessor :request_content_type
+
     attr_accessor :interactive
 
     attr_accessor :score_min_threshold
@@ -31,6 +33,28 @@ module Authentik::Api
     # When enabled and the received captcha score is outside of the given threshold, the stage will show an error message. When not enabled, the flow will continue, but the data from the captcha will be available in the context for policy decisions
     attr_accessor :error_on_invalid_score
 
+    class EnumAttributeValidator
+      attr_reader :datatype
+      attr_reader :allowable_values
+
+      def initialize(datatype, allowable_values)
+        @allowable_values = allowable_values.map do |value|
+          case datatype.to_s
+          when /Integer/i
+            value.to_i
+          when /Float/i
+            value.to_f
+          else
+            value
+          end
+        end
+      end
+
+      def valid?(value)
+        !value || allowable_values.include?(value)
+      end
+    end
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
@@ -39,6 +63,7 @@ module Authentik::Api
         :'private_key' => :'private_key',
         :'js_url' => :'js_url',
         :'api_url' => :'api_url',
+        :'request_content_type' => :'request_content_type',
         :'interactive' => :'interactive',
         :'score_min_threshold' => :'score_min_threshold',
         :'score_max_threshold' => :'score_max_threshold',
@@ -64,6 +89,7 @@ module Authentik::Api
         :'private_key' => :'String',
         :'js_url' => :'String',
         :'api_url' => :'String',
+        :'request_content_type' => :'RequestContentTypeEnum',
         :'interactive' => :'Boolean',
         :'score_min_threshold' => :'Float',
         :'score_max_threshold' => :'Float',
@@ -119,6 +145,10 @@ module Authentik::Api
         self.api_url = attributes[:'api_url']
       end
 
+      if attributes.key?(:'request_content_type')
+        self.request_content_type = attributes[:'request_content_type']
+      end
+
       if attributes.key?(:'interactive')
         self.interactive = attributes[:'interactive']
       end
@@ -271,6 +301,7 @@ module Authentik::Api
           private_key == o.private_key &&
           js_url == o.js_url &&
           api_url == o.api_url &&
+          request_content_type == o.request_content_type &&
           interactive == o.interactive &&
           score_min_threshold == o.score_min_threshold &&
           score_max_threshold == o.score_max_threshold &&
@@ -286,7 +317,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, public_key, private_key, js_url, api_url, interactive, score_min_threshold, score_max_threshold, error_on_invalid_score].hash
+      [name, public_key, private_key, js_url, api_url, request_content_type, interactive, score_min_threshold, score_max_threshold, error_on_invalid_score].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/compatibility_mode_enum.rb

@@ -13,11 +13,12 @@ module Authentik::Api
     AWS = "aws".freeze
     SLACK = "slack".freeze
     SFDC = "sfdc".freeze
+    GITLAB = "gitlab".freeze
     WEBEX = "webex".freeze
     VCENTER = "vcenter".freeze
 
     def self.all_vars
-      @all_vars ||= [DEFAULT, AWS, SLACK, SFDC, WEBEX, VCENTER].freeze
+      @all_vars ||= [DEFAULT, AWS, SLACK, SFDC, GITLAB, WEBEX, VCENTER].freeze
     end
 
     # Builds the enum from string

data/lib/authentik/api/models/content_type.rb

@@ -17,13 +17,16 @@ module Authentik::Api
 
     attr_accessor :verbose_name_plural
 
+    attr_accessor :fully_qualified_model
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
         :'id' => :'id',
         :'app_label' => :'app_label',
         :'model' => :'model',
-        :'verbose_name_plural' => :'verbose_name_plural'
+        :'verbose_name_plural' => :'verbose_name_plural',
+        :'fully_qualified_model' => :'fully_qualified_model'
       }
     end
 
@@ -43,7 +46,8 @@ module Authentik::Api
         :'id' => :'Integer',
         :'app_label' => :'String',
         :'model' => :'String',
-        :'verbose_name_plural' => :'String'
+        :'verbose_name_plural' => :'String',
+        :'fully_qualified_model' => :'String'
       }
     end
 
@@ -92,6 +96,12 @@ module Authentik::Api
       else
         self.verbose_name_plural = nil
       end
+
+      if attributes.key?(:'fully_qualified_model')
+        self.fully_qualified_model = attributes[:'fully_qualified_model']
+      else
+        self.fully_qualified_model = nil
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -115,6 +125,10 @@ module Authentik::Api
         invalid_properties.push('invalid value for "verbose_name_plural", verbose_name_plural cannot be nil.')
       end
 
+      if @fully_qualified_model.nil?
+        invalid_properties.push('invalid value for "fully_qualified_model", fully_qualified_model cannot be nil.')
+      end
+
       invalid_properties
     end
 
@@ -126,6 +140,7 @@ module Authentik::Api
       return false if @app_label.nil?
       return false if @model.nil?
       return false if @verbose_name_plural.nil?
+      return false if @fully_qualified_model.nil?
       true
     end
 
@@ -169,6 +184,16 @@ module Authentik::Api
       @verbose_name_plural = verbose_name_plural
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] fully_qualified_model Value to be assigned
+    def fully_qualified_model=(fully_qualified_model)
+      if fully_qualified_model.nil?
+        fail ArgumentError, 'fully_qualified_model cannot be nil'
+      end
+
+      @fully_qualified_model = fully_qualified_model
+    end
+
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)
@@ -177,7 +202,8 @@ module Authentik::Api
           id == o.id &&
           app_label == o.app_label &&
           model == o.model &&
-          verbose_name_plural == o.verbose_name_plural
+          verbose_name_plural == o.verbose_name_plural &&
+          fully_qualified_model == o.fully_qualified_model
     end
 
     # @see the `==` method
@@ -189,7 +215,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [id, app_label, model, verbose_name_plural].hash
+      [id, app_label, model, verbose_name_plural, fully_qualified_model].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/current_brand.rb

@@ -30,6 +30,8 @@ module Authentik::Api
 
     attr_accessor :flow_authentication
 
+    attr_accessor :flow_user_switch
+
     attr_accessor :flow_invalidation
 
     attr_accessor :flow_recovery
@@ -42,6 +44,8 @@ module Authentik::Api
 
     attr_accessor :flow_lockdown
 
+    attr_accessor :flow_request
+
     attr_accessor :default_locale
 
     attr_accessor :flags
@@ -81,12 +85,14 @@ module Authentik::Api
         :'ui_footer_links' => :'ui_footer_links',
         :'ui_theme' => :'ui_theme',
         :'flow_authentication' => :'flow_authentication',
+        :'flow_user_switch' => :'flow_user_switch',
         :'flow_invalidation' => :'flow_invalidation',
         :'flow_recovery' => :'flow_recovery',
         :'flow_unenrollment' => :'flow_unenrollment',
         :'flow_user_settings' => :'flow_user_settings',
         :'flow_device_code' => :'flow_device_code',
         :'flow_lockdown' => :'flow_lockdown',
+        :'flow_request' => :'flow_request',
         :'default_locale' => :'default_locale',
         :'flags' => :'flags'
       }
@@ -115,12 +121,14 @@ module Authentik::Api
         :'ui_footer_links' => :'Array<FooterLink>',
         :'ui_theme' => :'UiThemeEnum',
         :'flow_authentication' => :'String',
+        :'flow_user_switch' => :'String',
         :'flow_invalidation' => :'String',
         :'flow_recovery' => :'String',
         :'flow_unenrollment' => :'String',
         :'flow_user_settings' => :'String',
         :'flow_device_code' => :'String',
         :'flow_lockdown' => :'String',
+        :'flow_request' => :'String',
         :'default_locale' => :'String',
         :'flags' => :'CurrentBrandFlags'
       }
@@ -210,6 +218,10 @@ module Authentik::Api
         self.flow_authentication = attributes[:'flow_authentication']
       end
 
+      if attributes.key?(:'flow_user_switch')
+        self.flow_user_switch = attributes[:'flow_user_switch']
+      end
+
       if attributes.key?(:'flow_invalidation')
         self.flow_invalidation = attributes[:'flow_invalidation']
       end
@@ -234,6 +246,10 @@ module Authentik::Api
         self.flow_lockdown = attributes[:'flow_lockdown']
       end
 
+      if attributes.key?(:'flow_request')
+        self.flow_request = attributes[:'flow_request']
+      end
+
       if attributes.key?(:'default_locale')
         self.default_locale = attributes[:'default_locale']
       else
@@ -412,12 +428,14 @@ module Authentik::Api
           ui_footer_links == o.ui_footer_links &&
           ui_theme == o.ui_theme &&
           flow_authentication == o.flow_authentication &&
+          flow_user_switch == o.flow_user_switch &&
           flow_invalidation == o.flow_invalidation &&
           flow_recovery == o.flow_recovery &&
           flow_unenrollment == o.flow_unenrollment &&
           flow_user_settings == o.flow_user_settings &&
           flow_device_code == o.flow_device_code &&
           flow_lockdown == o.flow_lockdown &&
+          flow_request == o.flow_request &&
           default_locale == o.default_locale &&
           flags == o.flags
     end
@@ -431,7 +449,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [matched_domain, branding_title, branding_logo, branding_logo_themed_urls, branding_favicon, branding_favicon_themed_urls, branding_custom_css, ui_footer_links, ui_theme, flow_authentication, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, flow_lockdown, default_locale, flags].hash
+      [matched_domain, branding_title, branding_logo, branding_logo_themed_urls, branding_favicon, branding_favicon_themed_urls, branding_custom_css, ui_footer_links, ui_theme, flow_authentication, flow_user_switch, flow_invalidation, flow_recovery, flow_unenrollment, flow_user_settings, flow_device_code, flow_lockdown, flow_request, default_locale, flags].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/device_user_binding.rb

@@ -39,6 +39,10 @@ module Authentik::Api
     # Result if the Policy execution fails.
     attr_accessor :failure_result
 
+    attr_accessor :expires
+
+    attr_accessor :expiring
+
     attr_accessor :is_primary
 
     attr_accessor :connector
@@ -61,6 +65,8 @@ module Authentik::Api
         :'order' => :'order',
         :'timeout' => :'timeout',
         :'failure_result' => :'failure_result',
+        :'expires' => :'expires',
+        :'expiring' => :'expiring',
         :'is_primary' => :'is_primary',
         :'connector' => :'connector',
         :'connector_obj' => :'connector_obj'
@@ -93,6 +99,8 @@ module Authentik::Api
         :'order' => :'Integer',
         :'timeout' => :'Integer',
         :'failure_result' => :'Boolean',
+        :'expires' => :'Time',
+        :'expiring' => :'Boolean',
         :'is_primary' => :'Boolean',
         :'connector' => :'String',
         :'connector_obj' => :'Connector'
@@ -108,6 +116,7 @@ module Authentik::Api
         :'policy_obj',
         :'group_obj',
         :'user_obj',
+        :'expires',
         :'connector',
       ])
     end
@@ -192,6 +201,18 @@ module Authentik::Api
         self.failure_result = attributes[:'failure_result']
       end
 
+      if attributes.key?(:'expires')
+        self.expires = attributes[:'expires']
+      else
+        self.expires = nil
+      end
+
+      if attributes.key?(:'expiring')
+        self.expiring = attributes[:'expiring']
+      else
+        self.expiring = nil
+      end
+
       if attributes.key?(:'is_primary')
         self.is_primary = attributes[:'is_primary']
       end
@@ -242,6 +263,10 @@ module Authentik::Api
         invalid_properties.push('invalid value for "timeout", must be greater than or equal to 0.')
       end
 
+      if @expiring.nil?
+        invalid_properties.push('invalid value for "expiring", expiring cannot be nil.')
+      end
+
       if @connector_obj.nil?
         invalid_properties.push('invalid value for "connector_obj", connector_obj cannot be nil.')
       end
@@ -260,6 +285,7 @@ module Authentik::Api
       return false if @order < -2147483648
       return false if !@timeout.nil? && @timeout > 2147483647
       return false if !@timeout.nil? && @timeout < 0
+      return false if @expiring.nil?
       return false if @connector_obj.nil?
       true
     end
@@ -320,6 +346,16 @@ module Authentik::Api
       @timeout = timeout
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] expiring Value to be assigned
+    def expiring=(expiring)
+      if expiring.nil?
+        fail ArgumentError, 'expiring cannot be nil'
+      end
+
+      @expiring = expiring
+    end
+
     # Custom attribute writer method with validation
     # @param [Object] connector_obj Value to be assigned
     def connector_obj=(connector_obj)
@@ -348,6 +384,8 @@ module Authentik::Api
           order == o.order &&
           timeout == o.timeout &&
           failure_result == o.failure_result &&
+          expires == o.expires &&
+          expiring == o.expiring &&
           is_primary == o.is_primary &&
           connector == o.connector &&
           connector_obj == o.connector_obj
@@ -362,7 +400,7 @@ module Authentik::Api
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [pk, policy, group, user, policy_obj, group_obj, user_obj, target, negate, enabled, order, timeout, failure_result, is_primary, connector, connector_obj].hash
+      [pk, policy, group, user, policy_obj, group_obj, user_obj, target, negate, enabled, order, timeout, failure_result, expires, expiring, is_primary, connector, connector_obj].hash
     end
 
     # Builds the object from hash

data/lib/authentik/api/models/endpoint_device.rb

@@ -72,7 +72,6 @@ module Authentik::Api
       Set.new([
         :'access_group',
         :'expires',
-        :'facts',
       ])
     end
 
@@ -150,6 +149,10 @@ module Authentik::Api
         invalid_properties.push('invalid value for "name", name cannot be nil.')
       end
 
+      if @facts.nil?
+        invalid_properties.push('invalid value for "facts", facts cannot be nil.')
+      end
+
       invalid_properties
     end
 
@@ -159,6 +162,7 @@ module Authentik::Api
       warn '[DEPRECATED] the `valid?` method is obsolete'
       return false if @pbm_uuid.nil?
       return false if @name.nil?
+      return false if @facts.nil?
       true
     end
 
@@ -182,6 +186,16 @@ module Authentik::Api
       @name = name
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] facts Value to be assigned
+    def facts=(facts)
+      if facts.nil?
+        fail ArgumentError, 'facts cannot be nil'
+      end
+
+      @facts = facts
+    end
+
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)

data/lib/authentik/api/models/endpoint_device_details.rb

@@ -84,7 +84,6 @@ module Authentik::Api
       Set.new([
         :'access_group',
         :'expires',
-        :'facts',
       ])
     end
 
@@ -186,6 +185,10 @@ module Authentik::Api
         invalid_properties.push('invalid value for "name", name cannot be nil.')
       end
 
+      if @facts.nil?
+        invalid_properties.push('invalid value for "facts", facts cannot be nil.')
+      end
+
       if @connections_obj.nil?
         invalid_properties.push('invalid value for "connections_obj", connections_obj cannot be nil.')
       end
@@ -207,6 +210,7 @@ module Authentik::Api
       warn '[DEPRECATED] the `valid?` method is obsolete'
       return false if @pbm_uuid.nil?
       return false if @name.nil?
+      return false if @facts.nil?
       return false if @connections_obj.nil?
       return false if @policies.nil?
       return false if @connections.nil?
@@ -233,6 +237,16 @@ module Authentik::Api
       @name = name
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] facts Value to be assigned
+    def facts=(facts)
+      if facts.nil?
+        fail ArgumentError, 'facts cannot be nil'
+      end
+
+      @facts = facts
+    end
+
     # Custom attribute writer method with validation
     # @param [Object] connections_obj Value to be assigned
     def connections_obj=(connections_obj)

data/lib/authentik/api/models/event_actions.rb

@@ -13,6 +13,7 @@ module Authentik::Api
     LOGIN_FAILED = "login_failed".freeze
     LOGOUT = "logout".freeze
     USER_WRITE = "user_write".freeze
+    USER_OFFBOARDED = "user_offboarded".freeze
     SUSPICIOUS_REQUEST = "suspicious_request".freeze
     PASSWORD_SET = "password_set".freeze
     SECRET_VIEW = "secret_view".freeze
@@ -41,10 +42,14 @@ module Authentik::Api
     REVIEW_OVERDUE = "review_overdue".freeze
     REVIEW_ATTESTED = "review_attested".freeze
     REVIEW_COMPLETED = "review_completed".freeze
+    ACCESS_REQUEST_CREATED = "access_request_created".freeze
+    ACCESS_REQUEST_APPROVED = "access_request_approved".freeze
+    ACCESS_REQUEST_DENIED = "access_request_denied".freeze
+    ACCESS_REQUEST_REVOKED = "access_request_revoked".freeze
     CUSTOM = "custom_".freeze
 
     def self.all_vars
-      @all_vars ||= [LOGIN, LOGIN_FAILED, LOGOUT, USER_WRITE, SUSPICIOUS_REQUEST, PASSWORD_SET, SECRET_VIEW, SECRET_ROTATE, INVITATION_USED, AUTHORIZE_APPLICATION, SOURCE_LINKED, IMPERSONATION_STARTED, IMPERSONATION_ENDED, FLOW_EXECUTION, POLICY_EXECUTION, POLICY_EXCEPTION, PROPERTY_MAPPING_EXCEPTION, SYSTEM_TASK_EXECUTION, SYSTEM_TASK_EXCEPTION, SYSTEM_EXCEPTION, CONFIGURATION_ERROR, CONFIGURATION_WARNING, MODEL_CREATED, MODEL_UPDATED, MODEL_DELETED, EMAIL_SENT, UPDATE_AVAILABLE, EXPORT_READY, REVIEW_INITIATED, REVIEW_OVERDUE, REVIEW_ATTESTED, REVIEW_COMPLETED, CUSTOM].freeze
+      @all_vars ||= [LOGIN, LOGIN_FAILED, LOGOUT, USER_WRITE, USER_OFFBOARDED, SUSPICIOUS_REQUEST, PASSWORD_SET, SECRET_VIEW, SECRET_ROTATE, INVITATION_USED, AUTHORIZE_APPLICATION, SOURCE_LINKED, IMPERSONATION_STARTED, IMPERSONATION_ENDED, FLOW_EXECUTION, POLICY_EXECUTION, POLICY_EXCEPTION, PROPERTY_MAPPING_EXCEPTION, SYSTEM_TASK_EXECUTION, SYSTEM_TASK_EXCEPTION, SYSTEM_EXCEPTION, CONFIGURATION_ERROR, CONFIGURATION_WARNING, MODEL_CREATED, MODEL_UPDATED, MODEL_DELETED, EMAIL_SENT, UPDATE_AVAILABLE, EXPORT_READY, REVIEW_INITIATED, REVIEW_OVERDUE, REVIEW_ATTESTED, REVIEW_COMPLETED, ACCESS_REQUEST_CREATED, ACCESS_REQUEST_APPROVED, ACCESS_REQUEST_DENIED, ACCESS_REQUEST_REVOKED, CUSTOM].freeze
     end
 
     # Builds the enum from string